last executing test programs: 42.927127156s ago: executing program 32 (id=465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x9) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) 29.463385636s ago: executing program 1 (id=837): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f0000000940)={[{@nobarrier}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@journal_dev={'journal_dev', 0x3d, 0x489}}, {@errors_continue}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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") 29.421764261s ago: executing program 1 (id=838): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 29.404814022s ago: executing program 1 (id=839): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r0, 0x7) 29.142672333s ago: executing program 1 (id=841): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") creat(&(0x7f0000000540)='./file0\x00', 0x50) open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 28.660643619s ago: executing program 1 (id=851): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x303, 0x90) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x6]}) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 27.935971773s ago: executing program 1 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 27.881410059s ago: executing program 33 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 24.070104191s ago: executing program 6 (id=948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x21, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 23.951446854s ago: executing program 6 (id=953): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r4}, 0x10) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000001040)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x59) 23.932233977s ago: executing program 6 (id=955): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 23.758945097s ago: executing program 6 (id=958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80de, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4200, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0xa, 0x7f56, 0x2, 0xa2}) 23.363456283s ago: executing program 6 (id=966): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfffffd42, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 22.982202027s ago: executing program 3 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000900, 0x0, 0x0) 22.849464252s ago: executing program 3 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000680), &(0x7f0000000400)='%pS \x00'}, 0x1a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 22.728619066s ago: executing program 3 (id=987): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x6a) r2 = socket(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$nfc_llcp(r2, 0x107, 0xe, 0x0, 0x20600000) 22.727939896s ago: executing program 3 (id=988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280), 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 22.43882217s ago: executing program 3 (id=994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 22.080303152s ago: executing program 3 (id=1007): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) unshare(0x42000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000048000000030a0102000000000000000001000000080007006e6174000900030073796031000000000900010073797a3000000000140004800800024000000000080001"], 0x90}}, 0x0) 22.034673746s ago: executing program 34 (id=1007): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) unshare(0x42000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000048000000030a0102000000000000000001000000080007006e6174000900030073796031000000000900010073797a3000000000140004800800024000000000080001"], 0x90}}, 0x0) 21.578777609s ago: executing program 6 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r2, 0x0) close(r2) 21.578458789s ago: executing program 35 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r2, 0x0) close(r2) 19.016430856s ago: executing program 0 (id=1069): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 17.996394334s ago: executing program 0 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x21, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 17.849743112s ago: executing program 0 (id=1082): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000b2c600000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r1, 0x7, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.528515809s ago: executing program 0 (id=1075): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280), 0x3, 0x44d, &(0x7f0000000a40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 17.132944864s ago: executing program 0 (id=1089): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 16.716067223s ago: executing program 0 (id=1096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$eJzs3EtsG0UfAPD/Okn7fX0llPJoKRAoiIpH0qaF9oDEQ0LiAAgJDuVo0rQqdRvUBIlWEQ2oKhckqMQdgbggcebAiRMCTkhcOMAdVapQLxRORmvvGsexHdd14jx+P2nrGWfsmf/uzu7sTtcBbFij6T9JxLaI+C0ihiOi0FhgtPpy4/rc5N/X5yaTKJdf+zNJPxZ/XZ+bzIsm2evWamYwfSlcSuLZJvXOnL9wulgqTZ3L8uOzZ94enzl/4YlTZ4onp05OnZ04evTwoYNHnpp4sidx3pa2dc9703t3v/jGlZcnj11588evk7pG18fRG0MxX7dOGj3c28r6bntdOhlsW7Sw7I2hY5sjKh11qNL/h2Pg0o7a34bjhQ/62jhgWZXL5fJE6z/Pl4F1LIl+twDoj/xEn17/5ssKDT1WhWvPVS+A0rhvZEv1omewdqE61HB920tzEXFs/p/P0iWW5T4EAMBC36Xjn8ebjf8KcWdduR3Z3NBINpeyMyJuj4hdEXFHRKXsXRFx903WP9qQXzz+KVztKrAOpeO/p7O5rXzJ6s2LjAxkue2V+IeSE6dKUweydbI/hjan+YNNvz2JyiRQ/PJxq/pH68Z/6ZLWn48Fs3ZcHdy88DPHi7PFWw48c+39iD2DzeLPJvCyOazdEbGnyzpOPfrV3oXvDNRSS8ffRvt5po6UP494pLr956Mh/lzSfn5y/H9Rmjownu8Vi/308+VXW9V/S/H3QLr9tzTd/2vxjyT187Uzi75i01J1XP79w5bXNKMRz0QX+/+m5PUFlb9bnJ09dzBiU/LS4vfrbnDn+bx8Gv/+fc37/874b03cExHpTnxvRNwXEfdn2+6BiHgwIva1if+H5x96q038fd3+kR2hOtr++Xao7gi1PWKpxMDp779tVXlnx7/DldT+7J1Ojn+dNrDLdQYAAABrSiEitkVSGKulC4Wxser/4d8VWwql6ZnZx05Mv3P2ePUZgZEYKuR3uoazfGT3P0eq+crV90TlNeJidr/0UHbf+NOB/1fyY5PTpeP9Dh42uK0t+n/qj4F+tw5Ydj2YRwPWqHb9/4sjK9gQYMV1f/43coC1bole7AcbYB1zFoeNq1n/v9iHdgArr/X5f8rQANa5Wif/pIPCdY97NT68Caw9TvKwcS3d/19Zrt+/Avqn86f4V0siSRa8E19GtP9U0v82d5H4aHU0o3UiCquiGV0niqujGTeRGOz4Vy3Oly8WS6Vfv7mVSvt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNfwMAAP//oefi4g==") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 16.675412058s ago: executing program 36 (id=1096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 9.547513303s ago: executing program 7 (id=1245): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 9.527165606s ago: executing program 7 (id=1246): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000104000000010000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058006000200000000000500010001"], 0x4c}}, 0x0) 9.414974649s ago: executing program 7 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 9.373661124s ago: executing program 7 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 9.330744739s ago: executing program 7 (id=1251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 9.103329715s ago: executing program 7 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 9.102907605s ago: executing program 37 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2.49728681s ago: executing program 2 (id=1408): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socket$key(0xf, 0x3, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 2.019004626s ago: executing program 8 (id=1414): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) io_setup(0x205, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="40ac91", 0x3, 0x0, 0x0, 0xc0a17836ed54a846}]) fallocate(r1, 0x8, 0x1000000, 0x40000) 1.775662115s ago: executing program 4 (id=1416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x44b7, &(0x7f0000010400), &(0x7f0000010080), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.577383307s ago: executing program 8 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.573070178s ago: executing program 2 (id=1419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.514655945s ago: executing program 5 (id=1420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.480976559s ago: executing program 2 (id=1421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.425978855s ago: executing program 5 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r5], 0x30}}, 0x20006814) 1.420434576s ago: executing program 2 (id=1424): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000000101040000000000000000030000000000000000000000000000000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000ffaa"], 0xb8}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.355815953s ago: executing program 8 (id=1425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000640)={0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x1, r3}) 1.354929603s ago: executing program 4 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x21}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "66cbe0ddfbda942ac1e2c78728c07f0300c33662c7e4d2bae48d7fe2b1e543a7", "9e75fea4b15c0641bf4f22919c7aee7b", {"8af86dbf2020efc4e02714100a2f1321", "09f797f27b298ff4d62daf42206c6df9"}}}}}, 0x86) 1.336444585s ago: executing program 5 (id=1427): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r2, r0, 0x0) finit_module(r2, 0x0, 0x0) 1.239470856s ago: executing program 5 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1.233381427s ago: executing program 9 (id=1429): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) 1.190675442s ago: executing program 9 (id=1430): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r0, 0x4008c0d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) io_setup(0x205, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="40ac91", 0x3, 0x0, 0x0, 0xc0a17836ed54a846}]) fallocate(r1, 0x8, 0x1000000, 0x40000) 1.190374102s ago: executing program 5 (id=1431): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a0000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.185094883s ago: executing program 4 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x804000, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.184238913s ago: executing program 5 (id=1442): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) 1.138951998s ago: executing program 38 (id=1442): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) 1.051810738s ago: executing program 4 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 909.713145ms ago: executing program 9 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x7c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xa}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x4048800) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x8026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 908.863175ms ago: executing program 4 (id=1445): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) io_setup(0x29e, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f0000000640)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 715.685977ms ago: executing program 9 (id=1436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="8b37000000000000000005"], 0x28}}, 0x0) 561.255585ms ago: executing program 2 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x44b7, &(0x7f0000010400), &(0x7f0000010080), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 499.324972ms ago: executing program 8 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000fcffffff9500000000000000a21de1324ed7d8af982195fce0e40cf1ffffff7f058669d704b55bad3c6a33f30bae2fedd024602341b4acca9422483168239421dbc55e9673ce03f447e1e9c389cf43af74dd8c20b3c3e6034ef4ad4459e6ad37128f640ffbda7ebda5ca57b1e3a95bc3a6f97f6dcd95fd9be52693aa70b5135b222c5c3e5196c385b9d7ce7d9ab154bd4abe535c3acc8d6192a18d8f5c80f958a012945050ff17d56177dcd1c7fed32a1cd8413bda6fb8103d35805445d0fa8a7a7ae5d0a91edc79360a889314bee1f2ee34a472"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x203) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 463.907887ms ago: executing program 9 (id=1439): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r2, r0, 0x0) finit_module(r2, 0x0, 0x0) 461.802217ms ago: executing program 8 (id=1450): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) keyctl$update(0x2, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1.53401ms ago: executing program 4 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fdatasync(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 772.69µs ago: executing program 9 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x44b7, &(0x7f0000010400), &(0x7f0000010080), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 196.92µs ago: executing program 8 (id=1441): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) close(0x3) 0s ago: executing program 2 (id=1443): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): amps until 2038-01-19 (0x7fffffff) [ 54.295657][ T4911] __nla_validate_parse: 1 callbacks suppressed [ 54.295678][ T4911] netlink: 17251 bytes leftover after parsing attributes in process `syz.0.519'. [ 54.508712][ T4952] syz.4.530[4952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.508852][ T4952] syz.4.530[4952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.521033][ T4952] syz.4.530[4952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.542943][ T4952] block device autoloading is deprecated and will be removed. [ 54.564281][ T4952] syz.4.530: attempt to access beyond end of device [ 54.564281][ T4952] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.649530][ T4956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.819799][ T4981] syz.0.541[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.940963][ T4994] loop1: detected capacity change from 0 to 1024 [ 54.967595][ T4994] EXT4-fs: Ignoring removed orlov option [ 54.973406][ T4994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.022278][ T4999] loop1: detected capacity change from 0 to 2048 [ 55.043683][ T4999] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.058735][ T4999] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 55.071265][ T4999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.071265][ T4999] [ 55.080973][ T4999] EXT4-fs (loop1): Total free blocks count 0 [ 55.087071][ T4999] EXT4-fs (loop1): Free/Dirty block details [ 55.093002][ T4999] EXT4-fs (loop1): free_blocks=2415919104 [ 55.098875][ T4999] EXT4-fs (loop1): dirty_blocks=16 [ 55.104047][ T4999] EXT4-fs (loop1): Block reservation details [ 55.110119][ T4999] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 55.123462][ T4999] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 55.135912][ T4999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.135912][ T4999] [ 55.184322][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 55.184381][ T29] audit: type=1400 audit(1730223389.632:921): avc: denied { connect } for pid=5003 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.210475][ T29] audit: type=1400 audit(1730223389.632:922): avc: denied { bind } for pid=5003 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.233153][ T29] audit: type=1400 audit(1730223389.682:923): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.330452][ T5015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.555'. [ 55.339894][ T5015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 55.533116][ T29] audit: type=1326 audit(1730223389.982:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.556535][ T29] audit: type=1326 audit(1730223389.982:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcac0b9d0b0 code=0x7ffc0000 [ 55.557666][ T5036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.579779][ T29] audit: type=1326 audit(1730223389.982:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.579816][ T29] audit: type=1326 audit(1730223389.982:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.634824][ T29] audit: type=1326 audit(1730223389.982:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.658076][ T29] audit: type=1326 audit(1730223389.982:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.681404][ T29] audit: type=1326 audit(1730223389.982:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac0b9e719 code=0x7ffc0000 [ 55.710904][ T5036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.740870][ T5039] syzkaller0: entered promiscuous mode [ 55.746457][ T5039] syzkaller0: entered allmulticast mode [ 55.776187][ T5036] loop4: detected capacity change from 0 to 1024 [ 55.783470][ T5036] EXT4-fs: Ignoring removed orlov option [ 55.789330][ T5036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.812195][ T5047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 55.821281][ T5047] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 55.844954][ T5044] Falling back ldisc for ttyS3. [ 55.885879][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'. [ 55.998027][ T5067] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 56.048354][ T5071] loop3: detected capacity change from 0 to 2048 [ 56.056753][ T5071] EXT4-fs: Ignoring removed nobh option [ 56.086547][ T5073] loop5: detected capacity change from 0 to 2048 [ 56.105746][ T5073] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 56.114061][ T5073] System zones: 0-7 [ 56.176060][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.581'. [ 56.342803][ T36] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.358147][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 56.370646][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.370646][ T36] [ 56.380616][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 56.386649][ T36] EXT4-fs (loop3): Free/Dirty block details [ 56.392547][ T36] EXT4-fs (loop3): free_blocks=2415919104 [ 56.398310][ T36] EXT4-fs (loop3): dirty_blocks=8192 [ 56.403692][ T36] EXT4-fs (loop3): Block reservation details [ 56.409693][ T36] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 56.430605][ T5093] loop4: detected capacity change from 0 to 512 [ 56.437732][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.443932][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 56.451144][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 56.460333][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.460333][ T36] [ 56.574181][ T5103] loop4: detected capacity change from 0 to 512 [ 56.594370][ T5103] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.588: bg 0: block 393: padding at end of block bitmap is not set [ 56.611587][ T5103] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.621675][ T5103] EXT4-fs (loop4): 2 truncates cleaned up [ 56.791617][ T5130] xt_hashlimit: max too large, truncated to 1048576 [ 56.836025][ T5133] loop1: detected capacity change from 0 to 1024 [ 56.954134][ T5158] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.609'. [ 56.963535][ T5158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 57.353222][ T5223] loop5: detected capacity change from 0 to 1024 [ 57.360391][ T5223] EXT4-fs: Ignoring removed orlov option [ 57.366173][ T5223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.528791][ T5254] loop5: detected capacity change from 0 to 512 [ 57.558273][ T5254] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.601586][ T5254] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #19: comm syz.5.622: corrupted inode contents [ 57.613968][ T5254] EXT4-fs error (device loop5): ext4_dirty_inode:5984: inode #19: comm syz.5.622: mark_inode_dirty error [ 57.627203][ T5254] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #19: comm syz.5.622: corrupted inode contents [ 57.639646][ T5254] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.622: mark_inode_dirty error [ 57.653465][ T5254] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.622: mark inode dirty (error -117) [ 57.666818][ T5254] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 58.006346][ T5348] loop3: detected capacity change from 0 to 512 [ 58.078974][ T5348] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.150893][ T5348] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.635: corrupted inode contents [ 58.163318][ T5348] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.635: mark_inode_dirty error [ 58.179911][ T5348] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.635: corrupted inode contents [ 58.180738][ T5361] bridge0: port 3(vlan2) entered blocking state [ 58.198441][ T5361] bridge0: port 3(vlan2) entered disabled state [ 58.205692][ T5361] vlan2: entered allmulticast mode [ 58.208859][ T5348] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.635: mark_inode_dirty error [ 58.211699][ T5361] vlan2: entered promiscuous mode [ 58.224750][ T5348] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.635: mark inode dirty (error -117) [ 58.227968][ T5361] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.242109][ T5348] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 58.479774][ T5394] loop4: detected capacity change from 0 to 256 [ 58.505437][ T5396] loop4: detected capacity change from 0 to 512 [ 58.518070][ T5396] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.560739][ T5396] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.654: corrupted inode contents [ 58.573937][ T5396] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.654: mark_inode_dirty error [ 58.585602][ T5396] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.654: corrupted inode contents [ 58.597722][ T5396] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.654: mark_inode_dirty error [ 58.609870][ T5396] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.654: mark inode dirty (error -117) [ 58.622699][ T5396] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 58.697866][ T5401] loop4: detected capacity change from 0 to 1024 [ 58.704595][ T5401] EXT4-fs: Ignoring removed oldalloc option [ 58.715095][ T5401] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 58.857763][ T5419] loop1: detected capacity change from 0 to 1024 [ 58.882414][ T5419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 58.894702][ T5422] pim6reg1: entered promiscuous mode [ 58.897899][ T5424] loop0: detected capacity change from 0 to 512 [ 58.900149][ T5422] pim6reg1: entered allmulticast mode [ 58.915687][ T5419] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 58.928044][ T5424] EXT4-fs (loop0): too many log groups per flexible block group [ 58.935809][ T5424] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 58.942786][ T5424] EXT4-fs (loop0): mount failed [ 59.219787][ T5458] loop0: detected capacity change from 0 to 512 [ 59.273944][ T5470] loop3: detected capacity change from 0 to 2048 [ 59.275414][ T5458] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.307099][ T5472] Zero length message leads to an empty skb [ 59.310948][ T5475] loop5: detected capacity change from 0 to 512 [ 59.325011][ T5475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.343327][ T5470] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.685: bg 0: block 274: padding at end of block bitmap is not set [ 59.346207][ T5475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 59.366163][ T5475] System zones: 1-12 [ 59.371671][ T5475] EXT4-fs (loop5): 1 truncate cleaned up [ 59.388586][ T5470] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 59.393980][ T5475] bpf_get_probe_write_proto: 5 callbacks suppressed [ 59.393999][ T5475] syz.5.687[5475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.401113][ T5470] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.401113][ T5470] [ 59.411259][ T5475] syz.5.687[5475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.428983][ T5475] syz.5.687[5475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.454830][ T5470] syz.3.685 (5470) used greatest stack depth: 9456 bytes left [ 60.168213][ T5508] loop1: detected capacity change from 0 to 256 [ 60.175140][ T5508] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.246156][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 60.246170][ T29] audit: type=1400 audit(1730223394.702:1055): avc: denied { create } for pid=5513 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.275437][ T5514] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.283580][ T5514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.291369][ T29] audit: type=1400 audit(1730223394.722:1056): avc: denied { write } for pid=5513 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.381919][ T5529] loop5: detected capacity change from 0 to 1024 [ 60.409366][ T5532] loop3: detected capacity change from 0 to 512 [ 60.416938][ T29] audit: type=1400 audit(1730223394.862:1057): avc: denied { ioctl } for pid=5522 comm="syz.0.704" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.432128][ T5529] EXT4-fs error (device loop5): ext4_lookup:1813: inode #14: comm syz.5.709: iget: immutable or append flags not allowed on symlinks [ 60.445226][ T29] audit: type=1400 audit(1730223394.902:1058): avc: denied { read } for pid=5527 comm="syz.4.708" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.461212][ T5529] EXT4-fs (loop5): Remounting filesystem read-only [ 60.477321][ T29] audit: type=1400 audit(1730223394.912:1059): avc: denied { write } for pid=5522 comm="syz.0.704" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.515859][ T5532] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.516437][ T5529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 60.528938][ T5532] Process accounting resumed [ 60.536050][ T5529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 60.548726][ T29] audit: type=1400 audit(1730223395.002:1060): avc: denied { setattr } for pid=5528 comm="syz.5.709" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.575321][ T5532] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 60.631540][ T5546] loop3: detected capacity change from 0 to 512 [ 60.641131][ T29] audit: type=1400 audit(1730223395.092:1061): avc: denied { shutdown } for pid=5547 comm="syz.5.714" lport=42917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.646461][ T5546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.690374][ T5546] EXT4-fs (loop3): 1 truncate cleaned up [ 60.762843][ T29] audit: type=1400 audit(1730223395.212:1062): avc: denied { write } for pid=5559 comm="syz.3.719" path="socket:[10731]" dev="sockfs" ino=10731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.834016][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 60.924138][ T5575] syz.3.725[5575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.924244][ T5575] syz.3.725[5575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.937179][ T5575] syz.3.725[5575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.962067][ T5575] loop3: detected capacity change from 0 to 2048 [ 61.000311][ T29] audit: type=1400 audit(1730223395.452:1063): avc: denied { name_bind } for pid=5582 comm="syz.5.728" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.000456][ T5583] capability: warning: `syz.5.728' uses 32-bit capabilities (legacy support in use) [ 61.038951][ T29] audit: type=1400 audit(1730223395.492:1064): avc: denied { name_connect } for pid=5582 comm="syz.5.728" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.082920][ T5587] loop5: detected capacity change from 0 to 128 [ 61.106196][ T5585] netlink: 'syz.0.729': attribute type 21 has an invalid length. [ 61.121427][ T5585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.729'. [ 61.255105][ T5604] loop4: detected capacity change from 0 to 1764 [ 61.296683][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.739'. [ 61.386544][ T5617] IPVS: Error joining to the multicast group [ 61.421343][ T5623] loop4: detected capacity change from 0 to 256 [ 61.438265][ T5623] FAT-fs (loop4): Directory bread(block 64) failed [ 61.449420][ T5623] FAT-fs (loop4): Directory bread(block 65) failed [ 61.457926][ T5623] FAT-fs (loop4): Directory bread(block 66) failed [ 61.464740][ T5623] FAT-fs (loop4): Directory bread(block 67) failed [ 61.471533][ T5623] FAT-fs (loop4): Directory bread(block 68) failed [ 61.478349][ T5623] FAT-fs (loop4): Directory bread(block 69) failed [ 61.485081][ T5623] FAT-fs (loop4): Directory bread(block 70) failed [ 61.491669][ T5623] FAT-fs (loop4): Directory bread(block 71) failed [ 61.498377][ T5623] FAT-fs (loop4): Directory bread(block 72) failed [ 61.505033][ T5623] FAT-fs (loop4): Directory bread(block 73) failed [ 61.530447][ T5623] syz.4.745: attempt to access beyond end of device [ 61.530447][ T5623] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 61.596555][ T5626] loop5: detected capacity change from 0 to 4096 [ 61.629769][ T5626] EXT4-fs: Ignoring removed nobh option [ 61.635531][ T5626] EXT4-fs: Ignoring removed i_version option [ 61.827564][ T5656] loop1: detected capacity change from 0 to 2048 [ 61.872296][ T5656] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.903004][ T5656] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 237 with error 28 [ 61.915703][ T5656] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.915703][ T5656] [ 61.918285][ T5668] loop3: detected capacity change from 0 to 2048 [ 61.925350][ T5656] EXT4-fs (loop1): Total free blocks count 0 [ 61.925373][ T5656] EXT4-fs (loop1): Free/Dirty block details [ 61.943889][ T5656] EXT4-fs (loop1): free_blocks=2415919104 [ 61.949783][ T5656] EXT4-fs (loop1): dirty_blocks=256 [ 61.955144][ T5656] EXT4-fs (loop1): Block reservation details [ 61.961142][ T5656] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 62.009680][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 62.022007][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.022007][ T50] [ 62.092944][ T5681] loop1: detected capacity change from 0 to 512 [ 62.125445][ T8] IPVS: starting estimator thread 0... [ 62.136824][ T5681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.157506][ T5681] EXT4-fs (loop1): 1 truncate cleaned up [ 62.218013][ T5687] IPVS: using max 2400 ests per chain, 120000 per kthread [ 62.267268][ T5698] loop4: detected capacity change from 0 to 164 [ 62.293801][ T5701] loop5: detected capacity change from 0 to 128 [ 62.384345][ T5705] syzkaller0: entered promiscuous mode [ 62.389981][ T5705] syzkaller0: entered allmulticast mode [ 62.392663][ T5703] loop4: detected capacity change from 0 to 2048 [ 62.631275][ T5719] loop4: detected capacity change from 0 to 1024 [ 62.657492][ T5719] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.848918][ T5735] ALSA: seq fatal error: cannot create timer (-22) [ 62.944070][ T5745] loop4: detected capacity change from 0 to 512 [ 62.965407][ T5745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.982084][ T5745] EXT4-fs (loop4): 1 truncate cleaned up [ 63.211107][ T5772] loop0: detected capacity change from 0 to 128 [ 63.268910][ T5772] syz.0.809: attempt to access beyond end of device [ 63.268910][ T5772] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.287158][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 63.296010][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 63.301485][ T5779] loop5: detected capacity change from 0 to 128 [ 63.320976][ T5770] syz.0.809: attempt to access beyond end of device [ 63.320976][ T5770] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 63.335940][ T5772] syz.0.809: attempt to access beyond end of device [ 63.335940][ T5772] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 63.344825][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 63.357995][ T5780] netlink: 'syz.4.811': attribute type 7 has an invalid length. [ 63.368508][ T5779] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.390582][ T5784] loop0: detected capacity change from 0 to 512 [ 63.399205][ T5784] EXT4-fs: Ignoring removed bh option [ 63.420630][ T5784] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.813: invalid block [ 63.433439][ T5784] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.813: couldn't read orphan inode 15 (err -117) [ 64.172853][ T5799] syz.4.819 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.215522][ T5803] loop1: detected capacity change from 0 to 1024 [ 64.236328][ T5803] EXT4-fs: Ignoring removed oldalloc option [ 64.249484][ T5803] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.373604][ T5813] loop0: detected capacity change from 0 to 512 [ 64.401729][ T5813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.419635][ T5813] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.466494][ T5827] netlink: 104 bytes leftover after parsing attributes in process `syz.5.828'. [ 64.604969][ T5849] loop1: detected capacity change from 0 to 128 [ 64.667122][ T5849] syz.1.833: attempt to access beyond end of device [ 64.667122][ T5849] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.680527][ T5849] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 64.746986][ T5865] loop1: detected capacity change from 0 to 2048 [ 64.823412][ T5871] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.856729][ T5873] loop1: detected capacity change from 0 to 512 [ 64.866468][ T5873] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 64.900850][ T5873] EXT4-fs (loop1): failed to open journal device unknown-block(4,137) -6 [ 65.262733][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 65.262778][ T29] audit: type=1400 audit(1730223399.712:1217): avc: denied { getopt } for pid=5901 comm="syz.4.842" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.278004][ T5899] loop1: detected capacity change from 0 to 512 [ 65.329709][ T5897] loop5: detected capacity change from 0 to 128 [ 65.391540][ T5897] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.429148][ T5917] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.846'. [ 65.438267][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'. [ 65.450667][ T5899] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.492742][ T29] audit: type=1400 audit(1730223399.942:1218): avc: denied { mounton } for pid=5898 comm="syz.1.841" path="/186/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.525937][ T5899] loop1: detected capacity change from 512 to 0 [ 65.538865][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.5.848'. [ 65.551858][ T5899] syz.1.841: attempt to access beyond end of device [ 65.551858][ T5899] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 65.583009][ T5899] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1 [ 65.592155][ T5899] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 983040 [ 65.602069][ T5899] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.841: Failed to acquire dquot type 1 [ 65.615203][ T5924] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 65.630831][ T5899] syz.1.841: attempt to access beyond end of device [ 65.630831][ T5899] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 65.643972][ T5899] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 65.656012][ T5899] EXT4-fs (loop1): I/O error while writing superblock [ 65.685160][ T3320] syz-executor: attempt to access beyond end of device [ 65.685160][ T3320] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 65.706447][ T29] audit: type=1400 audit(1730223400.162:1219): avc: denied { name_bind } for pid=5938 comm="syz.5.850" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 65.725017][ T3320] syz-executor: attempt to access beyond end of device [ 65.725017][ T3320] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 65.746965][ T3320] syz-executor: attempt to access beyond end of device [ 65.746965][ T3320] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 65.786357][ T29] audit: type=1326 audit(1730223400.242:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a62c2e719 code=0x7ffc0000 [ 65.788573][ T3320] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #2: block 34: comm syz-executor: unable to read itable block [ 65.809706][ T29] audit: type=1326 audit(1730223400.242:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a62c2e719 code=0x7ffc0000 [ 65.853192][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 65.876859][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 65.883691][ T3320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 65.900661][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 65.915636][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 65.922451][ T3320] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 65.951438][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 65.954884][ T29] audit: type=1400 audit(1730223400.282:1222): avc: denied { execute } for pid=5949 comm="syz.5.853" path="/81/cpu.stat" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.978681][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 65.982452][ T29] audit: type=1326 audit(1730223400.302:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0a62c2e719 code=0x7ffc0000 [ 66.012624][ T29] audit: type=1326 audit(1730223400.302:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a62c2e719 code=0x7ffc0000 [ 66.055858][ T5312] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #4: block 34: comm kworker/u8:9: unable to read itable block [ 66.094903][ T5312] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 66.103188][ T5312] EXT4-fs (loop1): I/O error while writing superblock [ 66.114200][ T5974] netlink: 3 bytes leftover after parsing attributes in process `syz.5.857'. [ 66.123104][ T5312] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:9: unable to read itable block [ 66.123945][ T5974] 0ªX¹¦À: renamed from caif0 [ 66.144846][ T5312] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 66.147855][ T5975] program syz.0.856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.153140][ T5312] EXT4-fs (loop1): I/O error while writing superblock [ 66.185580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.198139][ T5312] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #2: block 34: comm kworker/u8:9: unable to read itable block [ 66.224960][ T5312] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 66.227882][ T5979] loop0: detected capacity change from 0 to 1024 [ 66.233359][ T5312] EXT4-fs (loop1): I/O error while writing superblock [ 66.254546][ T5974] 0ªX¹¦À: entered allmulticast mode [ 66.259899][ T5974] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 66.339097][ T5979] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.354400][ T3320] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 66.364843][ T3320] EXT4-fs (loop1): I/O error while writing superblock [ 66.367712][ T5986] loop5: detected capacity change from 0 to 512 [ 66.391631][ T5993] loop4: detected capacity change from 0 to 512 [ 66.398177][ T5916] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 66.412937][ T5993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.449445][ T5986] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.462805][ T5993] EXT4-fs mount: 118 callbacks suppressed [ 66.462822][ T5993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.481603][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.490791][ T5993] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.502562][ T4647] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 66.525919][ T6007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6007 comm=syz.0.865 [ 66.546880][ T5312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.557213][ T5312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.569425][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.579903][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 66.636944][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.650091][ T5312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.660442][ T5312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.674421][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.717221][ T6032] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 66.737169][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.754740][ T5312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.765248][ T5312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.814596][ T6041] tipc: Failed to remove unknown binding: 66,1,1/0:4010458171/4010458173 [ 66.836373][ T5312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.846838][ T5312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.929780][ T6048] loop4: detected capacity change from 0 to 1024 [ 66.936420][ T6048] EXT4-fs: Ignoring removed nobh option [ 66.952084][ T5312] bridge_slave_1: left allmulticast mode [ 66.957978][ T5312] bridge_slave_1: left promiscuous mode [ 66.963965][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.964137][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.988031][ T5312] bridge_slave_0: left allmulticast mode [ 66.993854][ T5312] bridge_slave_0: left promiscuous mode [ 66.999737][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.028047][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.137593][ T5312] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.152233][ T5312] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.162410][ T5312] @ (unregistering): Released all slaves [ 67.177624][ T5312] bond0 (unregistering): Released all slaves [ 67.188105][ T5312] bond1 (unregistering): Released all slaves [ 67.207196][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 67.273246][ T5312] hsr_slave_0: left promiscuous mode [ 67.285184][ T5312] hsr_slave_1: left promiscuous mode [ 67.302791][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.310248][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.320843][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.328546][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.390459][ T5312] veth1_macvtap: left promiscuous mode [ 67.396229][ T5312] veth0_macvtap: left promiscuous mode [ 67.401778][ T5312] veth1_vlan: left promiscuous mode [ 67.407128][ T5312] veth0_vlan: left promiscuous mode [ 67.436696][ T6100] loop4: detected capacity change from 0 to 512 [ 67.485048][ T6100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.499849][ T6100] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.524959][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.567889][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 67.579852][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 67.627449][ T6106] netlink: 100 bytes leftover after parsing attributes in process `syz.3.889'. [ 67.678589][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.685810][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.738143][ T6006] bridge_slave_0: entered allmulticast mode [ 67.750641][ T6006] bridge_slave_0: entered promiscuous mode [ 67.768343][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.775491][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.810866][ T6006] bridge_slave_1: entered allmulticast mode [ 67.829819][ T6006] bridge_slave_1: entered promiscuous mode [ 67.877633][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.894413][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.935848][ T6006] team0: Port device team_slave_0 added [ 67.944862][ T6006] team0: Port device team_slave_1 added [ 67.986369][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.993380][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.019320][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.052741][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.059798][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.085817][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.213641][ T6006] hsr_slave_0: entered promiscuous mode [ 68.223496][ T6006] hsr_slave_1: entered promiscuous mode [ 68.230429][ T6006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.238299][ T6006] Cannot create hsr debugfs directory [ 68.438609][ T6006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.461552][ T6233] syz.4.908[6233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.461696][ T6233] syz.4.908[6233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.465145][ T6006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.491348][ T6233] syz.4.908[6233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.522180][ T6006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.561801][ T6006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.577293][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.584399][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.640240][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.667728][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.707701][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.713572][ T6277] loop0: detected capacity change from 0 to 128 [ 68.765682][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.768953][ T6295] loop5: detected capacity change from 0 to 512 [ 68.772765][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.891309][ T6295] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.914: corrupted in-inode xattr: invalid ea_ino [ 68.919537][ T6295] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.914: couldn't read orphan inode 15 (err -117) [ 68.941525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.942008][ T6295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.948613][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.023057][ T6277] bio_check_eod: 18 callbacks suppressed [ 69.023073][ T6277] syz.0.913: attempt to access beyond end of device [ 69.023073][ T6277] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 69.041411][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.053431][ T6329] wireguard0: entered promiscuous mode [ 69.059030][ T6329] wireguard0: entered allmulticast mode [ 69.117173][ T6277] syz.0.913: attempt to access beyond end of device [ 69.117173][ T6277] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 69.194075][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.297007][ T6366] loop0: detected capacity change from 0 to 164 [ 69.318640][ T6366] Unable to read rock-ridge attributes [ 69.330933][ T6366] Unable to read rock-ridge attributes [ 69.438111][ T6389] loop0: detected capacity change from 0 to 512 [ 69.460207][ T6389] EXT4-fs (loop0): too many log groups per flexible block group [ 69.460949][ T6383] syzkaller0: entered promiscuous mode [ 69.468134][ T6389] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 69.473420][ T6383] syzkaller0: entered allmulticast mode [ 69.488115][ T50] syzkaller0: tun_net_xmit 48 [ 69.495124][ T6396] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 69.501209][ T6396] syzkaller0: Linktype set failed because interface is up [ 69.517514][ T6389] EXT4-fs (loop0): mount failed [ 69.553877][ T6006] veth0_vlan: entered promiscuous mode [ 69.562999][ T6389] loop0: detected capacity change from 0 to 164 [ 69.578223][ T6006] veth1_vlan: entered promiscuous mode [ 69.584188][ T6389] ISOFS: unable to read i-node block [ 69.589635][ T6389] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 69.594257][ T6006] veth0_macvtap: entered promiscuous mode [ 69.612152][ T6006] veth1_macvtap: entered promiscuous mode [ 69.643354][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.653871][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.653884][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.653928][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.653939][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.653955][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.653973][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.653987][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.657653][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.678420][ T6405] loop5: detected capacity change from 0 to 512 [ 69.690080][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.743864][ T6405] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #17: comm syz.5.932: iget: bogus i_mode (0) [ 69.748839][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.764858][ T6405] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.932: couldn't read orphan inode 17 (err -117) [ 69.769835][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.785782][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.792262][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.809201][ T6405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.932: bg 0: block 7: invalid block bitmap [ 69.814012][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.814027][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.846744][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.846760][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.860074][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.861429][ T6006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.861506][ T6006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.861536][ T6006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.861568][ T6006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963376][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.187103][ T6449] Cannot find set identified by id 0 to match [ 70.468346][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 70.468426][ T29] audit: type=1400 audit(1730223404.922:1421): avc: denied { ioctl } for pid=6461 comm="syz.3.949" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.542664][ T29] audit: type=1400 audit(1730223404.982:1422): avc: denied { name_bind } for pid=6489 comm="syz.5.956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.563883][ T29] audit: type=1400 audit(1730223404.982:1423): avc: denied { node_bind } for pid=6489 comm="syz.5.956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.601983][ T6499] loop6: detected capacity change from 0 to 512 [ 70.616301][ T29] audit: type=1400 audit(1730223405.022:1424): avc: denied { create } for pid=6461 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.636343][ T6499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.655892][ T6499] EXT4-fs (loop6): 1 truncate cleaned up [ 70.660810][ T29] audit: type=1400 audit(1730223405.102:1425): avc: denied { write } for pid=2998 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.670434][ T6499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.683158][ T29] audit: type=1400 audit(1730223405.102:1426): avc: denied { remove_name } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.718287][ T29] audit: type=1400 audit(1730223405.102:1427): avc: denied { rename } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.740754][ T29] audit: type=1400 audit(1730223405.102:1428): avc: denied { add_name } for pid=2998 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.748156][ T6512] syz.0.962[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.763328][ T29] audit: type=1400 audit(1730223405.102:1429): avc: denied { unlink } for pid=2998 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.789170][ T6500] ebtables: ebtables: counters copy to user failed while replacing table [ 70.797289][ T29] audit: type=1400 audit(1730223405.102:1430): avc: denied { create } for pid=2998 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.827583][ T6512] syz.0.962[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.827699][ T6512] syz.0.962[6512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.894763][ T6522] bridge: RTM_NEWNEIGH with invalid ether address [ 70.913541][ T6499] loop6: detected capacity change from 512 to 11 [ 70.962787][ T6006] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5780: Out of memory [ 70.983736][ T6006] EXT4-fs error (device loop6): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 71.003202][ T6006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.331932][ T6566] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.384408][ T6574] loop4: detected capacity change from 0 to 128 [ 71.394614][ T6574] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.409769][ T6574] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.411836][ T6572] loop3: detected capacity change from 0 to 512 [ 71.438566][ T6572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.439216][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.451329][ T6572] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.489025][ T6580] loop4: detected capacity change from 0 to 128 [ 71.496735][ T6580] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 71.497875][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.555694][ T3435] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 71.609729][ T6589] loop4: detected capacity change from 0 to 512 [ 71.615830][ T6591] loop3: detected capacity change from 0 to 512 [ 71.622616][ T6589] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.633439][ T6591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.644644][ T6591] EXT4-fs (loop3): 1 orphan inode deleted [ 71.646137][ T6589] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.989: iget: bad i_size value: -6917529027641081756 [ 71.650443][ T6591] EXT4-fs (loop3): 1 truncate cleaned up [ 71.664360][ T6589] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.989: couldn't read orphan inode 17 (err -117) [ 71.669719][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.682184][ T6589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.710327][ T6589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.989: bg 0: block 65: padding at end of block bitmap is not set [ 71.725566][ T6589] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.989: Failed to acquire dquot type 0 [ 71.753632][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.754923][ T6591] loop3: detected capacity change from 512 to 11 [ 71.769258][ T6598] syz.3.988: attempt to access beyond end of device [ 71.769258][ T6598] loop3: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 71.782952][ T6598] syz.3.988: attempt to access beyond end of device [ 71.782952][ T6598] loop3: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 71.796431][ T6598] syz.3.988: attempt to access beyond end of device [ 71.796431][ T6598] loop3: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 71.814638][ T6598] syz.3.988: attempt to access beyond end of device [ 71.814638][ T6598] loop3: rw=12288, sector=18, nr_sectors = 2 limit=11 [ 71.829624][ T6598] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.3.988: unable to read itable block [ 71.878995][ T3321] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 71.909595][ T379] kworker/u8:5: attempt to access beyond end of device [ 71.909595][ T379] loop3: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 71.922125][ T6608] syz.5.995[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.923671][ T6608] syz.5.995[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.931525][ T379] kworker/u8:5: attempt to access beyond end of device [ 71.931525][ T379] loop3: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 71.935111][ T6608] syz.5.995[6608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.950707][ T379] kworker/u8:5: attempt to access beyond end of device [ 71.950707][ T379] loop3: rw=524288, sector=16, nr_sectors = 2 limit=11 [ 71.987153][ T379] kworker/u8:5: attempt to access beyond end of device [ 71.987153][ T379] loop3: rw=12288, sector=18, nr_sectors = 2 limit=11 [ 72.003316][ T379] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #18: block 9: comm kworker/u8:5: unable to read itable block [ 72.020783][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.191360][ T6635] loop5: detected capacity change from 0 to 512 [ 72.217862][ T6635] EXT4-fs: Ignoring removed oldalloc option [ 72.254667][ T6635] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.268340][ T3435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.278746][ T3435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.300807][ T6635] EXT4-fs (loop5): 1 truncate cleaned up [ 72.311848][ T6635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.356612][ T3435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.366957][ T3435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.406876][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.429009][ T3435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.439443][ T3435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.478376][ T3435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.488779][ T3435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.498413][ T6655] loop0: detected capacity change from 0 to 1024 [ 72.519249][ T6655] ext4: Unknown parameter 'uid' [ 72.598866][ T3435] @: left allmulticast mode [ 72.603406][ T3435] bond_slave_0: left allmulticast mode [ 72.608953][ T3435] bond_slave_1: left allmulticast mode [ 72.614444][ T3435] @: left promiscuous mode [ 72.619084][ T3435] bond_slave_0: left promiscuous mode [ 72.624523][ T3435] bond_slave_1: left promiscuous mode [ 72.630180][ T3435] bridge0: port 3(@) entered disabled state [ 72.666489][ T3435] bridge_slave_1: left allmulticast mode [ 72.672177][ T3435] bridge_slave_1: left promiscuous mode [ 72.677899][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.705625][ T3435] bridge_slave_0: left allmulticast mode [ 72.711379][ T3435] bridge_slave_0: left promiscuous mode [ 72.717146][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.927363][ T3435] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.941688][ T3435] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.951730][ T3435] @ (unregistering): Released all slaves [ 72.960737][ T3435] bond1 (unregistering): Released all slaves [ 73.011487][ T6688] geneve0: entered allmulticast mode [ 73.022561][ T6704] loop5: detected capacity change from 0 to 256 [ 73.083754][ T3435] hsr_slave_0: left promiscuous mode [ 73.089593][ T3435] hsr_slave_1: left promiscuous mode [ 73.104876][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.112365][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.121114][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.128774][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.138202][ T3435] veth1_macvtap: left promiscuous mode [ 73.143708][ T3435] veth0_macvtap: left promiscuous mode [ 73.149343][ T3435] veth1_vlan: left promiscuous mode [ 73.154664][ T3435] veth0_vlan: left promiscuous mode [ 73.256261][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 73.266949][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 73.320719][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 73.357925][ T6723] loop5: detected capacity change from 0 to 1024 [ 73.450569][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.457805][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.468191][ T6642] bridge_slave_0: entered allmulticast mode [ 73.474663][ T6642] bridge_slave_0: entered promiscuous mode [ 73.481625][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.488914][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.496087][ T6642] bridge_slave_1: entered allmulticast mode [ 73.502535][ T6642] bridge_slave_1: entered promiscuous mode [ 73.565810][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.589772][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.612250][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 73.625142][ T6642] team0: Port device team_slave_0 added [ 73.634921][ T6642] team0: Port device team_slave_1 added [ 73.652025][ T6758] loop4: detected capacity change from 0 to 512 [ 73.668171][ T6758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.682661][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.689745][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.715860][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.728955][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.776914][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.784019][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.807401][ T6758] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.810272][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.849732][ T6767] pim6reg1: entered promiscuous mode [ 73.855147][ T6767] pim6reg1: entered allmulticast mode [ 73.875044][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.914292][ T6642] hsr_slave_0: entered promiscuous mode [ 73.940010][ T6642] hsr_slave_1: entered promiscuous mode [ 73.974294][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.987217][ T6642] Cannot create hsr debugfs directory [ 74.029659][ T3435] IPVS: stop unused estimator thread 0... [ 74.100668][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.108008][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.118716][ T6683] bridge_slave_0: entered allmulticast mode [ 74.128240][ T6683] bridge_slave_0: entered promiscuous mode [ 74.162168][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.169376][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.205178][ T6683] bridge_slave_1: entered allmulticast mode [ 74.217287][ T6683] bridge_slave_1: entered promiscuous mode [ 74.241842][ T3435] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.297980][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.311356][ T3435] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.356410][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.395526][ T3435] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.429733][ T6683] team0: Port device team_slave_0 added [ 74.459357][ T6683] team0: Port device team_slave_1 added [ 74.487609][ T3435] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.580313][ T6824] loop5: detected capacity change from 0 to 164 [ 74.593329][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.600377][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.626460][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.637681][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.644754][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.670881][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.688729][ T6824] Unable to read rock-ridge attributes [ 74.701607][ T6642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.716767][ T6824] Unable to read rock-ridge attributes [ 74.759603][ T6642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.771171][ T6642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.807597][ T6839] loop4: detected capacity change from 0 to 128 [ 74.833998][ T6840] wireguard0: entered promiscuous mode [ 74.839565][ T6840] wireguard0: entered allmulticast mode [ 74.844209][ T6839] syz.4.1054: attempt to access beyond end of device [ 74.844209][ T6839] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 74.871565][ T6642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.897779][ T6683] hsr_slave_0: entered promiscuous mode [ 74.904217][ T6683] hsr_slave_1: entered promiscuous mode [ 74.911202][ T6683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.919783][ T6839] syz.4.1054: attempt to access beyond end of device [ 74.919783][ T6839] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 74.934398][ T6683] Cannot create hsr debugfs directory [ 74.971319][ T3435] bridge_slave_1: left allmulticast mode [ 74.977050][ T3435] bridge_slave_1: left promiscuous mode [ 74.982712][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.016491][ T3435] bridge_slave_0: left allmulticast mode [ 75.022267][ T3435] bridge_slave_0: left promiscuous mode [ 75.027989][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.049206][ T6854] loop4: detected capacity change from 0 to 164 [ 75.058661][ T6854] Unable to read rock-ridge attributes [ 75.068605][ T6854] Unable to read rock-ridge attributes [ 75.100620][ T6856] loop4: detected capacity change from 0 to 1024 [ 75.135132][ T6856] ext4: Unknown parameter 'uid' [ 75.187598][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.198094][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.212357][ T3435] bond0 (unregistering): Released all slaves [ 75.313197][ T3435] hsr_slave_0: left promiscuous mode [ 75.319457][ T3435] hsr_slave_1: left promiscuous mode [ 75.325380][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.332831][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.340899][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.348378][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.363092][ T3435] veth1_macvtap: left promiscuous mode [ 75.368935][ T3435] veth0_macvtap: left promiscuous mode [ 75.374489][ T3435] veth1_vlan: left promiscuous mode [ 75.379803][ T3435] veth0_vlan: left promiscuous mode [ 75.461201][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 75.473860][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 75.551303][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.567984][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.588078][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.595185][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.605191][ T6683] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 75.615734][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.622808][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.630980][ T6683] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 75.650790][ T6683] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 75.672871][ T6683] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 75.741644][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.760101][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.777758][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.784859][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.797840][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.806089][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.813230][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.842817][ T6683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.935878][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.032226][ T6642] veth0_vlan: entered promiscuous mode [ 76.043969][ T6642] veth1_vlan: entered promiscuous mode [ 76.068741][ T6642] veth0_macvtap: entered promiscuous mode [ 76.077848][ T6642] veth1_macvtap: entered promiscuous mode [ 76.089444][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.100036][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.109888][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.120471][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.130305][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.140796][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.151934][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.163314][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.173831][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.183737][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.194276][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.204192][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.214758][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.226175][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.247916][ T6642] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.256836][ T6642] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.265691][ T6642] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.274429][ T6642] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289594][ T6683] veth0_vlan: entered promiscuous mode [ 76.301003][ T6683] veth1_vlan: entered promiscuous mode [ 76.336046][ T6683] veth0_macvtap: entered promiscuous mode [ 76.352691][ T6683] veth1_macvtap: entered promiscuous mode [ 76.390612][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.401177][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.411205][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.421679][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.431538][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.442006][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.451866][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.462322][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.501935][ T6966] loop5: detected capacity change from 0 to 128 [ 76.544313][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.565138][ T6973] wireguard0: entered promiscuous mode [ 76.570596][ T6966] syz.5.1071: attempt to access beyond end of device [ 76.570596][ T6966] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 76.584358][ T6973] wireguard0: entered allmulticast mode [ 76.614432][ T6966] syz.5.1071: attempt to access beyond end of device [ 76.614432][ T6966] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 76.643972][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.654560][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.664536][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.675045][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.684926][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.695416][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.705343][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.715931][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.726782][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.741313][ T6683] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.750164][ T6683] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.759069][ T6683] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.767811][ T6683] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.824066][ T6990] loop0: detected capacity change from 0 to 512 [ 76.853130][ T6990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.945056][ T6990] EXT4-fs (loop0): 1 orphan inode deleted [ 76.950931][ T6990] EXT4-fs (loop0): 1 truncate cleaned up [ 77.003094][ T7006] loop5: detected capacity change from 0 to 512 [ 77.014857][ T7006] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.020382][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.061185][ T7006] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #17: comm syz.5.1077: iget: bad i_size value: -6917529027641081756 [ 77.085840][ T7006] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1077: couldn't read orphan inode 17 (err -117) [ 77.105383][ T7006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.124770][ T7018] loop7: detected capacity change from 0 to 128 [ 77.135503][ T6990] loop0: detected capacity change from 512 to 11 [ 77.151022][ T7006] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1077: bg 0: block 65: padding at end of block bitmap is not set [ 77.194240][ T3315] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 77.233286][ T3315] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 77.242924][ T7006] __quota_error: 160 callbacks suppressed [ 77.242959][ T7006] Quota error (device loop5): write_blk: dquota write failed [ 77.259637][ T7018] syz.7.1087: attempt to access beyond end of device [ 77.259637][ T7018] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 77.274233][ T7006] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 77.286276][ T7030] Quota error (device loop5): do_check_range: Getting block 144 out of range 0-5 [ 77.295647][ T3315] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 77.311667][ T7006] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1077: Failed to acquire dquot type 0 [ 77.340925][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.364245][ T7018] syz.7.1087: attempt to access beyond end of device [ 77.364245][ T7018] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 77.384115][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.393906][ T7038] wireguard0: entered promiscuous mode [ 77.399565][ T7038] wireguard0: entered allmulticast mode [ 77.433282][ T29] audit: type=1326 audit(1730223411.882:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.463539][ T29] audit: type=1326 audit(1730223411.912:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.487221][ T29] audit: type=1326 audit(1730223411.912:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.510731][ T29] audit: type=1326 audit(1730223411.912:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.534405][ T29] audit: type=1326 audit(1730223411.912:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.557904][ T29] audit: type=1326 audit(1730223411.912:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.581489][ T29] audit: type=1326 audit(1730223411.912:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc242e719 code=0x7ffc0000 [ 77.648703][ T3435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 77.659155][ T3435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.727530][ T7069] loop7: detected capacity change from 0 to 512 [ 77.778815][ T7069] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1100: corrupted in-inode xattr: invalid ea_ino [ 77.797549][ T3435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 77.802289][ T7079] loop4: detected capacity change from 0 to 512 [ 77.808017][ T3435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.826498][ T7069] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.1100: couldn't read orphan inode 15 (err -117) [ 77.839052][ T7069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.866461][ T7079] EXT4-fs (loop4): too many log groups per flexible block group [ 77.874269][ T7079] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 77.881947][ T7079] EXT4-fs (loop4): mount failed [ 77.902980][ T3435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 77.913589][ T3435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.957662][ T7079] loop4: detected capacity change from 0 to 164 [ 77.959107][ T6642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.977081][ T3435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 62946 - 0 [ 77.987549][ T3435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.015079][ T7079] ISOFS: unable to read i-node block [ 78.020518][ T7079] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 78.156160][ T7115] loop8: detected capacity change from 0 to 128 [ 78.211587][ T3435] bridge_slave_1: left allmulticast mode [ 78.217416][ T3435] bridge_slave_1: left promiscuous mode [ 78.223148][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.226791][ T7115] syz.8.1110: attempt to access beyond end of device [ 78.226791][ T7115] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 78.256853][ T3435] bridge_slave_0: left allmulticast mode [ 78.262639][ T3435] bridge_slave_0: left promiscuous mode [ 78.268509][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.306472][ T7115] syz.8.1110: attempt to access beyond end of device [ 78.306472][ T7115] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 78.377115][ T7137] syz.8.1116[7137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.377235][ T7137] syz.8.1116[7137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.390412][ T7137] syz.8.1116[7137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.458516][ T3435] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.483397][ T3435] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.495167][ T3435] @ (unregistering): Released all slaves [ 78.504305][ T3435] bond1 (unregistering): Released all slaves [ 78.551108][ T7135] syzkaller0: entered promiscuous mode [ 78.556662][ T7135] syzkaller0: entered allmulticast mode [ 78.563721][ T7142] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 78.569633][ T7142] syzkaller0: Linktype set failed because interface is up [ 78.664068][ T3435] hsr_slave_0: left promiscuous mode [ 78.676119][ T3435] hsr_slave_1: left promiscuous mode [ 78.684079][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.691580][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.700854][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.708362][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.736198][ T3435] veth1_macvtap: left promiscuous mode [ 78.741749][ T3435] veth0_macvtap: left promiscuous mode [ 78.747452][ T3435] veth1_vlan: left promiscuous mode [ 78.752797][ T3435] veth0_vlan: left promiscuous mode [ 78.866356][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 78.877523][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 79.039984][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 79.172455][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179596][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.209275][ T7081] bridge_slave_0: entered allmulticast mode [ 79.216243][ T7081] bridge_slave_0: entered promiscuous mode [ 79.250060][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.257232][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.265607][ T7081] bridge_slave_1: entered allmulticast mode [ 79.272552][ T7081] bridge_slave_1: entered promiscuous mode [ 79.325212][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.338792][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.370311][ T7081] team0: Port device team_slave_0 added [ 79.388782][ T7081] team0: Port device team_slave_1 added [ 79.420371][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.427459][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.453757][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.491167][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.498400][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.524878][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.561143][ T7081] hsr_slave_0: entered promiscuous mode [ 79.580272][ T7081] hsr_slave_1: entered promiscuous mode [ 79.586872][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.599447][ T7254] loop7: detected capacity change from 0 to 512 [ 79.604999][ T7081] Cannot create hsr debugfs directory [ 79.672731][ T7254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.714729][ T7254] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.798667][ T6642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.867924][ T7081] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 79.894234][ T7081] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 79.929653][ T7081] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 79.961740][ T7081] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 80.020841][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.033784][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.044025][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.051226][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.093233][ T7324] loop5: detected capacity change from 0 to 512 [ 80.100570][ T7081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.111080][ T7081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.125446][ T7324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.138113][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.145418][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.163603][ T7324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.171146][ T7329] loop8: detected capacity change from 0 to 1024 [ 80.182241][ T7324] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.197787][ T7329] EXT4-fs: Ignoring removed nobh option [ 80.240701][ T7336] loop4: detected capacity change from 0 to 1024 [ 80.248099][ T7336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.271116][ T7329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.271782][ T7341] tipc: Failed to remove unknown binding: 66,1,1/0:2608244390/2608244392 [ 80.299053][ T7336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.316501][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.343437][ T6683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.353912][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.402859][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.590440][ T7382] netlink: 'syz.5.1176': attribute type 10 has an invalid length. [ 80.611485][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.709199][ T7081] veth0_vlan: entered promiscuous mode [ 80.717865][ T7081] veth1_vlan: entered promiscuous mode [ 80.730923][ T7081] veth0_macvtap: entered promiscuous mode [ 80.738572][ T7081] veth1_macvtap: entered promiscuous mode [ 80.748899][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.759391][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.769291][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.779779][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.789735][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.800326][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.810190][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.820709][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.831548][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.882892][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.893484][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.903394][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.914149][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.924159][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.934643][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.944478][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.954971][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.967516][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.991421][ T7399] program syz.8.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.016149][ T7081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.024909][ T7081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.033662][ T7081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.042522][ T7081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080131][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.092136][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.109864][ T7406] loop8: detected capacity change from 0 to 1024 [ 81.138141][ T7406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.172608][ T7406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.271818][ T6683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.353823][ T7428] loop8: detected capacity change from 0 to 8192 [ 81.361562][ T7428] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.089982][ T7463] loop8: detected capacity change from 0 to 2048 [ 82.160098][ T7463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.193358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.200816][ T7476] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 82.243906][ T7463] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1194: bg 0: block 234: padding at end of block bitmap is not set [ 82.281286][ T7463] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 11 with error 28 [ 82.293830][ T7463] EXT4-fs (loop8): This should not happen!! Data will be lost [ 82.293830][ T7463] [ 82.303728][ T7463] EXT4-fs (loop8): Total free blocks count 0 [ 82.309780][ T7463] EXT4-fs (loop8): Free/Dirty block details [ 82.315724][ T7463] EXT4-fs (loop8): free_blocks=0 [ 82.320669][ T7463] EXT4-fs (loop8): dirty_blocks=16 [ 82.325830][ T7463] EXT4-fs (loop8): Block reservation details [ 82.331817][ T7463] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 82.364277][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 82.364340][ T29] audit: type=1400 audit(1730223416.812:1769): avc: denied { map } for pid=7462 comm="syz.8.1194" path="/29/file0/net_prio.prioidx" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.408161][ T29] audit: type=1326 audit(1730223416.862:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.431925][ T29] audit: type=1326 audit(1730223416.862:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.460990][ T29] audit: type=1326 audit(1730223416.862:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.484521][ T29] audit: type=1326 audit(1730223416.862:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.508015][ T29] audit: type=1326 audit(1730223416.862:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.531724][ T29] audit: type=1326 audit(1730223416.862:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.555222][ T29] audit: type=1326 audit(1730223416.862:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.578838][ T29] audit: type=1326 audit(1730223416.862:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.602318][ T29] audit: type=1326 audit(1730223416.862:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7493 comm="syz.9.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 82.660493][ T6683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.693744][ T7511] loop9: detected capacity change from 0 to 512 [ 82.746878][ T7511] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1204: bg 0: block 393: padding at end of block bitmap is not set [ 82.770188][ T7520] loop8: detected capacity change from 0 to 512 [ 82.776979][ T7520] EXT4-fs: Ignoring removed oldalloc option [ 82.783319][ T7511] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 82.784880][ T7520] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 82.805897][ T7511] EXT4-fs (loop9): 2 truncates cleaned up [ 82.812180][ T7511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.877703][ T7520] EXT4-fs (loop8): 1 truncate cleaned up [ 82.891763][ T7520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.929410][ T7081] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.941374][ T6683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.530370][ T7610] loop4: detected capacity change from 0 to 256 [ 83.543669][ T7610] Invalid ELF header magic: != ELF [ 83.729138][ T7637] loop4: detected capacity change from 0 to 128 [ 83.819084][ T7650] loop4: detected capacity change from 0 to 512 [ 83.842990][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.855851][ T7650] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.898306][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.931695][ T7665] syz.9.1226[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.931784][ T7665] syz.9.1226[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.944386][ T7665] syz.9.1226[7665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.016305][ T7665] loop9: detected capacity change from 0 to 512 [ 84.067432][ T7665] EXT4-fs error (device loop9): ext4_acquire_dquot:6879: comm syz.9.1226: Failed to acquire dquot type 1 [ 84.084171][ T7665] EXT4-fs (loop9): 1 truncate cleaned up [ 84.090327][ T7665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.105166][ T7665] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.119908][ T7665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.223622][ T7704] pim6reg1: entered promiscuous mode [ 84.229098][ T7704] pim6reg1: entered allmulticast mode [ 84.346841][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1231'. [ 84.362659][ T7717] syzkaller1: entered promiscuous mode [ 84.368538][ T7717] syzkaller1: entered allmulticast mode [ 84.385523][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 84.576817][ T7747] loop7: detected capacity change from 0 to 2048 [ 84.607377][ T7747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.658835][ T6642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.831720][ T7789] bridge0: port 2(bridge_slave_1) entered listening state [ 84.852987][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 84.862169][ T7791] netlink: 'syz.4.1244': attribute type 25 has an invalid length. [ 84.870210][ T7791] netlink: 'syz.4.1244': attribute type 15 has an invalid length. [ 84.886917][ T7791] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 62946 - 0 [ 84.895900][ T7791] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 62946 - 0 [ 84.897113][ T7795] loop5: detected capacity change from 0 to 512 [ 84.904753][ T7791] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 62946 - 0 [ 84.919992][ T7791] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 62946 - 0 [ 84.930592][ T7791] vxlan1: entered promiscuous mode [ 84.931821][ T7795] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 84.949443][ T7795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 84.965844][ T7795] System zones: 1-12 [ 84.974326][ T7795] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.983278][ T7795] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.1248: Inode bitmap for bg 0 marked uninitialized [ 84.996839][ T7795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.018687][ T7795] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm +}[@: Block bitmap for bg 0 marked uninitialized [ 85.049666][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.188911][ T7820] loop5: detected capacity change from 0 to 2048 [ 85.201072][ T379] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.226852][ T7820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.242436][ T379] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.243853][ T7820] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.312884][ T379] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.361329][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.371913][ T379] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.469574][ T379] bridge_slave_1: left allmulticast mode [ 85.475307][ T379] bridge_slave_1: left promiscuous mode [ 85.481051][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.495304][ T379] bridge_slave_0: left allmulticast mode [ 85.500990][ T379] bridge_slave_0: left promiscuous mode [ 85.506760][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.568334][ T7850] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 85.685677][ T7869] loop9: detected capacity change from 0 to 8192 [ 85.700720][ T7869] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.701635][ T379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.714111][ T7869] 9pnet_fd: p9_fd_create_tcp (7869): problem connecting socket to 127.0.0.1 [ 85.739264][ T379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.760191][ T379] bond0 (unregistering): Released all slaves [ 85.818038][ T379] hsr_slave_0: left promiscuous mode [ 85.845325][ T379] hsr_slave_1: left promiscuous mode [ 85.871072][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.878572][ T379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.889345][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.896980][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.922646][ T379] veth1_macvtap: left promiscuous mode [ 85.928278][ T379] veth0_macvtap: left promiscuous mode [ 85.933847][ T379] veth1_vlan: left promiscuous mode [ 85.939243][ T379] veth0_vlan: left promiscuous mode [ 86.050430][ T7897] loop9: detected capacity change from 0 to 128 [ 86.073021][ T7897] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.092342][ T7897] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.093310][ T379] team0 (unregistering): Port device team_slave_1 removed [ 86.146647][ T379] team0 (unregistering): Port device team_slave_0 removed [ 86.228960][ T7081] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.322499][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 86.400839][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.408038][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.419276][ T7827] bridge_slave_0: entered allmulticast mode [ 86.426067][ T7827] bridge_slave_0: entered promiscuous mode [ 86.433714][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.440852][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.449813][ T7827] bridge_slave_1: entered allmulticast mode [ 86.456494][ T7827] bridge_slave_1: entered promiscuous mode [ 86.477898][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.489056][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.520476][ T7827] team0: Port device team_slave_0 added [ 86.532000][ T7827] team0: Port device team_slave_1 added [ 86.596452][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.603442][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.629557][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.640863][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.647882][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.674507][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.773914][ T7827] hsr_slave_0: entered promiscuous mode [ 86.789106][ T7827] hsr_slave_1: entered promiscuous mode [ 86.795218][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.802821][ T7827] Cannot create hsr debugfs directory [ 87.073321][ T7827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.084189][ T7827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.099755][ T7827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.109997][ T7827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.120713][ T8005] loop8: detected capacity change from 0 to 128 [ 87.132024][ T8005] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.144735][ T8005] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.171412][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.186724][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201526][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.208655][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.222542][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.229758][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.252127][ T6683] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.380996][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 87.381014][ T29] audit: type=1400 audit(1730223421.832:2106): avc: denied { mac_admin } for pid=8034 comm="syz.9.1296" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.423570][ T29] audit: type=1326 audit(1730223421.872:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8037 comm="syz.4.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e316be719 code=0x0 [ 87.442113][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.481311][ T29] audit: type=1400 audit(1730223421.932:2108): avc: denied { append } for pid=8037 comm="syz.4.1299" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.540798][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1301'. [ 87.556285][ T29] audit: type=1400 audit(1730223422.012:2109): avc: denied { execute } for pid=8057 comm="syz.8.1302" name="file0" dev="ramfs" ino=18553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 87.606196][ T29] audit: type=1400 audit(1730223422.012:2110): avc: denied { execute_no_trans } for pid=8057 comm="syz.8.1302" path="/54/file0/file0" dev="ramfs" ino=18553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 87.629958][ T29] audit: type=1400 audit(1730223422.012:2111): avc: denied { unmount } for pid=6683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.649908][ T29] audit: type=1326 audit(1730223422.052:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb5be719 code=0x7ffc0000 [ 87.673352][ T29] audit: type=1326 audit(1730223422.052:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb5be719 code=0x7ffc0000 [ 87.696870][ T29] audit: type=1326 audit(1730223422.052:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4acb5bd0b0 code=0x7ffc0000 [ 87.720311][ T29] audit: type=1326 audit(1730223422.052:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8061 comm="syz.8.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb5be719 code=0x7ffc0000 [ 87.753940][ T7827] veth0_vlan: entered promiscuous mode [ 87.768542][ T7827] veth1_vlan: entered promiscuous mode [ 87.784898][ T8060] Falling back ldisc for ttyS3. [ 87.786732][ T7827] veth0_macvtap: entered promiscuous mode [ 87.839034][ T7827] veth1_macvtap: entered promiscuous mode [ 87.851680][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.862411][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.872390][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.882948][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.892860][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.903467][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.913311][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.923802][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.934970][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.943151][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.953922][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.963828][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.974400][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.984250][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.994800][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.004676][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.015143][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.025881][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.034388][ T7827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.043224][ T7827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.051995][ T7827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.060809][ T7827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.111347][ T8094] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1311'. [ 88.125952][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1311'. [ 88.211871][ T8114] syz.2.1316[8114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.211973][ T8114] syz.2.1316[8114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.243790][ T8114] syz.2.1316[8114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.488999][ T8140] loop5: detected capacity change from 0 to 512 [ 88.530921][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.545041][ T8140] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.574357][ T8152] netlink: 17251 bytes leftover after parsing attributes in process `syz.9.1326'. [ 88.667646][ T8165] loop8: detected capacity change from 0 to 1024 [ 88.674468][ T8165] EXT4-fs: Ignoring removed oldalloc option [ 88.683270][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.685369][ T8165] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 88.717259][ T8170] syz.9.1331: attempt to access beyond end of device [ 88.717259][ T8170] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.786301][ T8165] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 88.796700][ T8178] syz.4.1333[8178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.796845][ T8178] syz.4.1333[8178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.819955][ T8178] syz.4.1333[8178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.914320][ T8198] loop9: detected capacity change from 0 to 2048 [ 88.951574][ T8196] loop5: detected capacity change from 0 to 512 [ 88.993525][ T8198] syz.9.1339[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.993631][ T8198] syz.9.1339[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.009404][ T8196] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1338: corrupted in-inode xattr: invalid ea_ino [ 89.092240][ T8196] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1338: couldn't read orphan inode 15 (err -117) [ 89.104886][ T8198] syz.9.1339[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.252811][ T8234] loop8: detected capacity change from 0 to 1024 [ 89.305348][ T8234] EXT4-fs: Ignoring removed orlov option [ 89.311193][ T8234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.567884][ T8285] loop8: detected capacity change from 0 to 512 [ 89.596489][ T8285] EXT4-fs (loop8): too many log groups per flexible block group [ 89.604211][ T8285] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 89.611726][ T8285] EXT4-fs (loop8): mount failed [ 89.702572][ T8309] pim6reg1: entered promiscuous mode [ 89.707989][ T8309] pim6reg1: entered allmulticast mode [ 90.083610][ T8393] loop5: detected capacity change from 0 to 256 [ 90.095213][ T8393] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.691377][ T8513] loop9: detected capacity change from 0 to 512 [ 90.726333][ T8515] loop5: detected capacity change from 0 to 2048 [ 90.728182][ T8513] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.805959][ T8515] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.811531][ T8529] loop2: detected capacity change from 0 to 512 [ 90.821086][ T8515] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 237 with error 28 [ 90.839883][ T8515] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.839883][ T8515] [ 90.849619][ T8515] EXT4-fs (loop5): Total free blocks count 0 [ 90.855684][ T8515] EXT4-fs (loop5): Free/Dirty block details [ 90.858835][ T8513] Process accounting resumed [ 90.861579][ T8515] EXT4-fs (loop5): free_blocks=2415919104 [ 90.861598][ T8515] EXT4-fs (loop5): dirty_blocks=256 [ 90.870060][ T8529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.872017][ T8515] EXT4-fs (loop5): Block reservation details [ 90.872032][ T8515] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 90.899892][ T8513] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 90.918662][ T8529] EXT4-fs (loop2): 1 truncate cleaned up [ 90.989455][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 91.001718][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.001718][ T11] [ 91.037317][ T8548] loop9: detected capacity change from 0 to 164 [ 91.186851][ T8561] loop5: detected capacity change from 0 to 1764 [ 91.452022][ T8602] loop9: detected capacity change from 0 to 128 [ 91.489959][ T8602] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.521844][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'. [ 91.530792][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 91.605956][ T8627] ALSA: seq fatal error: cannot create timer (-22) [ 91.669197][ T8635] loop9: detected capacity change from 0 to 1024 [ 91.676484][ T8635] EXT4-fs: Ignoring removed oldalloc option [ 91.684773][ T8635] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 91.713998][ T8640] loop8: detected capacity change from 0 to 128 [ 91.757482][ T8645] loop2: detected capacity change from 0 to 2048 [ 91.783741][ T8640] syz.8.1405: attempt to access beyond end of device [ 91.783741][ T8640] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 91.810816][ T8639] syz.8.1405: attempt to access beyond end of device [ 91.810816][ T8639] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 91.826384][ T8640] syz.8.1405: attempt to access beyond end of device [ 91.826384][ T8640] loop8: rw=0, sector=177, nr_sectors = 1 limit=128 [ 91.846884][ T8653] loop9: detected capacity change from 0 to 128 [ 91.974164][ T8653] syz.9.1407: attempt to access beyond end of device [ 91.974164][ T8653] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 91.987727][ T8653] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 92.084280][ T8689] loop9: detected capacity change from 0 to 2048 [ 92.197742][ T8710] pim6reg1: entered promiscuous mode [ 92.203122][ T8710] pim6reg1: entered allmulticast mode [ 92.338102][ T8729] syz.5.1415[8729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.338210][ T8729] syz.5.1415[8729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.362723][ T8731] loop8: detected capacity change from 0 to 2048 [ 92.380834][ T8729] syz.5.1415[8729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.386602][ T8729] loop5: detected capacity change from 0 to 512 [ 92.389981][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 92.389997][ T29] audit: type=1326 audit(1730223426.842:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f687a8a56e7 code=0x7ffc0000 [ 92.442600][ T29] audit: type=1400 audit(1730223426.852:2305): avc: denied { mounton } for pid=8727 comm="syz.5.1415" path="/211/file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.442796][ T8729] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 92.465781][ T29] audit: type=1326 audit(1730223426.882:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f687a84a099 code=0x7ffc0000 [ 92.465815][ T29] audit: type=1326 audit(1730223426.882:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f687a8a56e7 code=0x7ffc0000 [ 92.475927][ T8729] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 92.499262][ T29] audit: type=1326 audit(1730223426.882:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f687a84a099 code=0x7ffc0000 [ 92.499296][ T29] audit: type=1326 audit(1730223426.882:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f687a8ae719 code=0x7ffc0000 [ 92.522660][ T8729] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1415: Failed to acquire dquot type 1 [ 92.532438][ T29] audit: type=1326 audit(1730223426.882:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f687a8a56e7 code=0x7ffc0000 [ 92.532553][ T29] audit: type=1326 audit(1730223426.882:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.9.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f687a84a099 code=0x7ffc0000 [ 92.575682][ T8731] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.582580][ T8729] EXT4-fs (loop5): 1 truncate cleaned up [ 92.670114][ T8729] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.736320][ T8754] loop5: detected capacity change from 0 to 512 [ 92.743260][ T8754] EXT4-fs: Ignoring removed oldalloc option [ 92.750155][ T8754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.799657][ T8754] EXT4-fs (loop5): 1 truncate cleaned up [ 93.038503][ T8788] loop5: detected capacity change from 0 to 256 [ 93.049018][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 93.062292][ T8791] syzkaller1: entered promiscuous mode [ 93.069896][ T8791] syzkaller1: entered allmulticast mode [ 93.087795][ T8788] Invalid ELF header magic: != ELF [ 93.168809][ T6292] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.196952][ T8803] loop4: detected capacity change from 0 to 512 [ 93.208740][ T8803] EXT4-fs: Ignoring removed oldalloc option [ 93.226535][ T8803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.244296][ T8803] EXT4-fs (loop4): 1 truncate cleaned up [ 93.253177][ T8809] loop9: detected capacity change from 0 to 2048 [ 93.254063][ T6292] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.308281][ T8809] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.331004][ T6292] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.393689][ T6292] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.531284][ T8814] chnl_net:caif_netlink_parms(): no params data found [ 93.562407][ T6292] vlan2: left allmulticast mode [ 93.567358][ T6292] vlan2: left promiscuous mode [ 93.572266][ T6292] bridge0: port 3(vlan2) entered disabled state [ 93.584468][ T6292] bridge_slave_1: left allmulticast mode [ 93.590201][ T6292] bridge_slave_1: left promiscuous mode [ 93.595966][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.609116][ T6292] bridge_slave_0: left allmulticast mode [ 93.614850][ T6292] bridge_slave_0: left promiscuous mode [ 93.620553][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.632634][ T8862] syz.9.1436[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.632780][ T8862] syz.9.1436[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.644436][ T8862] syz.9.1436[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.790548][ T6292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.817012][ T6292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.828608][ T6292] bond0 (unregistering): Released all slaves [ 93.837814][ T6292] bond1 (unregistering): Released all slaves [ 93.902681][ T8873] loop9: detected capacity change from 0 to 256 [ 93.939328][ T8872] loop8: detected capacity change from 0 to 2048 [ 93.960815][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.968128][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.975462][ T8814] bridge_slave_0: entered allmulticast mode [ 93.981904][ T8814] bridge_slave_0: entered promiscuous mode [ 93.994286][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.001458][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.008777][ T8814] bridge_slave_1: entered allmulticast mode [ 94.015268][ T8814] bridge_slave_1: entered promiscuous mode [ 94.033151][ T8873] Invalid ELF header magic: != ELF [ 94.042594][ T8814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.054117][ T6292] hsr_slave_0: left promiscuous mode [ 94.070465][ T8872] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.085799][ T6292] hsr_slave_1: left promiscuous mode [ 94.091641][ T8872] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 94.104048][ T8872] EXT4-fs (loop8): This should not happen!! Data will be lost [ 94.104048][ T8872] [ 94.113766][ T8872] EXT4-fs (loop8): Total free blocks count 0 [ 94.119782][ T8872] EXT4-fs (loop8): Free/Dirty block details [ 94.125713][ T8872] EXT4-fs (loop8): free_blocks=2415919104 [ 94.131452][ T8872] EXT4-fs (loop8): dirty_blocks=16 [ 94.136617][ T8872] EXT4-fs (loop8): Block reservation details [ 94.142658][ T8872] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 94.149726][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.157209][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.169053][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.176662][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.193025][ T6292] veth1_macvtap: left promiscuous mode [ 94.198618][ T6292] veth0_macvtap: left promiscuous mode [ 94.204239][ T6292] veth1_vlan: left promiscuous mode [ 94.209656][ T6292] veth0_vlan: left promiscuous mode [ 94.212291][ T8872] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 94.227273][ T8872] EXT4-fs (loop8): This should not happen!! Data will be lost [ 94.227273][ T8872] [ 94.361069][ T3016] ================================================================== [ 94.369204][ T3016] BUG: KCSAN: data-race in dont_mount / step_into [ 94.375672][ T3016] [ 94.378009][ T3016] read-write to 0xffff8881066e40c0 of 4 bytes by task 3480 on cpu 1: [ 94.386094][ T3016] dont_mount+0x2a/0x40 [ 94.390271][ T3016] vfs_unlink+0x298/0x430 [ 94.394625][ T3016] do_unlinkat+0x236/0x4c0 [ 94.399078][ T3016] __x64_sys_unlink+0x2e/0x40 [ 94.403792][ T3016] x64_sys_call+0x280f/0x2d60 [ 94.408493][ T3016] do_syscall_64+0xc9/0x1c0 [ 94.413017][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.418955][ T3016] [ 94.421292][ T3016] read to 0xffff8881066e40c0 of 4 bytes by task 3016 on cpu 0: [ 94.428852][ T3016] step_into+0x12f/0x810 [ 94.433130][ T3016] walk_component+0x169/0x230 [ 94.437837][ T3016] path_lookupat+0x10a/0x2b0 [ 94.442461][ T3016] filename_lookup+0x127/0x300 [ 94.447258][ T3016] do_readlinkat+0x89/0x210 [ 94.451794][ T3016] __x64_sys_readlink+0x47/0x60 [ 94.456674][ T3016] x64_sys_call+0x13c3/0x2d60 [ 94.461558][ T3016] do_syscall_64+0xc9/0x1c0 [ 94.466103][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.472035][ T3016] [ 94.474371][ T3016] value changed: 0x00600008 -> 0x00008008 [ 94.480102][ T3016] [ 94.482430][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 94.488680][ T3016] CPU: 0 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 94.498933][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.509041][ T3016] ================================================================== [ 94.517727][ T6292] team0 (unregistering): Port device team_slave_1 removed [ 94.533201][ T6292] team0 (unregistering): Port device team_slave_0 removed [ 94.587147][ T8814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.616037][ T8814] team0: Port device team_slave_0 added [ 94.622832][ T8814] team0: Port device team_slave_1 added [ 94.647213][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.654272][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.680473][ T8814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.710407][ T8814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.717429][ T8814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.743644][ T8814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.786778][ T8814] hsr_slave_0: entered promiscuous mode [ 94.799945][ T8814] hsr_slave_1: entered promiscuous mode [ 95.203819][ T8814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.212801][ T8814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.221926][ T8814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.232105][ T8814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.276655][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.289737][ T8814] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.299306][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.306454][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.318447][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.325600][ T6292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.399578][ T8814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.478892][ T8814] veth0_vlan: entered promiscuous mode [ 95.488017][ T8814] veth1_vlan: entered promiscuous mode [ 95.504591][ T8814] veth0_macvtap: entered promiscuous mode [ 95.513574][ T8814] veth1_macvtap: entered promiscuous mode [ 95.524490][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.535280][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.545307][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.555876][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.565766][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.576227][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.586147][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.596724][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.614560][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.629005][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.639514][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.649622][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.660193][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.670094][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.680728][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.690632][ T8814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.701189][ T8814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.714212][ T8814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.726276][ T8814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.735265][ T8814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.743984][ T8814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.752792][ T8814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0