last executing test programs: 7.368780714s ago: executing program 3 (id=608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x35}]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 6.414811651s ago: executing program 3 (id=617): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 6.053141624s ago: executing program 3 (id=621): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.751141682s ago: executing program 3 (id=624): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r5 = dup(r4) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5.434050102s ago: executing program 3 (id=628): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 5.292451154s ago: executing program 3 (id=629): socket(0x0, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x2, 0xff, 0x3}, 0xfe}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.401251676s ago: executing program 4 (id=633): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e9ba56a888e55000000000000", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.908179062s ago: executing program 4 (id=637): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 3.821665009s ago: executing program 4 (id=638): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[], 0x1, 0x55d, &(0x7f0000000b00)="$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") 3.69848276s ago: executing program 4 (id=640): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500)={0x2000043}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfffffffc, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$tun(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 3.665485834s ago: executing program 0 (id=642): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8220081002a0086dd600a043500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="620278000100000097f0c427f11d8f90e96f8a46ee47457a4c6859cca918f40dc7206acb1cdabf0f72781cb0840800000046dd9e87d67e0d8f5a"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) fdatasync(r2) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x800) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 3.627759127s ago: executing program 4 (id=643): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x3, 0x0, 0x112) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x44, 0x0, 0x685, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='netfs_sreq\x00', r1, 0x0, 0xb29}, 0x18) 2.859623708s ago: executing program 1 (id=646): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x4ffe6, 0x0) 2.859274728s ago: executing program 4 (id=647): r0 = socket(0x25, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000000c0), 0x80000075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) 2.855387428s ago: executing program 0 (id=657): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8220081002a0086dd600a043500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="620278000100000097f0c427f11d8f90e96f8a46ee47457a4c6859cca918f40dc7206acb1cdabf0f72781cb0840800000046dd9e87d67e0d8f5a"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) fdatasync(r2) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x800) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 2.72500185s ago: executing program 2 (id=649): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4801) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a18ccacd4b98100000086dd60100000004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcffffff0420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000df9f4df89f1a7811f262d53b3e424d2c2b2f158ccb093108eff2b332a3648eb23882f319a3ea33fa6c3309ba0b52688a6e"], 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)) unshare(0x2000400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.665217786s ago: executing program 2 (id=650): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x63b3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'veth0_to_bridge\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) 2.415219159s ago: executing program 0 (id=651): bpf$MAP_CREATE(0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x80000000007) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfbffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg(r3, &(0x7f0000000600)={&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000000740)}, 0x4000004) 2.160595281s ago: executing program 0 (id=652): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 2.159804822s ago: executing program 2 (id=663): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8220081002a0086dd600a043500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="620278000100000097f0c427f11d8f90e96f8a46ee47457a4c6859cca918f40dc7206acb1cdabf0f72781cb0840800000046dd9e87d67e0d8f5a"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) fdatasync(r2) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x800) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 2.005787376s ago: executing program 1 (id=653): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[], 0x1, 0x55d, &(0x7f0000000b00)="$eJzs3V1v01gawPHHpV2i7KpaLSuEqgKHshdFKsFxIFXEzXqdk/RAYke2g9orVNEUVaSwoqx22xuWG3ZHmvkQSHM1V/MJ5huh+Qgzsp30heYFJvRlqv+vgnNiH/s8x438yE18LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCyvattFSxrGb6+q4bxqGDQPXva27r9cbPX3d+dIMaJfESv5J7mcXMsWXfvrweqryX8LMp+9mpdcUuRk749X//zwyvRUf/sRAZ+Knd29F+vdbuf1WQdygq5fHr6urn0TBabp1rUyUaAq5bJ9b6UWqZpp6GgtinVTeaF24yBUi94dVaxUSkoX1oK2X6+6Dd1fuHzXse2yelRoaTeMAv/eo0LkrZhGw/j1tE2yOmmznLwRH5tYxdptKrW51e2Uxg0gaVT8nEbOuEaO7TjFouMUyw8qD5Zte/rYAvsTcqzF2b9pcba+4tkbmMxUL/9LQ4z40pZVUQN/PKlKKIE0h6zvyRL/v//047Ie2e/h/N/P8tcOVs9Jmv9viMjfRW4My/9DYjm9nx3ZlT15IevSla505PWgVs73csqRJocmddI91UWLL0YiCcRIU9x0ieotUVKRspTFlqeyIjWJRElNjDRESyRrEkksOn1HeRKKFldiCSQUJYviyR1RUpSKVKQkSrQUZE0CaYsvdamKm+5lU7bS414SZQ2Lcb9Rcegw8v33XUecEaMl/2NyX/X8DUzil37+BwAAAAAAF5aV/vU9uf6fketprWYa2j7rsAAAAAAAwFeUfvI/nxQzSe26WFz/AwAAAABw0VjpPXaWiOTlZlbbFCu9XYo/AgAAAAAAcEGkn//fSIp0DpSbYu1Pl8L1PwAAAAAAF8T/x86xH7UuWz/9LGE4Y71rrf7N2k7n5nW3L2XbXfp0j3Ftzprt7SQtylkxPe3peSuXNdqfBPNjr9gcF4d1EIC7H8B/vySAK9PyrdzK2tzayMqN/pqsl3zNNHTBCxoPi+K6s1OxXo3/9XLrP5IO/xu/OWvlZKvbKTx71d1IY3mX7OXddm8CxWPzKI6I5U0630J6z8XAEc+kN2L0+s1bsrnV7diHxz+VbT51tMe3syP6fC8LWauF3oy3+aPjzyV9FgvDRt+LojjhyN/L7azN7cXbWTEgCmdcFM7hKAYfi8mjKI2LojRhFABwVjbHZCFLjuXd33CWG5LdczIyu8sXZvf3spi1WZxLT6zTcwPO6Pa4M7o9YXb74dgzkIbl2KTf7z7Jqh+SDT4M7TdqOFZyCC+92f6nXN3Z3bu7tb3+vPO889JxSmX7vm0/cGQmHUavIPcAAAbInrEjI56xM7aFdX/MVfVf9r9SUJBn8kq6siFL6d0G6TcOBu41f+hrCEtjrlrzaZrMnvCyNOKq7g/pXQ79/Toj2x6NoXTyvwgAAE7Rwpg8/Dn5f2nMdffRXD766jh/6GltAADgZOjwo5WP/2eFoWk9LVYqRTde0SoMvMcqNNW6VsaPdeituH5dq1YYxIEXNJLKE1PVkYrarVYQxqoWhKoVRGY1nT5Q9R79Humm68fGi1oN7U5p5QV+7HqxqprIU632PxomWtFhunHU0p6pGc+NTeCrKGiHni4oFWl9qKGpaj82NZNUfdUKTdMNc+pJ0Gg3tarqyAtNKw6yHfb7Mn4tCJvpbgtnfbABADgndnb3Xqx3u53XJ1g56zECAICjyNIAAAAAAAAAAAAAAAAAAAAAAJx/p3H/H5UJK1Pn/NfUnwr6vMTz+ZXLv8OYT6ky9tTx9sRPTgBO1K8BAAD//2hrTo4=") 1.85607133s ago: executing program 1 (id=654): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) 1.298844981s ago: executing program 0 (id=655): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.298432531s ago: executing program 1 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='k', 0x1}], 0x1) 1.297839511s ago: executing program 2 (id=667): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @nfc={0x27, r1, 0x1, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xb1, 0x0, 0x0, 0x0, 0x8dd, 0x0, 0x31db63b2, 0x2, 0x7}) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4090, 0xffa) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000240)=""/34, 0x43) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) 1.145678585s ago: executing program 1 (id=658): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x3, 0x0, 0x112) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x44, 0x0, 0x685, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='netfs_sreq\x00', r1, 0x0, 0xb29}, 0x18) 1.093771279s ago: executing program 2 (id=659): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40)={[{@quota}, {@bsdgroups}, {@nobh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@abort}]}, 0x4, 0x756, &(0x7f0000000a80)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11000, &(0x7f0000000100), 0x1, 0x610, &(0x7f0000000200)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010000000000000000000a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x30}}, 0x0) sched_setscheduler(r0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b45, 0x2) 877.08496ms ago: executing program 2 (id=660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) 819.338645ms ago: executing program 1 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x35}]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 0s ago: executing program 0 (id=662): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4801) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a18ccacd4b98100000086dd60100000004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcffffff0420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000df9f4df89f1a7811f262d53b3e424d2c2b2f158ccb093108eff2b332a3648eb23882f319a3ea33fa6c3309ba0b52688a6e"], 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)) unshare(0x2000400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 7] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.168696][ T4597] EXT4-fs (loop3): 1 truncate cleaned up [ 63.175041][ T4597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.197506][ T4604] loop2: detected capacity change from 0 to 256 [ 63.246905][ T4604] FAT-fs (loop2): Directory bread(block 64) failed [ 63.254281][ T4604] FAT-fs (loop2): Directory bread(block 65) failed [ 63.261894][ T4604] FAT-fs (loop2): Directory bread(block 66) failed [ 63.268885][ T4604] FAT-fs (loop2): Directory bread(block 67) failed [ 63.275741][ T4604] FAT-fs (loop2): Directory bread(block 68) failed [ 63.282863][ T4604] FAT-fs (loop2): Directory bread(block 69) failed [ 63.285967][ T4612] netlink: 140 bytes leftover after parsing attributes in process `syz.0.330'. [ 63.289465][ T4604] FAT-fs (loop2): Directory bread(block 70) failed [ 63.305549][ T4604] FAT-fs (loop2): Directory bread(block 71) failed [ 63.320872][ T4604] FAT-fs (loop2): Directory bread(block 72) failed [ 63.327489][ T4604] FAT-fs (loop2): Directory bread(block 73) failed [ 63.363987][ T4619] SELinux: Context Ü is not valid (left unmapped). [ 63.377392][ T4604] syz.2.328: attempt to access beyond end of device [ 63.377392][ T4604] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 63.405070][ T4604] syz.2.328: attempt to access beyond end of device [ 63.405070][ T4604] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 63.495328][ T4637] loop0: detected capacity change from 0 to 512 [ 63.513743][ T4637] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.548269][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 63.548294][ T29] audit: type=1400 audit(1727702241.671:1028): avc: denied { bind } for pid=4636 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.682695][ T4656] usb usb1: usbfs: process 4656 (syz.2.341) did not claim interface 8 before use [ 63.727346][ T4656] loop2: detected capacity change from 0 to 2048 [ 63.757075][ T4667] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.342'. [ 63.768062][ T4656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.857377][ T29] audit: type=1400 audit(1727702241.981:1029): avc: denied { create } for pid=4654 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.877746][ T29] audit: type=1400 audit(1727702242.001:1030): avc: denied { connect } for pid=4654 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.929168][ T29] audit: type=1400 audit(1727702242.051:1031): avc: denied { write } for pid=4654 comm="syz.2.341" path="socket:[8134]" dev="sockfs" ino=8134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.983446][ T4656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.341: bg 0: block 234: padding at end of block bitmap is not set [ 64.004746][ T4656] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.017602][ T4656] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.017602][ T4656] [ 64.027370][ T4656] EXT4-fs (loop2): Total free blocks count 0 [ 64.033424][ T4656] EXT4-fs (loop2): Free/Dirty block details [ 64.039459][ T4656] EXT4-fs (loop2): free_blocks=0 [ 64.044455][ T4656] EXT4-fs (loop2): dirty_blocks=8192 [ 64.049843][ T4656] EXT4-fs (loop2): Block reservation details [ 64.055841][ T4656] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 64.111257][ T4676] loop3: detected capacity change from 0 to 2048 [ 64.118221][ T4676] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.238152][ T4679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.345: bg 0: block 234: padding at end of block bitmap is not set [ 64.253048][ T4679] EXT4-fs (loop3): Remounting filesystem read-only [ 64.301152][ T4679] syz.3.345 (4679) used greatest stack depth: 10280 bytes left [ 64.405922][ T4683] loop3: detected capacity change from 0 to 8192 [ 64.413920][ T4683] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007' [ 64.450584][ T29] audit: type=1400 audit(1727702242.581:1032): avc: denied { unmount } for pid=3278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.499447][ T4656] syz.2.341 (4656) used greatest stack depth: 10128 bytes left [ 64.527145][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 64.572164][ T4691] loop4: detected capacity change from 0 to 128 [ 64.585995][ T29] audit: type=1400 audit(1727702242.711:1033): avc: denied { mounton } for pid=4690 comm="syz.4.352" path="/68/file0/file0" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 64.684133][ T4693] loop3: detected capacity change from 0 to 2048 [ 64.729279][ T4693] loop3: p2 < > p4 [ 64.748977][ T4693] loop3: p4 size 8192 extends beyond EOD, truncated [ 64.774871][ T3518] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 64.782822][ T3518] FAT-fs (loop4): Filesystem has been set read-only [ 64.848643][ T29] audit: type=1326 audit(1727702242.951:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 64.872169][ T29] audit: type=1326 audit(1727702242.951:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 64.895586][ T29] audit: type=1326 audit(1727702242.961:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 64.918934][ T29] audit: type=1326 audit(1727702242.961:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 64.958218][ T4695] loop0: detected capacity change from 0 to 2048 [ 64.967636][ T3518] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 64.977176][ T3518] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 65.043391][ T4699] tipc: Disabling bearer [ 65.076235][ T4702] loop2: detected capacity change from 0 to 2048 [ 65.101777][ T4703] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 65.116813][ T4703] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1840 with error 28 [ 65.129409][ T4703] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.129409][ T4703] [ 65.139121][ T4703] EXT4-fs (loop0): Total free blocks count 0 [ 65.145148][ T4703] EXT4-fs (loop0): Free/Dirty block details [ 65.151188][ T4703] EXT4-fs (loop0): free_blocks=66060288 [ 65.156853][ T4703] EXT4-fs (loop0): dirty_blocks=3376 [ 65.162273][ T4703] EXT4-fs (loop0): Block reservation details [ 65.168358][ T4703] EXT4-fs (loop0): i_reserved_data_blocks=243 [ 65.241304][ T1850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.316248][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1840 with max blocks 2048 with error 28 [ 65.329178][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.329178][ T36] [ 65.363404][ T1850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.443305][ T1850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.509923][ T4723] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 65.514384][ T4718] syzkaller0: entered promiscuous mode [ 65.523822][ T4718] syzkaller0: entered allmulticast mode [ 65.530946][ T4723] ªªªªªª: renamed from vlan0 (while UP) [ 65.543448][ T1850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.649624][ T1850] bridge_slave_1: left allmulticast mode [ 65.655452][ T1850] bridge_slave_1: left promiscuous mode [ 65.661256][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.670949][ T1850] bridge_slave_0: left allmulticast mode [ 65.676718][ T1850] bridge_slave_0: left promiscuous mode [ 65.682562][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.812898][ T1850] bond0 (unregistering): left promiscuous mode [ 65.819624][ T1850] bond_slave_0: left promiscuous mode [ 65.825219][ T1850] bond_slave_1: left promiscuous mode [ 65.832803][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.845635][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.857309][ T1850] bond0 (unregistering): Released all slaves [ 65.887083][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 66.060743][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.067886][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.119974][ T4707] bridge_slave_0: entered allmulticast mode [ 66.148358][ T4707] bridge_slave_0: entered promiscuous mode [ 66.175338][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.182549][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.202847][ T4707] bridge_slave_1: entered allmulticast mode [ 66.210829][ T4707] bridge_slave_1: entered promiscuous mode [ 66.246818][ T4737] syzkaller0: entered promiscuous mode [ 66.252455][ T4737] syzkaller0: entered allmulticast mode [ 66.280781][ T1850] tipc: Left network mode [ 66.301001][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.310323][ T1850] team0: left promiscuous mode [ 66.315163][ T1850] team_slave_0: left promiscuous mode [ 66.320966][ T1850] team_slave_1: left promiscuous mode [ 66.329455][ T1850] hsr_slave_0: left promiscuous mode [ 66.335378][ T1850] hsr_slave_1: left promiscuous mode [ 66.344653][ T1850] veth1_macvtap: left promiscuous mode [ 66.350454][ T1850] veth0_macvtap: left promiscuous mode [ 66.356007][ T1850] veth1_vlan: left promiscuous mode [ 66.361370][ T1850] veth0_vlan: left promiscuous mode [ 66.451583][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 66.461635][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 66.546528][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.576989][ T4765] syzkaller0: entered promiscuous mode [ 66.582664][ T4765] syzkaller0: entered allmulticast mode [ 66.606307][ T4707] team0: Port device team_slave_0 added [ 66.618257][ T4707] team0: Port device team_slave_1 added [ 66.677277][ T4778] loop0: detected capacity change from 0 to 512 [ 66.679602][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.690587][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.716558][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.738024][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 66.745514][ T4778] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.367: attempt to clear invalid blocks 1 len 1 [ 66.762336][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.769331][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.778876][ T4778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.367: bg 0: block 343: padding at end of block bitmap is not set [ 66.795385][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.830102][ T4778] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.839292][ T4778] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.367: invalid indirect mapped block 1819239214 (level 0) [ 66.853449][ T4778] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.367: invalid indirect mapped block 1819239214 (level 1) [ 66.870882][ T4775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.872277][ T4778] EXT4-fs (loop0): 1 truncate cleaned up [ 66.885723][ T4775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.934005][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.941249][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.948922][ T4719] bridge_slave_0: entered allmulticast mode [ 66.955397][ T4719] bridge_slave_0: entered promiscuous mode [ 66.966644][ T4707] hsr_slave_0: entered promiscuous mode [ 66.972907][ T4707] hsr_slave_1: entered promiscuous mode [ 66.979728][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.987296][ T4707] Cannot create hsr debugfs directory [ 66.992961][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.000129][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.007666][ T4719] bridge_slave_1: entered allmulticast mode [ 67.014438][ T4719] bridge_slave_1: entered promiscuous mode [ 67.083004][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.110433][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.157308][ T1850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.173753][ T4719] team0: Port device team_slave_0 added [ 67.184938][ T4719] team0: Port device team_slave_1 added [ 67.201211][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.208199][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.210059][ T4815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'. [ 67.234257][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.243196][ T4815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 67.256698][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.262607][ T4815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'. [ 67.269557][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.300356][ T4815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'. [ 67.304337][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.325656][ T1850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.366245][ T4719] hsr_slave_0: entered promiscuous mode [ 67.372502][ T4719] hsr_slave_1: entered promiscuous mode [ 67.378540][ T4719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.386484][ T4719] Cannot create hsr debugfs directory [ 67.393767][ T1850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.481999][ T1850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.488938][ T4825] loop3: detected capacity change from 0 to 2048 [ 67.566689][ T1850] bridge_slave_1: left allmulticast mode [ 67.572435][ T1850] bridge_slave_1: left promiscuous mode [ 67.578100][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.582516][ T4825] loop3: detected capacity change from 2048 to 2047 [ 67.594058][ T1850] bridge_slave_0: left allmulticast mode [ 67.599808][ T1850] bridge_slave_0: left promiscuous mode [ 67.605520][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.621123][ T3278] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /89/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 67.644014][ T3278] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.656714][ T3278] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.751045][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.761543][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.771893][ T1850] bond0 (unregistering): Released all slaves [ 67.829892][ T1850] tipc: Disabling bearer [ 67.834966][ T1850] tipc: Left network mode [ 67.842260][ T1850] hsr_slave_0: left promiscuous mode [ 67.847956][ T1850] hsr_slave_1: left promiscuous mode [ 67.855741][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.863444][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.873744][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.881252][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.892465][ T1850] veth1_macvtap: left promiscuous mode [ 67.898072][ T1850] veth0_macvtap: left promiscuous mode [ 67.903757][ T1850] veth1_vlan: left promiscuous mode [ 67.909157][ T1850] veth0_vlan: left promiscuous mode [ 68.060628][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 68.083607][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 68.175692][ T4882] syzkaller0: entered promiscuous mode [ 68.181273][ T4882] syzkaller0: entered allmulticast mode [ 68.313292][ T4906] hub 6-0:1.0: USB hub found [ 68.318257][ T4906] hub 6-0:1.0: 8 ports detected [ 68.318323][ T4874] chnl_net:caif_netlink_parms(): no params data found [ 68.395970][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.403215][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.413779][ T4874] bridge_slave_0: entered allmulticast mode [ 68.421406][ T4874] bridge_slave_0: entered promiscuous mode [ 68.449214][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.456396][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.463843][ T4874] bridge_slave_1: entered allmulticast mode [ 68.470613][ T4874] bridge_slave_1: entered promiscuous mode [ 68.476917][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.507963][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.527481][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.544896][ T4874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.554189][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.563500][ T4707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.572722][ T4707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.582269][ T4874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.602291][ T4874] team0: Port device team_slave_0 added [ 68.610245][ T4707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.620551][ T4874] team0: Port device team_slave_1 added [ 68.636290][ T4707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.653203][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.660345][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.686454][ T4874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.701224][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.708184][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.734498][ T4874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.780724][ T4874] hsr_slave_0: entered promiscuous mode [ 68.787110][ T4874] hsr_slave_1: entered promiscuous mode [ 68.793348][ T4874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.801263][ T4874] Cannot create hsr debugfs directory [ 68.876499][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.903197][ T4874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.913607][ T4874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36846 - 0 [ 68.924172][ T4874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 39920 - 0 [ 68.940622][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.958865][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.966015][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.978153][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.988447][ T4874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.999018][ T4874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36846 - 0 [ 69.009443][ T4874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 39920 - 0 [ 69.022335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.029427][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.055157][ T4874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.065786][ T4874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36846 - 0 [ 69.076327][ T4874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 39920 - 0 [ 69.091111][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.104654][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.111799][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.123818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.131520][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.143074][ T4874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.153500][ T4874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36846 - 0 [ 69.163940][ T4874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 39920 - 0 [ 69.241819][ T4874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.253944][ T4874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.263983][ T4874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.273952][ T4874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.291354][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.310590][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.425890][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.441001][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 69.441017][ T29] audit: type=1326 audit(1727702247.571:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.459948][ T4874] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.470579][ T29] audit: type=1326 audit(1727702247.571:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.470612][ T29] audit: type=1326 audit(1727702247.571:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.470637][ T29] audit: type=1326 audit(1727702247.571:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.505802][ T4874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.523914][ T29] audit: type=1326 audit(1727702247.571:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.523961][ T29] audit: type=1326 audit(1727702247.571:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.605250][ T4874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.616084][ T29] audit: type=1326 audit(1727702247.751:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.639648][ T29] audit: type=1326 audit(1727702247.751:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.663014][ T29] audit: type=1326 audit(1727702247.751:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.690606][ T29] audit: type=1326 audit(1727702247.771:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 69.692434][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.721053][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.733562][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.740809][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.770379][ T4719] veth0_vlan: entered promiscuous mode [ 69.794045][ T4719] veth1_vlan: entered promiscuous mode [ 69.870017][ T4874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.894542][ T4719] veth0_macvtap: entered promiscuous mode [ 69.934366][ T4719] veth1_macvtap: entered promiscuous mode [ 69.981436][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.992463][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.002511][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.013241][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.023498][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.034310][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.044251][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.055129][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066584][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.088791][ T4707] veth0_vlan: entered promiscuous mode [ 70.098237][ T4707] veth1_vlan: entered promiscuous mode [ 70.118195][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.128743][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.138562][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.149189][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.159118][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.169690][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.179652][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.190272][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.202708][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.214718][ T4719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.223574][ T4719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.232443][ T4719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.241315][ T4719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.280632][ T4874] veth0_vlan: entered promiscuous mode [ 70.289079][ T4959] chnl_net:caif_netlink_parms(): no params data found [ 70.312041][ T4874] veth1_vlan: entered promiscuous mode [ 70.328428][ T4707] veth0_macvtap: entered promiscuous mode [ 70.347679][ T4707] veth1_macvtap: entered promiscuous mode [ 70.376763][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.387398][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.397495][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.408013][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.417896][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.428374][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.438323][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.448815][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.458691][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.469161][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.485580][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.500847][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.507958][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.515498][ T4959] bridge_slave_0: entered allmulticast mode [ 70.523866][ T4959] bridge_slave_0: entered promiscuous mode [ 70.538144][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.545374][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.553026][ T4959] bridge_slave_1: entered allmulticast mode [ 70.559867][ T4959] bridge_slave_1: entered promiscuous mode [ 70.573464][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.584045][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.593935][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.604507][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.614368][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.624953][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.634802][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.645319][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.655261][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.665864][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.686703][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.718985][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.729949][ T4874] veth0_macvtap: entered promiscuous mode [ 70.738835][ T4707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.747648][ T4707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.756581][ T4707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.765320][ T4707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.778064][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.789570][ T4874] veth1_macvtap: entered promiscuous mode [ 70.812842][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.823372][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.833262][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.843733][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.853601][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.864225][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.874081][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.884591][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.894497][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.904968][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.914872][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.925569][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.939053][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.969273][ T4959] team0: Port device team_slave_0 added [ 70.977452][ T4959] team0: Port device team_slave_1 added [ 70.992667][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.003423][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.013435][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.024089][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.034144][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.044628][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.054644][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.054666][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.054681][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.054693][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.054789][ T4874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.054804][ T4874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.057405][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.150204][ T5006] loop4: detected capacity change from 0 to 512 [ 71.156967][ T5006] EXT4-fs: Ignoring removed bh option [ 71.161629][ T5005] loop0: detected capacity change from 0 to 512 [ 71.190316][ T5006] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.358: invalid block [ 71.205027][ T5006] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.358: couldn't read orphan inode 15 (err -117) [ 71.218859][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.225891][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.252062][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.264665][ T5006] EXT4-fs mount: 10 callbacks suppressed [ 71.264682][ T5006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.283329][ T4874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289831][ T5005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.292130][ T4874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.306503][ T5005] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.313360][ T4874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.313400][ T4874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.356859][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.363973][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.389929][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.440139][ T5005] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.383: corrupted xattr block 33: invalid header [ 71.446197][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.458429][ T5005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 71.474984][ T5005] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.383: corrupted xattr block 33: invalid header [ 71.475373][ T4959] hsr_slave_0: entered promiscuous mode [ 71.494115][ T5005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 71.503636][ T5005] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.383: corrupted xattr block 33: invalid header [ 71.528957][ T4959] hsr_slave_1: entered promiscuous mode [ 71.534699][ T5005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 71.545843][ T4959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.553054][ T5017] loop4: detected capacity change from 0 to 2048 [ 71.553694][ T4959] Cannot create hsr debugfs directory [ 71.578304][ T5017] EXT4-fs (loop4): unsupported inode size: 32768 [ 71.584752][ T5017] EXT4-fs (loop4): blocksize: 2048 [ 71.598226][ T3546] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.697151][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 71.737132][ T5033] loop3: detected capacity change from 0 to 128 [ 71.755119][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 71.795207][ T5035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.826102][ T5042] syz.2.393[5042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.826285][ T5042] syz.2.393[5042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.837992][ T5038] loop4: detected capacity change from 0 to 2048 [ 71.857220][ T4959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.858195][ T5042] syz.2.393[5042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.874662][ T5035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.922386][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.943037][ T4959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.963915][ T5035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.994996][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.045007][ T4959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.060679][ T5035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.106754][ T4959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.153318][ T5035] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.165584][ T5035] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.182233][ T5035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194758][ T5035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.287669][ T4959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.306087][ T4959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.383410][ T4959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.422540][ T4959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.689000][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.743659][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.803852][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.810993][ T1850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.837291][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.844461][ T1850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.911109][ T5076] loop2: detected capacity change from 0 to 1024 [ 72.923374][ T5076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.937049][ T5076] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.983887][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.993789][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.037102][ T5087] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 73.109447][ T4959] veth0_vlan: entered promiscuous mode [ 73.127912][ T4959] veth1_vlan: entered promiscuous mode [ 73.145258][ T4959] veth0_macvtap: entered promiscuous mode [ 73.156807][ T4959] veth1_macvtap: entered promiscuous mode [ 73.170902][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.181475][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.191343][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.201824][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.211743][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.222207][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.227070][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 73.232132][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.232152][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.232169][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.272093][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.282026][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.292616][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.302688][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.313146][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.326304][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.334932][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.345683][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.355562][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.366019][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.375887][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.386420][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.396277][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.406806][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.416738][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.417843][ T5097] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 73.427175][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.427193][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.427212][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.427228][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.427241][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.428572][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.510319][ T4959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.519299][ T4959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.528126][ T4959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.536956][ T4959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.607911][ T5109] loop2: detected capacity change from 0 to 164 [ 73.617049][ T5109] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 73.735880][ T5109] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 73.781718][ T5109] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.843659][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 74.843675][ T29] audit: type=1326 audit(1727702252.961:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.843768][ T5129] loop4: detected capacity change from 0 to 1024 [ 74.849915][ T29] audit: type=1326 audit(1727702252.961:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.903810][ T29] audit: type=1326 audit(1727702252.961:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.927202][ T29] audit: type=1326 audit(1727702252.961:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.950638][ T29] audit: type=1326 audit(1727702252.961:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.974631][ T29] audit: type=1326 audit(1727702252.961:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.998000][ T29] audit: type=1326 audit(1727702252.961:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 74.998114][ T5126] syzkaller0: entered promiscuous mode [ 75.021460][ T29] audit: type=1326 audit(1727702252.961:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 75.021547][ T29] audit: type=1326 audit(1727702252.961:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d3ff0dff9 code=0x7ffc0000 [ 75.021580][ T29] audit: type=1326 audit(1727702252.961:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d3ff0e033 code=0x7ffc0000 [ 75.084424][ T5148] loop3: detected capacity change from 0 to 1024 [ 75.099734][ T5126] syzkaller0: entered allmulticast mode [ 75.109863][ T5148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.118828][ T5148] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.120430][ T5129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.196699][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.215679][ T5148] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 75.240943][ T5156] EXT4-fs (loop4): shut down requested (0) [ 75.277983][ T4874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.323881][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 75.358068][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 75.370903][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.370903][ T28] [ 75.380875][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 75.386981][ T28] EXT4-fs (loop4): Free/Dirty block details [ 75.392977][ T28] EXT4-fs (loop4): free_blocks=68451041280 [ 75.399091][ T28] EXT4-fs (loop4): dirty_blocks=6912 [ 75.404484][ T28] EXT4-fs (loop4): Block reservation details [ 75.410625][ T28] EXT4-fs (loop4): i_reserved_data_blocks=432 [ 75.642619][ T5177] netlink: 180 bytes leftover after parsing attributes in process `syz.0.431'. [ 75.651896][ T5177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.431'. [ 75.983298][ T5191] loop0: detected capacity change from 0 to 512 [ 76.014509][ T5191] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.023676][ T5191] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 76.035099][ T5191] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.435: invalid indirect mapped block 2683928664 (level 1) [ 76.051951][ T5191] EXT4-fs (loop0): Remounting filesystem read-only [ 76.087642][ T5191] EXT4-fs (loop0): 1 truncate cleaned up [ 76.097772][ T5191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.113275][ T5191] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 76.150439][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.233951][ T5196] lo speed is unknown, defaulting to 1000 [ 76.241986][ T5195] pim6reg1: entered promiscuous mode [ 76.247374][ T5195] pim6reg1: entered allmulticast mode [ 76.258908][ T5196] lo speed is unknown, defaulting to 1000 [ 76.269550][ T5196] lo speed is unknown, defaulting to 1000 [ 76.275829][ T5196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.283479][ T5196] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.294292][ T5196] lo speed is unknown, defaulting to 1000 [ 76.300454][ T5196] lo speed is unknown, defaulting to 1000 [ 76.306595][ T5196] lo speed is unknown, defaulting to 1000 [ 76.312916][ T5196] lo speed is unknown, defaulting to 1000 [ 76.319210][ T5196] lo speed is unknown, defaulting to 1000 [ 76.325284][ T5196] lo speed is unknown, defaulting to 1000 [ 76.331636][ T5196] lo speed is unknown, defaulting to 1000 [ 76.337618][ T5196] lo speed is unknown, defaulting to 1000 [ 76.368691][ T5198] loop1: detected capacity change from 0 to 128 [ 76.393074][ T5198] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.407042][ T5198] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.456198][ T4959] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.941991][ T5207] loop1: detected capacity change from 0 to 512 [ 76.960449][ T5207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.973070][ T5207] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.017753][ T4959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.036417][ T5211] loop2: detected capacity change from 0 to 512 [ 77.048476][ T5211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.060041][ T5213] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.073523][ T5211] EXT4-fs (loop2): 1 orphan inode deleted [ 77.079384][ T5211] EXT4-fs (loop2): 1 truncate cleaned up [ 77.086437][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.134920][ T5218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.151928][ T5222] capability: warning: `syz.2.445' uses 32-bit capabilities (legacy support in use) [ 77.211097][ T5229] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 77.305009][ T5234] netlink: 'syz.1.449': attribute type 3 has an invalid length. [ 77.519361][ T5255] syzkaller0: entered promiscuous mode [ 77.524902][ T5255] syzkaller0: entered allmulticast mode [ 77.561953][ T5257] tipc: Started in network mode [ 77.567020][ T5257] tipc: Node identity ac14140f, cluster identity 4711 [ 77.578236][ T5257] tipc: New replicast peer: 255.255.255.255 [ 77.584458][ T5257] tipc: Enabled bearer , priority 10 [ 77.595082][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 77.604043][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 77.970815][ T5295] loop2: detected capacity change from 0 to 128 [ 77.980358][ T5295] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 78.012486][ T5297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.464'. [ 78.205456][ T5306] syz.0.468 (5306) used obsolete PPPIOCDETACH ioctl [ 78.600066][ T5311] loop3: detected capacity change from 0 to 512 [ 78.611287][ T5311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.633125][ T5311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.645874][ T5311] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.662541][ T5311] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.470: Failed to acquire dquot type 0 [ 78.686426][ T4874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.698769][ T3344] tipc: Node number set to 2886997007 [ 78.704413][ T5316] loop4: detected capacity change from 0 to 512 [ 78.754973][ T5316] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.472: attempt to clear invalid blocks 1 len 1 [ 78.835571][ T5316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.472: bg 0: block 343: padding at end of block bitmap is not set [ 78.892852][ T5316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 78.969500][ T5316] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.472: invalid indirect mapped block 1819239214 (level 0) [ 78.997546][ T5316] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.472: invalid indirect mapped block 1819239214 (level 1) [ 79.032171][ T5316] EXT4-fs (loop4): 1 truncate cleaned up [ 79.051047][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.086009][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.136555][ T5328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.476'. [ 79.156658][ T5330] tipc: Disabling bearer [ 79.204389][ T5334] loop2: detected capacity change from 0 to 512 [ 79.214302][ T5334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.227628][ T5334] EXT4-fs (loop2): 1 truncate cleaned up [ 79.234819][ T5334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.514611][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 79.544682][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 79.608330][ T5343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.615645][ T5343] IPv6: NLM_F_CREATE should be set when creating new route [ 79.683502][ T5342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5342 comm=syz.0.479 [ 79.704515][ T5340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.711807][ T5340] IPv6: NLM_F_CREATE should be set when creating new route [ 79.719898][ T5340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5340 comm=syz.4.480 [ 79.733174][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 79.746517][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.954017][ T5355] loop1: detected capacity change from 0 to 128 [ 79.966145][ T5355] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 80.018073][ T5358] loop1: detected capacity change from 0 to 512 [ 80.066377][ T5358] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.485: attempt to clear invalid blocks 1 len 1 [ 80.082018][ T5358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.485: bg 0: block 343: padding at end of block bitmap is not set [ 80.098031][ T5358] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 80.107485][ T5358] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.485: invalid indirect mapped block 1819239214 (level 0) [ 80.122503][ T5358] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.485: invalid indirect mapped block 1819239214 (level 1) [ 80.138221][ T5358] EXT4-fs (loop1): 1 truncate cleaned up [ 80.144856][ T5358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.203958][ T4959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.599926][ T5374] loop4: detected capacity change from 0 to 512 [ 80.691720][ T5376] netlink: 68 bytes leftover after parsing attributes in process `syz.1.488'. [ 80.714094][ T5374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.741852][ T5374] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.767435][ T5378] pim6reg1: entered promiscuous mode [ 80.773131][ T5378] pim6reg1: entered allmulticast mode [ 80.820554][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 80.841956][ T5384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.849240][ T5384] IPv6: NLM_F_CREATE should be set when creating new route [ 80.877653][ T5384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.885031][ T5384] IPv6: NLM_F_CREATE should be set when creating new route [ 80.902987][ T5384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5384 comm=syz.0.495 [ 80.987354][ T5389] siw: device registration error -23 [ 80.997065][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 81.026935][ T5392] loop3: detected capacity change from 0 to 128 [ 81.035769][ T5392] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 81.189251][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.273586][ T5404] loop2: detected capacity change from 0 to 512 [ 81.307389][ T5404] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.500: attempt to clear invalid blocks 1 len 1 [ 81.326114][ T5404] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.500: bg 0: block 343: padding at end of block bitmap is not set [ 81.344531][ T5404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 81.355536][ T5404] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.500: invalid indirect mapped block 1819239214 (level 0) [ 81.372924][ T5404] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.500: invalid indirect mapped block 1819239214 (level 1) [ 81.389583][ T5404] EXT4-fs (loop2): 1 truncate cleaned up [ 81.395854][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.462083][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 81.462100][ T29] audit: type=1326 audit(1727702259.591:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ff0dff9 code=0x0 [ 81.505891][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.568683][ T5415] loop2: detected capacity change from 0 to 1024 [ 81.600775][ T5415] EXT4-fs: Ignoring removed orlov option [ 81.606565][ T5415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.662688][ T5415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.701316][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.983595][ T5429] loop3: detected capacity change from 0 to 512 [ 81.991538][ T5429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.003869][ T5429] EXT4-fs (loop3): 1 orphan inode deleted [ 82.009727][ T5429] EXT4-fs (loop3): 1 truncate cleaned up [ 82.015843][ T5429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.031639][ T5429] EXT4-fs error (device loop3): ext4_check_all_de:657: inode #12: block 7: comm syz.3.507: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 82.110642][ T5429] EXT4-fs (loop3): Remounting filesystem read-only [ 82.232019][ T4874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.326805][ T5437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.334086][ T5437] IPv6: NLM_F_CREATE should be set when creating new route [ 82.428017][ T5443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.435335][ T5443] IPv6: NLM_F_CREATE should be set when creating new route [ 82.480855][ T5437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5437 comm=syz.2.512 [ 82.496548][ T5445] loop3: detected capacity change from 0 to 512 [ 82.515392][ T5445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.528453][ T5445] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.665849][ T5452] syzkaller0: entered promiscuous mode [ 82.671531][ T5452] syzkaller0: entered allmulticast mode [ 82.717540][ T5456] loop4: detected capacity change from 0 to 1024 [ 82.727838][ T5456] EXT4-fs: Ignoring removed orlov option [ 82.733722][ T5456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.766800][ T4874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.801408][ T29] audit: type=1326 audit(1727702260.931:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.844221][ T29] audit: type=1326 audit(1727702260.971:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.867967][ T29] audit: type=1326 audit(1727702260.971:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.886869][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.891609][ T29] audit: type=1326 audit(1727702260.971:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.926921][ T29] audit: type=1326 audit(1727702260.971:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.951463][ T29] audit: type=1326 audit(1727702261.041:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.974843][ T29] audit: type=1326 audit(1727702261.041:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 82.998444][ T29] audit: type=1326 audit(1727702261.041:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 83.022010][ T29] audit: type=1326 audit(1727702261.041:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff360d2dff9 code=0x7ffc0000 [ 83.060997][ T5467] lo speed is unknown, defaulting to 1000 [ 83.077595][ T5462] loop3: detected capacity change from 0 to 2048 [ 83.114992][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.123622][ T5462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.176248][ T5472] loop4: detected capacity change from 0 to 512 [ 83.199846][ T5472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.214991][ T5472] EXT4-fs (loop4): 1 truncate cleaned up [ 83.221559][ T5472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.235765][ T5476] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 83.264810][ T5476] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1690 with error 28 [ 83.277437][ T5476] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.277437][ T5476] [ 83.287155][ T5476] EXT4-fs (loop3): Total free blocks count 0 [ 83.293219][ T5476] EXT4-fs (loop3): Free/Dirty block details [ 83.299187][ T5476] EXT4-fs (loop3): free_blocks=66060288 [ 83.304754][ T5476] EXT4-fs (loop3): dirty_blocks=2416 [ 83.310452][ T5476] EXT4-fs (loop3): Block reservation details [ 83.316461][ T5476] EXT4-fs (loop3): i_reserved_data_blocks=163 [ 83.562399][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.686912][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1690 with max blocks 2048 with error 28 [ 83.798237][ T5495] __nla_validate_parse: 2 callbacks suppressed [ 83.798258][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 83.817595][ T5495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.825077][ T5495] IPv6: NLM_F_CREATE should be set when creating new route [ 83.836786][ T5495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.844081][ T5495] IPv6: NLM_F_CREATE should be set when creating new route [ 83.854842][ T5495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5495 comm=syz.3.527 [ 83.868391][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 83.910647][ T5501] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 84.090540][ T5512] loop1: detected capacity change from 0 to 1024 [ 84.111059][ T5512] EXT4-fs: Ignoring removed orlov option [ 84.116825][ T5512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.163553][ T5510] syzkaller0: entered promiscuous mode [ 84.169127][ T5510] syzkaller0: entered allmulticast mode [ 84.284837][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.389651][ T4959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.578857][ T5523] loop1: detected capacity change from 0 to 256 [ 84.608930][ T5523] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.619228][ T5523] FAT-fs (loop1): Filesystem has been set read-only [ 84.626200][ T5523] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.647062][ T4959] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 84.654915][ T4959] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 84.746206][ T5530] loop0: detected capacity change from 0 to 512 [ 84.753858][ T5530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.765138][ T5530] EXT4-fs (loop0): 1 truncate cleaned up [ 84.773459][ T5530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.830893][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.942141][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.976354][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 84.985682][ T5540] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 85.015342][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.058183][ T5545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.065883][ T5545] IPv6: NLM_F_CREATE should be set when creating new route [ 85.078559][ T3546] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.098389][ T5538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.105679][ T5538] IPv6: NLM_F_CREATE should be set when creating new route [ 85.134771][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.145565][ T5538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5538 comm=syz.2.545 [ 85.169269][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 85.297380][ T11] bridge_slave_1: left allmulticast mode [ 85.303164][ T11] bridge_slave_1: left promiscuous mode [ 85.309021][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.317334][ T11] bridge_slave_0: left allmulticast mode [ 85.323097][ T11] bridge_slave_0: left promiscuous mode [ 85.329328][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.466409][ T5564] loop0: detected capacity change from 0 to 2048 [ 85.501788][ T5564] loop0: p2 < > p4 [ 85.515680][ T5567] loop4: detected capacity change from 0 to 256 [ 85.522391][ T5564] loop0: p4 size 8192 extends beyond EOD, truncated [ 85.555959][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.660101][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.711791][ T5575] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.722010][ T5575] FAT-fs (loop4): Filesystem has been set read-only [ 85.738545][ T11] bond0 (unregistering): Released all slaves [ 85.754221][ T5541] lo speed is unknown, defaulting to 1000 [ 85.766708][ T5575] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.834584][ T4707] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 85.842396][ T4707] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 85.879190][ T5565] syzkaller0: entered promiscuous mode [ 85.884729][ T5565] syzkaller0: entered allmulticast mode [ 85.906464][ T11] hsr_slave_0: left promiscuous mode [ 85.912709][ T11] hsr_slave_1: left promiscuous mode [ 85.918445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.926004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.933739][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.941219][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.953664][ T11] veth1_macvtap: left promiscuous mode [ 85.959267][ T11] veth0_macvtap: left promiscuous mode [ 85.965013][ T11] veth1_vlan: left promiscuous mode [ 85.970329][ T11] veth0_vlan: left promiscuous mode [ 86.061201][ T11] team0 (unregistering): Port device team_slave_1 removed [ 86.071570][ T11] team0 (unregistering): Port device team_slave_0 removed [ 86.134418][ T3329] lo speed is unknown, defaulting to 1000 [ 86.197061][ T5541] chnl_net:caif_netlink_parms(): no params data found [ 86.248158][ T5605] loop0: detected capacity change from 0 to 1024 [ 86.256583][ T5605] EXT4-fs: Ignoring removed orlov option [ 86.262429][ T5605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.321491][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.323366][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.341030][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.348826][ T5541] bridge_slave_0: entered allmulticast mode [ 86.355267][ T5541] bridge_slave_0: entered promiscuous mode [ 86.368911][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.376050][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.384107][ T5541] bridge_slave_1: entered allmulticast mode [ 86.384782][ T3546] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.391289][ T5541] bridge_slave_1: entered promiscuous mode [ 86.435934][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.446849][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.484556][ T5541] team0: Port device team_slave_0 added [ 86.494048][ T5541] team0: Port device team_slave_1 added [ 86.513291][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.520500][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.546562][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.562496][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.575908][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.582980][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.609050][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.638161][ T5541] hsr_slave_0: entered promiscuous mode [ 86.644430][ T5541] hsr_slave_1: entered promiscuous mode [ 86.650854][ T5541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.658438][ T5541] Cannot create hsr debugfs directory [ 86.684085][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.733298][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.782179][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.886446][ T11] bridge_slave_1: left allmulticast mode [ 86.892234][ T11] bridge_slave_1: left promiscuous mode [ 86.897885][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.907181][ T11] bridge_slave_0: left allmulticast mode [ 86.912990][ T11] bridge_slave_0: left promiscuous mode [ 86.918744][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.031199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.041884][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.052861][ T11] bond0 (unregistering): Released all slaves [ 87.100378][ T11] tipc: Left network mode [ 87.106866][ T11] hsr_slave_0: left promiscuous mode [ 87.113023][ T11] hsr_slave_1: left promiscuous mode [ 87.121252][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.128893][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.136591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.144122][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.225694][ T11] team0 (unregistering): Port device team_slave_1 removed [ 87.236513][ T11] team0 (unregistering): Port device team_slave_0 removed [ 87.294213][ T5541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.306933][ T5541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.316420][ T5541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.325473][ T5541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.372276][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.385829][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.398269][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.405454][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.426613][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.433760][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.508811][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.591864][ T5541] veth0_vlan: entered promiscuous mode [ 87.606219][ T5541] veth1_vlan: entered promiscuous mode [ 87.624555][ T5541] veth0_macvtap: entered promiscuous mode [ 87.640417][ T5541] veth1_macvtap: entered promiscuous mode [ 87.663779][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.674473][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.684477][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.695096][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.705169][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.715710][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.725585][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.736053][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.746013][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.756560][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.766509][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.777018][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.788481][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.798965][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.809610][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.819561][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.830026][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.839900][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.850381][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.860503][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.871006][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.880929][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.891963][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.901822][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.912311][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.923729][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.937826][ T5541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.946723][ T5541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.955493][ T5541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964228][ T5541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.050369][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.057721][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.066691][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 88.066706][ T29] audit: type=1326 audit(1727702266.201:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.096251][ T29] audit: type=1326 audit(1727702266.201:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.111823][ T5744] bridge_slave_1: left allmulticast mode [ 88.125326][ T5744] bridge_slave_1: left promiscuous mode [ 88.131104][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.150926][ T5741] loop1: detected capacity change from 0 to 2048 [ 88.156692][ T29] audit: type=1326 audit(1727702266.251:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.180633][ T29] audit: type=1326 audit(1727702266.251:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.204087][ T29] audit: type=1326 audit(1727702266.251:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.227670][ T29] audit: type=1326 audit(1727702266.251:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.251048][ T29] audit: type=1326 audit(1727702266.251:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.262136][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.274571][ T29] audit: type=1326 audit(1727702266.251:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.274609][ T29] audit: type=1326 audit(1727702266.251:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.333703][ T29] audit: type=1326 audit(1727702266.251:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb163f4dff9 code=0x7ffc0000 [ 88.357400][ T5744] bridge_slave_0: left allmulticast mode [ 88.361554][ T5756] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 88.363143][ T5744] bridge_slave_0: left promiscuous mode [ 88.377751][ T5756] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1442 with error 28 [ 88.383506][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.395677][ T5756] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.395677][ T5756] [ 88.412565][ T5756] EXT4-fs (loop1): Total free blocks count 0 [ 88.418754][ T5756] EXT4-fs (loop1): Free/Dirty block details [ 88.424740][ T5756] EXT4-fs (loop1): free_blocks=66060288 [ 88.430420][ T5756] EXT4-fs (loop1): dirty_blocks=2400 [ 88.435738][ T5756] EXT4-fs (loop1): Block reservation details [ 88.441823][ T5756] EXT4-fs (loop1): i_reserved_data_blocks=176 [ 88.615187][ T1850] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1442 with max blocks 2048 with error 28 [ 88.649442][ T5772] loop3: detected capacity change from 0 to 128 [ 88.685472][ T5772] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.711964][ T5772] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.796146][ T5785] syz.0.558[5785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.796289][ T5785] syz.0.558[5785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.818559][ T4874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.824065][ T5785] syz.0.558[5785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.935633][ T5801] loop3: detected capacity change from 0 to 512 [ 88.953208][ T5805] loop2: detected capacity change from 0 to 512 [ 88.976320][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 88.999814][ T5801] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.007494][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.007970][ T5803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.027497][ T5803] IPv6: NLM_F_CREATE should be set when creating new route [ 89.039480][ T5801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.048784][ T5805] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.090432][ T5805] pim6reg1: entered promiscuous mode [ 89.095858][ T5805] pim6reg1: entered allmulticast mode [ 89.105401][ T5803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.112684][ T5803] IPv6: NLM_F_CREATE should be set when creating new route [ 89.123717][ T5803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5803 comm=syz.1.561 [ 89.141399][ T4874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.154747][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 89.167467][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.203345][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.298532][ T5824] tipc: Started in network mode [ 89.303524][ T5824] tipc: Node identity aaa0bb9da031, cluster identity 4711 [ 89.310911][ T5824] tipc: Enabled bearer , priority 7 [ 89.331488][ T5834] ªªªªªª: renamed from syzkaller0 [ 89.338227][ T5834] tipc: Disabling bearer [ 89.376181][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.383419][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.393600][ T5774] bridge_slave_0: entered allmulticast mode [ 89.513308][ T5850] loop2: detected capacity change from 0 to 2048 [ 89.987635][ T5774] bridge_slave_0: entered promiscuous mode [ 89.995243][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.002489][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.033772][ T5774] bridge_slave_1: entered allmulticast mode [ 90.043616][ T5774] bridge_slave_1: entered promiscuous mode [ 90.068255][ T5850] loop2: p2 < > p4 [ 90.111081][ T5850] loop2: p4 size 8192 extends beyond EOD, truncated [ 90.131985][ T2970] loop2: p2 < > p4 [ 90.136570][ T2970] loop2: p4 size 8192 extends beyond EOD, truncated [ 90.196802][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.211579][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.333781][ T5774] team0: Port device team_slave_0 added [ 90.346782][ T5774] team0: Port device team_slave_1 added [ 90.376738][ T5867] loop0: detected capacity change from 0 to 1024 [ 90.396594][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.402344][ T5865] loop2: detected capacity change from 0 to 2048 [ 90.403617][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.436015][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.445855][ T5867] EXT4-fs: Ignoring removed orlov option [ 90.452507][ T5867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.495481][ T5871] loop1: detected capacity change from 0 to 2048 [ 90.505117][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.512148][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.538299][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.582585][ T5871] loop1: p2 < > p4 [ 90.611962][ T5867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.626938][ T5865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.642250][ T5871] loop1: p4 size 8192 extends beyond EOD, truncated [ 90.655943][ T2970] loop1: p2 < > p4 [ 90.662502][ T2970] loop1: p4 size 8192 extends beyond EOD, truncated [ 90.684640][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 90.855470][ T3546] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.948247][ T5774] hsr_slave_0: entered promiscuous mode [ 90.993495][ T5774] hsr_slave_1: entered promiscuous mode [ 91.009769][ T5890] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 91.025733][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.033338][ T5890] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1866 with error 28 [ 91.033377][ T5890] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.033377][ T5890] [ 91.052886][ T5774] Cannot create hsr debugfs directory [ 91.055669][ T5890] EXT4-fs (loop2): Total free blocks count 0 [ 91.067237][ T5890] EXT4-fs (loop2): Free/Dirty block details [ 91.073205][ T5890] EXT4-fs (loop2): free_blocks=66060288 [ 91.078862][ T5890] EXT4-fs (loop2): dirty_blocks=2448 [ 91.084161][ T5890] EXT4-fs (loop2): Block reservation details [ 91.090203][ T5890] EXT4-fs (loop2): i_reserved_data_blocks=184 [ 91.112779][ T5886] tipc: New replicast peer: 255.255.255.255 [ 91.118974][ T5886] tipc: Enabled bearer , priority 10 [ 91.201332][ T5901] syz.3.577[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.201475][ T5901] syz.3.577[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.276106][ T5901] syz.3.577[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.294131][ T5906] loop1: detected capacity change from 0 to 1024 [ 91.394095][ T5906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.419234][ T5906] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.462471][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1866 with max blocks 2048 with error 28 [ 91.483719][ T5915] loop0: detected capacity change from 0 to 4096 [ 91.512936][ T5925] netlink: 240 bytes leftover after parsing attributes in process `syz.3.583'. [ 91.529627][ T5915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.532274][ T5541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.593696][ T5925] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.644330][ T5937] loop2: detected capacity change from 0 to 512 [ 91.680707][ T5925] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.711198][ T5937] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.726296][ T5774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.738424][ T5774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.748529][ T5774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.760691][ T5774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.770008][ T5936] tipc: Started in network mode [ 91.775057][ T5936] tipc: Node identity ea3cc5c74785, cluster identity 4711 [ 91.782369][ T5936] tipc: Enabled bearer , priority 7 [ 91.817251][ T5925] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.836759][ T5943] ªªªªªª: renamed from syzkaller0 [ 91.845656][ T5943] tipc: Disabling bearer [ 91.893424][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.907595][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.918028][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.925351][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.960811][ T5925] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.001485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.008711][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.041583][ T5960] loop1: detected capacity change from 0 to 1024 [ 92.064109][ T5960] EXT4-fs: Ignoring removed orlov option [ 92.068047][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.069936][ T5960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.109311][ T5925] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.112980][ T5947] loop0: detected capacity change from 0 to 8192 [ 92.127441][ T5947] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007' [ 92.151420][ T5925] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.163577][ T5925] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176065][ T5925] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.239071][ T3460] tipc: Node number set to 177322909 [ 92.253759][ T5969] loop2: detected capacity change from 0 to 512 [ 92.264189][ T5969] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.452793][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.723886][ T5774] veth0_vlan: entered promiscuous mode [ 92.742343][ T5774] veth1_vlan: entered promiscuous mode [ 92.767366][ T5774] veth0_macvtap: entered promiscuous mode [ 92.785580][ T5774] veth1_macvtap: entered promiscuous mode [ 92.824704][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.835252][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.845144][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.855695][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.865706][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.876411][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.886326][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.896974][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.906964][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.917567][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.927432][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.937935][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.947812][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.958452][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.970851][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.996922][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.007516][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.017489][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.028039][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.037897][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.048449][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.058768][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.069303][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.079202][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.089683][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.099826][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.110483][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.120433][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.130996][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.146847][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.160270][ T5774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169127][ T5774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177976][ T5774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.186968][ T5774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280599][ T6041] random: crng reseeded on system resumption [ 93.392570][ T6048] loop0: detected capacity change from 0 to 512 [ 93.441587][ T6048] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.503667][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 93.503691][ T29] audit: type=1326 audit(1727702271.631:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.598946][ T29] audit: type=1326 audit(1727702271.661:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.622459][ T29] audit: type=1326 audit(1727702271.661:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.646052][ T29] audit: type=1326 audit(1727702271.661:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.669339][ T29] audit: type=1326 audit(1727702271.661:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.693124][ T29] audit: type=1326 audit(1727702271.661:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.716421][ T29] audit: type=1326 audit(1727702271.661:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.740103][ T29] audit: type=1326 audit(1727702271.661:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.763545][ T29] audit: type=1326 audit(1727702271.661:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 93.764292][ T6064] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 93.786913][ T29] audit: type=1326 audit(1727702271.671:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 94.154577][ T6067] syz.1.592[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.154688][ T6067] syz.1.592[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.181020][ T6073] loop2: detected capacity change from 0 to 1024 [ 94.181849][ T6069] loop0: detected capacity change from 0 to 1024 [ 94.206227][ T6071] loop4: detected capacity change from 0 to 2048 [ 94.212782][ T6067] syz.1.592[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.214324][ T6069] EXT4-fs: Ignoring removed orlov option [ 94.217953][ T6073] EXT4-fs: Ignoring removed orlov option [ 94.226049][ T6069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.244241][ T6073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.289564][ T6069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 94.320611][ T6069] System zones: 0-1, 3-12 [ 94.364558][ T6082] loop1: detected capacity change from 0 to 512 [ 94.390242][ T6082] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.410990][ T6081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 94.428113][ T6081] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.440808][ T6081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.440808][ T6081] [ 94.450598][ T6081] EXT4-fs (loop4): Total free blocks count 0 [ 94.456765][ T6081] EXT4-fs (loop4): Free/Dirty block details [ 94.462787][ T6081] EXT4-fs (loop4): free_blocks=66060288 [ 94.468437][ T6081] EXT4-fs (loop4): dirty_blocks=2224 [ 94.473880][ T6081] EXT4-fs (loop4): Block reservation details [ 94.480000][ T6081] EXT4-fs (loop4): i_reserved_data_blocks=158 [ 94.534208][ T6094] loop2: detected capacity change from 0 to 128 [ 94.554606][ T6097] netlink: 240 bytes leftover after parsing attributes in process `syz.1.599'. [ 94.586275][ T6097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.615326][ T6094] syz.2.597: attempt to access beyond end of device [ 94.615326][ T6094] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 94.644070][ T6094] syz.2.597: attempt to access beyond end of device [ 94.644070][ T6094] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 94.659973][ T6094] syz.2.597: attempt to access beyond end of device [ 94.659973][ T6094] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.673349][ T6094] syz.2.597: attempt to access beyond end of device [ 94.673349][ T6094] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 94.688484][ T6097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.742475][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 94.755396][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.755396][ T36] [ 94.804644][ T6101] loop2: detected capacity change from 0 to 8192 [ 94.812904][ T6101] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007' [ 94.878490][ T6097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.904966][ T6106] loop2: detected capacity change from 0 to 512 [ 94.919183][ T6106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.965472][ T6097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.076283][ T6106] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.114157][ T6097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.123160][ T6106] EXT4-fs (loop2): 1 truncate cleaned up [ 95.131986][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 95.147215][ T6097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.240107][ T6097] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.298255][ T6115] syz.4.610[6115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.298434][ T6115] syz.4.610[6115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.358446][ T6115] syz.4.610[6115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.375516][ T6097] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.462874][ T6124] loop1: detected capacity change from 0 to 1024 [ 95.475910][ T6124] EXT4-fs: Ignoring removed orlov option [ 95.502240][ T6124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.531668][ T6124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 95.540030][ T6124] System zones: 0-1, 3-12 [ 95.741167][ T6157] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.744138][ T6156] loop3: detected capacity change from 0 to 128 [ 95.750563][ T6154] loop4: detected capacity change from 0 to 512 [ 95.787459][ T6154] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.850247][ T6156] syz.3.617: attempt to access beyond end of device [ 95.850247][ T6156] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 95.871683][ T6163] loop2: detected capacity change from 0 to 2048 [ 95.910890][ T6167] loop4: detected capacity change from 0 to 512 [ 95.935791][ T6167] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.954916][ T6156] syz.3.617: attempt to access beyond end of device [ 95.954916][ T6156] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 95.968874][ T6156] syz.3.617: attempt to access beyond end of device [ 95.968874][ T6156] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 95.971211][ T6167] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 95.982527][ T6156] syz.3.617: attempt to access beyond end of device [ 95.982527][ T6156] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 95.994144][ T6173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 96.025251][ T6173] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1244 with error 28 [ 96.038057][ T6173] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.038057][ T6173] [ 96.044220][ T6167] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.620: invalid indirect mapped block 2683928664 (level 1) [ 96.048074][ T6173] EXT4-fs (loop2): Total free blocks count 0 [ 96.067965][ T6173] EXT4-fs (loop2): Free/Dirty block details [ 96.073926][ T6173] EXT4-fs (loop2): free_blocks=66060288 [ 96.079587][ T6173] EXT4-fs (loop2): dirty_blocks=1552 [ 96.084953][ T6173] EXT4-fs (loop2): Block reservation details [ 96.091074][ T6173] EXT4-fs (loop2): i_reserved_data_blocks=100 [ 96.134802][ T6167] EXT4-fs (loop4): Remounting filesystem read-only [ 96.148878][ T6167] EXT4-fs (loop4): 1 truncate cleaned up [ 96.155023][ T6167] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 96.334069][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1244 with max blocks 2048 with error 28 [ 96.346903][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.346903][ T28] [ 96.401920][ T6180] loop1: detected capacity change from 0 to 2048 [ 96.408646][ T6182] syz.3.624[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.408795][ T6182] syz.3.624[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.425568][ T6182] syz.3.624[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.566100][ T6187] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 96.594020][ T6187] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.606604][ T6187] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.606604][ T6187] [ 96.616325][ T6187] EXT4-fs (loop1): Total free blocks count 0 [ 96.622472][ T6187] EXT4-fs (loop1): Free/Dirty block details [ 96.628393][ T6187] EXT4-fs (loop1): free_blocks=66060288 [ 96.634031][ T6187] EXT4-fs (loop1): dirty_blocks=3168 [ 96.639397][ T6187] EXT4-fs (loop1): Block reservation details [ 96.645469][ T6187] EXT4-fs (loop1): i_reserved_data_blocks=225 [ 96.727225][ T6190] loop2: detected capacity change from 0 to 4096 [ 96.737427][ T6193] loop3: detected capacity change from 0 to 512 [ 96.770626][ T6193] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 96.879560][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 96.929116][ C0] vcan0: j1939_session_tx_dat: 0xffff88811e482c00: queue data error: -100 [ 97.236783][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 97.249646][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.249646][ T11] [ 97.365692][ T6209] loop1: detected capacity change from 0 to 512 [ 97.374022][ T6209] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.396251][ T6209] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.413466][ T6209] EXT4-fs (loop1): 1 truncate cleaned up [ 97.757007][ T6242] loop0: detected capacity change from 0 to 128 [ 97.843816][ T6242] syz.0.645: attempt to access beyond end of device [ 97.843816][ T6242] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 97.920698][ T6242] syz.0.645: attempt to access beyond end of device [ 97.920698][ T6242] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 98.283308][ T6257] loop1: detected capacity change from 0 to 512 [ 98.300503][ T6261] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.323385][ T6257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.335601][ T6257] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 98.344331][ T6257] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.636: invalid indirect mapped block 2683928664 (level 1) [ 98.346148][ T6267] loop4: detected capacity change from 0 to 164 [ 98.360675][ T6257] EXT4-fs (loop1): Remounting filesystem read-only [ 98.373825][ T6257] EXT4-fs (loop1): 1 truncate cleaned up [ 98.381774][ T6257] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 98.389656][ T6267] isofs_fill_super: root inode is not a directory. Corrupted media? [ 98.508113][ T6274] loop0: detected capacity change from 0 to 2048 [ 98.522998][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 98.523015][ T29] audit: type=1326 audit(1727702276.651:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f142471cc8a code=0x7ffc0000 [ 98.568139][ T29] audit: type=1326 audit(1727702276.691:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f142471cc8a code=0x7ffc0000 [ 98.591427][ T29] audit: type=1326 audit(1727702276.691:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f142471c897 code=0x7ffc0000 [ 98.614766][ T29] audit: type=1326 audit(1727702276.691:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f142471f79a code=0x7ffc0000 [ 98.646239][ T6281] loop4: detected capacity change from 0 to 128 [ 98.658022][ T6281] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.666020][ T6281] FAT-fs (loop4): Filesystem has been set read-only [ 98.672834][ T6281] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.672933][ T29] audit: type=1326 audit(1727702276.801:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f142471c990 code=0x7ffc0000 [ 98.680844][ T6281] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.712125][ T29] audit: type=1326 audit(1727702276.801:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f142471cd77 code=0x7ffc0000 [ 98.735479][ T29] audit: type=1326 audit(1727702276.801:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f142471c990 code=0x7ffc0000 [ 98.746588][ T6284] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 98.758870][ T29] audit: type=1326 audit(1727702276.801:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 98.767242][ T6284] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 98.790645][ T29] audit: type=1326 audit(1727702276.801:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 98.825497][ T29] audit: type=1326 audit(1727702276.821:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f142471dff9 code=0x7ffc0000 [ 98.853068][ T6284] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 98.866225][ T6284] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.866225][ T6284] [ 98.876180][ T6284] EXT4-fs (loop0): Total free blocks count 0 [ 98.882213][ T6284] EXT4-fs (loop0): Free/Dirty block details [ 98.888167][ T6284] EXT4-fs (loop0): free_blocks=66060288 [ 98.893779][ T6284] EXT4-fs (loop0): dirty_blocks=2272 [ 98.899144][ T6284] EXT4-fs (loop0): Block reservation details [ 98.905192][ T6284] EXT4-fs (loop0): i_reserved_data_blocks=142 [ 99.234402][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 99.247197][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.247197][ T28] [ 99.358881][ T6293] loop0: detected capacity change from 0 to 2048 [ 99.518637][ T6302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 99.538693][ T6302] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 99.551370][ T6302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.551370][ T6302] [ 99.561120][ T6302] EXT4-fs (loop0): Total free blocks count 0 [ 99.567130][ T6302] EXT4-fs (loop0): Free/Dirty block details [ 99.573177][ T6302] EXT4-fs (loop0): free_blocks=66060288 [ 99.578792][ T6302] EXT4-fs (loop0): dirty_blocks=4352 [ 99.584138][ T6302] EXT4-fs (loop0): Block reservation details [ 99.590176][ T6302] EXT4-fs (loop0): i_reserved_data_blocks=297 [ 99.723860][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 99.736743][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.736743][ T28] [ 100.017772][ T6309] loop2: detected capacity change from 0 to 2048 [ 100.114059][ T6314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 100.144774][ T6314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.157459][ T6314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.157459][ T6314] [ 100.167259][ T6314] EXT4-fs (loop2): Total free blocks count 0 [ 100.173360][ T6314] EXT4-fs (loop2): Free/Dirty block details [ 100.179418][ T6314] EXT4-fs (loop2): free_blocks=66060288 [ 100.184977][ T6314] EXT4-fs (loop2): dirty_blocks=2624 [ 100.190310][ T6314] EXT4-fs (loop2): Block reservation details [ 100.196496][ T6314] EXT4-fs (loop2): i_reserved_data_blocks=164 [ 100.220254][ T6316] loop1: detected capacity change from 0 to 164 [ 100.239808][ T6316] isofs_fill_super: root inode is not a directory. Corrupted media? [ 100.291728][ T6319] loop1: detected capacity change from 0 to 128 [ 100.467377][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 100.480322][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.480322][ T28] [ 100.927705][ T6323] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 101.001291][ T6330] loop1: detected capacity change from 0 to 128 [ 101.014840][ T6330] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.022925][ T6330] FAT-fs (loop1): Filesystem has been set read-only [ 101.030150][ T6330] bio_check_eod: 5 callbacks suppressed [ 101.030168][ T6330] syz.1.658: attempt to access beyond end of device [ 101.030168][ T6330] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 101.058677][ T6330] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.064040][ T6332] loop2: detected capacity change from 0 to 2048 [ 101.066646][ T6330] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 101.083254][ T6330] syz.1.658: attempt to access beyond end of device [ 101.083254][ T6330] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.096543][ T6330] syz.1.658: attempt to access beyond end of device [ 101.096543][ T6330] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.112409][ T6332] EXT4-fs: Ignoring removed nobh option [ 101.142061][ T6332] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.219053][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 101.271265][ T4719] EXT4-fs unmount: 43 callbacks suppressed [ 101.271281][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.428702][ C0] ================================================================== [ 103.436830][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 103.445013][ C0] [ 103.447332][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 103.454717][ C0] __tmigr_cpu_activate+0x55/0x200 [ 103.459851][ C0] tmigr_cpu_activate+0x8a/0xc0 [ 103.464699][ C0] timer_clear_idle+0x28/0x100 [ 103.469471][ C0] tick_nohz_restart_sched_tick+0x22/0x110 [ 103.475297][ C0] tick_nohz_idle_exit+0xfe/0x1d0 [ 103.480340][ C0] do_idle+0x1ee/0x230 [ 103.484425][ C0] cpu_startup_entry+0x25/0x30 [ 103.489374][ C0] start_secondary+0x96/0xa0 [ 103.493962][ C0] common_startup_64+0x12c/0x137 [ 103.498916][ C0] [ 103.501229][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 103.508763][ C0] tmigr_handle_remote+0x26e/0x940 [ 103.513874][ C0] run_timer_softirq+0x5f/0x70 [ 103.518646][ C0] handle_softirqs+0xbf/0x280 [ 103.523338][ C0] irq_exit_rcu+0x3e/0x90 [ 103.527766][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 103.533412][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.539412][ C0] __tsan_read8+0x104/0x180 [ 103.543933][ C0] _raw_spin_lock_irqsave+0x3c/0xb0 [ 103.549126][ C0] bpf_lru_pop_free+0x100/0xd30 [ 103.553990][ C0] __htab_lru_percpu_map_update_elem+0xfe/0x630 [ 103.560237][ C0] bpf_percpu_hash_update+0x5e/0xa0 [ 103.565436][ C0] bpf_map_update_value+0x2b1/0x350 [ 103.570636][ C0] generic_map_update_batch+0x401/0x520 [ 103.576203][ C0] bpf_map_do_batch+0x28c/0x3f0 [ 103.581073][ C0] __sys_bpf+0x2e5/0x7a0 [ 103.585313][ C0] __x64_sys_bpf+0x43/0x50 [ 103.589730][ C0] x64_sys_call+0x2625/0x2d60 [ 103.594405][ C0] do_syscall_64+0xc9/0x1c0 [ 103.598903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.604818][ C0] [ 103.607148][ C0] value changed: 0x00 -> 0x01 [ 103.611813][ C0] [ 103.614125][ C0] Reported by Kernel Concurrency Sanitizer on: [ 103.620266][ C0] CPU: 0 UID: 0 PID: 6291 Comm: syz.4.647 Tainted: G W 6.12.0-rc1-syzkaller #0 [ 103.630597][ C0] Tainted: [W]=WARN [ 103.634407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.644455][ C0] ==================================================================