last executing test programs: 5.624096097s ago: executing program 4 (id=871): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.556029936s ago: executing program 4 (id=872): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8527}}, '.\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x2d) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x9, 0x87dc, 0x1, 0x7fffffff, 0x0, 0x5}) r3 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601367d40014061400000000000000000000ffffac141400fe8000000000000000000000000000aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 2.483727231s ago: executing program 4 (id=901): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x11000, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.073163869s ago: executing program 4 (id=906): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008e3"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mq_open(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x40, &(0x7f0000000040)={0x6, 0x3, 0xfffffffffffffffc, 0x1000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mq_timedsend(r2, &(0x7f0000000080)="d061caff1aeabef40080d2b911d4a8089bc1", 0x12, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}) 1.880322963s ago: executing program 0 (id=908): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) clock_gettime(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8090) recvmmsg$unix(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.826274246s ago: executing program 4 (id=909): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x1a, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.756897181s ago: executing program 4 (id=911): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.559697524s ago: executing program 3 (id=915): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfebd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 1.543923095s ago: executing program 3 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = io_uring_setup(0x4f01, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r3, r6, 0x0) 1.287542483s ago: executing program 2 (id=918): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.128377703s ago: executing program 1 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 1.105822015s ago: executing program 1 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) 1.077739837s ago: executing program 1 (id=922): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001f80)="$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") r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0xfffffffe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x1, {0x1, 0x2}}, 0x5) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0xb5) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3f}, 0x1c) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 998.639102ms ago: executing program 0 (id=923): syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000180)=ANY=[], 0x6, 0x2c3, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000002000000000b7080003000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0xfd14) 918.914048ms ago: executing program 0 (id=924): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x4d, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 698.590353ms ago: executing program 3 (id=925): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x11000, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613aal4OB1JZyfz/p1uc+6u+cWt/p8bn3+gaQWeeTP3IRwxHxYUQcb6xuP+B842Xj4e2ZZMlFvX71i1x6XLLeOrT1945FxHpEDETE//8d8Uxud9zq6tr8dLlcWm6uF2sLS8Xq6tqlGwvTc6W50uLY5OWpqcnRifGpA2vr3Zeeu3vlnf/2v/3Niw/uv/zeu0m1hpv7trbjIDWa3hcnt2w7EhH/fBzBeqDQbM9gryvCz5J8fr+JiAtp/h+PQvppAllQr9fr39ePttu9XgcOrXw6Bs7lRyKiUc7nR0YaY/jfxlC+XKnW/nq9srI42xgrn4i+/PUb5dJo87vCiejLJetjafnR+viO9YmIdAz8SmEwXR+ZqZRnu9vVATsc25H/Xxca+Q9khK/8kF3yH7JL/kN2yX/ILvkP2SX/Ibt+Uv7nH189gO7z/z9kl/yH7JL/kF3yHzLpf1euJEu9df/77M3VlfnKzUuzper8yMLKzMhMZXlpZK5SmUvv2Vn4sfcrVypLY3+LlVvFWqlaK1ZX164tVFYWa9fS+/qvlfq60iqgEyfP3fs4FxHrfx9Ml0R/c59chcOtXs9Fr+9BBnqj0OsOCOgZU3+QXb7jA3v8RO82A+12LB18XYDucDU/ZNfFM87/QVaZ/4fsMv8P2WWMD5j/h+wx/w/ZNdzm+V+/2vLsrtGI+HVEfFToO9p61hdwGOQ/y6Xj/2SE/8fhnXv7c9+mpwj6I+L5N66+dmu6VlseS7Z/ubm99npz+3gv6g90qpWnrTwGALJr4+HtmdbSzbif/6txEcLu+Eeac5MD6TnKoY3ctmsVcgd07cL6nYg4vVf8XPN5540zH0MbhV3xTzVfc423SOt7JH1uenfin9kS/w9b4p/9xf8qkA33kv5ndK/8y6c5HZv5t73/GT6gayfa93/5zf6v0Kb/O9dhjGfffOHTtvHvRJzdM34r3kAaa2f8pG4XO4z/4KknftduX/2txvvsFb8lKRVrC0vF6urapfR35OZKi2OTl6emJkcnxqeK6Rx1sTVTvds/Tn9wf7/2D7WJv1/7k21/7rD93/3+/SfP7xP/Txf2/vxP7RN/MCL+0mH8r8Y/ebrdviT+bJv25/eJn2yb6DB+9dX/HO3wUACgC6qra/PT5XJpWUFBQWGz0OueCXjcHiV9r2sCAAAAAAAAAAAAdKoblxP3uo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfBDwEAAP//8gTWLw==") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 695.572293ms ago: executing program 0 (id=926): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4171, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0xb) 602.535009ms ago: executing program 3 (id=927): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x201, 0x184) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='jbd2_write_superblock\x00', r0, 0x0, 0x2000000000000000}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 600.662439ms ago: executing program 0 (id=928): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x493, &(0x7f0000000640)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008e3"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mq_open(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x40, &(0x7f0000000040)={0x6, 0x3, 0xfffffffffffffffc, 0x1000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mq_timedsend(r2, &(0x7f0000000080)="d061caff1aeabef40080d2b911d4a8089bc1", 0x12, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}) 427.516841ms ago: executing program 2 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="81a2a0d58f712956990ccf2427d1b7c10000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b9ff03", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 427.248051ms ago: executing program 3 (id=930): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001180)=""/4077, 0xfed) 424.776751ms ago: executing program 0 (id=939): unshare(0x62040200) unshare(0x10010000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xfffffecc) 331.675538ms ago: executing program 3 (id=931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 322.703829ms ago: executing program 2 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = io_uring_setup(0x4f01, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r3, r6, 0x0) 251.154644ms ago: executing program 2 (id=932): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfebd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 224.807115ms ago: executing program 1 (id=933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x4004000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r4, r4, 0x0, 0x80000000) 91.356664ms ago: executing program 1 (id=934): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) clock_gettime(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8090) recvmmsg$unix(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 91.166054ms ago: executing program 2 (id=935): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x400) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000004aa"], 0x0) 257.56µs ago: executing program 1 (id=936): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=937): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6, @dev}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): idge_slave_0) entered disabled state [ 54.646631][ T5082] bridge_slave_0: entered allmulticast mode [ 54.653209][ T5082] bridge_slave_0: entered promiscuous mode [ 54.660961][ T28] tipc: Left network mode [ 54.666314][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.673466][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.681054][ T5082] bridge_slave_1: entered allmulticast mode [ 54.703905][ T5082] bridge_slave_1: entered promiscuous mode [ 54.742800][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.752996][ T28] hsr_slave_0: left promiscuous mode [ 54.760051][ T28] hsr_slave_1: left promiscuous mode [ 54.775065][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.782547][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.785988][ T5131] loop1: detected capacity change from 0 to 128 [ 54.798513][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.805990][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.815279][ T28] veth1_macvtap: left promiscuous mode [ 54.820765][ T28] veth0_macvtap: left promiscuous mode [ 54.894158][ T28] team0 (unregistering): Port device team_slave_1 removed [ 54.909115][ T28] team0 (unregistering): Port device team_slave_0 removed [ 54.943208][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.968449][ T5082] team0: Port device team_slave_0 added [ 54.979276][ T5082] team0: Port device team_slave_1 added [ 55.001215][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.008234][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.034197][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.047165][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.054139][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.080054][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.120064][ T5156] loop0: detected capacity change from 0 to 512 [ 55.131641][ T5082] hsr_slave_0: entered promiscuous mode [ 55.137949][ T5082] hsr_slave_1: entered promiscuous mode [ 55.144292][ T5156] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.152284][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.152428][ T5156] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.159893][ T5082] Cannot create hsr debugfs directory [ 55.168129][ T5156] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.187379][ T5156] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 55.194888][ T5156] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.571: bg 0: block 40: padding at end of block bitmap is not set [ 55.210682][ T5156] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 55.220865][ T5156] EXT4-fs (loop0): 1 truncate cleaned up [ 55.345546][ T5192] __nla_validate_parse: 1 callbacks suppressed [ 55.345617][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 55.530751][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.542892][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.555635][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.564724][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.603225][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.619549][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.630934][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.638020][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.649779][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.656929][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.730753][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.949694][ T5082] veth0_vlan: entered promiscuous mode [ 55.959757][ T5082] veth1_vlan: entered promiscuous mode [ 55.999877][ T5082] veth0_macvtap: entered promiscuous mode [ 56.009843][ T5082] veth1_macvtap: entered promiscuous mode [ 56.021175][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.031672][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.041526][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.052007][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.069132][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.084723][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.095233][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.105104][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.115576][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.125475][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.135948][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.153214][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.162664][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.171478][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.180247][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.189037][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.411785][ T5322] loop0: detected capacity change from 0 to 512 [ 56.423832][ T5322] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.455258][ T5322] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.514447][ T5328] loop4: detected capacity change from 0 to 512 [ 56.555155][ T5328] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.589: iget: bogus i_mode (0) [ 56.578734][ T5322] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #19: comm syz.0.588: corrupted inode contents [ 56.606076][ T5328] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.589: couldn't read orphan inode 17 (err -117) [ 56.618325][ T5322] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #19: comm syz.0.588: mark_inode_dirty error [ 56.645337][ T5328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.589: bg 0: block 7: invalid block bitmap [ 56.664876][ T5322] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #19: comm syz.0.588: corrupted inode contents [ 56.689443][ T5332] loop1: detected capacity change from 0 to 128 [ 56.702701][ T5322] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #19: comm syz.0.588: mark_inode_dirty error [ 56.735502][ T5322] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #19: comm syz.0.588: mark inode dirty (error -117) [ 56.752687][ T5332] syz.1.590: attempt to access beyond end of device [ 56.752687][ T5332] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 56.767027][ T5322] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 56.907011][ T5336] loop1: detected capacity change from 0 to 512 [ 56.917167][ T5336] ext3: Unknown parameter 'fsmagic' [ 57.066011][ T5342] loop0: detected capacity change from 0 to 256 [ 57.074574][ T5342] vfat: Unknown parameter 'uni_xlat' [ 57.081160][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 57.092599][ T5343] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.101511][ T5343] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.110353][ T5343] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.119242][ T5343] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 57.128240][ T5343] geneve2: entered promiscuous mode [ 57.133506][ T5343] geneve2: entered allmulticast mode [ 57.144314][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.189077][ T4357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.199402][ T4357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.250486][ T4357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.260776][ T4357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.314738][ T4357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.325104][ T4357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.348188][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 72.368211][ T4357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.378518][ T4357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.473512][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.480623][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.487967][ T5375] bridge_slave_0: entered allmulticast mode [ 72.494360][ T5375] bridge_slave_0: entered promiscuous mode [ 72.502924][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.510089][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.518256][ T5375] bridge_slave_1: entered allmulticast mode [ 72.524645][ T5375] bridge_slave_1: entered promiscuous mode [ 72.549916][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 72.566097][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.584742][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.593820][ T5384] chnl_net:caif_netlink_parms(): no params data found [ 72.625375][ T5375] team0: Port device team_slave_0 added [ 72.631828][ T5375] team0: Port device team_slave_1 added [ 72.671504][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.678622][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.685765][ T5371] bridge_slave_0: entered allmulticast mode [ 72.692180][ T5371] bridge_slave_0: entered promiscuous mode [ 72.703282][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.710231][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.736157][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.761202][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.768277][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.775451][ T5371] bridge_slave_1: entered allmulticast mode [ 72.781892][ T5371] bridge_slave_1: entered promiscuous mode [ 72.806206][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.813142][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.839187][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.866094][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.878812][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.888819][ T4357] bridge_slave_1: left allmulticast mode [ 72.894532][ T4357] bridge_slave_1: left promiscuous mode [ 72.900223][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.908013][ T4357] bridge_slave_0: left allmulticast mode [ 72.913680][ T4357] bridge_slave_0: left promiscuous mode [ 72.919410][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.995170][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.004957][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.015133][ T4357] bond0 (unregistering): Released all slaves [ 73.028421][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.035636][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.042766][ T5384] bridge_slave_0: entered allmulticast mode [ 73.049385][ T5384] bridge_slave_0: entered promiscuous mode [ 73.056311][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.063470][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.070559][ T5384] bridge_slave_1: entered allmulticast mode [ 73.077022][ T5384] bridge_slave_1: entered promiscuous mode [ 73.114343][ T5375] hsr_slave_0: entered promiscuous mode [ 73.121510][ T5375] hsr_slave_1: entered promiscuous mode [ 73.127450][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.135104][ T5375] Cannot create hsr debugfs directory [ 73.148189][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.158758][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.172619][ T5371] team0: Port device team_slave_0 added [ 73.180005][ T4357] hsr_slave_0: left promiscuous mode [ 73.185640][ T4357] hsr_slave_1: left promiscuous mode [ 73.191251][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.198688][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.206180][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.213615][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.222125][ T4357] veth1_macvtap: left promiscuous mode [ 73.227645][ T4357] veth0_macvtap: left promiscuous mode [ 73.233114][ T4357] veth1_vlan: left promiscuous mode [ 73.238416][ T4357] veth0_vlan: left promiscuous mode [ 73.306197][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 73.316240][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 73.368791][ T5371] team0: Port device team_slave_1 added [ 73.384222][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.391174][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.417165][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.429848][ T5384] team0: Port device team_slave_0 added [ 73.436112][ T5384] team0: Port device team_slave_1 added [ 73.454361][ T5385] chnl_net:caif_netlink_parms(): no params data found [ 73.463129][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.470096][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.496023][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.520930][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.527991][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.553902][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.565049][ T5379] chnl_net:caif_netlink_parms(): no params data found [ 73.588940][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.595912][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.622002][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.642896][ T5371] hsr_slave_0: entered promiscuous mode [ 73.648951][ T5371] hsr_slave_1: entered promiscuous mode [ 73.654940][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.662499][ T5371] Cannot create hsr debugfs directory [ 73.732259][ T5384] hsr_slave_0: entered promiscuous mode [ 73.739969][ T5384] hsr_slave_1: entered promiscuous mode [ 73.746362][ T5384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.753945][ T5384] Cannot create hsr debugfs directory [ 73.830835][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.837900][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.845136][ T5379] bridge_slave_0: entered allmulticast mode [ 73.851370][ T5379] bridge_slave_0: entered promiscuous mode [ 73.857786][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.864925][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.872395][ T5385] bridge_slave_0: entered allmulticast mode [ 73.878748][ T5385] bridge_slave_0: entered promiscuous mode [ 73.885541][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.892635][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.899891][ T5385] bridge_slave_1: entered allmulticast mode [ 73.906277][ T5385] bridge_slave_1: entered promiscuous mode [ 73.923560][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.930601][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.937756][ T5379] bridge_slave_1: entered allmulticast mode [ 73.944263][ T5379] bridge_slave_1: entered promiscuous mode [ 73.974063][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.986662][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.002971][ T5379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.028326][ T5379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.038010][ T5385] team0: Port device team_slave_0 added [ 74.044700][ T5385] team0: Port device team_slave_1 added [ 74.074408][ T5379] team0: Port device team_slave_0 added [ 74.082779][ T5379] team0: Port device team_slave_1 added [ 74.091180][ T4357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.101449][ T4357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.129683][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.136681][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.162641][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.176693][ T4357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.186965][ T4357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.206981][ T5375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.215506][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.222440][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.248357][ T5385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.261603][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.268590][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.294487][ T5379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.307676][ T5371] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.320887][ T4357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.331271][ T4357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.342390][ T5375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.351290][ T5375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.361025][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.367971][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.393956][ T5379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.406717][ T5375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.416055][ T5371] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.446270][ T4357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.456687][ T4357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.467819][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 74.467830][ T29] audit: type=1400 audit(1726550686.048:1039): avc: denied { write } for pid=2944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.495481][ T29] audit: type=1400 audit(1726550686.048:1040): avc: denied { remove_name } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.518141][ T29] audit: type=1400 audit(1726550686.048:1041): avc: denied { rename } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.540444][ T29] audit: type=1400 audit(1726550686.048:1042): avc: denied { add_name } for pid=2944 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.562970][ T29] audit: type=1400 audit(1726550686.048:1043): avc: denied { unlink } for pid=2944 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.585457][ T29] audit: type=1400 audit(1726550686.048:1044): avc: denied { create } for pid=2944 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.612719][ T5379] hsr_slave_0: entered promiscuous mode [ 74.618854][ T5379] hsr_slave_1: entered promiscuous mode [ 74.624838][ T5379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.632362][ T5379] Cannot create hsr debugfs directory [ 74.639747][ T5385] hsr_slave_0: entered promiscuous mode [ 74.645879][ T5385] hsr_slave_1: entered promiscuous mode [ 74.651700][ T5385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.659241][ T5385] Cannot create hsr debugfs directory [ 74.673824][ T5371] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.766782][ T5371] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.781591][ T4357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.791873][ T4357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.862017][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.872046][ T5384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.884815][ T5371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.895004][ T5371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.906873][ T4357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.917158][ T4357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 74.930119][ T5371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.942274][ T5384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.956950][ T5371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.966977][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.982781][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.989913][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.003990][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.011032][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.037054][ T4357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.047382][ T4357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 75.060999][ T5384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.088881][ T4357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.099175][ T4357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 75.118223][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.127802][ T5384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.151098][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.176102][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.183161][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.222454][ T4357] bridge_slave_1: left allmulticast mode [ 75.228194][ T4357] bridge_slave_1: left promiscuous mode [ 75.233858][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.242366][ T4357] bridge_slave_0: left allmulticast mode [ 75.248178][ T4357] bridge_slave_0: left promiscuous mode [ 75.253842][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.366223][ T4357] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.375344][ T4357] infiniband syz0: set down [ 75.380473][ T4357] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.390363][ T4357] € (unregistering): (slave batadv0): Releasing backup interface [ 75.400999][ T4357] € (unregistering): Released all slaves [ 75.409614][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.419692][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.429397][ T4357] bond0 (unregistering): Released all slaves [ 75.438026][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.445103][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.479449][ T4357] tipc: Left network mode [ 75.483836][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.513130][ T5384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.525710][ T5384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.538850][ T4357] hsr_slave_0: left promiscuous mode [ 75.545761][ T4357] hsr_slave_1: left promiscuous mode [ 75.558127][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.565578][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.573102][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.580590][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.589698][ T4357] hsr_slave_0: left promiscuous mode [ 75.595418][ T4357] hsr_slave_1: left promiscuous mode [ 75.601095][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.608566][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.616049][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.623465][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.634114][ T4357] veth1_macvtap: left promiscuous mode [ 75.639698][ T4357] veth0_macvtap: left promiscuous mode [ 75.645284][ T4357] veth1_vlan: left promiscuous mode [ 75.651099][ T4357] veth1_macvtap: left promiscuous mode [ 75.656658][ T4357] veth0_macvtap: left promiscuous mode [ 75.662123][ T4357] veth1_vlan: left promiscuous mode [ 75.667395][ T4357] veth0_vlan: left promiscuous mode [ 75.768142][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 75.777834][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 75.789172][ T28] smc: removing ib device syz0 [ 75.864715][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 75.877828][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 75.932719][ T5384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.951913][ T5384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.010753][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.032810][ T5384] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.048336][ T5375] veth0_vlan: entered promiscuous mode [ 76.055617][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.062710][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.076027][ T5375] veth1_vlan: entered promiscuous mode [ 76.085951][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.093015][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.110605][ T5375] veth0_macvtap: entered promiscuous mode [ 76.125485][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.136367][ T5375] veth1_macvtap: entered promiscuous mode [ 76.159043][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.192754][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.203280][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.215726][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.230501][ T5385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.243737][ T5385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.265449][ T5385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.286423][ T5375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.295155][ T5375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303883][ T5375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.312562][ T5375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.327338][ T5385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.367903][ T5371] veth0_vlan: entered promiscuous mode [ 76.385345][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.399249][ T5371] veth1_vlan: entered promiscuous mode [ 76.436570][ T5560] loop1: detected capacity change from 0 to 128 [ 76.447401][ T5560] EXT4-fs mount: 8 callbacks suppressed [ 76.447415][ T5560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.454320][ T5371] veth0_macvtap: entered promiscuous mode [ 76.469608][ T5560] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.508361][ T5371] veth1_macvtap: entered promiscuous mode [ 76.520455][ T29] audit: type=1400 audit(1726550688.088:1045): avc: denied { rename } for pid=5559 comm="syz.1.603" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.535737][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.573928][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.586207][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.594911][ T5375] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.603634][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.614388][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.624363][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.635022][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.648984][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.700154][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.724940][ T5371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.733657][ T5371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.742373][ T5371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.751145][ T5371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770808][ T5379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.790242][ T5379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.805442][ T5379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.817080][ T5379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.826593][ T5384] veth0_vlan: entered promiscuous mode [ 76.835946][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.847781][ T5573] bridge0: port 3(syz_tun) entered blocking state [ 76.854262][ T5573] bridge0: port 3(syz_tun) entered disabled state [ 76.860911][ T5573] syz_tun: entered allmulticast mode [ 76.867049][ T5573] syz_tun: entered promiscuous mode [ 76.872403][ T5573] bridge0: port 3(syz_tun) entered blocking state [ 76.878861][ T5573] bridge0: port 3(syz_tun) entered forwarding state [ 76.892256][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.899382][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.910654][ T5384] veth1_vlan: entered promiscuous mode [ 76.924997][ T5384] veth0_macvtap: entered promiscuous mode [ 76.945804][ T5384] veth1_macvtap: entered promiscuous mode [ 76.958552][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.965705][ T1627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.968257][ T29] audit: type=1400 audit(1726550688.528:1046): avc: denied { write } for pid=5587 comm="syz.0.608" name="kcm" dev="proc" ino=4026533599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.007798][ T5385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.018151][ T5385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.031995][ T29] audit: type=1400 audit(1726550688.538:1047): avc: denied { ioctl } for pid=5587 comm="syz.0.608" path="socket:[12712]" dev="sockfs" ino=12712 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.045723][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.067114][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.076919][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.087428][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.098236][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.127323][ T5594] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 77.198142][ T5594] syzkaller0: entered promiscuous mode [ 77.204034][ T5594] syzkaller0: entered allmulticast mode [ 77.245382][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.255857][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.265683][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.276164][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.285996][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.296408][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.307181][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.317583][ T5379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.349002][ T5379] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.369157][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.377792][ T5384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.386644][ T5384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.395512][ T5384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.404294][ T5384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422570][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.429656][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.446151][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.453201][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.505242][ T5379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.613273][ T5658] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 77.629150][ T5385] veth0_vlan: entered promiscuous mode [ 77.660854][ T5385] veth1_vlan: entered promiscuous mode [ 77.674686][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.720216][ T5385] veth0_macvtap: entered promiscuous mode [ 77.747263][ T5385] veth1_macvtap: entered promiscuous mode [ 77.776135][ T5678] loop2: detected capacity change from 0 to 2048 [ 77.786157][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.796680][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.806522][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.816982][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.816995][ T5678] EXT4-fs: Mount option(s) incompatible with ext2 [ 77.826809][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.843728][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.859279][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.888129][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.898617][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.908451][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.918936][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.928747][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.939212][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.949080][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.959534][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.973996][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.978085][ T5683] loop0: detected capacity change from 0 to 128 [ 77.982594][ T5385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.996173][ T5385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004880][ T5385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.013686][ T5385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.026878][ T5683] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.043664][ T5683] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.105366][ T5371] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.124472][ T5379] veth0_vlan: entered promiscuous mode [ 78.132816][ T5379] veth1_vlan: entered promiscuous mode [ 78.156576][ T5379] veth0_macvtap: entered promiscuous mode [ 78.168268][ T5701] tmpfs: Cannot retroactively limit inodes [ 78.168792][ T29] audit: type=1400 audit(1726550689.738:1048): avc: denied { remount } for pid=5697 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.183116][ T5701] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.604'. [ 78.204890][ T5379] veth1_macvtap: entered promiscuous mode [ 78.205578][ T5701] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.604'. [ 78.214719][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.219617][ T5701] netlink: 69 bytes leftover after parsing attributes in process `syz.3.604'. [ 78.230000][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.248638][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.259050][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.268904][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.279383][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.289233][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.299720][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.310472][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.322199][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.332658][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.342559][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.353106][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.363005][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.373520][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383392][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.393850][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.403738][ T5379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.414241][ T5379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.426603][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.438976][ T5379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.447845][ T5379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.456589][ T5379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465287][ T5379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.578278][ T5723] loop4: detected capacity change from 0 to 128 [ 78.609299][ T5723] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.622075][ T5723] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.675950][ T5379] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.804316][ T5737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.627'. [ 78.995522][ T5748] loop3: detected capacity change from 0 to 2048 [ 79.016437][ T5748] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.045696][ T5748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.090052][ T5748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.097286][ T5748] IPv6: NLM_F_CREATE should be set when creating new route [ 79.104489][ T5748] IPv6: NLM_F_CREATE should be set when creating new route [ 79.597824][ T5756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.632: bg 0: block 234: padding at end of block bitmap is not set [ 79.658747][ T5756] EXT4-fs (loop3): Remounting filesystem read-only [ 79.770941][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 79.770963][ T29] audit: type=1326 audit(1726550691.338:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.858259][ T29] audit: type=1326 audit(1726550691.338:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881818][ T29] audit: type=1326 audit(1726550691.378:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881843][ T29] audit: type=1326 audit(1726550691.378:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881911][ T29] audit: type=1326 audit(1726550691.378:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881935][ T29] audit: type=1326 audit(1726550691.378:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881957][ T29] audit: type=1326 audit(1726550691.378:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.881977][ T29] audit: type=1326 audit(1726550691.378:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.882011][ T29] audit: type=1326 audit(1726550691.378:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.882033][ T29] audit: type=1326 audit(1726550691.398:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5758 comm="syz.2.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 79.971657][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.285825][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.361581][ T5775] pim6reg1: entered promiscuous mode [ 80.366963][ T5775] pim6reg1: entered allmulticast mode [ 81.030295][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 81.078007][ T5789] loop3: detected capacity change from 0 to 2048 [ 81.094781][ T5789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.165028][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.203533][ T5799] loop3: detected capacity change from 0 to 256 [ 81.234699][ T5799] FAT-fs (loop3): Directory bread(block 64) failed [ 81.251578][ T5799] FAT-fs (loop3): Directory bread(block 65) failed [ 81.259472][ T5799] FAT-fs (loop3): Directory bread(block 66) failed [ 81.261065][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.273431][ T5799] FAT-fs (loop3): Directory bread(block 67) failed [ 81.273497][ T5799] FAT-fs (loop3): Directory bread(block 68) failed [ 81.279988][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.293921][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.296653][ T5799] FAT-fs (loop3): Directory bread(block 69) failed [ 81.301339][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.315445][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.318860][ T5799] FAT-fs (loop3): Directory bread(block 70) failed [ 81.322960][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.336991][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.337497][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.344383][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.344407][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.365736][ T5799] FAT-fs (loop3): Directory bread(block 71) failed [ 81.367425][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.381331][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.382284][ T5799] FAT-fs (loop3): Directory bread(block 72) failed [ 81.388760][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388784][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388806][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388838][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388860][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388883][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388905][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388927][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.388950][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.411033][ T5799] FAT-fs (loop3): Directory bread(block 73) failed [ 81.417599][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.417626][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.483626][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.491084][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.498499][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.505919][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.513332][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.513895][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.520723][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.535849][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.543317][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.551007][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.558602][ T3546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.562748][ T5799] syz.3.648: attempt to access beyond end of device [ 81.562748][ T5799] loop3: rw=2049, sector=1224, nr_sectors = 68 limit=256 [ 81.567981][ T3546] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 81.688449][ T5810] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.897180][ T5816] loop1: detected capacity change from 0 to 2048 [ 81.907877][ T5816] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.925426][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.940380][ T5816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.947656][ T5816] IPv6: NLM_F_CREATE should be set when creating new route [ 81.954855][ T5816] IPv6: NLM_F_CREATE should be set when creating new route [ 82.131381][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 82.167644][ T5816] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.655: bg 0: block 234: padding at end of block bitmap is not set [ 82.182164][ T5816] EXT4-fs (loop1): Remounting filesystem read-only [ 82.198700][ T5820] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 82.276561][ T5832] bond_slave_1: mtu less than device minimum [ 82.339222][ T5836] pim6reg1: entered promiscuous mode [ 82.344660][ T5836] pim6reg1: entered allmulticast mode [ 82.402029][ T5375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.424682][ T5838] syz.0.664[5838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.424804][ T5838] syz.0.664[5838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.441007][ T5842] loop1: detected capacity change from 0 to 512 [ 82.462539][ T5841] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 82.477186][ T5842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.490166][ T5842] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.508757][ T5838] syz.0.664: attempt to access beyond end of device [ 82.508757][ T5838] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.529583][ T5842] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.663: corrupted inode contents [ 82.542369][ T5842] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz.1.663: mark_inode_dirty error [ 82.564528][ T5846] loop0: detected capacity change from 0 to 128 [ 82.598168][ T5842] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.663: corrupted inode contents [ 82.652669][ T5842] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.663: mark_inode_dirty error [ 82.674697][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.670'. [ 82.710823][ T5375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.769235][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 82.792452][ T5859] loop1: detected capacity change from 0 to 2048 [ 82.818048][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.843235][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.875040][ T5871] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 82.894841][ T5375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.924453][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.966992][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.985421][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.997499][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.036086][ T5880] loop3: detected capacity change from 0 to 1024 [ 83.057627][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.088254][ T5880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.121885][ T5864] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.158082][ T5864] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.193645][ T5864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.217131][ T5864] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.455919][ T5895] usb usb8: usbfs: process 5895 (syz.2.686) did not claim interface 0 before use [ 83.805716][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.963638][ T5904] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 84.974915][ T5902] loop0: detected capacity change from 0 to 1024 [ 84.983378][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 84.984144][ T5902] EXT4-fs: test_dummy_encryption option not supported [ 85.000551][ T5904] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 85.043378][ T5907] bridge: RTM_NEWNEIGH with invalid ether address [ 85.068827][ T5902] loop0: detected capacity change from 0 to 128 [ 85.106204][ T5902] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.125261][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 85.125271][ T29] audit: type=1326 audit(1726550696.698:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.169225][ T29] audit: type=1326 audit(1726550696.728:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.174298][ T5902] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.192525][ T29] audit: type=1326 audit(1726550696.728:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.192548][ T29] audit: type=1326 audit(1726550696.728:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.222860][ T5919] loop2: detected capacity change from 0 to 512 [ 85.225942][ T29] audit: type=1326 audit(1726550696.728:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.278794][ T29] audit: type=1326 audit(1726550696.728:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.302079][ T29] audit: type=1326 audit(1726550696.728:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.325436][ T29] audit: type=1326 audit(1726550696.728:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.334143][ T5908] loop3: detected capacity change from 0 to 8192 [ 85.348624][ T29] audit: type=1326 audit(1726550696.728:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.348702][ T29] audit: type=1326 audit(1726550696.728:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f591cb3def9 code=0x7ffc0000 [ 85.355937][ T5923] 9pnet_fd: p9_fd_create_unix (5923): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 85.439013][ T5371] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.565159][ T5919] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 85.573155][ T5919] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.591111][ T5919] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.695: Failed to acquire dquot type 1 [ 85.654914][ T5919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.695: bg 0: block 40: padding at end of block bitmap is not set [ 85.682836][ T5919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 85.700864][ T5919] EXT4-fs (loop2): 1 truncate cleaned up [ 85.708091][ T5919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.786124][ T5384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.827986][ T5942] loop3: detected capacity change from 0 to 1024 [ 85.837261][ T5941] ipvlan1: entered promiscuous mode [ 85.844713][ T5941] ipvlan1: left promiscuous mode [ 85.844844][ T5942] EXT4-fs: Ignoring removed orlov option [ 85.855349][ T5942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.865100][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 85.865069][ T5942] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 85.891788][ T5942] System zones: 0-1, 3-36 [ 85.902486][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.928883][ T5934] delete_channel: no stack [ 85.945700][ T5950] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 85.960881][ T5942] pimreg: entered allmulticast mode [ 85.987267][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.006441][ T5953] loop0: detected capacity change from 0 to 512 [ 86.018518][ T5953] journal_path: Lookup failure for './bus' [ 86.024823][ T5953] EXT4-fs: error: could not find journal device path [ 86.065592][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 86.074457][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.081880][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.108762][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.116220][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.146076][ T5962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.284143][ T5981] pim6reg1: entered promiscuous mode [ 86.289561][ T5981] pim6reg1: entered allmulticast mode [ 86.319568][ T5986] loop1: detected capacity change from 0 to 1024 [ 86.326944][ T5986] EXT4-fs: Ignoring removed orlov option [ 86.334422][ T5986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.347875][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.348138][ T5981] loop3: detected capacity change from 0 to 128 [ 86.360571][ T5988] loop0: detected capacity change from 0 to 512 [ 86.369267][ T5981] FAT-fs (loop3): bogus logical sector size 12 [ 86.378706][ T5981] FAT-fs (loop3): Can't find a valid FAT filesystem [ 86.378808][ T5988] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.412686][ T5988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.437961][ T5988] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.720: corrupted in-inode xattr: e_value out of bounds [ 86.453245][ T5988] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.720: couldn't read orphan inode 15 (err -117) [ 86.454096][ T5986] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 86.473473][ T5988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.496896][ T5992] netlink: 'syz.3.721': attribute type 39 has an invalid length. [ 86.505156][ T5986] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.1.719: corrupted in-inode xattr: bad magic number in in-inode xattr [ 86.521049][ T5992] veth1_macvtap: left promiscuous mode [ 86.522065][ T5371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.526617][ T5986] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.719: attempt to clear invalid blocks 1634560256 len 1 [ 86.563685][ T6000] loop0: detected capacity change from 0 to 512 [ 86.570366][ T6000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.581018][ T6000] EXT4-fs (loop0): 1 truncate cleaned up [ 86.587981][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.621948][ T5375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.632469][ T5371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.782939][ T6017] loop0: detected capacity change from 0 to 512 [ 86.792902][ T6017] EXT4-fs (loop0): 1 truncate cleaned up [ 86.801820][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.915347][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 87.465599][ T6034] loop4: detected capacity change from 0 to 128 [ 87.476528][ T6034] syz.4.735: attempt to access beyond end of device [ 87.476528][ T6034] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 87.491081][ T6034] syz.4.735: attempt to access beyond end of device [ 87.491081][ T6034] loop4: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 87.504545][ T6034] syz.4.735: attempt to access beyond end of device [ 87.504545][ T6034] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 87.517842][ T6034] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 87.655051][ T5371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.660173][ T6044] loop3: detected capacity change from 0 to 512 [ 87.672599][ T6044] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.693971][ T6044] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.741: iget: bad i_size value: -67835469387268086 [ 87.708051][ T6044] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.741: couldn't read orphan inode 15 (err -117) [ 87.725425][ T6044] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.748744][ T6044] ext2 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.762450][ T6044] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 87.780552][ T5385] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 87.824248][ T6054] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 88.004645][ T6066] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 88.012211][ T6066] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 88.048003][ T6071] syz.2.753[6071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.048056][ T6071] syz.2.753[6071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.649402][ T6077] syz.2.754[6077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.671578][ T6077] syz.2.754[6077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.897171][ T6088] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 88.981389][ T6093] netlink: 68 bytes leftover after parsing attributes in process `syz.0.761'. [ 88.991659][ T6093] netlink: 'syz.0.761': attribute type 32 has an invalid length. [ 89.009627][ T6095] syzkaller0: entered allmulticast mode [ 89.021585][ T6095] syzkaller0 (unregistering): left allmulticast mode [ 89.098417][ T6103] loop4: detected capacity change from 0 to 128 [ 89.174405][ T6103] loop4: detected capacity change from 128 to 0 [ 89.192178][ T5379] syz-executor: attempt to access beyond end of device [ 89.192178][ T5379] loop4: rw=0, sector=5, nr_sectors = 1 limit=0 [ 89.206425][ T5379] FAT-fs (loop4): Directory bread(block 5) failed [ 89.212970][ T5379] syz-executor: attempt to access beyond end of device [ 89.212970][ T5379] loop4: rw=0, sector=6, nr_sectors = 1 limit=0 [ 89.227556][ T5379] FAT-fs (loop4): Directory bread(block 6) failed [ 89.234014][ T5379] syz-executor: attempt to access beyond end of device [ 89.234014][ T5379] loop4: rw=0, sector=7, nr_sectors = 1 limit=0 [ 89.246964][ T5379] FAT-fs (loop4): Directory bread(block 7) failed [ 89.253437][ T5379] syz-executor: attempt to access beyond end of device [ 89.253437][ T5379] loop4: rw=0, sector=8, nr_sectors = 1 limit=0 [ 89.266388][ T5379] FAT-fs (loop4): Directory bread(block 8) failed [ 89.279439][ T5379] syz-executor: attempt to access beyond end of device [ 89.279439][ T5379] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 89.294736][ T5379] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 89.523411][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.587087][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.650116][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.708096][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.793850][ T6109] chnl_net:caif_netlink_parms(): no params data found [ 89.814141][ T28] bridge_slave_1: left allmulticast mode [ 89.819803][ T28] bridge_slave_1: left promiscuous mode [ 89.825466][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.874487][ T28] bridge_slave_0: left allmulticast mode [ 89.880133][ T28] bridge_slave_0: left promiscuous mode [ 89.885904][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.031224][ T6142] loop0: detected capacity change from 0 to 512 [ 90.047006][ T6142] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 90.059058][ T6142] EXT4-fs (loop0): 1 truncate cleaned up [ 90.065427][ T6142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.078132][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.091141][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.102182][ T28] bond0 (unregistering): Released all slaves [ 90.112281][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 90.133960][ T5371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.238755][ T28] hsr_slave_0: left promiscuous mode [ 90.244315][ T28] hsr_slave_1: left promiscuous mode [ 90.249999][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.257399][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.264942][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.272297][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.280995][ T28] veth1_macvtap: left promiscuous mode [ 90.286543][ T28] veth0_macvtap: left promiscuous mode [ 90.292055][ T28] veth1_vlan: left promiscuous mode [ 90.297351][ T28] veth0_vlan: left promiscuous mode [ 90.387483][ T28] team0 (unregistering): Port device team_slave_1 removed [ 90.397767][ T28] team0 (unregistering): Port device team_slave_0 removed [ 90.456315][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.463526][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.472121][ T6109] bridge_slave_0: entered allmulticast mode [ 90.479121][ T6109] bridge_slave_0: entered promiscuous mode [ 90.486420][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.493496][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.500737][ T6109] bridge_slave_1: entered allmulticast mode [ 90.509238][ T6109] bridge_slave_1: entered promiscuous mode [ 90.529286][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.540227][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.561715][ T6109] team0: Port device team_slave_0 added [ 90.571427][ T6109] team0: Port device team_slave_1 added [ 90.622996][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.630038][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.656276][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.670778][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.677779][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.703765][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.748488][ T6109] hsr_slave_0: entered promiscuous mode [ 90.755372][ T6109] hsr_slave_1: entered promiscuous mode [ 90.761245][ T6109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.768983][ T6109] Cannot create hsr debugfs directory [ 90.782925][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 90.782936][ T29] audit: type=1326 audit(1726550702.348:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.812356][ T29] audit: type=1326 audit(1726550702.348:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.835698][ T29] audit: type=1326 audit(1726550702.348:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.859009][ T29] audit: type=1326 audit(1726550702.348:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.882319][ T29] audit: type=1326 audit(1726550702.348:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.905627][ T29] audit: type=1326 audit(1726550702.348:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.928939][ T29] audit: type=1326 audit(1726550702.348:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.952327][ T29] audit: type=1326 audit(1726550702.348:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.975637][ T29] audit: type=1326 audit(1726550702.348:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 90.998938][ T29] audit: type=1326 audit(1726550702.348:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b62adef9 code=0x7ffc0000 [ 91.313852][ T6109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.326630][ T6109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.336917][ T6236] batadv0: entered promiscuous mode [ 91.344480][ T6109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.366538][ T6109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.394877][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.401982][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.409341][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.416477][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.431493][ T6258] sd 0:0:1:0: device reset [ 91.470341][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.488180][ T6265] loop2: detected capacity change from 0 to 512 [ 91.501901][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.551579][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.564538][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.574632][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.581707][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.601292][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.608416][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.666557][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.770213][ T6109] veth0_vlan: entered promiscuous mode [ 91.778253][ T6109] veth1_vlan: entered promiscuous mode [ 91.794006][ T6109] veth0_macvtap: entered promiscuous mode [ 91.801463][ T6109] veth1_macvtap: entered promiscuous mode [ 91.811101][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.821619][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.831527][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.842087][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.851984][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.862461][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.873563][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.881838][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.892366][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.902171][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.912589][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.922411][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.932889][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.942729][ T6109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.953207][ T6109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.964185][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.976510][ T6109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.985221][ T6109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.993988][ T6109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.002695][ T6109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044539][ T6316] loop4: detected capacity change from 0 to 1024 [ 92.051447][ T6316] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.062473][ T6316] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.072516][ T6316] JBD2: no valid journal superblock found [ 92.078277][ T6316] EXT4-fs (loop4): Could not load journal inode [ 92.087525][ T6316] xt_connbytes: Forcing CT accounting to be enabled [ 92.094192][ T6316] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.106075][ T6316] xt_bpf: check failed: parse error [ 92.216181][ T6322] delete_channel: no stack [ 92.269781][ T6328] netlink: 'syz.4.797': attribute type 4 has an invalid length. [ 92.280900][ T6328] netlink: 'syz.4.797': attribute type 4 has an invalid length. [ 92.305266][ T6330] block device autoloading is deprecated and will be removed. [ 92.324728][ T6332] loop2: detected capacity change from 0 to 128 [ 92.356634][ T6332] loop2: detected capacity change from 128 to 0 [ 92.384861][ T5384] syz-executor: attempt to access beyond end of device [ 92.384861][ T5384] loop2: rw=0, sector=5, nr_sectors = 1 limit=0 [ 92.408818][ T5384] FAT-fs (loop2): Directory bread(block 5) failed [ 92.415913][ T5384] syz-executor: attempt to access beyond end of device [ 92.415913][ T5384] loop2: rw=0, sector=6, nr_sectors = 1 limit=0 [ 92.424380][ T6343] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 92.434276][ T5384] FAT-fs (loop2): Directory bread(block 6) failed [ 92.443143][ T5384] FAT-fs (loop2): Directory bread(block 7) failed [ 92.451293][ T5384] FAT-fs (loop2): Directory bread(block 8) failed [ 92.469235][ T5384] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 92.701689][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.757670][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.810406][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.855797][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 92.877083][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.900698][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.907811][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.915106][ T6357] bridge_slave_0: entered allmulticast mode [ 92.921457][ T6357] bridge_slave_0: entered promiscuous mode [ 92.928519][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.935662][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.942755][ T6357] bridge_slave_1: entered allmulticast mode [ 92.949201][ T6357] bridge_slave_1: entered promiscuous mode [ 92.968026][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.978589][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.997998][ T6357] team0: Port device team_slave_0 added [ 93.004290][ T6357] team0: Port device team_slave_1 added [ 93.029528][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.036518][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.062413][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.079379][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.086393][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.112353][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.124316][ T50] bridge_slave_1: left allmulticast mode [ 93.130002][ T50] bridge_slave_1: left promiscuous mode [ 93.135928][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.147454][ T50] bridge_slave_0: left allmulticast mode [ 93.153179][ T50] bridge_slave_0: left promiscuous mode [ 93.158882][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.295836][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.306164][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.316848][ T50] bond0 (unregistering): Released all slaves [ 93.370538][ T6357] hsr_slave_0: entered promiscuous mode [ 93.376802][ T6357] hsr_slave_1: entered promiscuous mode [ 93.384843][ T6357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.392985][ T6357] Cannot create hsr debugfs directory [ 93.405855][ T50] hsr_slave_0: left promiscuous mode [ 93.414908][ T50] hsr_slave_1: left promiscuous mode [ 93.422156][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.429689][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.437472][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.444876][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.455477][ T50] veth1_macvtap: left promiscuous mode [ 93.460982][ T50] veth0_macvtap: left promiscuous mode [ 93.466683][ T50] veth1_vlan: left promiscuous mode [ 93.471908][ T50] veth0_vlan: left promiscuous mode [ 93.476471][ T6399] loop3: detected capacity change from 0 to 2048 [ 93.497055][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.552425][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.599423][ T6406] loop3: detected capacity change from 0 to 1024 [ 93.631998][ T50] team0 (unregistering): Port device team_slave_1 removed [ 93.641771][ T6406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.654551][ T50] team0 (unregistering): Port device team_slave_0 removed [ 93.654749][ T6406] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.703129][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.866127][ T6434] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 93.873648][ T6434] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 93.951470][ T6450] netlink: 256 bytes leftover after parsing attributes in process `syz.3.825'. [ 94.117577][ T6357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.138516][ T6357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.159249][ T6357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.179696][ T6357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.285133][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.299630][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.327091][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.334221][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.374595][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.381672][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.402796][ T6498] loop4: detected capacity change from 0 to 128 [ 94.448317][ T6498] bio_check_eod: 3 callbacks suppressed [ 94.448331][ T6498] syz.4.829: attempt to access beyond end of device [ 94.448331][ T6498] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 94.458161][ T6357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.477511][ T6357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.563135][ T55] kworker/u8:4: attempt to access beyond end of device [ 94.563135][ T55] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 94.599534][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.695392][ T6522] loop4: detected capacity change from 0 to 512 [ 94.738455][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.753526][ T6522] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.792597][ T6357] veth0_vlan: entered promiscuous mode [ 94.828908][ T6357] veth1_vlan: entered promiscuous mode [ 94.835900][ T6109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.893281][ T6357] veth0_macvtap: entered promiscuous mode [ 94.906920][ T6542] hsr_slave_0: left promiscuous mode [ 94.912912][ T6542] hsr_slave_1: left promiscuous mode [ 94.932095][ T6357] veth1_macvtap: entered promiscuous mode [ 94.949476][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.960020][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.969890][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.980412][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.990366][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.000880][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.015089][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.023597][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.034049][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.043876][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.054359][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.064217][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.074648][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.084467][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.094886][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.118845][ T6569] syz.3.835[6569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.118907][ T6569] syz.3.835[6569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.130576][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.152820][ T6569] netlink: 52 bytes leftover after parsing attributes in process `syz.3.835'. [ 95.161976][ T6569] unsupported nlmsg_type 40 [ 95.163402][ T6357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.175233][ T6357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.183934][ T6357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.192704][ T6357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.287335][ T6581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.839'. [ 95.296339][ T6581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.839'. [ 95.350597][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 95.351213][ T6588] loop4: detected capacity change from 0 to 1024 [ 95.369186][ T6588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.381300][ T6589] sch_tbf: burst 511 is lower than device ip_vti0 mtu (1480) ! [ 95.382165][ T6588] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.420714][ T6588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.453302][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.844'. [ 95.491125][ T6600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.574709][ T6606] lo speed is unknown, defaulting to 1000 [ 95.580505][ T6606] lo speed is unknown, defaulting to 1000 [ 95.586830][ T6606] lo speed is unknown, defaulting to 1000 [ 95.593695][ T6606] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.604302][ T6606] lo speed is unknown, defaulting to 1000 [ 95.610276][ T6606] lo speed is unknown, defaulting to 1000 [ 95.616552][ T6606] lo speed is unknown, defaulting to 1000 [ 95.622749][ T6606] lo speed is unknown, defaulting to 1000 [ 95.628955][ T6606] lo speed is unknown, defaulting to 1000 [ 95.635218][ T6606] lo speed is unknown, defaulting to 1000 [ 95.641198][ T6606] lo speed is unknown, defaulting to 1000 [ 95.662561][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.670115][ T6608] batadv_slave_0: entered promiscuous mode [ 95.780941][ T6617] syz.3.855[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.780979][ T6617] syz.3.855[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.793579][ T6617] syz.3.855[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.805688][ T6617] syz.3.855[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.425256][ T6657] lo speed is unknown, defaulting to 1000 [ 96.462983][ T6663] loop2: detected capacity change from 0 to 512 [ 96.481992][ T6663] journal_path: Lookup failure for './file1' [ 96.488046][ T6663] EXT4-fs: error: could not find journal device path [ 96.541506][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 97.057895][ T6688] loop3: detected capacity change from 0 to 764 [ 97.073557][ T6688] iso9660: Unknown parameter '' [ 97.118755][ T6697] loop3: detected capacity change from 0 to 512 [ 97.143917][ T6697] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.153108][ T6675] lo speed is unknown, defaulting to 1000 [ 97.159341][ T6697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.173536][ T6697] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.868: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 97.193275][ T6697] EXT4-fs error (device loop3): ext4_quota_enable:7025: comm syz.3.868: Bad quota inode: 3, type: 0 [ 97.206017][ T6697] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 97.211954][ T6708] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 97.220647][ T6697] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 97.235116][ T6708] netlink: 'syz.0.869': attribute type 4 has an invalid length. [ 97.238703][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.242728][ T6708] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.869'. [ 97.281109][ T6697] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 97.291506][ T6697] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 97.296723][ T6675] chnl_net:caif_netlink_parms(): no params data found [ 97.322822][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.336413][ T1627] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.376738][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.384115][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.391456][ T6675] bridge_slave_0: entered allmulticast mode [ 97.398196][ T6675] bridge_slave_0: entered promiscuous mode [ 97.405970][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.413077][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.420531][ T6675] bridge_slave_1: entered allmulticast mode [ 97.427939][ T6675] bridge_slave_1: entered promiscuous mode [ 97.444477][ T1627] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.461188][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.471936][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.488925][ T1627] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.505380][ T6675] team0: Port device team_slave_0 added [ 97.512198][ T6675] team0: Port device team_slave_1 added [ 97.526977][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.533978][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.560031][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.573693][ T1627] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.584953][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.591894][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.617888][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.635937][ T6109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.652055][ T6675] hsr_slave_0: entered promiscuous mode [ 97.658943][ T6675] hsr_slave_1: entered promiscuous mode [ 97.665056][ T6675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.672729][ T6675] Cannot create hsr debugfs directory [ 97.723947][ T1627] bridge_slave_1: left allmulticast mode [ 97.729683][ T1627] bridge_slave_1: left promiscuous mode [ 97.735380][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.742983][ T1627] bridge_slave_0: left allmulticast mode [ 97.748716][ T1627] bridge_slave_0: left promiscuous mode [ 97.754423][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.855507][ T1627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.866410][ T1627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.876705][ T1627] bond0 (unregistering): Released all slaves [ 97.913044][ T1627] hsr_slave_0: left promiscuous mode [ 97.918776][ T1627] hsr_slave_1: left promiscuous mode [ 97.927198][ T1627] veth1_macvtap: left promiscuous mode [ 97.932672][ T1627] veth0_macvtap: left promiscuous mode [ 97.938218][ T1627] veth1_vlan: left promiscuous mode [ 97.943463][ T1627] veth0_vlan: left promiscuous mode [ 97.984542][ T6748] netlink: 64 bytes leftover after parsing attributes in process `syz.0.873'. [ 98.034586][ T1627] team0 (unregistering): Port device team_slave_1 removed [ 98.044874][ T1627] team0 (unregistering): Port device team_slave_0 removed [ 98.087171][ T6750] netlink: 408 bytes leftover after parsing attributes in process `syz.0.873'. [ 98.096247][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 98.096294][ T29] audit: type=1400 audit(1726550709.658:1321): avc: denied { getopt } for pid=6747 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.145756][ T29] audit: type=1400 audit(1726550709.718:1322): avc: denied { accept } for pid=6760 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.175739][ T6740] lo speed is unknown, defaulting to 1000 [ 98.192549][ T29] audit: type=1400 audit(1726550709.728:1323): avc: denied { bind } for pid=6760 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.211913][ T29] audit: type=1400 audit(1726550709.728:1324): avc: denied { node_bind } for pid=6760 comm="syz.0.874" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.233555][ T29] audit: type=1400 audit(1726550709.728:1325): avc: denied { getopt } for pid=6760 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.300975][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 98.350269][ T6785] syz.0.878[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.350333][ T6785] syz.0.878[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.365400][ T6785] syz.0.878[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.376975][ T6785] syz.0.878[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.398464][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.416897][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.425141][ T6740] bridge_slave_0: entered allmulticast mode [ 98.431571][ T6740] bridge_slave_0: entered promiscuous mode [ 98.438632][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.445755][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.452960][ T6740] bridge_slave_1: entered allmulticast mode [ 98.459448][ T6740] bridge_slave_1: entered promiscuous mode [ 98.466927][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 98.483490][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.496666][ T6785] bridge_slave_0 (unregistering): left allmulticast mode [ 98.503801][ T6785] bridge_slave_0 (unregistering): left promiscuous mode [ 98.511169][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.535840][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.546931][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.567028][ T6740] team0: Port device team_slave_0 added [ 98.574544][ T6740] team0: Port device team_slave_1 added [ 98.594124][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.601086][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.627068][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.638921][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.645901][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.671899][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.698885][ T6805] syzkaller0: entered allmulticast mode [ 98.712076][ T6740] hsr_slave_0: entered promiscuous mode [ 98.718301][ T6740] hsr_slave_1: entered promiscuous mode [ 98.724959][ T6740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.732705][ T6740] Cannot create hsr debugfs directory [ 98.741912][ T6805] syzkaller0 (unregistering): left allmulticast mode [ 98.790602][ T1627] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.819681][ T6675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.843830][ T6675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.874862][ T6675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.888667][ T1627] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.902153][ T6675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.947577][ T1627] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.963172][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.979980][ T6675] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.989875][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.997011][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.008657][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.015792][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.037455][ T1627] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.101837][ T1627] bridge_slave_1: left allmulticast mode [ 99.107529][ T1627] bridge_slave_1: left promiscuous mode [ 99.113121][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.121500][ T1627] bridge_slave_0: left allmulticast mode [ 99.127336][ T1627] bridge_slave_0: left promiscuous mode [ 99.132989][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.226228][ T1627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.236912][ T1627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.249087][ T1627] bond0 (unregistering): Released all slaves [ 99.278586][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.328824][ T1627] hsr_slave_0: left promiscuous mode [ 99.338126][ T1627] hsr_slave_1: left promiscuous mode [ 99.345933][ T1627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.353571][ T1627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.361413][ T1627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.368862][ T1627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.378961][ T1627] veth1_macvtap: left promiscuous mode [ 99.384537][ T1627] veth0_macvtap: left promiscuous mode [ 99.390098][ T1627] veth1_vlan: left promiscuous mode [ 99.395339][ T1627] veth0_vlan: left promiscuous mode [ 99.484330][ T1627] team0 (unregistering): Port device team_slave_1 removed [ 99.495040][ T1627] team0 (unregistering): Port device team_slave_0 removed [ 99.539055][ T6849] lo speed is unknown, defaulting to 1000 [ 99.578291][ T6675] veth0_vlan: entered promiscuous mode [ 99.587929][ T6675] veth1_vlan: entered promiscuous mode [ 99.605210][ T6675] veth0_macvtap: entered promiscuous mode [ 99.612567][ T6675] veth1_macvtap: entered promiscuous mode [ 99.624634][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.635239][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.645180][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.645195][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.648094][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.679285][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.689927][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.689945][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.689958][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.689967][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.731065][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.740950][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.740965][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.745503][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.773380][ T6675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.782281][ T6675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.791179][ T6675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.800017][ T6675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.817242][ T6880] pim6reg1: entered promiscuous mode [ 99.822532][ T6880] pim6reg1: entered allmulticast mode [ 99.845943][ T6740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.854847][ T6740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.863322][ T6740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.876198][ T6740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.913180][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.926086][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.936714][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.943817][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.958321][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.960127][ T6885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 99.965381][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.971828][ T6885] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.971954][ T6885] vhci_hcd vhci_hcd.0: Device attached [ 99.991323][ T6740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.002625][ T6740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.044140][ T6891] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 100.071898][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.093409][ T6887] vhci_hcd: connection closed [ 100.093975][ T4357] vhci_hcd: stop threads [ 100.102913][ T4357] vhci_hcd: release socket [ 100.102928][ T4357] vhci_hcd: disconnect device [ 100.328341][ T6740] veth0_vlan: entered promiscuous mode [ 100.350129][ T6740] veth1_vlan: entered promiscuous mode [ 100.372423][ T6919] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 100.387170][ T6740] veth0_macvtap: entered promiscuous mode [ 100.404203][ T6740] veth1_macvtap: entered promiscuous mode [ 100.423487][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.433960][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.443792][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.454294][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.464132][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.474544][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.490979][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 100.492314][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.514108][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.524585][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.534397][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.544820][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.554674][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.565113][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.574926][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.585545][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.595500][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.605926][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.610090][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.630572][ T6740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.639309][ T6740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.648115][ T6740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.648148][ T6740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.737009][ T6931] loop2: detected capacity change from 0 to 2048 [ 100.755411][ T29] audit: type=1400 audit(1726550712.318:1326): avc: denied { read } for pid=6934 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 100.797866][ T6940] syz.0.900: attempt to access beyond end of device [ 100.797866][ T6940] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.812245][ T6938] loop1: detected capacity change from 0 to 2048 [ 100.819820][ T6931] loop2: p1 p2 p3 [ 100.828158][ T6943] loop4: detected capacity change from 0 to 512 [ 100.839401][ T2962] loop2: p1 p2 p3 [ 100.876393][ T6938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.924499][ T6943] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 100.932657][ T6943] ref_ctr increment failed for inode: 0x17 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881147d1a40 [ 100.962069][ T6938] EXT4-fs error (device loop1): ext4_read_inline_dir:1565: inode #12: block 9: comm syz.1.898: path /5/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 101.005577][ T5366] udevd[5366]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 101.017073][ T5365] udevd[5365]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.032227][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 101.046468][ T6950] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 101.054769][ T6950] ref_ctr decrement failed for inode: 0x17 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881147d1a40 [ 101.064572][ T6938] EXT4-fs (loop1): Remounting filesystem read-only [ 101.090665][ T6675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.100620][ T6950] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 101.108909][ T6950] ref_ctr decrement failed for inode: 0x17 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881147d1a40 [ 101.146439][ T29] audit: type=1326 audit(1726550712.718:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369358def9 code=0x7ffc0000 [ 101.187057][ T6952] loop0: detected capacity change from 0 to 2048 [ 101.198786][ T29] audit: type=1326 audit(1726550712.738:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369358def9 code=0x7ffc0000 [ 101.222110][ T29] audit: type=1326 audit(1726550712.738:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f369358def9 code=0x7ffc0000 [ 101.245349][ T29] audit: type=1326 audit(1726550712.738:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369358def9 code=0x7ffc0000 [ 101.279413][ T6957] loop4: detected capacity change from 0 to 512 [ 101.288409][ T6957] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.906: casefold flag without casefold feature [ 101.301288][ T6957] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.906: couldn't read orphan inode 15 (err -117) [ 101.314942][ T6957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.328936][ T6952] Alternate GPT is invalid, using primary GPT. [ 101.335337][ T6952] loop0: p1 p2 p3 [ 101.398698][ T6738] udevd[6738]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 101.399703][ T5365] udevd[5365]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 101.409681][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 101.448771][ T6740] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.531222][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 101.541557][ T6967] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 101.548064][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.555841][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 101.568589][ T6970] vhci_hcd: connection closed [ 101.568725][ T1627] vhci_hcd: stop threads [ 101.577718][ T1627] vhci_hcd: release socket [ 101.582126][ T1627] vhci_hcd: disconnect device [ 101.616447][ T6976] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 101.885549][ T6986] loop2: detected capacity change from 0 to 4096 [ 101.894342][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.986841][ T6357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.177845][ T6997] syz.1.921 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.208654][ T6999] loop1: detected capacity change from 0 to 512 [ 102.224971][ T6999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.238439][ T6999] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.283578][ T7007] loop0: detected capacity change from 0 to 128 [ 102.323441][ T7007] loop0: detected capacity change from 128 to 64 [ 102.333663][ T7007] syz.0.923: attempt to access beyond end of device [ 102.333663][ T7007] loop0: rw=2049, sector=97, nr_sectors = 127 limit=64 [ 102.366282][ T7011] bridge0: port 1(veth0_to_bond) entered blocking state [ 102.373415][ T7011] bridge0: port 1(veth0_to_bond) entered disabled state [ 102.380628][ T7011] veth0_to_bond: entered allmulticast mode [ 102.387138][ T7011] veth0_to_bond: entered promiscuous mode [ 102.392959][ T7011] bridge0: port 1(veth0_to_bond) entered blocking state [ 102.399927][ T7011] bridge0: port 1(veth0_to_bond) entered forwarding state [ 102.587303][ T7013] loop3: detected capacity change from 0 to 512 [ 102.597554][ T7013] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 102.605824][ T7013] ref_ctr increment failed for inode: 0x268 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114694000 [ 102.619380][ T7013] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 102.627682][ T7013] ref_ctr decrement failed for inode: 0x268 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114694000 [ 102.639361][ T7013] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 102.647662][ T7013] ref_ctr decrement failed for inode: 0x268 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114694000 [ 102.680812][ T7017] syz.3.927: attempt to access beyond end of device [ 102.680812][ T7017] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.682580][ T7019] loop0: detected capacity change from 0 to 512 [ 102.704231][ T7019] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.928: casefold flag without casefold feature [ 102.717070][ T7019] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.928: couldn't read orphan inode 15 (err -117) [ 102.729326][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.790869][ T5371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.862842][ T7024] lo speed is unknown, defaulting to 1000 [ 102.872462][ T7025] loop3: detected capacity change from 0 to 2048 [ 102.886496][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.906852][ T7025] EXT4-fs error (device loop3): ext4_read_inline_dir:1565: inode #12: block 9: comm syz.3.930: path /115/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 102.929210][ T7025] EXT4-fs (loop3): Remounting filesystem read-only [ 102.942074][ T5385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.049504][ T6675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.083252][ T7038] loop1: detected capacity change from 0 to 4096 [ 103.092360][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.182786][ T6675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.206871][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 103.285449][ T7048] loop1: detected capacity change from 0 to 1024 [ 103.295361][ T7048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.296616][ T7047] syzkaller0: entered allmulticast mode [ 103.311618][ T7048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.325808][ T7047] syzkaller0 (unregistering): left allmulticast mode [ 103.644356][ T7050] ================================================================== [ 103.652458][ T7050] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 103.661672][ T7050] [ 103.661677][ T7050] write to 0xffff8881134dcf50 of 4 bytes by task 7048 on cpu 1: [ 103.661691][ T7050] writeback_single_inode+0x14f/0x3f0 [ 103.661718][ T7050] sync_inode_metadata+0x5c/0x90 [ 103.681900][ T7050] generic_buffers_fsync_noflush+0xd8/0x120 [ 103.681921][ T7050] ext4_sync_file+0x1ff/0x6c0 [ 103.681941][ T7050] vfs_fsync_range+0x116/0x130 [ 103.681959][ T7050] ext4_buffered_write_iter+0x326/0x370 [ 103.681978][ T7050] ext4_file_write_iter+0x293/0xe10 [ 103.681996][ T7050] iter_file_splice_write+0x5f1/0x980 [ 103.682013][ T7050] direct_splice_actor+0x160/0x2c0 [ 103.682029][ T7050] splice_direct_to_actor+0x302/0x670 [ 103.682045][ T7050] do_splice_direct+0xd7/0x150 [ 103.682064][ T7050] do_sendfile+0x39b/0x970 [ 103.682079][ T7050] __x64_sys_sendfile64+0x110/0x150 [ 103.682094][ T7050] x64_sys_call+0xed5/0x2d60 [ 103.682114][ T7050] do_syscall_64+0xc9/0x1c0 [ 103.682139][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.682161][ T7050] [ 103.682165][ T7050] read to 0xffff8881134dcf50 of 4 bytes by task 7050 on cpu 0: [ 103.682179][ T7050] generic_buffers_fsync_noflush+0x83/0x120 [ 103.682196][ T7050] ext4_sync_file+0x1ff/0x6c0 [ 103.682215][ T7050] vfs_fsync_range+0x116/0x130 [ 103.682233][ T7050] ext4_buffered_write_iter+0x326/0x370 [ 103.682252][ T7050] ext4_file_write_iter+0x293/0xe10 [ 103.682270][ T7050] iter_file_splice_write+0x5f1/0x980 [ 103.682286][ T7050] direct_splice_actor+0x160/0x2c0 [ 103.682303][ T7050] splice_direct_to_actor+0x302/0x670 [ 103.682319][ T7050] do_splice_direct+0xd7/0x150 [ 103.682334][ T7050] do_sendfile+0x39b/0x970 [ 103.682349][ T7050] __x64_sys_sendfile64+0x110/0x150 [ 103.682363][ T7050] x64_sys_call+0xed5/0x2d60 [ 103.682383][ T7050] do_syscall_64+0xc9/0x1c0 [ 103.682406][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.682427][ T7050] [ 103.682429][ T7050] value changed: 0x00000028 -> 0x00000002 [ 103.682438][ T7050] [ 103.682441][ T7050] Reported by Kernel Concurrency Sanitizer on: [ 103.682451][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.1.936 Tainted: G W 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 103.682476][ T7050] Tainted: [W]=WARN [ 103.682482][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.682491][ T7050] ================================================================== [ 104.150860][ T7050] syz.1.936 (7050) used greatest stack depth: 9560 bytes left [ 104.164425][ T6675] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.