last executing test programs: 1.839098274s ago: executing program 1 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.791842868s ago: executing program 1 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(0x3) 1.714510895s ago: executing program 1 (id=749): socket(0x10, 0x3, 0x9) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.211000611s ago: executing program 4 (id=764): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 1.172511295s ago: executing program 4 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.131746488s ago: executing program 4 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @multicast2]}]}}}}}}}, 0x0) 1.049328256s ago: executing program 4 (id=773): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x20000c4, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r0) 984.427311ms ago: executing program 4 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x7}}], 0x38}, 0x80) 869.496612ms ago: executing program 3 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff000000000021"], 0x20}}, 0x0) 840.438454ms ago: executing program 2 (id=796): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x84182, 0x0) preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x10000, 0x0, 0x1d) 839.365954ms ago: executing program 1 (id=787): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x400000, @private1, 0x401}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 834.881035ms ago: executing program 3 (id=788): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x40004, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") 792.562109ms ago: executing program 1 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0xe8, 0x1a, 0x1, 0x70bd29, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x3, 0xff, 0x4, 0xfe, 0x8, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x9d, 0x0, 0x54, r2}}, @RTA_NEWDST={0x84, 0x13, [{0x3}, {0x1c, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xb0f8, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6}, {0xf7}, {0xfff}, {0xf, 0x0, 0x1}, {0x4}, {0x4}, {0x5}, {0x1}, {0x1ff}, {0x80}, {0x8}, {0x1, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0xc}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9ab}, {0x4, 0x0, 0x1}, {0x400, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x2c, "5a89ae79cb4bab1943eb739374a6"}}, @RTA_VIA={0x14, 0x12, {0x28, "b4881845a14d2a54d8b38e85ee95"}}, @RTA_VIA={0x14, 0x12, {0x27, "a89d72571f5b464761225400bd06"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x101, 0x0, 0x0, 0x80}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) sendmsg$nl_route(r0, 0x0, 0x0) 772.69137ms ago: executing program 4 (id=790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 738.748974ms ago: executing program 32 (id=790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 705.627766ms ago: executing program 0 (id=793): socket(0x2b, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100), 0xff36) 705.489736ms ago: executing program 1 (id=794): syz_open_dev$tty1(0xc, 0x4, 0x3) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 698.335007ms ago: executing program 2 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) 633.958803ms ago: executing program 3 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCSETSW2(r3, 0x5437, 0x0) 633.455273ms ago: executing program 0 (id=806): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 626.493144ms ago: executing program 2 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) 600.878906ms ago: executing program 2 (id=799): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x1000) 594.685807ms ago: executing program 3 (id=800): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) r2 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="14", 0x1}], 0x1}}], 0x206c, 0x0) 544.190741ms ago: executing program 3 (id=801): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x20000c82}], 0x1, 0x900, 0x0, 0x0) 414.882773ms ago: executing program 2 (id=802): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0xfd, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioperm(0x0, 0x7, 0x5) 412.451363ms ago: executing program 0 (id=803): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mlockall(0x2) 344.618269ms ago: executing program 2 (id=804): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000002480)={[{@usrjquota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0xe}}, {@noblock_validity}, {@grpquota}, {@journal_async_commit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x44a, &(0x7f0000000400)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write$cgroup_pid(r2, 0x0, 0x0) 50.545676ms ago: executing program 3 (id=805): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./bus\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x342, &(0x7f00000012c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 49.482556ms ago: executing program 0 (id=815): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0xb46}, 0x38) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x198}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 17.491188ms ago: executing program 0 (id=807): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.265252][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 18.265270][ T29] audit: type=1400 audit(1731101697.191:76): avc: denied { transition } for pid=3195 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.269799][ T29] audit: type=1400 audit(1731101697.191:77): avc: denied { noatsecure } for pid=3195 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.272604][ T29] audit: type=1400 audit(1731101697.201:78): avc: denied { write } for pid=3195 comm="sh" path="pipe:[2322]" dev="pipefs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.276471][ T29] audit: type=1400 audit(1731101697.201:79): avc: denied { rlimitinh } for pid=3195 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.279260][ T29] audit: type=1400 audit(1731101697.201:80): avc: denied { siginh } for pid=3195 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.316178][ T29] audit: type=1400 audit(1731101700.251:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 26.829854][ T29] audit: type=1400 audit(1731101705.761:82): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.831094][ T3305] cgroup: Unknown subsys name 'net' [ 26.852601][ T29] audit: type=1400 audit(1731101705.761:83): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.880092][ T29] audit: type=1400 audit(1731101705.791:84): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.077614][ T3305] cgroup: Unknown subsys name 'cpuset' [ 27.083816][ T3305] cgroup: Unknown subsys name 'rlimit' [ 27.272141][ T29] audit: type=1400 audit(1731101706.201:85): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.297691][ T29] audit: type=1400 audit(1731101706.201:86): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.318190][ T29] audit: type=1400 audit(1731101706.201:87): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.338615][ T29] audit: type=1400 audit(1731101706.201:88): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.341000][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.359063][ T29] audit: type=1400 audit(1731101706.201:89): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.392455][ T29] audit: type=1400 audit(1731101706.201:90): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.401305][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.416425][ T29] audit: type=1400 audit(1731101706.301:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.559226][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.609992][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.636320][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.643470][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.650619][ T3315] bridge_slave_0: entered allmulticast mode [ 28.657007][ T3315] bridge_slave_0: entered promiscuous mode [ 28.665953][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.673188][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.680388][ T3315] bridge_slave_1: entered allmulticast mode [ 28.686679][ T3315] bridge_slave_1: entered promiscuous mode [ 28.692909][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.705681][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.768317][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.806439][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.824977][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.832125][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.839396][ T3317] bridge_slave_0: entered allmulticast mode [ 28.845902][ T3317] bridge_slave_0: entered promiscuous mode [ 28.854743][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.861901][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.869103][ T3317] bridge_slave_1: entered allmulticast mode [ 28.875490][ T3317] bridge_slave_1: entered promiscuous mode [ 28.890937][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.933503][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.943343][ T3315] team0: Port device team_slave_0 added [ 28.950091][ T3315] team0: Port device team_slave_1 added [ 28.960402][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.967509][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.974739][ T3320] bridge_slave_0: entered allmulticast mode [ 28.981300][ T3320] bridge_slave_0: entered promiscuous mode [ 28.998367][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.029476][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.036661][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.044136][ T3320] bridge_slave_1: entered allmulticast mode [ 29.050711][ T3320] bridge_slave_1: entered promiscuous mode [ 29.061491][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.068638][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.075742][ T3321] bridge_slave_0: entered allmulticast mode [ 29.082456][ T3321] bridge_slave_0: entered promiscuous mode [ 29.093759][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.100759][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.126886][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.145521][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.152732][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.159919][ T3321] bridge_slave_1: entered allmulticast mode [ 29.166430][ T3321] bridge_slave_1: entered promiscuous mode [ 29.178342][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.185341][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.211320][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.225341][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.240200][ T3317] team0: Port device team_slave_0 added [ 29.253460][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.273144][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.282974][ T3317] team0: Port device team_slave_1 added [ 29.300684][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.309918][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.317003][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.324234][ T3319] bridge_slave_0: entered allmulticast mode [ 29.330855][ T3319] bridge_slave_0: entered promiscuous mode [ 29.342987][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.350017][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.375985][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.387160][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.394129][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.420138][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.438326][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.445395][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.452546][ T3319] bridge_slave_1: entered allmulticast mode [ 29.459032][ T3319] bridge_slave_1: entered promiscuous mode [ 29.471063][ T3320] team0: Port device team_slave_0 added [ 29.495375][ T3320] team0: Port device team_slave_1 added [ 29.513749][ T3315] hsr_slave_0: entered promiscuous mode [ 29.519867][ T3315] hsr_slave_1: entered promiscuous mode [ 29.526470][ T3321] team0: Port device team_slave_0 added [ 29.533442][ T3321] team0: Port device team_slave_1 added [ 29.540364][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.559830][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.566843][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.592776][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.613849][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.634686][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.641721][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.667670][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.688008][ T3317] hsr_slave_0: entered promiscuous mode [ 29.694127][ T3317] hsr_slave_1: entered promiscuous mode [ 29.700065][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.707685][ T3317] Cannot create hsr debugfs directory [ 29.722808][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.729955][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.755888][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.767151][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.774250][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.800315][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.818451][ T3319] team0: Port device team_slave_0 added [ 29.825113][ T3319] team0: Port device team_slave_1 added [ 29.862691][ T3320] hsr_slave_0: entered promiscuous mode [ 29.868888][ T3320] hsr_slave_1: entered promiscuous mode [ 29.874679][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.882436][ T3320] Cannot create hsr debugfs directory [ 29.900394][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.907387][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.933539][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.957086][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.964262][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.990237][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.014354][ T3321] hsr_slave_0: entered promiscuous mode [ 30.020464][ T3321] hsr_slave_1: entered promiscuous mode [ 30.026411][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.035120][ T3321] Cannot create hsr debugfs directory [ 30.080598][ T3319] hsr_slave_0: entered promiscuous mode [ 30.086735][ T3319] hsr_slave_1: entered promiscuous mode [ 30.092592][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.100391][ T3319] Cannot create hsr debugfs directory [ 30.196483][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.219166][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.228113][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.245668][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.286689][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.298808][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.307750][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.323055][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.347038][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.360956][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.370270][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.385715][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.409803][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.419333][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.428511][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.452306][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.462733][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.477740][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.486239][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.495326][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.520805][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.552051][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.571327][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.578448][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.593432][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.601650][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.608864][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.651433][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.671517][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.680488][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.687607][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.705814][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.712921][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.728144][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746055][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.769793][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.785885][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.796400][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.813552][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.821991][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.829101][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.839515][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.846651][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.874766][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.889529][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.896712][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.909004][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.916157][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.925678][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.932910][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.955487][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.981207][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.991722][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.011402][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.024205][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.031361][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.078965][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.105226][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.115727][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.142881][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.177124][ T3315] veth0_vlan: entered promiscuous mode [ 31.207234][ T3315] veth1_vlan: entered promiscuous mode [ 31.241352][ T3315] veth0_macvtap: entered promiscuous mode [ 31.261339][ T3315] veth1_macvtap: entered promiscuous mode [ 31.271514][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.297913][ T3317] veth0_vlan: entered promiscuous mode [ 31.307210][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.317815][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.325570][ T3320] veth0_vlan: entered promiscuous mode [ 31.341140][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.349983][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358782][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.367532][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.385450][ T3317] veth1_vlan: entered promiscuous mode [ 31.392319][ T3320] veth1_vlan: entered promiscuous mode [ 31.412744][ T3321] veth0_vlan: entered promiscuous mode [ 31.435116][ T3320] veth0_macvtap: entered promiscuous mode [ 31.448618][ T3321] veth1_vlan: entered promiscuous mode [ 31.457459][ T3317] veth0_macvtap: entered promiscuous mode [ 31.464934][ T3317] veth1_macvtap: entered promiscuous mode [ 31.473150][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.474332][ T3320] veth1_macvtap: entered promiscuous mode [ 31.504234][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.514719][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.525762][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.546177][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.556854][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.566743][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.577209][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.588782][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.602724][ T3321] veth0_macvtap: entered promiscuous mode [ 31.610448][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.620971][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.632576][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.641740][ T3321] veth1_macvtap: entered promiscuous mode [ 31.655687][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.666236][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.676087][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.686643][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.698217][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.709151][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.717938][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726863][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.735607][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749256][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.759758][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.769601][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.780139][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.789984][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.800451][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.811486][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.824905][ T3320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.833678][ T3320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.842398][ T3320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.851150][ T3320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.873530][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.884087][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.893942][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.904393][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.914253][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.924705][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.935378][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.953565][ T3319] veth0_vlan: entered promiscuous mode [ 31.970081][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.978917][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.987786][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.996501][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.010030][ T3319] veth1_vlan: entered promiscuous mode [ 32.018387][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 32.018412][ T29] audit: type=1400 audit(1731101710.951:122): avc: denied { create } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.044009][ T29] audit: type=1400 audit(1731101710.951:123): avc: denied { shutdown } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.063595][ T29] audit: type=1400 audit(1731101710.951:124): avc: denied { getopt } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.082940][ T29] audit: type=1400 audit(1731101710.951:125): avc: denied { connect } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.102291][ T29] audit: type=1400 audit(1731101710.951:126): avc: denied { name_connect } for pid=3457 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 32.122283][ T29] audit: type=1400 audit(1731101710.951:127): avc: denied { setopt } for pid=3457 comm="syz.1.6" lport=43854 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.145870][ T29] audit: type=1400 audit(1731101710.981:128): avc: denied { map_create } for pid=3459 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.164787][ T29] audit: type=1400 audit(1731101710.981:129): avc: denied { map_read map_write } for pid=3459 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.184459][ T29] audit: type=1400 audit(1731101710.981:130): avc: denied { prog_load } for pid=3459 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.203609][ T29] audit: type=1400 audit(1731101710.981:131): avc: denied { perfmon } for pid=3459 comm="syz.1.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.287762][ T3319] veth0_macvtap: entered promiscuous mode [ 32.304904][ T3469] loop1: detected capacity change from 0 to 512 [ 32.312200][ T3469] EXT4-fs: Ignoring removed nobh option [ 32.324100][ T3469] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 32.339192][ T3319] veth1_macvtap: entered promiscuous mode [ 32.395385][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.405887][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.415861][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.425571][ T3479] loop3: detected capacity change from 0 to 4096 [ 32.426296][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.442581][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.453175][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.463052][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.473682][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.488779][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.502355][ T3479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.515098][ T3481] loop0: detected capacity change from 0 to 128 [ 32.522774][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.533264][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.543145][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.553724][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.563630][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.574110][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.583993][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.586107][ T3481] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 32.594498][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.606479][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.645909][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.659661][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668541][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677436][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686327][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.744148][ T3488] loop3: detected capacity change from 0 to 256 [ 32.833588][ T3497] bond_slave_0: entered promiscuous mode [ 32.839360][ T3497] bond_slave_1: entered promiscuous mode [ 32.848765][ T3497] bond_slave_0: left promiscuous mode [ 32.854254][ T3497] bond_slave_1: left promiscuous mode [ 32.933650][ T3503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.989335][ T3501] hub 2-0:1.0: USB hub found [ 32.999503][ T3501] hub 2-0:1.0: 8 ports detected [ 33.099530][ T378] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 33.101984][ T3517] hub 9-0:1.0: USB hub found [ 33.124334][ T3517] hub 9-0:1.0: 8 ports detected [ 33.151881][ T3521] loop2: detected capacity change from 0 to 1024 [ 33.180840][ T3521] EXT4-fs: Ignoring removed orlov option [ 33.186674][ T3521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.209594][ T3521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.273885][ T3537] 9pnet_fd: Insufficient options for proto=fd [ 33.290107][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.302284][ T3541] syz.1.38[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.302360][ T3541] syz.1.38[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.327304][ T3541] syz.1.38[3541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.351103][ T3545] loop0: detected capacity change from 0 to 256 [ 33.387069][ T3545] ======================================================= [ 33.387069][ T3545] WARNING: The mand mount option has been deprecated and [ 33.387069][ T3545] and is ignored by this kernel. Remove the mand [ 33.387069][ T3545] option from the mount to silence this warning. [ 33.387069][ T3545] ======================================================= [ 33.415239][ T3552] loop3: detected capacity change from 0 to 256 [ 33.438297][ T3552] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.459671][ T3545] FAT-fs (loop0): Directory bread(block 64) failed [ 33.469084][ T3545] FAT-fs (loop0): Directory bread(block 65) failed [ 33.475927][ T3545] FAT-fs (loop0): Directory bread(block 66) failed [ 33.483600][ T3545] FAT-fs (loop0): Directory bread(block 67) failed [ 33.493894][ T3545] FAT-fs (loop0): Directory bread(block 68) failed [ 33.502788][ T3545] FAT-fs (loop0): Directory bread(block 69) failed [ 33.511621][ T3545] FAT-fs (loop0): Directory bread(block 70) failed [ 33.519069][ T3545] FAT-fs (loop0): Directory bread(block 71) failed [ 33.525695][ T3545] FAT-fs (loop0): Directory bread(block 72) failed [ 33.535886][ T3545] FAT-fs (loop0): Directory bread(block 73) failed [ 33.553194][ T3563] syz.2.48[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.553338][ T3563] syz.2.48[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.566440][ T3563] syz.2.48[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.579248][ T3545] Process accounting resumed [ 33.595912][ T3545] syz.0.40: attempt to access beyond end of device [ 33.595912][ T3545] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 33.661373][ T3573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 33.687187][ T3577] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 33.694894][ T3577] netlink: 'syz.2.55': attribute type 2 has an invalid length. [ 33.704119][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 33.763036][ T3589] loop2: detected capacity change from 0 to 128 [ 33.781891][ T3589] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.785657][ T3593] loop3: detected capacity change from 0 to 512 [ 33.794741][ T3589] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.838872][ T3593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.858756][ T3596] loop0: detected capacity change from 0 to 164 [ 33.866964][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.870118][ T3596] rock: directory entry would overflow storage [ 33.877652][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.882230][ T3596] rock: sig=0x4f50, size=4, remaining=3 [ 33.900351][ T3593] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.900375][ T3596] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 33.923945][ T3593] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 33.940099][ T3593] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.63: Failed to acquire dquot type 1 [ 33.961362][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.981471][ T3604] process 'syz.3.67' launched './file1' with NULL argv: empty string added [ 34.004264][ T3607] loop3: detected capacity change from 0 to 128 [ 34.063927][ T3611] syz.2.70 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.184477][ T3630] loop1: detected capacity change from 0 to 256 [ 34.358601][ T3665] syz.2.96[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.358670][ T3665] syz.2.96[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.372930][ T3665] syz.2.96[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.386009][ T3665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.96'. [ 34.446114][ T3674] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 34.460442][ T3678] Illegal XDP return value 373424171 on prog (id 82) dev N/A, expect packet loss! [ 34.470139][ T3673] IPVS: stopping master sync thread 3674 ... [ 34.532790][ T3687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.619322][ T3696] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.627276][ T3696] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.782893][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 34.794053][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 35.109395][ T3741] rdma_op ffff888116604980 conn xmit_rdma 0000000000000000 [ 35.118827][ T3743] loop0: detected capacity change from 0 to 512 [ 35.159470][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.196443][ T3743] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.292511][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.303088][ T3757] loop1: detected capacity change from 0 to 512 [ 35.316807][ T3757] EXT4-fs: inline encryption not supported [ 35.335227][ T3759] loop2: detected capacity change from 0 to 512 [ 35.348646][ T3759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.139: bg 0: block 248: padding at end of block bitmap is not set [ 35.349302][ T3757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.363173][ T3759] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.139: Failed to acquire dquot type 1 [ 35.377496][ T3757] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.390175][ T3759] EXT4-fs (loop2): 1 truncate cleaned up [ 35.404440][ T3759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.417240][ T3759] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.417782][ T3757] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.136: corrupted inode contents [ 35.439655][ T3759] syz.2.139 (3759) used greatest stack depth: 9352 bytes left [ 35.440346][ T3757] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.136: mark_inode_dirty error [ 35.459456][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.459651][ T3757] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.136: corrupted inode contents [ 35.477493][ T378] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1 [ 35.481565][ T3757] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.136: mark_inode_dirty error [ 35.551127][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.565060][ T3781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.144'. [ 35.744434][ T3816] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.153'. [ 35.762234][ T3815] gretap0: entered promiscuous mode [ 35.767880][ T3815] macsec1: entered promiscuous mode [ 35.773440][ T3815] macsec1: entered allmulticast mode [ 35.778802][ T3815] gretap0: entered allmulticast mode [ 35.786281][ T3815] gretap0: left allmulticast mode [ 35.791508][ T3815] gretap0: left promiscuous mode [ 35.861734][ T3824] loop4: detected capacity change from 0 to 2048 [ 35.887952][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.933217][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.950221][ T3834] loop2: detected capacity change from 0 to 256 [ 36.087702][ T3854] tipc: Started in network mode [ 36.092642][ T3854] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 36.102004][ T3854] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 36.110435][ T3854] tipc: Enabled bearer , priority 10 [ 36.133655][ T3859] loop0: detected capacity change from 0 to 128 [ 36.142156][ T3859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.161242][ T3859] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.201251][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.208812][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.216336][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.223817][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.231264][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.233426][ T3859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.238686][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.247896][ T3859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.254400][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.269899][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.278025][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.285932][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.293488][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.300926][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.308508][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.316212][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.323798][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.331223][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.338670][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.346289][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.352360][ T3870] loop1: detected capacity change from 0 to 512 [ 36.353924][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.367737][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.369102][ T3870] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.375133][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.375166][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.375192][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.389541][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.391826][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.404588][ T3870] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.182: corrupted inode contents [ 36.406683][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.422645][ T3870] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.182: mark_inode_dirty error [ 36.426497][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.440674][ T3870] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.182: corrupted inode contents [ 36.445923][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.445951][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.445974][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.499283][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.506722][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.514278][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.524548][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.535882][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 36.577253][ T3881] loop1: detected capacity change from 0 to 1024 [ 36.584738][ T3881] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 36.618254][ T3881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.660445][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.681334][ T3897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 36.698377][ T3899] netlink: 'syz.4.194': attribute type 7 has an invalid length. [ 36.788168][ T3918] loop4: detected capacity change from 0 to 512 [ 36.795231][ T3918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.808381][ T3918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.817082][ T3914] netlink: 'syz.2.202': attribute type 3 has an invalid length. [ 36.841666][ T3918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 36.853263][ T3923] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 36.867007][ T3918] System zones: 1-12 [ 36.871637][ T3918] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.885192][ T3918] EXT4-fs (loop4): 1 truncate cleaned up [ 36.887244][ T3923] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 36.892348][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.946291][ T3925] loop3: detected capacity change from 0 to 128 [ 36.948210][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.956905][ T3929] loop1: detected capacity change from 0 to 512 [ 36.969949][ T3929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.973465][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'. [ 36.983415][ T3925] FAT-fs (loop3): Directory bread(block 32) failed [ 36.995226][ T3925] FAT-fs (loop3): Directory bread(block 33) failed [ 37.002601][ T3925] FAT-fs (loop3): Directory bread(block 34) failed [ 37.010435][ T3925] FAT-fs (loop3): Directory bread(block 35) failed [ 37.017112][ T3925] FAT-fs (loop3): Directory bread(block 36) failed [ 37.024886][ T3932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 37.025303][ T3925] FAT-fs (loop3): Directory bread(block 37) failed [ 37.039651][ T3933] capability: warning: `syz.2.208' uses deprecated v2 capabilities in a way that may be insecure [ 37.040605][ T3925] FAT-fs (loop3): Directory bread(block 38) failed [ 37.058190][ T3925] FAT-fs (loop3): Directory bread(block 39) failed [ 37.064821][ T3925] FAT-fs (loop3): Directory bread(block 40) failed [ 37.070741][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.071622][ T3925] FAT-fs (loop3): Directory bread(block 41) failed [ 37.086775][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.096771][ T3929] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.129470][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 37.129487][ T29] audit: type=1400 audit(1731101716.061:541): avc: denied { mount } for pid=3924 comm="syz.3.206" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.148777][ T3925] syz.3.206: attempt to access beyond end of device [ 37.148777][ T3925] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 37.162095][ T3929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 37.171096][ T29] audit: type=1400 audit(1731101716.091:542): avc: denied { rename } for pid=3928 comm="syz.1.207" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.210292][ T3925] FAT-fs (loop3): Filesystem has been set read-only [ 37.217151][ T3925] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 37.228707][ T8] tipc: Node number set to 1 [ 37.243478][ T3938] netlink: 'syz.0.210': attribute type 7 has an invalid length. [ 37.246344][ T29] audit: type=1400 audit(1731101716.171:543): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.273695][ T3941] ipt_REJECT: TCP_RESET invalid for non-tcp [ 37.313833][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.331132][ T3949] loop4: detected capacity change from 0 to 512 [ 37.371682][ T3953] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 37.382367][ T3949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.403265][ T3953] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 37.411225][ T3949] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.434715][ T3949] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.215: corrupted inode contents [ 37.450715][ T3949] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #18: comm syz.4.215: mark_inode_dirty error [ 37.463269][ T3949] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.215: corrupted inode contents [ 37.482812][ T3958] loop3: detected capacity change from 0 to 512 [ 37.488208][ T3949] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.215: mark_inode_dirty error [ 37.501553][ T3949] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.215: mark inode dirty (error -117) [ 37.515020][ T3949] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 37.525489][ T29] audit: type=1400 audit(1731101716.451:544): avc: denied { override_creds } for pid=3957 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.548802][ T3958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.566971][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.586889][ T3958] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.597659][ T3964] netlink: 'syz.0.221': attribute type 11 has an invalid length. [ 37.643698][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.656276][ T29] audit: type=1400 audit(1731101716.591:545): avc: denied { connect } for pid=3969 comm="syz.0.224" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.690487][ T3973] loop3: detected capacity change from 0 to 512 [ 37.699644][ T3973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.720351][ T3973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 37.725616][ T3975] loop1: detected capacity change from 0 to 128 [ 37.729487][ T3973] System zones: 1-12 [ 37.740398][ T3973] EXT4-fs (loop3): 1 truncate cleaned up [ 37.747003][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.765297][ T3979] loop4: detected capacity change from 0 to 1024 [ 37.772667][ T3979] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 37.779974][ T3975] FAT-fs (loop1): Directory bread(block 32) failed [ 37.782745][ T3979] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.800473][ T3975] FAT-fs (loop1): Directory bread(block 33) failed [ 37.800543][ T3975] FAT-fs (loop1): Directory bread(block 34) failed [ 37.800567][ T3975] FAT-fs (loop1): Directory bread(block 35) failed [ 37.800593][ T3975] FAT-fs (loop1): Directory bread(block 36) failed [ 37.800614][ T3975] FAT-fs (loop1): Directory bread(block 37) failed [ 37.800654][ T3975] FAT-fs (loop1): Directory bread(block 38) failed [ 37.800742][ T3975] FAT-fs (loop1): Directory bread(block 39) failed [ 37.800765][ T3975] FAT-fs (loop1): Directory bread(block 40) failed [ 37.800817][ T3975] FAT-fs (loop1): Directory bread(block 41) failed [ 37.812067][ T3979] jbd2_journal_init_inode: Cannot locate journal superblock [ 37.812085][ T3979] EXT4-fs (loop4): Could not load journal inode [ 37.821157][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.836987][ T3975] syz.1.226: attempt to access beyond end of device [ 37.836987][ T3975] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 37.837137][ T3975] FAT-fs (loop1): Filesystem has been set read-only [ 37.837176][ T3975] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 37.851797][ T3982] loop3: detected capacity change from 0 to 256 [ 37.863215][ T3982] FAT-fs (loop3): Directory bread(block 64) failed [ 37.863261][ T3982] FAT-fs (loop3): Directory bread(block 65) failed [ 37.863291][ T3982] FAT-fs (loop3): Directory bread(block 66) failed [ 37.863315][ T3982] FAT-fs (loop3): Directory bread(block 67) failed [ 37.863344][ T3982] FAT-fs (loop3): Directory bread(block 68) failed [ 37.863365][ T3982] FAT-fs (loop3): Directory bread(block 69) failed [ 37.863442][ T3982] FAT-fs (loop3): Directory bread(block 70) failed [ 37.863460][ T3982] FAT-fs (loop3): Directory bread(block 71) failed [ 37.863485][ T3982] FAT-fs (loop3): Directory bread(block 72) failed [ 37.863508][ T3982] FAT-fs (loop3): Directory bread(block 73) failed [ 37.871965][ T29] audit: type=1400 audit(1731101716.791:546): avc: denied { read } for pid=3977 comm="syz.0.225" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.872029][ T29] audit: type=1400 audit(1731101716.791:547): avc: denied { open } for pid=3977 comm="syz.0.225" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.884251][ T3986] loop2: detected capacity change from 0 to 512 [ 37.898360][ T29] audit: type=1326 audit(1731101716.821:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3985 comm="syz.4.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4f7e719 code=0x0 [ 37.905671][ T3986] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.941975][ T3990] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 37.942713][ T3982] syz.3.228: attempt to access beyond end of device [ 37.942713][ T3982] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 38.009329][ T3991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.017414][ T29] audit: type=1400 audit(1731101716.941:549): avc: denied { mounton } for pid=3984 comm="syz.2.231" path="/55/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.036288][ T3991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.209375][ T3986] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 38.219827][ T3986] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.236100][ T3992] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 38.249023][ T3997] loop3: detected capacity change from 0 to 512 [ 38.256098][ T3997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.257635][ T3992] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.289207][ T3997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.302029][ T3997] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.302269][ T3321] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 38.325625][ T3997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 38.353545][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.405267][ T4008] loop1: detected capacity change from 0 to 512 [ 38.429750][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.442790][ T4008] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.443141][ T4015] ipt_REJECT: TCP_RESET invalid for non-tcp [ 38.492787][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.530537][ T4026] loop1: detected capacity change from 0 to 512 [ 38.550070][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.575783][ T4026] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.592750][ T4026] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.238: corrupted inode contents [ 38.610686][ T4026] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #18: comm syz.1.238: mark_inode_dirty error [ 38.622977][ T4026] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.238: corrupted inode contents [ 38.635046][ T4026] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #18: comm syz.1.238: mark_inode_dirty error [ 38.647810][ T4026] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #18: comm syz.1.238: mark inode dirty (error -117) [ 38.663324][ T4026] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 38.687778][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.077821][ T4039] loop0: detected capacity change from 0 to 128 [ 39.093497][ T4039] FAT-fs (loop0): Directory bread(block 32) failed [ 39.100811][ T4039] FAT-fs (loop0): Directory bread(block 33) failed [ 39.110710][ T4039] FAT-fs (loop0): Directory bread(block 34) failed [ 39.117353][ T4039] FAT-fs (loop0): Directory bread(block 35) failed [ 39.124015][ T4039] FAT-fs (loop0): Directory bread(block 36) failed [ 39.131462][ T4039] FAT-fs (loop0): Directory bread(block 37) failed [ 39.138369][ T4039] FAT-fs (loop0): Directory bread(block 38) failed [ 39.145055][ T4039] FAT-fs (loop0): Directory bread(block 39) failed [ 39.151794][ T4039] FAT-fs (loop0): Directory bread(block 40) failed [ 39.159069][ T4039] FAT-fs (loop0): Directory bread(block 41) failed [ 39.216961][ T4039] syz.0.241: attempt to access beyond end of device [ 39.216961][ T4039] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 39.235002][ T4050] loop1: detected capacity change from 0 to 256 [ 39.242094][ T4039] FAT-fs (loop0): Filesystem has been set read-only [ 39.251507][ T4039] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.258259][ T4050] FAT-fs (loop1): Directory bread(block 64) failed [ 39.267708][ T4050] FAT-fs (loop1): Directory bread(block 65) failed [ 39.275800][ T4050] FAT-fs (loop1): Directory bread(block 66) failed [ 39.283159][ T4050] FAT-fs (loop1): Directory bread(block 67) failed [ 39.289849][ T4050] FAT-fs (loop1): Directory bread(block 68) failed [ 39.310129][ T4050] FAT-fs (loop1): Directory bread(block 69) failed [ 39.317229][ T4050] FAT-fs (loop1): Directory bread(block 70) failed [ 39.322182][ T4056] loop0: detected capacity change from 0 to 512 [ 39.324059][ T4050] FAT-fs (loop1): Directory bread(block 71) failed [ 39.330218][ T4052] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 39.337246][ T4050] FAT-fs (loop1): Directory bread(block 72) failed [ 39.353483][ T4050] FAT-fs (loop1): Directory bread(block 73) failed [ 39.355858][ T4056] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.390924][ T4056] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.402371][ T4060] loop3: detected capacity change from 0 to 512 [ 39.412986][ T4050] syz.1.247: attempt to access beyond end of device [ 39.412986][ T4050] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 39.413818][ T4060] EXT4-fs: Ignoring removed i_version option [ 39.434662][ T4060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.435701][ T4056] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 39.447644][ T4062] loop2: detected capacity change from 0 to 512 [ 39.467562][ T4056] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.474790][ T4060] EXT4-fs (loop3): 1 truncate cleaned up [ 39.485652][ T4062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.488672][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.502989][ T4062] ext4 filesystem being mounted at /66/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 39.534908][ T4062] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.546894][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.562177][ T3320] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 39.579237][ T4070] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 39.603602][ T4074] loop0: detected capacity change from 0 to 512 [ 39.612428][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.625739][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.640233][ T4074] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.660425][ T4081] loop3: detected capacity change from 0 to 512 [ 39.667112][ T4081] EXT4-fs: Ignoring removed orlov option [ 39.689113][ T4081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.698531][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.728203][ T4081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.743359][ T4081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.273: bg 0: block 248: padding at end of block bitmap is not set [ 39.760343][ T4081] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.273: Failed to acquire dquot type 1 [ 39.795068][ T4081] EXT4-fs (loop3): 1 truncate cleaned up [ 39.809429][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.869526][ T4092] loop1: detected capacity change from 0 to 1024 [ 39.876037][ T4081] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.273: Abort forced by user [ 39.892086][ T4081] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 39.913723][ T4081] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 39.930273][ T4081] ext4 filesystem being remounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.936201][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.942862][ T4081] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.273: Failed to acquire dquot type 1 [ 39.956608][ T4092] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.998742][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.028957][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.039924][ T378] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1 [ 40.900338][ T4107] loop4: detected capacity change from 0 to 128 [ 40.913402][ T4107] FAT-fs (loop4): Directory bread(block 32) failed [ 40.921057][ T4107] FAT-fs (loop4): Directory bread(block 33) failed [ 40.929220][ T4107] FAT-fs (loop4): Directory bread(block 34) failed [ 40.936707][ T4107] FAT-fs (loop4): Directory bread(block 35) failed [ 40.943423][ T4107] FAT-fs (loop4): Directory bread(block 36) failed [ 40.951227][ T4109] loop1: detected capacity change from 0 to 512 [ 40.959734][ T4109] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.972325][ T4107] FAT-fs (loop4): Directory bread(block 37) failed [ 40.982231][ T4107] FAT-fs (loop4): Directory bread(block 38) failed [ 40.989364][ T4107] FAT-fs (loop4): Directory bread(block 39) failed [ 40.996365][ T4109] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.010883][ T4107] FAT-fs (loop4): Directory bread(block 40) failed [ 41.017881][ T4107] FAT-fs (loop4): Directory bread(block 41) failed [ 41.070094][ T4107] syz.4.267: attempt to access beyond end of device [ 41.070094][ T4107] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 41.087836][ T4118] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 41.108662][ T4118] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.123288][ T4107] FAT-fs (loop4): Filesystem has been set read-only [ 41.123330][ T4107] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 41.160697][ T4122] validate_nla: 2 callbacks suppressed [ 41.160715][ T4122] netlink: 'syz.2.276': attribute type 7 has an invalid length. [ 41.189122][ T4123] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 41.201971][ T4123] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 41.210265][ T3315] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.277439][ T4132] loop1: detected capacity change from 0 to 2048 [ 41.300672][ T4140] loop0: detected capacity change from 0 to 512 [ 41.322112][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.335060][ T4140] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.358399][ T4140] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.366233][ T4132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.424856][ T4140] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.284: bg 0: block 248: padding at end of block bitmap is not set [ 41.438114][ T4155] loop3: detected capacity change from 0 to 128 [ 41.440087][ T4140] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.284: Failed to acquire dquot type 1 [ 41.461063][ T4155] FAT-fs (loop3): Directory bread(block 32) failed [ 41.464112][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.467905][ T4155] FAT-fs (loop3): Directory bread(block 33) failed [ 41.467943][ T4155] FAT-fs (loop3): Directory bread(block 34) failed [ 41.467967][ T4155] FAT-fs (loop3): Directory bread(block 35) failed [ 41.467995][ T4155] FAT-fs (loop3): Directory bread(block 36) failed [ 41.468018][ T4155] FAT-fs (loop3): Directory bread(block 37) failed [ 41.468042][ T4155] FAT-fs (loop3): Directory bread(block 38) failed [ 41.468104][ T4155] FAT-fs (loop3): Directory bread(block 39) failed [ 41.468168][ T4155] FAT-fs (loop3): Directory bread(block 40) failed [ 41.468189][ T4155] FAT-fs (loop3): Directory bread(block 41) failed [ 41.509917][ T4155] syz.3.289: attempt to access beyond end of device [ 41.509917][ T4155] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 41.512233][ T4140] EXT4-fs (loop0): 1 truncate cleaned up [ 41.519568][ T4155] FAT-fs (loop3): Filesystem has been set read-only [ 41.561501][ T4140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.586866][ T4155] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 41.619817][ T4160] loop4: detected capacity change from 0 to 512 [ 41.643684][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.667126][ T4160] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.705108][ T4175] loop1: detected capacity change from 0 to 128 [ 41.724780][ T4175] FAT-fs (loop1): Directory bread(block 32) failed [ 41.731437][ T4175] FAT-fs (loop1): Directory bread(block 33) failed [ 41.739495][ T4175] FAT-fs (loop1): Directory bread(block 34) failed [ 41.746072][ T4175] FAT-fs (loop1): Directory bread(block 35) failed [ 41.750104][ T4177] netlink: 'syz.3.311': attribute type 153 has an invalid length. [ 41.754656][ T4175] FAT-fs (loop1): Directory bread(block 36) failed [ 41.767807][ T4175] FAT-fs (loop1): Directory bread(block 37) failed [ 41.774675][ T4175] FAT-fs (loop1): Directory bread(block 38) failed [ 41.781339][ T4175] FAT-fs (loop1): Directory bread(block 39) failed [ 41.788067][ T4175] FAT-fs (loop1): Directory bread(block 40) failed [ 41.790063][ T4160] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.799423][ T4175] FAT-fs (loop1): Directory bread(block 41) failed [ 41.822600][ T4160] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 41.858345][ T4160] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.899157][ T3319] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.928718][ T4175] syz.1.310: attempt to access beyond end of device [ 41.928718][ T4175] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 41.944142][ T4175] FAT-fs (loop1): Filesystem has been set read-only [ 41.959427][ T4199] loop3: detected capacity change from 0 to 1024 [ 41.966288][ T4175] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 41.977638][ T4197] __nla_validate_parse: 1 callbacks suppressed [ 41.977666][ T4197] netlink: 88 bytes leftover after parsing attributes in process `syz.4.303'. [ 41.994198][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 42.009935][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.058461][ T4199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.074769][ T4199] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 42.087441][ T4199] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.087441][ T4199] [ 42.097119][ T4199] EXT4-fs (loop3): Total free blocks count 0 [ 42.103117][ T4199] EXT4-fs (loop3): Free/Dirty block details [ 42.109081][ T4199] EXT4-fs (loop3): free_blocks=68451041280 [ 42.114909][ T4199] EXT4-fs (loop3): dirty_blocks=32 [ 42.120632][ T4199] EXT4-fs (loop3): Block reservation details [ 42.126676][ T4199] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 42.149537][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 42.149594][ T29] audit: type=1326 audit(1731101721.081:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.156032][ C1] hrtimer: interrupt took 28694 ns [ 42.181752][ T29] audit: type=1326 audit(1731101721.121:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.208106][ T29] audit: type=1326 audit(1731101721.121:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.231386][ T29] audit: type=1326 audit(1731101721.121:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.255372][ T29] audit: type=1326 audit(1731101721.121:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.279368][ T29] audit: type=1326 audit(1731101721.121:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.305352][ T108] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.326460][ T29] audit: type=1326 audit(1731101721.251:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.350415][ T29] audit: type=1326 audit(1731101721.251:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.373895][ T29] audit: type=1326 audit(1731101721.251:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.397180][ T29] audit: type=1326 audit(1731101721.251:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 42.421794][ T4219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.316'. [ 42.442681][ T4216] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.316'. [ 42.460993][ T4221] ebtables: ebtables: counters copy to user failed while replacing table [ 42.505336][ T4229] loop2: detected capacity change from 0 to 2048 [ 42.552080][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.580248][ T4239] loop0: detected capacity change from 0 to 1024 [ 42.588228][ T4229] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.617578][ T4239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.633056][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.761490][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.788576][ T4258] syzkaller0: entered promiscuous mode [ 42.794157][ T4258] syzkaller0: entered allmulticast mode [ 42.802610][ T4258] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 42.877935][ T4264] loop0: detected capacity change from 0 to 512 [ 42.906670][ T4266] dvmrp1: entered allmulticast mode [ 42.919479][ T4266] dvmrp1: left allmulticast mode [ 42.925800][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.942104][ T4264] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.054490][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.107463][ T4280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 43.955086][ T4287] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.339'. [ 43.964783][ T4286] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.339'. [ 43.997144][ T4292] loop1: detected capacity change from 0 to 1024 [ 44.019382][ T4292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.047960][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.231410][ T4307] ebtables: ebtables: counters copy to user failed while replacing table [ 44.245054][ T4311] loop3: detected capacity change from 0 to 512 [ 44.258395][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.271115][ T4311] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.320903][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.253031][ T4334] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.353'. [ 45.262759][ T4329] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.353'. [ 45.289910][ T4336] loop3: detected capacity change from 0 to 1024 [ 45.308324][ T4336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.332063][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.467479][ T4351] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 45.515250][ T4358] loop1: detected capacity change from 0 to 512 [ 45.559253][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.576755][ T4358] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.650694][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.745139][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.753282][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 45.761181][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.789678][ T4381] loop1: detected capacity change from 0 to 2048 [ 45.808784][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.846587][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.534333][ T4396] loop0: detected capacity change from 0 to 2048 [ 46.552367][ T4396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.582413][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.620342][ T4407] loop2: detected capacity change from 0 to 512 [ 46.652201][ T4407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.665221][ T4407] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.729035][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.792151][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.800321][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 46.811792][ T3391] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.065807][ T4448] loop0: detected capacity change from 0 to 512 [ 47.121461][ T4448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.135353][ T4448] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.200063][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 47.207732][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 47.226143][ T3395] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.239340][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 47.239357][ T29] audit: type=1400 audit(1731101726.171:718): avc: denied { bind } for pid=4464 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.273713][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.293275][ T4468] Zero length message leads to an empty skb [ 47.594502][ T4498] loop0: detected capacity change from 0 to 512 [ 47.622098][ T4498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.645167][ T4498] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.657365][ T29] audit: type=1326 audit(1731101726.581:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.680678][ T29] audit: type=1326 audit(1731101726.581:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.704540][ T29] audit: type=1326 audit(1731101726.591:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.728002][ T29] audit: type=1326 audit(1731101726.591:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.751405][ T29] audit: type=1326 audit(1731101726.591:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.774771][ T29] audit: type=1326 audit(1731101726.601:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.798137][ T29] audit: type=1326 audit(1731101726.601:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.821757][ T29] audit: type=1326 audit(1731101726.601:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.845090][ T29] audit: type=1326 audit(1731101726.601:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 47.888682][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.930413][ T4515] loop0: detected capacity change from 0 to 512 [ 47.949141][ T4515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.962117][ T4515] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.058458][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.097655][ T4538] loop2: detected capacity change from 0 to 512 [ 48.137694][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.151673][ T4538] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.272164][ T4559] hub 9-0:1.0: USB hub found [ 48.277374][ T4559] hub 9-0:1.0: 8 ports detected [ 48.391112][ T4573] hub 2-0:1.0: USB hub found [ 48.397540][ T4573] hub 2-0:1.0: 8 ports detected [ 48.907534][ T4589] loop3: detected capacity change from 0 to 1024 [ 48.914209][ T4589] EXT4-fs: Ignoring removed orlov option [ 48.920031][ T4589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.968311][ T4597] hub 9-0:1.0: USB hub found [ 48.973154][ T4597] hub 9-0:1.0: 8 ports detected [ 49.098868][ T4626] loop1: detected capacity change from 0 to 256 [ 49.109286][ T4626] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.119981][ T4621] hub 2-0:1.0: USB hub found [ 49.126504][ T4621] hub 2-0:1.0: 8 ports detected [ 49.165675][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 49.185008][ T4632] loop4: detected capacity change from 0 to 1024 [ 49.200692][ T4632] EXT4-fs: Ignoring removed orlov option [ 49.206463][ T4632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.236890][ T4645] syz.3.485[4645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.236954][ T4645] syz.3.485[4645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.248402][ T4645] syz.3.485[4645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.331966][ T4662] loop4: detected capacity change from 0 to 256 [ 49.351995][ T4662] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.382965][ T4661] hub 2-0:1.0: USB hub found [ 49.387920][ T4661] hub 2-0:1.0: 8 ports detected [ 49.443791][ T4672] loop1: detected capacity change from 0 to 1024 [ 49.448787][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 49.450949][ T4672] EXT4-fs: Ignoring removed orlov option [ 49.464973][ T4672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.479716][ T4674] syz.4.500[4674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.479780][ T4674] syz.4.500[4674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.492269][ T4674] syz.4.500[4674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.564942][ T4687] loop4: detected capacity change from 0 to 512 [ 49.585712][ T4687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.599787][ T4687] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.634141][ T4687] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.650772][ T4687] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.506: Failed to acquire dquot type 1 [ 49.894171][ T4704] loop4: detected capacity change from 0 to 128 [ 49.906805][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 49.952214][ T4707] hub 2-0:1.0: USB hub found [ 49.957193][ T4707] hub 2-0:1.0: 8 ports detected [ 49.986237][ T4711] loop0: detected capacity change from 0 to 1024 [ 49.993445][ T4711] EXT4-fs: Ignoring removed orlov option [ 49.999235][ T4711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.033547][ T4717] syz.3.520[4717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.033690][ T4717] syz.3.520[4717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.045861][ T4717] syz.3.520[4717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.085308][ T4723] loop0: detected capacity change from 0 to 512 [ 50.105668][ T4723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.140392][ T4723] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.171027][ T4723] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 50.197973][ T4723] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.523: Failed to acquire dquot type 1 [ 50.248660][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 50.276096][ T4743] hub 2-0:1.0: USB hub found [ 50.285719][ T4747] loop4: detected capacity change from 0 to 256 [ 50.294934][ T4743] hub 2-0:1.0: 8 ports detected [ 50.324943][ T4753] loop0: detected capacity change from 0 to 128 [ 50.464561][ T4775] loop2: detected capacity change from 0 to 256 [ 50.595844][ T4793] loop2: detected capacity change from 0 to 128 [ 50.880015][ T4804] loop0: detected capacity change from 0 to 256 [ 50.882961][ T4806] loop1: detected capacity change from 0 to 128 [ 50.894435][ T4805] syz.2.572[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.109456][ T4833] loop3: detected capacity change from 0 to 256 [ 51.116704][ T4832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.269427][ T4850] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 51.281999][ T4847] IPVS: stopping master sync thread 4850 ... [ 51.309464][ T4859] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 51.319927][ T4858] IPVS: stopping master sync thread 4859 ... [ 51.443594][ T4874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.790399][ T4897] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 51.801403][ T4896] IPVS: stopping master sync thread 4897 ... [ 51.852378][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 51.884139][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 51.976303][ T4916] loop4: detected capacity change from 0 to 512 [ 52.001330][ T4916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.613: bg 0: block 248: padding at end of block bitmap is not set [ 52.033597][ T4916] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.613: Failed to acquire dquot type 1 [ 52.045501][ T4916] EXT4-fs (loop4): 1 truncate cleaned up [ 52.063520][ T4916] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.086418][ T4916] syz.4.613 (4916) used greatest stack depth: 9344 bytes left [ 52.101266][ T108] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:4: Failed to release dquot type 1 [ 52.294358][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 52.294442][ T29] audit: type=1400 audit(1731101731.221:998): avc: denied { write } for pid=4929 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.357803][ T29] audit: type=1326 audit(1731101731.291:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b92e719 code=0x7ffc0000 [ 52.381292][ T29] audit: type=1326 audit(1731101731.291:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b92e719 code=0x7ffc0000 [ 52.408314][ T29] audit: type=1326 audit(1731101731.331:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f546b92e719 code=0x7ffc0000 [ 52.431934][ T29] audit: type=1326 audit(1731101731.331:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b92e719 code=0x7ffc0000 [ 52.455428][ T29] audit: type=1326 audit(1731101731.331:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546b92e719 code=0x7ffc0000 [ 52.557403][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 52.567028][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 52.771190][ T29] audit: type=1326 audit(1731101731.701:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc03fe719 code=0x7ffc0000 [ 52.799878][ T4956] loop1: detected capacity change from 0 to 512 [ 52.809851][ T29] audit: type=1326 audit(1731101731.701:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc03fe719 code=0x7ffc0000 [ 52.833247][ T29] audit: type=1326 audit(1731101731.731:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f5cc03fe719 code=0x7ffc0000 [ 52.857052][ T29] audit: type=1326 audit(1731101731.731:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc03fe719 code=0x7ffc0000 [ 52.895555][ T4956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.631: bg 0: block 248: padding at end of block bitmap is not set [ 52.915878][ T4956] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.631: Failed to acquire dquot type 1 [ 52.938352][ T4956] EXT4-fs (loop1): 1 truncate cleaned up [ 52.944506][ T4956] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.985332][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:3: Failed to release dquot type 1 [ 53.054728][ T4977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 53.164640][ T4984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 54.123163][ T5007] tipc: Started in network mode [ 54.128223][ T5007] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 54.133887][ T5008] loop3: detected capacity change from 0 to 512 [ 54.139790][ T5007] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 54.152331][ T5007] tipc: Enabled bearer , priority 10 [ 54.181802][ T5008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.646: bg 0: block 248: padding at end of block bitmap is not set [ 54.232645][ T5020] loop0: detected capacity change from 0 to 2048 [ 54.239543][ T5008] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.646: Failed to acquire dquot type 1 [ 54.252050][ T5008] EXT4-fs (loop3): 1 truncate cleaned up [ 54.258194][ T5008] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.291250][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 54.434382][ T5041] tipc: Started in network mode [ 54.439498][ T5041] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 54.449257][ T5041] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 54.457617][ T5041] tipc: Enabled bearer , priority 10 [ 54.525604][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 54.593155][ T5055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 54.602266][ T5055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 54.613618][ T5055] bond_slave_0: entered promiscuous mode [ 54.619937][ T5055] bond_slave_0: left promiscuous mode [ 54.714134][ T5066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5066 comm=syz.3.674 [ 54.875133][ T3391] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7 [ 54.882745][ T3391] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max [ 54.894284][ T3391] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 54.903456][ T3391] hid-generic 0000:0000:0000.0005: unknown main item tag 0x6 [ 54.910980][ T3391] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd [ 54.919127][ T3391] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.986448][ T5095] pim6reg: entered allmulticast mode [ 54.994059][ T5095] pim6reg: left allmulticast mode [ 55.052871][ T5102] loop1: detected capacity change from 0 to 1024 [ 55.059960][ T5102] EXT4-fs: Ignoring removed orlov option [ 55.065826][ T5102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.164720][ T5119] loop1: detected capacity change from 0 to 4096 [ 55.165148][ T5121] SELinux: Context Ü is not valid (left unmapped). [ 55.223442][ T5126] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.227585][ T5128] loop2: detected capacity change from 0 to 512 [ 55.247218][ T5128] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.260050][ T5132] bridge0: port 3(hsr_slave_1) entered blocking state [ 55.267166][ T3391] tipc: Node number set to 1 [ 55.271777][ T5132] bridge0: port 3(hsr_slave_1) entered disabled state [ 55.280124][ T5132] hsr_slave_1: entered allmulticast mode [ 55.287092][ T5128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.287629][ T5132] hsr_slave_1: left allmulticast mode [ 55.293750][ T5128] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.706: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 55.316934][ T5128] EXT4-fs error (device loop2): ext4_quota_enable:7056: comm syz.2.706: Bad quota inode: 3, type: 0 [ 55.328694][ T5128] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.343392][ T5128] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 55.397980][ T5128] syz.2.706 uses obsolete (PF_INET,SOCK_PACKET) [ 55.427401][ T5144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 55.491166][ T5154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5154 comm=syz.4.718 [ 55.507196][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 55.516085][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 55.527464][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 55.542056][ T5161] sd 0:0:1:0: device reset [ 55.576594][ T3395] tipc: Node number set to 1 [ 55.590475][ T5169] hsr0: VLAN not yet supported [ 55.625587][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 55.641417][ T5181] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.723'. [ 55.657885][ T5165] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.723'. [ 55.699935][ T5184] bond_slave_0: entered promiscuous mode [ 55.705668][ T5184] bond_slave_1: entered promiscuous mode [ 55.747841][ T5184] bond_slave_0: left promiscuous mode [ 55.753344][ T5184] bond_slave_1: left promiscuous mode [ 55.837890][ T5202] SELinux: failed to load policy [ 55.944446][ T5217] xt_hashlimit: max too large, truncated to 1048576 [ 55.952144][ T5217] Cannot find set identified by id 0 to match [ 55.988996][ T5220] loop2: detected capacity change from 0 to 512 [ 56.011856][ T5220] EXT4-fs: inline encryption not supported [ 56.028692][ T5220] EXT4-fs (loop2): blocks per group (64) and clusters per group (20800) inconsistent [ 56.420613][ T5255] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 56.509007][ T5261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.529030][ T5263] loop3: detected capacity change from 0 to 128 [ 56.532980][ T5267] loop0: detected capacity change from 0 to 512 [ 56.556684][ T5267] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.768: invalid indirect mapped block 256 (level 2) [ 56.571940][ T5267] EXT4-fs (loop0): 2 truncates cleaned up [ 56.588267][ T5267] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.768: bg 0: block 5: invalid block bitmap [ 56.654632][ T5280] loop4: detected capacity change from 0 to 128 [ 56.703846][ T3319] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 56.716831][ T3319] VFS: Lookup of '. ' in vfat loop4 would have caused loop [ 56.862078][ T5303] loop2: detected capacity change from 0 to 1024 [ 56.862730][ T5304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.881967][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.896935][ T5304] loop3: detected capacity change from 0 to 512 [ 56.917236][ T5304] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 56.958771][ T5304] EXT4-fs (loop3): failed to open journal device unknown-block(1,255) -6 [ 57.019668][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.100118][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.105996][ T5330] loop0: detected capacity change from 0 to 2048 [ 57.111287][ T5336] loop2: detected capacity change from 0 to 512 [ 57.155971][ T5348] loop3: detected capacity change from 0 to 256 [ 57.170919][ T5348] FAT-fs (loop3): Directory bread(block 64) failed [ 57.178423][ T5348] FAT-fs (loop3): Directory bread(block 65) failed [ 57.185047][ T5348] FAT-fs (loop3): Directory bread(block 66) failed [ 57.191707][ T5348] FAT-fs (loop3): Directory bread(block 67) failed [ 57.198369][ T5348] FAT-fs (loop3): Directory bread(block 68) failed [ 57.204441][ T5336] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.205006][ T5348] FAT-fs (loop3): Directory bread(block 69) failed [ 57.222688][ T5348] FAT-fs (loop3): Directory bread(block 70) failed [ 57.236022][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.237790][ T5348] FAT-fs (loop3): Directory bread(block 71) failed [ 57.253088][ T5348] FAT-fs (loop3): Directory bread(block 72) failed [ 57.261800][ T5321] chnl_net:caif_netlink_parms(): no params data found [ 57.274340][ T5348] FAT-fs (loop3): Directory bread(block 73) failed [ 57.310797][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 57.310889][ T29] audit: type=1326 audit(1731101736.221:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57da48e719 code=0x7ffc0000 [ 57.340729][ T29] audit: type=1326 audit(1731101736.221:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57da48e719 code=0x7ffc0000 [ 57.345020][ T50] bridge_slave_1: left allmulticast mode [ 57.364228][ T29] audit: type=1326 audit(1731101736.231:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364329][ T29] audit: type=1326 audit(1731101736.231:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364360][ T29] audit: type=1326 audit(1731101736.231:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364392][ T29] audit: type=1326 audit(1731101736.231:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364446][ T29] audit: type=1326 audit(1731101736.231:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364591][ T29] audit: type=1326 audit(1731101736.231:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364620][ T29] audit: type=1326 audit(1731101736.231:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.364648][ T29] audit: type=1326 audit(1731101736.231:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5355 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d403e719 code=0x7ffc0000 [ 57.365416][ T5360] loop2: detected capacity change from 0 to 512 [ 57.370457][ T50] bridge_slave_1: left promiscuous mode [ 57.370636][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.399020][ T5360] EXT4-fs: Ignoring removed nobh option [ 57.553581][ T5348] syz.3.801: attempt to access beyond end of device [ 57.553581][ T5348] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 57.565724][ T5360] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 57.605154][ T50] bridge_slave_0: left allmulticast mode [ 57.610887][ T50] bridge_slave_0: left promiscuous mode [ 57.616621][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.650109][ T5364] loop3: detected capacity change from 0 to 128 [ 57.657984][ T5364] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 57.764826][ T5370] ================================================================== [ 57.772963][ T5370] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 57.780914][ T5370] [ 57.783260][ T5370] write to 0xffff8881061fbb14 of 4 bytes by task 5364 on cpu 0: [ 57.790922][ T5370] xas_set_mark+0x131/0x150 [ 57.795461][ T5370] tag_pages_for_writeback+0xa5/0x2a0 [ 57.800884][ T5370] writeback_iter+0x351/0x830 [ 57.805634][ T5370] write_cache_pages+0x4b/0x100 [ 57.810532][ T5370] mpage_writepages+0x72/0xf0 [ 57.815258][ T5370] fat_writepages+0x24/0x30 [ 57.819851][ T5370] do_writepages+0x1d8/0x480 [ 57.824484][ T5370] filemap_fdatawrite_wbc+0xdb/0x100 [ 57.829821][ T5370] file_write_and_wait_range+0xc4/0x250 [ 57.835407][ T5370] __generic_file_fsync+0x46/0x140 [ 57.840557][ T5370] fat_file_fsync+0x46/0x100 [ 57.845189][ T5370] vfs_fsync_range+0x116/0x130 [ 57.850011][ T5370] generic_file_write_iter+0x185/0x1c0 [ 57.855518][ T5370] iter_file_splice_write+0x5f1/0x980 [ 57.860943][ T5370] direct_splice_actor+0x160/0x2c0 [ 57.866118][ T5370] splice_direct_to_actor+0x302/0x670 [ 57.871532][ T5370] do_splice_direct+0xd7/0x150 [ 57.876349][ T5370] do_sendfile+0x39b/0x970 [ 57.880814][ T5370] __x64_sys_sendfile64+0x110/0x150 [ 57.886033][ T5370] x64_sys_call+0xed5/0x2d60 [ 57.890660][ T5370] do_syscall_64+0xc9/0x1c0 [ 57.895202][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.901167][ T5370] [ 57.903530][ T5370] read to 0xffff8881061fbb14 of 4 bytes by task 5370 on cpu 1: [ 57.911100][ T5370] filemap_fdatawrite_wbc+0x5c/0x100 [ 57.916433][ T5370] file_write_and_wait_range+0xc4/0x250 [ 57.922021][ T5370] __generic_file_fsync+0x46/0x140 [ 57.927160][ T5370] fat_file_fsync+0x46/0x100 [ 57.931794][ T5370] vfs_fsync_range+0x116/0x130 [ 57.936594][ T5370] generic_file_write_iter+0x185/0x1c0 [ 57.942344][ T5370] iter_file_splice_write+0x5f1/0x980 [ 57.947754][ T5370] direct_splice_actor+0x160/0x2c0 [ 57.952907][ T5370] splice_direct_to_actor+0x302/0x670 [ 57.958486][ T5370] do_splice_direct+0xd7/0x150 [ 57.963276][ T5370] do_sendfile+0x39b/0x970 [ 57.967720][ T5370] __x64_sys_sendfile64+0x110/0x150 [ 57.972990][ T5370] x64_sys_call+0xed5/0x2d60 [ 57.977658][ T5370] do_syscall_64+0xc9/0x1c0 [ 57.982213][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.988166][ T5370] [ 57.990513][ T5370] value changed: 0x02000021 -> 0x04000021 [ 57.996250][ T5370] [ 57.998587][ T5370] Reported by Kernel Concurrency Sanitizer on: [ 58.004763][ T5370] CPU: 1 UID: 0 PID: 5370 Comm: syz.3.805 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.015375][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.025464][ T5370] ================================================================== [ 58.073324][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.089959][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.101654][ T50] bond0 (unregistering): Released all slaves [ 58.181514][ T50] hsr_slave_0: left promiscuous mode [ 58.187271][ T50] hsr_slave_1: left promiscuous mode [ 58.192865][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.201142][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.209004][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.216472][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.225280][ T50] veth1_macvtap: left promiscuous mode [ 58.231367][ T50] veth0_macvtap: left promiscuous mode [ 58.236956][ T50] veth1_vlan: left promiscuous mode [ 58.242499][ T50] veth0_vlan: left promiscuous mode [ 58.301235][ T108] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 58.334450][ T50] team0 (unregistering): Port device team_slave_1 removed [ 58.344771][ T50] team0 (unregistering): Port device team_slave_0 removed [ 58.692417][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.760101][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.820428][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.890186][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.972456][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.010612][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.069894][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.120019][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.182166][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.219853][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.259614][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.300610][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.362922][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.410183][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.470612][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.519755][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.590224][ T50] bridge_slave_1: left allmulticast mode [ 59.595934][ T50] bridge_slave_1: left promiscuous mode [ 59.601699][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.609437][ T50] bridge_slave_0: left allmulticast mode [ 59.615089][ T50] bridge_slave_0: left promiscuous mode [ 59.620846][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.629377][ T50] bridge_slave_1: left allmulticast mode [ 59.635022][ T50] bridge_slave_1: left promiscuous mode [ 59.641366][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.649140][ T50] bridge_slave_0: left allmulticast mode [ 59.654796][ T50] bridge_slave_0: left promiscuous mode [ 59.660501][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.669350][ T50] bridge_slave_1: left allmulticast mode [ 59.675220][ T50] bridge_slave_1: left promiscuous mode [ 59.680925][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.688890][ T50] bridge_slave_0: left allmulticast mode [ 59.694546][ T50] bridge_slave_0: left promiscuous mode [ 59.700262][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.708349][ T50] bridge_slave_1: left allmulticast mode [ 59.713999][ T50] bridge_slave_1: left promiscuous mode [ 59.719717][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.727710][ T50] bridge_slave_0: left allmulticast mode [ 59.733372][ T50] bridge_slave_0: left promiscuous mode [ 59.739063][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.198961][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.209337][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.220005][ T50] bond0 (unregistering): Released all slaves [ 60.228531][ T50] bond0 (unregistering): Released all slaves [ 60.238154][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.248866][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.259263][ T50] bond0 (unregistering): Released all slaves [ 60.268375][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.279004][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.288965][ T50] bond0 (unregistering): Released all slaves [ 60.298485][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.309562][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.319821][ T50] bond0 (unregistering): Released all slaves [ 60.379966][ T50] tipc: Disabling bearer [ 60.385322][ T50] tipc: Left network mode [ 60.391325][ T50] tipc: Disabling bearer [ 60.397200][ T50] tipc: Left network mode [ 60.401941][ T50] tipc: Disabling bearer [ 60.407584][ T50] tipc: Left network mode [ 60.417560][ T50] hsr_slave_0: left promiscuous mode [ 60.423305][ T50] hsr_slave_1: left promiscuous mode [ 60.429604][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.437332][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.444988][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.452469][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.461707][ T50] hsr_slave_0: left promiscuous mode [ 60.467516][ T50] hsr_slave_1: left promiscuous mode [ 60.473313][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.480756][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.488415][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.496272][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.505584][ T50] hsr_slave_0: left promiscuous mode [ 60.511554][ T50] hsr_slave_1: left promiscuous mode [ 60.518123][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.525595][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.533801][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.541392][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.550392][ T50] hsr_slave_0: left promiscuous mode [ 60.556160][ T50] hsr_slave_1: left promiscuous mode [ 60.561997][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.569439][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.577927][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.585320][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.598757][ T50] veth1_macvtap: left promiscuous mode [ 60.604265][ T50] veth0_macvtap: left promiscuous mode [ 60.609804][ T50] veth1_vlan: left promiscuous mode [ 60.615103][ T50] veth0_vlan: left promiscuous mode [ 60.620767][ T50] veth1_macvtap: left promiscuous mode [ 60.626240][ T50] veth0_macvtap: left promiscuous mode [ 60.631803][ T50] veth1_vlan: left promiscuous mode [ 60.637158][ T50] veth0_vlan: left promiscuous mode [ 60.642891][ T50] veth1_macvtap: left promiscuous mode [ 60.648414][ T50] veth0_macvtap: left promiscuous mode [ 60.653991][ T50] veth1_vlan: left promiscuous mode [ 60.659265][ T50] veth0_vlan: left promiscuous mode [ 60.664953][ T50] veth1_macvtap: left promiscuous mode [ 60.670464][ T50] veth0_macvtap: left promiscuous mode [ 60.675971][ T50] veth1_vlan: left promiscuous mode [ 60.681325][ T50] veth0_vlan: left promiscuous mode [ 60.889921][ T50] team0 (unregistering): Port device team_slave_1 removed [ 60.899918][ T50] team0 (unregistering): Port device team_slave_0 removed [ 60.978013][ T50] team0 (unregistering): Port device team_slave_1 removed [ 60.990803][ T50] team0 (unregistering): Port device team_slave_0 removed [ 61.053728][ T50] team0 (unregistering): Port device team_slave_1 removed [ 61.064057][ T50] team0 (unregistering): Port device team_slave_0 removed [ 61.126240][ T50] team0 (unregistering): Port device team_slave_1 removed [ 61.137009][ T50] team0 (unregistering): Port device team_slave_0 removed