last executing test programs: 7.633103911s ago: executing program 2 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 7.599123094s ago: executing program 2 (id=485): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000001580)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001da000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00001da000/0x2000)=nil, &(0x7f00001db000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00001db000/0x4000)=nil, &(0x7f00001db000/0x4000)=nil, &(0x7f00000015c0)="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", 0x1000, r0}, 0x68) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r2}, 0x10) rt_sigaction(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0xb}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) 7.533678749s ago: executing program 2 (id=488): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="510501c6"], 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7.125479343s ago: executing program 1 (id=496): socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 7.124749643s ago: executing program 1 (id=498): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 7.112200544s ago: executing program 1 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = io_uring_setup(0x7d5, &(0x7f0000000300)) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 7.037585721s ago: executing program 1 (id=503): ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 7.037110261s ago: executing program 1 (id=504): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000780)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@nodiscard}]}, 0x8, 0x61f, &(0x7f00000008c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair(0x18, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x60, 0x0) 6.989195635s ago: executing program 1 (id=505): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x2}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 6.587072948s ago: executing program 2 (id=516): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x2}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 6.305067962s ago: executing program 2 (id=510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) 5.885213627s ago: executing program 2 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, &(0x7f0000000600)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r2, 0x0, 0x100000000000000}, 0x38) 1.130316475s ago: executing program 0 (id=596): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x7fff}) 1.088953319s ago: executing program 0 (id=599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.06995044s ago: executing program 3 (id=601): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.044075652s ago: executing program 4 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = fsmount(r3, 0x0, 0x0) openat(r4, &(0x7f0000000340)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.032951883s ago: executing program 3 (id=603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x3ec0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.009629375s ago: executing program 4 (id=604): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc240, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.005088406s ago: executing program 0 (id=605): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'veth1_to_batadv\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) 937.217031ms ago: executing program 0 (id=606): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="000020000008000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 936.818812ms ago: executing program 0 (id=607): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$eJzs3TFoE3scB/DfJU372oZH33vLgwfvPRARLRTdBAfrolCQIg6CChURJ2mF2uLWOrk46KzSyUXEzeooLsVFEZyqdKiLoMXB0kGHSHJpbW3F0sSc9D4fuCR397/73ZH7/i8E7i6A3OqJiP6IKEZEb0SUIiJZ3eD/dOipj051zgxFVCrHPyS1dul4anm57oiYjIj90b6ymvHpU/NLs0d2XRsr7bwzfbKzRbu3xsL83NHF24NXHwzsG3/+8t1gEv1Rrs9bvR/NlGwwrS2J+PNnFPtFJG1ZbwGbcezy/VfV3P8VETtq+S9FIdIv7/po+5NS7Ln1vWVvvH/xTyu3FWi+SqVUPQdOVoDcKUREOZJCX0SknwuFvr70N/zrYlfhwsjopd7zI2PD57LuqYBmKUfMHX7U8bD7m/y/Lab5B7avcvpXX81iMdttAVqrev7vPTOxO+Qfckf+Ybtp33RL+Yf8kn/IL/mH/JJ/yC/5h/ySf8gv+Yf8kn/Ir9X5BwDypdKxteuGl29s0+zrkYHWybr/AQAAAAAAAAAAAAAAAAAA1pvqnBlaHlpV8+nNiIVDEdG2Uf1i7XnEEb/VXrs+JtVmK5J0sYac/q/BFTToXsZXX//+Jtv6z/7Ntv7EcMTklYhYqk9Yc/wl9eNv6/74wfzS2QYLNOjAiWzrf76bbf2B2YjH1f5n70b9TyH+rr2v738OpvdP+/oA5S26+KnBFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAyXwIAAP//VeRflA==") syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c73657373696f6e3d307830303030300036c031303030303063382c649419de3a4de06d7064653d3078666666666666666637666666666666662c636865636b3d72656c"], 0x2, 0x65b, &(0x7f00000000c0)="$eJzs3V9v29b9x/EPZdmW/fshKLahCII0Pk1WwME8RZIbB0Z2MY6ibHaSKJD0YAMDiqyxiyByuiUZ0Pgm883+AN0T2F1vdrEHsWHXexa7HFBsdwV2o4H/bNnWPydy3GXvl9DyiPyS53tIhQe0xEMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTr1SqVpqeu2tbTOcUw/81ojl6dZmdTst3B5br2TF/6lU0tV01tXvHC9+N/7fTV1P311XKZ6UdPB/775z/9vFQr7+iIRehc67wWcvDh4/6HZ3n045kW8AFSYI2nDbXuh7LXvDNV7om/W1tcqdzUZoGl7TDXfCyG0ZJ3ALkR+YZee2qa6vr/6/W97xt9obdbvp5jPvfb9WqayZj+azw3/no3LobHrNptfeSGLixXHMPfPFT9MQ124Zs/eou7s6Lsk4qDpJUG1cUK1Sq1WrtVp17e763XuVSvHMjMopOhMx9Q8t/stM7+QNvKZC3P//3ZKaKqmtLW3LDHw5qiuQr9aQ5Zm8///gjjuy3v7+P+/lrx4vvqak/7+RvrsxrP8fkouRseIVBi2xhsx/tdczvdCBHuuBuupqV0+ns92l6WV4sa8NqSh5CuXLU0u2NuTKZHOM1rWmNVX0sTbVUCijhjw15SrUjkJFctVKjkkgV7Yi+QpktCxHt2VU1brWtSojV2XtyNeW2tpQXba+7vV6e3qU7PfVETkqD6pOElTLZiz0fU7yz9Kw/v9nL9PP6bj+P46g/3+b5eevSWKAS9fLrv/PaelisgEAAAAAABfBSv76biXf3b8nqaeG13Qrl50WAAAAAACYouSb/+vxZDYuvSdryPV/783nBgAAAAAApsNK7rGzJC1qSe+kM9M7oSb5EcDMRecHAAAAAABeX/L9/405qZeMvbYk62gkFG4CAAAAAADgLfHbvjH2i/kYu738a/2CpLAzb/35ny8VzFqHne3vWvt2vMTez2LO/AIgalyzrmQD9SaTOUnJO8e9bmXjA2eDYFrpwL7SV3sFHeWhQWP9WsGpBOZm8j9fjEtgrZi90xd6P415P6v34UFByZK0lsWG13TLjt+8X5VtXylE7nb0yyePCv3t3HvU3S1/8ln3YZLLYTzrcD/O4+WJdArjcnmejLeQ3HMxqMULauRV/q7dWrSSeit5+2dk7xf6K5qs/b/WzTTm5mI6XTzIj0DS/lLc/mo5OWRHrf88GR3COs6ierrlgw7EkCxKSRa30phby7fSSZ5flsX3ZqRa+eQx+FyKPwHHWdT6sxi/L6x/ndkXY7KI98VqnMVf4w0NyWL1fFmcOSIAcFn2jnuhZBDzs2Psn+53X+UstzfqST6FuHf/4clanv+hl95wOCMVs+8mRtZSUnxGX05j5pScWIvXBpzRK1m/UtKQM3rlNXq3uK4/HT8DKUv7TBb/7vV696tJvb8/1at+Ga/w5dB6w2ZtJt6Fd57v/zwZAD/26e6nu09qtdW1yoeVyt2aZpNmZBP6HgDAAOOfsTM2wvrw6Kr64T8+SEsnerxvHf2koKxP9Jm6eqiV/BECS4O3upit8ytJK2evWuPYBelk7K6qWhl6VZf0pX2xtaPYWeWrnOypj2NXL/goAADwZt0c0w9P0v+v5Nfdy9cGXncv9v2kcOXME4KHxVbf8J4AAOB/hxt8ZS1Gv7GCwOt8XF1fr9rRpmsC3/mxCbz6hmu8duQGzqbd3nBNJ/Aj3/GbphNo3qu7oQm3Oh0/iEzDD0zHD73t5MnvJnv0e+i27HbkOWGn6dqhaxy/HdlOZOpe6JjO1o+aXrjpBsnKYcd1vIbn2JHnt03obwWOWzYmdN2+QK/utiOv4cXFtukEXssOdsxP/OZWyzV1N3QCrxP56Qbzurx2ww9ayWbL6p37QYcAALyNnr04ePyg2919OqJwqPExWWFu0AYvu40AAOAkemkAAAAAAAAAAAAAAAAAAAAAAL75Jrn/71yF2UE3C0pHc35xZaLtWJp2YucpFF599b+NiFk4mpPv/v6YwyFrff2XNPYiWqq0UJz+lhekyW8bnULhB3vpXhoaEy8cuGj+6FgUp//PIS48+ePxnFL/bun1er3Rq8+f3Idzoxp4slCU9HTuNQ7BJZyMALxR/wkAAP//5NA+xA==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 816.177592ms ago: executing program 3 (id=608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 807.593152ms ago: executing program 0 (id=609): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 793.453253ms ago: executing program 3 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x2}]) 792.764753ms ago: executing program 4 (id=611): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000480)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0) 513.536877ms ago: executing program 3 (id=612): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000280), 0x45, 0x779, &(0x7f00000007c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x1000000, 0x10000}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) 513.108007ms ago: executing program 4 (id=613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0xa0002016}) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 399.992036ms ago: executing program 4 (id=614): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000240)) close(r2) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) 25.902608ms ago: executing program 4 (id=615): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f00000002c0)={[{@user_xattr}, {@nouid32}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@dioread_nolock}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x5452, &(0x7f0000000140)) 0s ago: executing program 3 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) kernel console output (not intermixed with test programs): ongly recommended to keep mac addresses unique to avoid problems! [ 26.286607][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.298564][ T3264] veth0_vlan: entered promiscuous mode [ 26.307521][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.318089][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.329272][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.338762][ T3262] veth0_macvtap: entered promiscuous mode [ 26.351874][ T3264] veth1_vlan: entered promiscuous mode [ 26.362140][ T3262] veth1_macvtap: entered promiscuous mode [ 26.377987][ T3268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.386757][ T3268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.395546][ T3268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.404284][ T3268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.420520][ T3264] veth0_macvtap: entered promiscuous mode [ 26.434203][ T3263] veth0_macvtap: entered promiscuous mode [ 26.441581][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 26.441594][ T29] audit: type=1400 audit(1725868597.682:126): avc: denied { create } for pid=3402 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.447473][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.453909][ T29] audit: type=1400 audit(1725868597.682:127): avc: denied { create } for pid=3402 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.466983][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.506359][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.516924][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.527799][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.542254][ T3263] veth1_macvtap: entered promiscuous mode [ 26.549456][ T3264] veth1_macvtap: entered promiscuous mode [ 26.561611][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.572143][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.581960][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.592380][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.603415][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.612589][ T3262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.621315][ T3262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.630129][ T3262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.638829][ T3262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.659466][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.670020][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.679912][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.690421][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.700223][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.710632][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.721251][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.730967][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.741579][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.751497][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.762036][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.772019][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.782456][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.792282][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.802843][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.813486][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.825104][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.835716][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.845683][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.856139][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.865945][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.876665][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.888490][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.901944][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.905543][ T29] audit: type=1400 audit(1725868598.142:128): avc: denied { create } for pid=3405 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.912423][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.941319][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.951906][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.952661][ T29] audit: type=1400 audit(1725868598.182:129): avc: denied { connect } for pid=3405 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.961716][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.961729][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.961737][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.961748][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.983130][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.991430][ T29] audit: type=1400 audit(1725868598.182:130): avc: denied { bind } for pid=3405 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.003266][ T3264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.011814][ T29] audit: type=1400 audit(1725868598.182:131): avc: denied { write } for pid=3405 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.021600][ T3264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.084344][ T3264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.093028][ T3264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.096046][ T29] audit: type=1400 audit(1725868598.212:132): avc: denied { create } for pid=3407 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.105821][ T3263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.120982][ T29] audit: type=1400 audit(1725868598.222:133): avc: denied { create } for pid=3407 comm="syz.3.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.129639][ T3263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.129667][ T3263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.129747][ T3263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.150577][ T29] audit: type=1400 audit(1725868598.222:134): avc: denied { map } for pid=3407 comm="syz.3.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.200695][ T29] audit: type=1400 audit(1725868598.222:135): avc: denied { read write } for pid=3407 comm="syz.3.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.283496][ T3415] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 27.472383][ T3436] loop3: detected capacity change from 0 to 512 [ 27.487105][ T3436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.500241][ T3436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 27.525644][ T3436] EXT4-fs (loop3): 1 orphan inode deleted [ 27.531486][ T3436] EXT4-fs (loop3): 1 truncate cleaned up [ 27.558461][ T3436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.591111][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.638772][ T3446] ALSA: seq fatal error: cannot create timer (-19) [ 27.745598][ T3460] syzkaller0: entered promiscuous mode [ 27.751177][ T3460] syzkaller0: entered allmulticast mode [ 27.770646][ T3466] IPv6: Can't replace route, no match found [ 27.797981][ T3468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.113218][ C0] hrtimer: interrupt took 57960 ns [ 28.149981][ T3418] syz.0.10 (3418) used greatest stack depth: 11368 bytes left [ 28.196490][ T3424] syz.4.5 (3424) used greatest stack depth: 11264 bytes left [ 28.462295][ T3489] netlink: 140 bytes leftover after parsing attributes in process `syz.1.34'. [ 28.690484][ T3493] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 28.710112][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 28.718862][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 28.942910][ T3509] loop1: detected capacity change from 0 to 1024 [ 28.952031][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.976648][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.138954][ T3524] syzkaller0: entered promiscuous mode [ 29.144556][ T3524] syzkaller0: entered allmulticast mode [ 29.360003][ T3530] loop0: detected capacity change from 0 to 512 [ 29.722738][ T3550] mmap: syz.3.59 (3550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.040349][ T3569] loop1: detected capacity change from 0 to 256 [ 30.182330][ T3577] syz.0.71[3577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.182382][ T3577] syz.0.71[3577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.203213][ T3576] netlink: 140 bytes leftover after parsing attributes in process `syz.1.72'. [ 30.243949][ T3581] loop0: detected capacity change from 0 to 2048 [ 30.251311][ T3581] EXT4-fs (loop0): unsupported descriptor size 0 [ 30.300194][ T3585] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.369054][ T3585] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 30.469706][ T3601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.79'. [ 30.503012][ T3604] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 30.577162][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 30.585897][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 30.595116][ T3608] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744071562526724) [ 30.605808][ T3608] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 30.779438][ T3628] loop2: detected capacity change from 0 to 256 [ 30.814766][ T3631] loop2: detected capacity change from 0 to 1024 [ 30.821833][ T3631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.832215][ T3631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.928778][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.975502][ T3639] syz.3.94[3639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.975554][ T3639] syz.3.94[3639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.121386][ T3649] loop1: detected capacity change from 0 to 2048 [ 31.144936][ T3647] vhci_hcd: invalid port number 23 [ 31.146789][ T3649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.150063][ T3647] vhci_hcd: invalid port number 23 [ 31.179951][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.216302][ T3655] loop2: detected capacity change from 0 to 1024 [ 31.222945][ T3655] EXT4-fs: Ignoring removed nobh option [ 31.235303][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.332081][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.434637][ T3680] syz.2.110[3680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.434715][ T3680] syz.2.110[3680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.467257][ T3685] loop0: detected capacity change from 0 to 2048 [ 31.497241][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.545154][ T3694] loop3: detected capacity change from 0 to 1024 [ 31.553070][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.576341][ T3694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.642116][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 31.642130][ T29] audit: type=1400 audit(1725868602.882:311): avc: denied { create } for pid=3700 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.734878][ T29] audit: type=1400 audit(1725868602.932:312): avc: denied { setopt } for pid=3700 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.754200][ T29] audit: type=1400 audit(1725868602.932:313): avc: denied { connect } for pid=3700 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.776470][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.824384][ T3705] Zero length message leads to an empty skb [ 31.896463][ T3713] loop0: detected capacity change from 0 to 128 [ 31.908219][ T3713] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.938938][ T3713] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.941539][ T29] audit: type=1400 audit(1725868603.182:314): avc: denied { bind } for pid=3715 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.990997][ T29] audit: type=1400 audit(1725868603.182:315): avc: denied { setopt } for pid=3715 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.033488][ T29] audit: type=1400 audit(1725868603.272:316): avc: denied { ioctl } for pid=3712 comm="syz.0.122" path="/18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.133093][ T3270] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.160149][ T3728] loop4: detected capacity change from 0 to 2048 [ 32.178564][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.210451][ T29] audit: type=1326 audit(1725868603.452:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1438cef9 code=0x7ffc0000 [ 32.234454][ T3733] syz.0.127 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.254356][ T29] audit: type=1326 audit(1725868603.452:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1438cef9 code=0x7ffc0000 [ 32.277948][ T29] audit: type=1326 audit(1725868603.482:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fde1438cef9 code=0x7ffc0000 [ 32.307957][ T29] audit: type=1326 audit(1725868603.522:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1438cef9 code=0x7ffc0000 [ 32.339648][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.347175][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.355076][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.362640][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.370206][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.377620][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.385082][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.392466][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.399894][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.407486][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.414975][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.422362][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.429840][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.437515][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.445469][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.452882][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.460388][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.467802][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.475209][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.482618][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.490174][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.497640][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.505330][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.512712][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.520340][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.528071][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.535577][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.543041][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.550436][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.557868][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.565549][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.572934][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.580337][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.587725][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.595335][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.602860][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.610293][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.617870][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.625373][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.632872][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.640357][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.647774][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.655188][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.663691][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.684528][ T3748] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 32.696786][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.825194][ T3761] loop1: detected capacity change from 0 to 764 [ 32.868310][ T3755] team0: Device vlan2 is already an upper device of the team interface [ 32.929605][ T3775] syz.1.146[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.929665][ T3775] syz.1.146[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.951310][ T3775] syz.1.146[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.985771][ T3775] syz.1.146[3775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.019353][ T3777] loop3: detected capacity change from 0 to 256 [ 33.056470][ T3780] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 33.073241][ T3786] netlink: 'syz.4.149': attribute type 5 has an invalid length. [ 33.096355][ T3777] ======================================================= [ 33.096355][ T3777] WARNING: The mand mount option has been deprecated and [ 33.096355][ T3777] and is ignored by this kernel. Remove the mand [ 33.096355][ T3777] option from the mount to silence this warning. [ 33.096355][ T3777] ======================================================= [ 33.163128][ T3777] FAT-fs (loop3): Directory bread(block 64) failed [ 33.171585][ T3796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.150'. [ 33.181221][ T3777] FAT-fs (loop3): Directory bread(block 65) failed [ 33.188024][ T3777] FAT-fs (loop3): Directory bread(block 66) failed [ 33.211057][ T3777] FAT-fs (loop3): Directory bread(block 67) failed [ 33.218683][ T3777] FAT-fs (loop3): Directory bread(block 68) failed [ 33.223439][ T3807] loop4: detected capacity change from 0 to 1024 [ 33.225518][ T3777] FAT-fs (loop3): Directory bread(block 69) failed [ 33.251840][ T3777] FAT-fs (loop3): Directory bread(block 70) failed [ 33.257276][ T3807] EXT4-fs: Ignoring removed nobh option [ 33.265783][ T3807] EXT4-fs: Ignoring removed orlov option [ 33.271487][ T3807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.289117][ T3777] FAT-fs (loop3): Directory bread(block 71) failed [ 33.300331][ T3777] FAT-fs (loop3): Directory bread(block 72) failed [ 33.307281][ T3777] FAT-fs (loop3): Directory bread(block 73) failed [ 33.323277][ T3807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.366913][ T3821] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.385258][ T3777] syz.3.147: attempt to access beyond end of device [ 33.385258][ T3777] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 33.398509][ T3777] Buffer I/O error on dev loop3, logical block 306, lost async page write [ 33.407210][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 33.469751][ T3821] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.498824][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.525349][ T3843] loop3: detected capacity change from 0 to 512 [ 33.543489][ T3821] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.563151][ T3843] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.584830][ T3843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.591499][ T3843] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 33.606170][ T3843] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 33.625559][ T3821] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.636056][ T3843] EXT4-fs (loop3): 1 truncate cleaned up [ 33.642080][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.712893][ T3821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.724873][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.758093][ T3821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.807460][ T3821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.832177][ T3821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.886432][ T3893] loop1: detected capacity change from 0 to 512 [ 33.894606][ T3893] ext4: Unknown parameter 'obj_type' [ 33.904246][ T3821] syz.0.157 (3821) used greatest stack depth: 11048 bytes left [ 34.012265][ T3915] process 'syz.3.182' launched './file1' with NULL argv: empty string added [ 34.308569][ T3933] loop3: detected capacity change from 0 to 1024 [ 34.316369][ T3933] EXT4-fs: Ignoring removed orlov option [ 34.322190][ T3933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.353646][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.375842][ T3941] loop4: detected capacity change from 0 to 1024 [ 34.391316][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.393464][ T3941] EXT4-fs: Ignoring removed oldalloc option [ 34.408598][ T3941] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 34.448026][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.509308][ T3941] syz.4.193 (3941) used greatest stack depth: 10944 bytes left [ 34.517888][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.001997][ T3991] loop0: detected capacity change from 0 to 512 [ 35.009699][ T3991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.020888][ T3991] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.214: bad orphan inode 131083 [ 35.032068][ T3991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.073715][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.173478][ T3999] loop0: detected capacity change from 0 to 1024 [ 35.181458][ T3999] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.195181][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.222630][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566048][ T4032] netlink: 2 bytes leftover after parsing attributes in process `syz.1.229'. [ 35.622448][ T4040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 35.642527][ T4041] loop0: detected capacity change from 0 to 1024 [ 35.660682][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.697128][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.719361][ T4040] infiniband sy: ib_query_port failed (-19) [ 35.725339][ T4040] infiniband sy: Couldn't set up InfiniBand P_Key/GID cache [ 35.732708][ T4040] siw: device registration error -19 [ 36.095179][ T4105] loop1: detected capacity change from 0 to 128 [ 36.183448][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.251489][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.329937][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.490371][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.501679][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 36.510668][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.518150][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.527210][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.534691][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.639408][ T50] bridge_slave_1: left allmulticast mode [ 36.645134][ T50] bridge_slave_1: left promiscuous mode [ 36.645249][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 36.645259][ T29] audit: type=1400 audit(1725868607.892:607): avc: denied { search } for pid=3003 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.650799][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.686149][ T29] audit: type=1400 audit(1725868607.902:608): avc: denied { read } for pid=3003 comm="dhcpcd" name="n31" dev="tmpfs" ino=1690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.707765][ T29] audit: type=1400 audit(1725868607.902:609): avc: denied { open } for pid=3003 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.730696][ T29] audit: type=1400 audit(1725868607.902:610): avc: denied { getattr } for pid=3003 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.756801][ T29] audit: type=1400 audit(1725868607.902:611): avc: denied { map_create } for pid=4140 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.775793][ T29] audit: type=1400 audit(1725868607.902:612): avc: denied { map_read map_write } for pid=4140 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.795479][ T29] audit: type=1400 audit(1725868607.902:613): avc: denied { perfmon } for pid=4140 comm="syz.2.261" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.816382][ T29] audit: type=1400 audit(1725868607.902:614): avc: denied { prog_run } for pid=4140 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.835261][ T29] audit: type=1400 audit(1725868607.932:615): avc: denied { append } for pid=2947 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.875774][ T50] bridge_slave_0: left allmulticast mode [ 36.881432][ T50] bridge_slave_0: left promiscuous mode [ 36.887141][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.931026][ T29] audit: type=1326 audit(1725868608.092:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda340dcef9 code=0x7ffc0000 [ 36.946753][ T4146] loop3: detected capacity change from 0 to 1024 [ 36.975561][ T4150] loop2: detected capacity change from 0 to 1764 [ 37.020025][ T4146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.118048][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.134192][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.163229][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.185995][ T50] bond0 (unregistering): Released all slaves [ 37.278720][ T50] hsr_slave_0: left promiscuous mode [ 37.288986][ T50] hsr_slave_1: left promiscuous mode [ 37.320325][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.327777][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.357099][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.364612][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.385176][ T50] veth1_macvtap: left promiscuous mode [ 37.390715][ T50] veth0_macvtap: left promiscuous mode [ 37.396569][ T50] veth1_vlan: left promiscuous mode [ 37.401782][ T50] veth0_vlan: left promiscuous mode [ 37.580877][ T50] team0 (unregistering): Port device team_slave_1 removed [ 37.590813][ T50] team0 (unregistering): Port device team_slave_0 removed [ 37.617823][ T4188] syz.0.275[4188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.617877][ T4188] syz.0.275[4188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.655296][ T4113] chnl_net:caif_netlink_parms(): no params data found [ 37.684139][ T4188] pim6reg1: entered promiscuous mode [ 37.689477][ T4188] pim6reg1: entered allmulticast mode [ 37.696520][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 37.739782][ T4195] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 37.791161][ T4113] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.798427][ T4113] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.806665][ T4113] bridge_slave_0: entered allmulticast mode [ 37.813171][ T4113] bridge_slave_0: entered promiscuous mode [ 37.820503][ T4113] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.827628][ T4113] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.835744][ T4113] bridge_slave_1: entered allmulticast mode [ 37.842195][ T4113] bridge_slave_1: entered promiscuous mode [ 37.871743][ T4113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.883067][ T4113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.908212][ T4113] team0: Port device team_slave_0 added [ 37.914755][ T4113] team0: Port device team_slave_1 added [ 37.932030][ T4113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.939012][ T4113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.965016][ T4113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.976540][ T4113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.983664][ T4113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.009591][ T4113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.064109][ T4113] hsr_slave_0: entered promiscuous mode [ 38.070222][ T4113] hsr_slave_1: entered promiscuous mode [ 38.077569][ T4113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.085160][ T4113] Cannot create hsr debugfs directory [ 38.115893][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 38.134488][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.191098][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.198220][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.208724][ T4179] bridge_slave_0: entered allmulticast mode [ 38.215065][ T4179] bridge_slave_0: entered promiscuous mode [ 38.221936][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.229097][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.236362][ T4179] bridge_slave_1: entered allmulticast mode [ 38.242815][ T4179] bridge_slave_1: entered promiscuous mode [ 38.253347][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.274561][ T4241] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 38.323275][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.344767][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.372025][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.393995][ T4179] team0: Port device team_slave_0 added [ 38.400588][ T4179] team0: Port device team_slave_1 added [ 38.409645][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.429602][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.436595][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.462623][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.480913][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.487937][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.513907][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.544380][ T4179] hsr_slave_0: entered promiscuous mode [ 38.550522][ T4179] hsr_slave_1: entered promiscuous mode [ 38.556632][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.564279][ T4179] Cannot create hsr debugfs directory [ 38.643721][ T50] bridge_slave_1: left allmulticast mode [ 38.649448][ T50] bridge_slave_1: left promiscuous mode [ 38.655193][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.663089][ T50] bridge_slave_0: left allmulticast mode [ 38.668785][ T50] bridge_slave_0: left promiscuous mode [ 38.675479][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.735015][ T4287] loop1: detected capacity change from 0 to 128 [ 38.746898][ T4287] syz.1.281[4287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.746935][ T4287] syz.1.281[4287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.768786][ T4287] syz.1.281: attempt to access beyond end of device [ 38.768786][ T4287] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 38.796469][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.806824][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.816967][ T50] bond0 (unregistering): Released all slaves [ 38.873026][ T4113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.895891][ T50] hsr_slave_0: left promiscuous mode [ 38.903265][ T50] hsr_slave_1: left promiscuous mode [ 38.908999][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.916482][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.924191][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.931646][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.940734][ T50] veth1_macvtap: left promiscuous mode [ 38.946339][ T50] veth0_macvtap: left promiscuous mode [ 38.951839][ T50] veth1_vlan: left promiscuous mode [ 38.957149][ T50] veth0_vlan: left promiscuous mode [ 39.029406][ T50] team0 (unregistering): Port device team_slave_1 removed [ 39.039596][ T50] team0 (unregistering): Port device team_slave_0 removed [ 39.083168][ T4113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.095217][ T4113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.108422][ T4113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.152874][ T4314] syz.3.287[4314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.152981][ T4314] syz.3.287[4314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.165527][ T4113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.199911][ T4113] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.224234][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.231306][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.243617][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.250774][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.292203][ T4330] Â: renamed from wg0 (while UP) [ 39.354051][ T4179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.362960][ T4179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.372691][ T4179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.385085][ T4113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.392620][ T4179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.476512][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.488926][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.504956][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.512070][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.528784][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.535869][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.552829][ T4362] loop3: detected capacity change from 0 to 1024 [ 39.559955][ T4362] EXT4-fs: Ignoring removed nobh option [ 39.565652][ T4362] EXT4-fs: Ignoring removed orlov option [ 39.586496][ T4362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.611941][ T4113] veth0_vlan: entered promiscuous mode [ 39.623713][ T4113] veth1_vlan: entered promiscuous mode [ 39.637473][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.643061][ T4113] veth0_macvtap: entered promiscuous mode [ 39.655223][ T4113] veth1_macvtap: entered promiscuous mode [ 39.686619][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.697100][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.707028][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.717501][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.743172][ T4113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.753090][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.763551][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.773590][ T4113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.784030][ T4113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.794704][ T4113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.810841][ T4113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819605][ T4113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.828436][ T4113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.837502][ T4113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861686][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.974530][ T4406] loop4: detected capacity change from 0 to 512 [ 39.987564][ T4406] EXT4-fs: Ignoring removed nobh option [ 39.993162][ T4406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.999902][ T4406] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.016097][ T4406] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.250: Parent and EA inode have the same ino 15 [ 40.025286][ T4179] veth0_vlan: entered promiscuous mode [ 40.035516][ T4406] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.046487][ T4179] veth1_vlan: entered promiscuous mode [ 40.049487][ T4406] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.250: Parent and EA inode have the same ino 15 [ 40.066461][ T4406] EXT4-fs (loop4): 1 orphan inode deleted [ 40.072697][ T4406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.072864][ T4179] veth0_macvtap: entered promiscuous mode [ 40.094647][ T4179] veth1_macvtap: entered promiscuous mode [ 40.106746][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.117438][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.127354][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.138037][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.147962][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.158395][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.168803][ T4113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.169970][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.198924][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.209576][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.219498][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.229968][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.239951][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.250537][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.267164][ T4432] loop3: detected capacity change from 0 to 512 [ 40.285122][ T4434] syz.4.299[4434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.285184][ T4434] syz.4.299[4434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.297693][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.322420][ T4432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.336511][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.345439][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347685][ T4432] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.354353][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.373450][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.458776][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.512559][ T8] IPVS: starting estimator thread 0... [ 40.520071][ T4462] tipc: Started in network mode [ 40.525006][ T4462] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.532531][ T4462] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 40.539868][ T4462] tipc: Enabled bearer , priority 10 [ 40.614387][ T4463] IPVS: using max 2832 ests per chain, 141600 per kthread [ 40.616143][ T4478] syz.1.314[4478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.621613][ T4478] syz.1.314[4478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.663912][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 40.803895][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 40.887661][ T4507] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.324'. [ 40.896819][ T4507] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 40.943957][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.093889][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.244188][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.383875][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.405561][ T4513] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 41.425874][ T4512] loop1: detected capacity change from 0 to 1024 [ 41.438038][ T4512] EXT4-fs: Ignoring removed nobh option [ 41.443621][ T4512] EXT4-fs: Ignoring removed orlov option [ 41.456247][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.505811][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.523845][ T8] tipc: Node number set to 2886997162 [ 41.642461][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.649943][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.657383][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.664824][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.671823][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.686570][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.694099][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.701581][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.708980][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.716478][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.723871][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.731320][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.738850][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.746311][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.753770][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.761223][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.768717][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.776110][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.783488][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.790938][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.798364][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.805756][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.813289][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.820783][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.828402][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.835804][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.843274][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.850672][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.858160][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.865650][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.873065][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.880498][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.887982][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.895376][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.902757][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.910236][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.917644][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.925035][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.932410][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.939948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 41.946962][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.954496][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.970040][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.971823][ T4570] loop4: detected capacity change from 0 to 2048 [ 41.989706][ T4570] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.010626][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 42.010637][ T29] audit: type=1400 audit(1725868613.252:854): avc: denied { mount } for pid=4572 comm="syz.3.342" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 42.039873][ T29] audit: type=1400 audit(1725868613.252:855): avc: denied { watch watch_reads } for pid=4572 comm="syz.3.342" path="/87/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.073063][ T4570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.104818][ T4582] loop2: detected capacity change from 0 to 1024 [ 42.111587][ T4582] EXT4-fs: Ignoring removed nobh option [ 42.117223][ T4582] EXT4-fs: Ignoring removed orlov option [ 42.123550][ T29] audit: type=1400 audit(1725868613.352:856): avc: denied { mounton } for pid=4566 comm="syz.4.340" path="/8/file1/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.165121][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.166135][ T4585] EXT4-fs (loop4): shut down requested (0) [ 42.177203][ T29] audit: type=1400 audit(1725868613.412:857): avc: denied { ioctl } for pid=4566 comm="syz.4.340" path="/8/file1/cpuacct.usage_all" dev="loop4" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.184299][ T4570] loop4: detected capacity change from 2048 to 0 [ 42.216574][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.216574][ T28] loop4: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 42.230232][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.230232][ T28] loop4: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 42.243830][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.243830][ T28] loop4: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 42.257613][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.257613][ T28] loop4: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 42.257814][ T4179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.271226][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.271226][ T28] loop4: rw=12288, sector=20, nr_sectors = 4 limit=0 [ 42.294935][ T28] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #12: block 5: comm kworker/u8:1: unable to read itable block [ 42.308260][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.308260][ T28] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 42.321762][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.331677][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 42.338474][ T28] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 42.347979][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.347979][ T28] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 42.361457][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.370844][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 42.377634][ T28] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #12: comm kworker/u8:1: mark_inode_dirty error [ 42.400450][ T29] audit: type=1326 audit(1725868613.642:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3feabcef9 code=0x7ffc0000 [ 42.404136][ T4591] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 42.423704][ T29] audit: type=1326 audit(1725868613.642:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fa3feabcef9 code=0x7ffc0000 [ 42.433114][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.433114][ T28] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 42.455234][ T29] audit: type=1326 audit(1725868613.642:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3feabcef9 code=0x7ffc0000 [ 42.468649][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 42.498837][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.513053][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 42.520813][ T28] kworker/u8:1: attempt to access beyond end of device [ 42.520813][ T28] loop4: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 42.535793][ T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #12: block 5: comm kworker/u8:1: unable to read itable block [ 42.549984][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.563113][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 42.600596][ T29] audit: type=1400 audit(1725868613.842:861): avc: denied { read write } for pid=3263 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.625165][ T29] audit: type=1400 audit(1725868613.842:862): avc: denied { open } for pid=3263 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.649242][ T29] audit: type=1400 audit(1725868613.842:863): avc: denied { ioctl } for pid=3263 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.682370][ T4113] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 42.695834][ T4113] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.705139][ T4113] EXT4-fs (loop4): I/O error while writing superblock [ 42.712043][ T4113] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 42.721556][ T4113] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.730205][ T4113] EXT4-fs (loop4): I/O error while writing superblock [ 42.737117][ T4113] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 42.752424][ T4618] loop1: detected capacity change from 0 to 512 [ 42.759196][ T4113] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.767030][ T4620] loop2: detected capacity change from 0 to 2048 [ 42.774267][ T4113] EXT4-fs (loop4): I/O error while writing superblock [ 42.783329][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 42.798637][ T11] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.807421][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 42.812130][ T4618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.826885][ T4618] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.838239][ T4620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.850776][ T4113] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 42.870326][ T4577] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 42.880623][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.917550][ T4179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.101211][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.168138][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.196426][ T4646] @: renamed from bond0 (while UP) [ 45.227388][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.250047][ T4657] netlink: 830 bytes leftover after parsing attributes in process `syz.2.372'. [ 45.290804][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.315280][ T4665] loop1: detected capacity change from 0 to 1024 [ 45.321949][ T4665] EXT4-fs: Ignoring removed oldalloc option [ 45.331699][ T4665] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.368278][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.402832][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.435561][ T11] bridge_slave_1: left allmulticast mode [ 45.441240][ T11] bridge_slave_1: left promiscuous mode [ 45.446964][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.488949][ T11] bridge_slave_0: left allmulticast mode [ 45.494802][ T11] bridge_slave_0: left promiscuous mode [ 45.500465][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.553872][ C0] net_ratelimit: 2 callbacks suppressed [ 45.553886][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 45.593483][ T8] IPVS: starting estimator thread 0... [ 45.666998][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.678294][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.689813][ T11] bond0 (unregistering): Released all slaves [ 45.695916][ T4706] IPVS: using max 2688 ests per chain, 134400 per kthread [ 45.721822][ T4704] tipc: Started in network mode [ 45.726812][ T4704] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.745324][ T4704] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 45.752364][ T4704] tipc: Enabled bearer , priority 10 [ 45.799557][ T11] hsr_slave_0: left promiscuous mode [ 45.827231][ T11] hsr_slave_1: left promiscuous mode [ 45.847329][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.854827][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.869705][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.876877][ T4724] loop0: detected capacity change from 0 to 8192 [ 45.877312][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.893907][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 45.933632][ T11] veth1_macvtap: left promiscuous mode [ 45.939232][ T11] veth0_macvtap: left promiscuous mode [ 45.944779][ T11] veth1_vlan: left promiscuous mode [ 45.950093][ T11] veth0_vlan: left promiscuous mode [ 45.967795][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.975344][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.982785][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.990203][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.997825][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.005266][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.012641][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.020121][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.027602][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.035108][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.042067][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.049595][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.057019][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.064468][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.072012][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.079416][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.086818][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.094201][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.101589][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.108981][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.116722][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.124177][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.131545][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.138937][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.146321][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.153682][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.161124][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.168535][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.175984][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.183015][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.190398][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.197893][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.205295][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.212733][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.220126][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.227576][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.234959][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.242375][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.249762][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.257229][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.264717][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.272129][ T3339] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.280612][ T3339] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 46.313876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.338872][ T11] team0 (unregistering): Port device team_slave_1 removed [ 46.349390][ T11] team0 (unregistering): Port device team_slave_0 removed [ 46.383491][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 46.398130][ T4743] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 46.406804][ T4746] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.416262][ T4648] chnl_net:caif_netlink_parms(): no params data found [ 46.453868][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.490758][ T4755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'. [ 46.593881][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 46.593891][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.609586][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.616824][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.648007][ T4648] bridge_slave_0: entered allmulticast mode [ 46.656901][ T4648] bridge_slave_0: entered promiscuous mode [ 46.671939][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.679326][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.701871][ T4648] bridge_slave_1: entered allmulticast mode [ 46.731268][ T4648] bridge_slave_1: entered promiscuous mode [ 46.737274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 46.792336][ T4648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.816921][ T4648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.836852][ T4799] loop2: detected capacity change from 0 to 512 [ 46.859533][ T4648] team0: Port device team_slave_0 added [ 46.875207][ T4799] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.398: corrupted in-inode xattr: invalid ea_ino [ 46.884384][ T3338] tipc: Node number set to 2886997162 [ 46.889671][ T4648] team0: Port device team_slave_1 added [ 46.932475][ T4799] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.398: couldn't read orphan inode 15 (err -117) [ 46.952606][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.959655][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.985594][ T4648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.995547][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.997868][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.015610][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.041627][ T4648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.056602][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 47.056615][ T29] audit: type=1400 audit(1725868618.302:998): avc: denied { setattr } for pid=4798 comm="syz.2.398" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.100508][ T4648] hsr_slave_0: entered promiscuous mode [ 47.109683][ T4179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.119058][ T4648] hsr_slave_1: entered promiscuous mode [ 47.124131][ T29] audit: type=1400 audit(1725868618.332:999): avc: denied { append } for pid=4798 comm="syz.2.398" path="/23/file0/file0/blkio.throttle.io_serviced" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.149743][ T4648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.158320][ T4648] Cannot create hsr debugfs directory [ 47.196791][ T29] audit: type=1400 audit(1725868618.442:1000): avc: denied { create } for pid=4820 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.231299][ T29] audit: type=1400 audit(1725868618.462:1001): avc: denied { connect } for pid=4820 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.250940][ T29] audit: type=1400 audit(1725868618.462:1002): avc: denied { write } for pid=4820 comm="syz.2.400" path="socket:[8390]" dev="sockfs" ino=8390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.286274][ T29] audit: type=1400 audit(1725868618.532:1003): avc: denied { setopt } for pid=4822 comm="syz.2.401" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.315710][ T29] audit: type=1400 audit(1725868618.562:1004): avc: denied { read } for pid=4822 comm="syz.2.401" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.366821][ T4824] raw_sendmsg: syz.2.401 forgot to set AF_INET. Fix it! [ 47.367440][ T29] audit: type=1400 audit(1725868618.612:1005): avc: denied { write } for pid=4822 comm="syz.2.401" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.426311][ T29] audit: type=1326 audit(1725868618.672:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e4e2cef9 code=0x7ffc0000 [ 47.471223][ T29] audit: type=1326 audit(1725868618.682:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.2.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e4e2cef9 code=0x7ffc0000 [ 47.545711][ T4788] loop1: detected capacity change from 0 to 65536 [ 47.683791][ T4842] geneve2: entered promiscuous mode [ 47.734322][ T4648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.769677][ T4648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.796182][ T4648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.813344][ T4863] bpf_get_probe_write_proto: 4 callbacks suppressed [ 47.813356][ T4863] syz.2.412[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.830381][ T4648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.870415][ T4863] syz.2.412[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.957781][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.012668][ T4648] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.031624][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.038737][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.059639][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.066726][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.068589][ T4885] loop2: detected capacity change from 0 to 128 [ 48.087490][ T4648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.097896][ T4648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.118917][ T4885] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 48.213251][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 48.246627][ T4648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.448975][ T4648] veth0_vlan: entered promiscuous mode [ 48.475703][ T4648] veth1_vlan: entered promiscuous mode [ 48.498041][ T4648] veth0_macvtap: entered promiscuous mode [ 48.512848][ T4648] veth1_macvtap: entered promiscuous mode [ 48.535667][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.546245][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.556060][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.566486][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.576380][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.586794][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.604361][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.616217][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.626718][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.636660][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.647163][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.657080][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.667506][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.679321][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.693147][ T4648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702112][ T4648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.710896][ T4648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715535][ T4964] loop0: detected capacity change from 0 to 512 [ 48.719632][ T4648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.774313][ T4964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.822622][ T4964] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.894741][ T4964] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.430: corrupted xattr block 33: bad e_name length [ 48.916592][ T4964] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 48.928987][ T4989] macvlan2: entered allmulticast mode [ 48.935204][ T4964] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.430: corrupted xattr block 33: bad e_name length [ 48.940998][ T4991] loop4: detected capacity change from 0 to 512 [ 48.956150][ T4964] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.430: corrupted xattr block 33: bad e_name length [ 48.973536][ T4991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.983642][ T4995] @: entered promiscuous mode [ 48.988390][ T4995] bond_slave_0: entered promiscuous mode [ 48.989751][ T4991] EXT4-fs (loop4): 1 orphan inode deleted [ 48.994131][ T4995] bond_slave_1: entered promiscuous mode [ 48.999900][ T4991] EXT4-fs (loop4): 1 truncate cleaned up [ 49.007354][ T4964] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 49.011701][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.024689][ T4964] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.430: corrupted xattr block 33: bad e_name length [ 49.070745][ T4648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.170196][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.214759][ T5001] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.239066][ T5001] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.359970][ T5029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.451'. [ 49.583740][ T5075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.468'. [ 49.596876][ T5075] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 49.605578][ T5079] loop0: detected capacity change from 0 to 128 [ 49.616667][ T5079] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.643842][ T5079] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.665231][ T3270] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.697850][ T5093] loop2: detected capacity change from 0 to 256 [ 49.705874][ T5093] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.720443][ T5093] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.792344][ T5101] loop4: detected capacity change from 0 to 2048 [ 49.808362][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.831938][ T4648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.921555][ T5110] syz.2.483 (5110) used greatest stack depth: 10616 bytes left [ 49.966755][ T5117] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.019660][ T28] nci: nci_rsp_packet: unknown rsp opcode 0x105 [ 50.062603][ T5133] loop0: detected capacity change from 0 to 2048 [ 50.085296][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.133883][ T5133] loop0: detected capacity change from 2048 to 2047 [ 50.146263][ T5133] EXT4-fs error (device loop0): ext4_xattr_ibody_get:653: inode #15: comm syz.0.492: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.163867][ T5133] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.492: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.179212][ T5133] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm syz.0.492: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 50.195667][ T5133] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 117 [ 50.208162][ T5133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.208162][ T5133] [ 50.219046][ T5141] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.492: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.234822][ T5141] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1803188595: comm syz.0.492: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 50.250802][ T5141] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 50.263145][ T5141] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.263145][ T5141] [ 50.277192][ T5141] syz.0.492 (5141) used greatest stack depth: 10472 bytes left [ 50.286394][ T3270] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /96/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 50.307692][ T3270] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257297186722544 [ 50.321544][ T3270] EXT4-fs error (device loop0): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257297186722544 [ 50.363966][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.495'. [ 50.473749][ T5161] loop1: detected capacity change from 0 to 1024 [ 50.480927][ T5161] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 50.491553][ T5161] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.505221][ T5161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.521971][ T5161] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 50.540258][ T3263] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 50.561003][ T63] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.579872][ T3263] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 50.596694][ T63] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:4: corrupted in-inode xattr: bad magic number in in-inode xattr [ 50.612539][ T3263] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 50.628449][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.659589][ T5164] loop3: detected capacity change from 0 to 164 [ 50.701685][ T5163] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.753877][ C0] net_ratelimit: 8 callbacks suppressed [ 50.753892][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 50.864560][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.923898][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 50.960527][ T5168] loop2: detected capacity change from 0 to 2048 [ 50.985739][ T5168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.054042][ T5168] loop2: detected capacity change from 2048 to 2047 [ 51.064457][ T5168] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #15: comm syz.2.516: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.080453][ T5168] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.516: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.103295][ T5168] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #15: comm syz.2.516: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 51.120621][ T5168] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 117 [ 51.133128][ T5168] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.133128][ T5168] [ 51.147385][ T5196] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.516: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.162872][ T5196] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 1803188595: comm syz.2.516: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 51.178772][ T5196] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 51.191121][ T5196] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.191121][ T5196] [ 51.192277][ T5176] chnl_net:caif_netlink_parms(): no params data found [ 51.205181][ T5196] syz.2.516 (5196) used greatest stack depth: 10464 bytes left [ 51.223427][ T4179] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /51/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 51.256379][ T4179] EXT4-fs error (device loop2): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257297186722544 [ 51.278619][ T4179] EXT4-fs error (device loop2): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257297186722544 [ 51.302782][ T5177] chnl_net:caif_netlink_parms(): no params data found [ 51.311474][ T5207] loop3: detected capacity change from 0 to 8192 [ 51.312665][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.325034][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.332322][ T5176] bridge_slave_0: entered allmulticast mode [ 51.339364][ T5176] bridge_slave_0: entered promiscuous mode [ 51.363618][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.370741][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.382565][ T5176] bridge_slave_1: entered allmulticast mode [ 51.388970][ T5176] bridge_slave_1: entered promiscuous mode [ 51.431049][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.440469][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.447566][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.455513][ T5177] bridge_slave_0: entered allmulticast mode [ 51.462067][ T5177] bridge_slave_0: entered promiscuous mode [ 51.470289][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.480216][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.487426][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.495438][ T5177] bridge_slave_1: entered allmulticast mode [ 51.501930][ T5177] bridge_slave_1: entered promiscuous mode [ 51.525753][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.544443][ T50] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.556708][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.567488][ T5176] team0: Port device team_slave_0 added [ 51.568975][ T11] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.573986][ T5176] team0: Port device team_slave_1 added [ 51.598850][ T28] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 51.615242][ T4179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.632775][ T50] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.646187][ T5177] team0: Port device team_slave_0 added [ 51.673944][ T5177] team0: Port device team_slave_1 added [ 51.680203][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.687201][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.713225][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.743362][ T50] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.755608][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.762653][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.788650][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.793923][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 51.815805][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.822862][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.848824][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.861429][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.868456][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.881115][ T5229] loop4: detected capacity change from 0 to 8192 [ 51.894465][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.913957][ T50] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.915139][ T5229] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.963925][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 51.985776][ T5177] hsr_slave_0: entered promiscuous mode [ 51.993046][ T5177] hsr_slave_1: entered promiscuous mode [ 51.998990][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.006749][ T5177] Cannot create hsr debugfs directory [ 52.019252][ T5176] hsr_slave_0: entered promiscuous mode [ 52.026403][ T5176] hsr_slave_1: entered promiscuous mode [ 52.032360][ T5176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.040043][ T5176] Cannot create hsr debugfs directory [ 52.071965][ T5241] syz.3.525 (5241) used greatest stack depth: 10432 bytes left [ 52.079150][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 52.079163][ T29] audit: type=1400 audit(1725868623.322:1321): avc: denied { read } for pid=3003 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.119733][ T5243] loop4: detected capacity change from 0 to 512 [ 52.121427][ T29] audit: type=1400 audit(1725868623.362:1322): avc: denied { create } for pid=5246 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.126465][ T5243] EXT4-fs: Ignoring removed i_version option [ 52.145477][ T29] audit: type=1400 audit(1725868623.362:1323): avc: denied { connect } for pid=5246 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.156033][ T5243] EXT4-fs: Mount option(s) incompatible with ext3 [ 52.171123][ T29] audit: type=1400 audit(1725868623.362:1324): avc: denied { ioctl } for pid=5246 comm="syz.3.527" path="socket:[9194]" dev="sockfs" ino=9194 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.171149][ T29] audit: type=1400 audit(1725868623.362:1325): avc: denied { write } for pid=5246 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.293300][ T50] bridge_slave_1: left allmulticast mode [ 52.299132][ T50] bridge_slave_1: left promiscuous mode [ 52.304816][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.316343][ T50] bridge_slave_0: left allmulticast mode [ 52.317448][ T5262] loop3: detected capacity change from 0 to 128 [ 52.321981][ T50] bridge_slave_0: left promiscuous mode [ 52.334044][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.342841][ T5262] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.367369][ T5262] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.384004][ T29] audit: type=1400 audit(1725868623.622:1326): avc: denied { create } for pid=5259 comm="syz.3.529" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.418175][ T3268] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.448889][ T29] audit: type=1400 audit(1725868623.692:1327): avc: denied { getopt } for pid=5274 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.477500][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.487598][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.500935][ T50] bond0 (unregistering): Released all slaves [ 52.531377][ T5278] syz.4.534[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.531459][ T5278] syz.4.534[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.546668][ T29] audit: type=1400 audit(1725868623.792:1328): avc: denied { bind } for pid=5281 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 52.546931][ T5278] syz.4.534[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.557967][ T29] audit: type=1400 audit(1725868623.792:1329): avc: denied { name_bind } for pid=5281 comm="syz.3.536" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 52.557996][ T29] audit: type=1400 audit(1725868623.792:1330): avc: denied { node_bind } for pid=5281 comm="syz.3.536" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 52.596369][ T5278] syz.4.534[5278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.665353][ T50] hsr_slave_0: left promiscuous mode [ 52.682552][ T50] hsr_slave_1: left promiscuous mode [ 52.690884][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.698335][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.707186][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.714709][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.731484][ T50] veth1_macvtap: left promiscuous mode [ 52.735428][ T5288] loop4: detected capacity change from 0 to 1024 [ 52.736976][ T50] veth0_macvtap: left promiscuous mode [ 52.748777][ T50] veth1_vlan: left promiscuous mode [ 52.754392][ T50] veth0_vlan: left promiscuous mode [ 52.761877][ T5288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.819941][ T4648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.833871][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 52.877117][ T50] team0 (unregistering): Port device team_slave_1 removed [ 52.891621][ T50] team0 (unregistering): Port device team_slave_0 removed [ 52.893957][ T5296] block device autoloading is deprecated and will be removed. [ 52.956959][ T5292] ipvlan1: entered promiscuous mode [ 52.962514][ T5292] ipvlan1: left promiscuous mode [ 52.970926][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 53.003876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 53.039616][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 53.093193][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.100300][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.109465][ T5223] bridge_slave_0: entered allmulticast mode [ 53.117184][ T5223] bridge_slave_0: entered promiscuous mode [ 53.126509][ T5318] ipvlan1: entered promiscuous mode [ 53.132533][ T5318] ipvlan1: left promiscuous mode [ 53.141101][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.148204][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.157257][ T5223] bridge_slave_1: entered allmulticast mode [ 53.163734][ T5223] bridge_slave_1: entered promiscuous mode [ 53.182177][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.194667][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.213526][ T5223] team0: Port device team_slave_0 added [ 53.220313][ T5223] team0: Port device team_slave_1 added [ 53.245806][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.252902][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.278859][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.297617][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.307123][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.314957][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.322604][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.330536][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.338214][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.345962][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.347106][ T5336] loop3: detected capacity change from 0 to 512 [ 53.353701][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.353725][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.373052][ T5336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.375503][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.395587][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.403523][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.411204][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.419023][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.426840][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.434563][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.442236][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.449896][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.457670][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.465337][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.473065][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.480914][ T4047] hid-generic 0000:1000003:0000.0004: unknown main item tag 0x0 [ 53.498013][ T5177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.506182][ T4047] hid-generic 0000:1000003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.519431][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.532037][ T5177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.547114][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.554173][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.580081][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.599249][ T5176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.623436][ T5177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.632432][ T5177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.665656][ T5176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.686741][ T5223] hsr_slave_0: entered promiscuous mode [ 53.705809][ T5223] hsr_slave_1: entered promiscuous mode [ 53.732717][ T5176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.759348][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.805545][ T5176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.873910][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 53.884476][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.894937][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.906968][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.955381][ T5177] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.975519][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.990353][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.997455][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.015176][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.022408][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.034089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 54.050546][ T5177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.060912][ T5177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.075252][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.160617][ T50] bridge_slave_1: left allmulticast mode [ 54.166486][ T50] bridge_slave_1: left promiscuous mode [ 54.172183][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.194800][ T50] bridge_slave_0: left allmulticast mode [ 54.200654][ T50] bridge_slave_0: left promiscuous mode [ 54.206522][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.292529][ T5396] syz.3.555 (5396) used greatest stack depth: 9904 bytes left [ 54.307331][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.312020][ T5402] loop4: detected capacity change from 0 to 1024 [ 54.322624][ T5402] EXT4-fs: Ignoring removed nobh option [ 54.330199][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.344049][ T50] bond0 (unregistering): Released all slaves [ 54.350661][ T5402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.377240][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.389621][ T5402] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 54.402056][ T5402] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.402056][ T5402] [ 54.411778][ T5402] EXT4-fs (loop4): Total free blocks count 0 [ 54.417815][ T5402] EXT4-fs (loop4): Free/Dirty block details [ 54.423698][ T5402] EXT4-fs (loop4): free_blocks=0 [ 54.428686][ T5402] EXT4-fs (loop4): dirty_blocks=0 [ 54.433755][ T5402] EXT4-fs (loop4): Block reservation details [ 54.439915][ T5402] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 54.487665][ T4648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.499801][ T50] tipc: Disabling bearer [ 54.505163][ T50] tipc: Left network mode [ 54.563552][ T50] hsr_slave_0: left promiscuous mode [ 54.593089][ T50] hsr_slave_1: left promiscuous mode [ 54.601677][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.609137][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.619587][ T5429] loop4: detected capacity change from 0 to 128 [ 54.629293][ T5429] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.644176][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.651735][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.664014][ T5429] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.717376][ T50] veth1_macvtap: left promiscuous mode [ 54.722916][ T50] veth0_macvtap: left promiscuous mode [ 54.728559][ T50] veth1_vlan: left promiscuous mode [ 54.733791][ T50] veth0_vlan: left promiscuous mode [ 54.768539][ T4648] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.855982][ T50] team0 (unregistering): Port device team_slave_1 removed [ 54.866442][ T50] team0 (unregistering): Port device team_slave_0 removed [ 54.911832][ T5177] veth0_vlan: entered promiscuous mode [ 54.913910][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 54.920158][ T5177] veth1_vlan: entered promiscuous mode [ 54.973579][ T5177] veth0_macvtap: entered promiscuous mode [ 54.985985][ T5223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.003336][ T5223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.028664][ T5223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.045448][ T5452] loop3: detected capacity change from 0 to 512 [ 55.050084][ T5177] veth1_macvtap: entered promiscuous mode [ 55.071293][ T5223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.087448][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.097889][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.107694][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.118171][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.122610][ T5452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.140924][ T5452] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.155951][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.179858][ T5176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.197455][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.208083][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.217935][ T5177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.228401][ T5177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.239364][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.248609][ T5177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.257428][ T5177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.266174][ T5177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.274932][ T5177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.296761][ T5176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.340168][ T5176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.357831][ T50] IPVS: stop unused estimator thread 0... [ 55.366552][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.383302][ T5176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.429218][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.488554][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.500183][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.567342][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.575043][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.582726][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.590393][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.598093][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.605872][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.613499][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.614872][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.621169][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.621191][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.644954][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.644977][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.660388][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.668062][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.675781][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.683424][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.691298][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.698966][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.706766][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.714471][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.722122][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.729784][ T9] hid-generic 0000:1000003:0000.0005: unknown main item tag 0x0 [ 55.745059][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.757220][ T9] hid-generic 0000:1000003:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 55.856572][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 55.883668][ T5501] loop0: detected capacity change from 0 to 1024 [ 55.896029][ T5501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.933411][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.954212][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 55.963671][ T5505] loop0: detected capacity change from 0 to 1024 [ 55.976515][ T5505] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.587: bad orphan inode 1536 [ 55.987042][ T5505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.005023][ T5505] sctp: [Deprecated]: syz.0.587 (pid 5505) Use of int in maxseg socket option. [ 56.005023][ T5505] Use struct sctp_assoc_value instead [ 56.026573][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 4 with error 28 [ 56.038979][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.038979][ T28] [ 56.048646][ T28] EXT4-fs (loop0): Total free blocks count 0 [ 56.054646][ T28] EXT4-fs (loop0): Free/Dirty block details [ 56.060641][ T28] EXT4-fs (loop0): free_blocks=0 [ 56.065600][ T28] EXT4-fs (loop0): dirty_blocks=0 [ 56.070624][ T28] EXT4-fs (loop0): Block reservation details [ 56.076742][ T28] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 56.084350][ T5177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.264245][ T5523] loop0: detected capacity change from 0 to 2048 [ 56.276193][ T5523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.292717][ T5523] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.307780][ T5523] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 56.320191][ T5523] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.320191][ T5523] [ 56.330073][ T5523] EXT4-fs (loop0): Total free blocks count 0 [ 56.336139][ T5523] EXT4-fs (loop0): Free/Dirty block details [ 56.342086][ T5523] EXT4-fs (loop0): free_blocks=2415919104 [ 56.347930][ T5523] EXT4-fs (loop0): dirty_blocks=16 [ 56.353175][ T5523] EXT4-fs (loop0): Block reservation details [ 56.359199][ T5523] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 56.365947][ T5526] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 56.383294][ T5523] syz.0.595 (5523) used greatest stack depth: 9768 bytes left [ 56.465836][ T9] kernel write not supported for file /input/event0 (pid: 9 comm: kworker/0:1) [ 56.557062][ T5548] netlink: 'syz.0.606': attribute type 5 has an invalid length. [ 56.585161][ T5550] loop0: detected capacity change from 0 to 128 [ 56.599480][ T5550] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.619678][ T5550] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.683919][ T5550] loop0: detected capacity change from 128 to 0 [ 56.693258][ T5555] bio_check_eod: 22 callbacks suppressed [ 56.693301][ T5555] syz.0.607: attempt to access beyond end of device [ 56.693301][ T5555] loop0: rw=12288, sector=40, nr_sectors = 2 limit=0 [ 56.721014][ T5177] syz-executor: attempt to access beyond end of device [ 56.721014][ T5177] loop0: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 56.734998][ T5177] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 56.757053][ T5177] syz-executor: attempt to access beyond end of device [ 56.757053][ T5177] loop0: rw=524288, sector=72, nr_sectors = 2 limit=0 [ 56.771086][ T5177] syz-executor: attempt to access beyond end of device [ 56.771086][ T5177] loop0: rw=524288, sector=74, nr_sectors = 2 limit=0 [ 56.784833][ T5177] syz-executor: attempt to access beyond end of device [ 56.784833][ T5177] loop0: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 56.786370][ T5561] loop4: detected capacity change from 0 to 2048 [ 56.798477][ T5177] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #2: block 35: comm syz-executor: unable to read itable block [ 56.817592][ T5177] syz-executor: attempt to access beyond end of device [ 56.817592][ T5177] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 56.830993][ T5177] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 56.839481][ T5177] EXT4-fs (loop0): I/O error while writing superblock [ 56.846331][ T5177] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 56.855185][ T5177] syz-executor: attempt to access beyond end of device [ 56.855185][ T5177] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 56.868737][ T5177] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 56.877090][ T5177] EXT4-fs (loop0): I/O error while writing superblock [ 56.883964][ T5177] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 56.894536][ T5561] loop4: p1 < > p4 [ 56.896200][ T5177] syz-executor: attempt to access beyond end of device [ 56.896200][ T5177] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 56.900324][ T5561] loop4: p4 size 8388608 extends beyond EOD, [ 56.912444][ T5177] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 56.912485][ T5177] EXT4-fs (loop0): I/O error while writing superblock [ 56.918518][ T5561] truncated [ 56.938687][ T2001] kworker/u8:8: attempt to access beyond end of device [ 56.938687][ T2001] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 56.953858][ T2001] kworker/u8:8: attempt to access beyond end of device [ 56.953858][ T2001] loop0: rw=524288, sector=74, nr_sectors = 2 limit=0 [ 56.973580][ T2001] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #12: block 36: comm kworker/u8:8: unable to read itable block [ 56.993878][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 57.003347][ T2001] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 57.016325][ T2001] EXT4-fs (loop0): I/O error while writing superblock [ 57.024800][ T5563] loop3: detected capacity change from 0 to 2048 [ 57.025658][ T3763] udevd[3763]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.032529][ T2001] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #13: block 36: comm kworker/u8:8: unable to read itable block [ 57.041709][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.056113][ T2001] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 57.078941][ T2001] EXT4-fs (loop0): I/O error while writing superblock [ 57.086333][ T2001] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #2: block 35: comm kworker/u8:8: unable to read itable block [ 57.100560][ T2001] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 57.109033][ T2001] EXT4-fs (loop0): I/O error while writing superblock [ 57.110392][ T5563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.134368][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 57.134381][ T29] audit: type=1400 audit(1725868628.382:1503): avc: denied { read } for pid=5568 comm="syz.4.614" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.141757][ T5177] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.172224][ T29] audit: type=1400 audit(1725868628.382:1504): avc: denied { open } for pid=5568 comm="syz.4.614" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.194494][ T5177] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 57.195340][ T29] audit: type=1400 audit(1725868628.382:1505): avc: denied { ioctl } for pid=5568 comm="syz.4.614" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.213666][ T5177] EXT4-fs (loop0): I/O error while writing superblock [ 57.227987][ T29] audit: type=1400 audit(1725868628.382:1506): avc: denied { write } for pid=5568 comm="syz.4.614" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.257574][ T29] audit: type=1400 audit(1725868628.382:1507): avc: denied { write } for pid=2947 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.279050][ T29] audit: type=1400 audit(1725868628.382:1508): avc: denied { remove_name } for pid=2947 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.301689][ T29] audit: type=1400 audit(1725868628.382:1509): avc: denied { rename } for pid=2947 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.323990][ T29] audit: type=1400 audit(1725868628.382:1510): avc: denied { add_name } for pid=2947 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.346507][ T29] audit: type=1400 audit(1725868628.382:1511): avc: denied { unlink } for pid=2947 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.368931][ T29] audit: type=1400 audit(1725868628.382:1512): avc: denied { create } for pid=2947 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.392667][ T5572] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.407552][ T5572] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 57.420122][ T5572] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.420122][ T5572] [ 57.429788][ T5572] EXT4-fs (loop3): Total free blocks count 0 [ 57.435789][ T5572] EXT4-fs (loop3): Free/Dirty block details [ 57.441668][ T5572] EXT4-fs (loop3): free_blocks=2415919104 [ 57.447530][ T5572] EXT4-fs (loop3): dirty_blocks=8192 [ 57.452882][ T5572] EXT4-fs (loop3): Block reservation details [ 57.458871][ T5572] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 57.478840][ T5572] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 57.521368][ T5574] loop4: detected capacity change from 0 to 1024 [ 57.528275][ T5574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.536037][ T28] ================================================================== [ 57.544110][ T28] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 57.552414][ T28] [ 57.554712][ T28] write to 0xffffea00044fc4d8 of 8 bytes by task 5574 on cpu 1: [ 57.562311][ T28] delete_from_page_cache_batch+0x308/0x700 [ 57.568182][ T28] truncate_inode_pages_range+0x1c5/0x6b0 [ 57.573873][ T28] truncate_inode_pages+0x24/0x30 [ 57.578869][ T28] set_blocksize+0x267/0x280 [ 57.583437][ T28] sb_min_blocksize+0x63/0xe0 [ 57.588092][ T28] ext4_fill_super+0x38b/0x39e0 [ 57.592936][ T28] get_tree_bdev+0x256/0x2e0 [ 57.597502][ T28] ext4_get_tree+0x1c/0x30 [ 57.601895][ T28] vfs_get_tree+0x56/0x1e0 [ 57.606289][ T28] do_new_mount+0x227/0x690 [ 57.610765][ T28] path_mount+0x49b/0xb30 [ 57.615066][ T28] __se_sys_mount+0x27c/0x2d0 [ 57.619716][ T28] __x64_sys_mount+0x67/0x80 [ 57.624285][ T28] x64_sys_call+0x203e/0x2d60 [ 57.628938][ T28] do_syscall_64+0xc9/0x1c0 [ 57.633415][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.639286][ T28] [ 57.641582][ T28] read to 0xffffea00044fc4d8 of 8 bytes by task 28 on cpu 0: [ 57.648919][ T28] folio_mapping+0x97/0x110 [ 57.653396][ T28] lru_add_fn+0x89/0x440 [ 57.657612][ T28] folio_batch_move_lru+0x15f/0x230 [ 57.662785][ T28] lru_add_drain_cpu+0x77/0x260 [ 57.667611][ T28] __folio_batch_release+0x51/0xc0 [ 57.672699][ T28] mpage_prepare_extent_to_map+0xa44/0xb80 [ 57.678478][ T28] ext4_do_writepages+0x6ea/0x2110 [ 57.683569][ T28] ext4_writepages+0x159/0x2e0 [ 57.688305][ T28] do_writepages+0x1d8/0x480 [ 57.692867][ T28] __writeback_single_inode+0x91/0x870 [ 57.698302][ T28] writeback_sb_inodes+0x559/0xb20 [ 57.703389][ T28] wb_writeback+0x25e/0x720 [ 57.707869][ T28] wb_workfn+0x1a8/0x940 [ 57.712082][ T28] process_scheduled_works+0x483/0x9a0 [ 57.717518][ T28] worker_thread+0x526/0x6e0 [ 57.722087][ T28] kthread+0x1d1/0x210 [ 57.726126][ T28] ret_from_fork+0x4b/0x60 [ 57.730515][ T28] ret_from_fork_asm+0x1a/0x30 [ 57.735253][ T28] [ 57.737551][ T28] value changed: 0xffff8881004c0b58 -> 0x0000000000000000 [ 57.744625][ T28] [ 57.746919][ T28] Reported by Kernel Concurrency Sanitizer on: [ 57.753048][ T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.11.0-rc7-syzkaller #0 [ 57.761952][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.771979][ T28] Workqueue: writeback wb_workfn (flush-7:3) [ 57.777942][ T28] ================================================================== [ 57.791840][ T5574] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.033906][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 58.417081][ T2137] bridge_slave_1: left allmulticast mode [ 58.422732][ T2137] bridge_slave_1: left promiscuous mode [ 58.428472][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.437662][ T2137] bridge_slave_0: left allmulticast mode [ 58.443333][ T2137] bridge_slave_0: left promiscuous mode [ 58.449090][ T2137] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.457263][ T2137] bridge_slave_1: left allmulticast mode [ 58.462917][ T2137] bridge_slave_1: left promiscuous mode [ 58.468543][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.476256][ T2137] bridge_slave_0: left allmulticast mode [ 58.481876][ T2137] bridge_slave_0: left promiscuous mode [ 58.487489][ T2137] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.626207][ T2137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.636005][ T2137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.645610][ T2137] bond0 (unregistering): Released all slaves [ 58.654780][ T2137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.665058][ T2137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.675251][ T2137] bond0 (unregistering): Released all slaves [ 58.796440][ T2137] hsr_slave_0: left promiscuous mode [ 58.802314][ T2137] hsr_slave_1: left promiscuous mode [ 58.809832][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.817595][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.828227][ T2137] hsr_slave_0: left promiscuous mode [ 58.834050][ T2137] hsr_slave_1: left promiscuous mode [ 58.839746][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.848285][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.899456][ T2137] team0 (unregistering): Port device team_slave_1 removed [ 58.909278][ T2137] team0 (unregistering): Port device team_slave_0 removed [ 58.965254][ T2137] team0 (unregistering): Port device team_slave_1 removed [ 58.975992][ T2137] team0 (unregistering): Port device team_slave_0 removed [ 59.073905][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 60.113885][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 60.292317][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.346840][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.396820][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.437348][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.510697][ T50] bridge_slave_1: left allmulticast mode [ 60.516398][ T50] bridge_slave_1: left promiscuous mode [ 60.522089][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.530068][ T50] bridge_slave_0: left allmulticast mode [ 60.535715][ T50] bridge_slave_0: left promiscuous mode [ 60.541307][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.615669][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.625987][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.636224][ T50] bond0 (unregistering): Released all slaves [ 60.716375][ T50] hsr_slave_0: left promiscuous mode [ 60.722047][ T50] hsr_slave_1: left promiscuous mode [ 60.727915][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.735334][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.742935][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.750360][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.759526][ T50] veth1_macvtap: left promiscuous mode [ 60.765014][ T50] veth0_macvtap: left promiscuous mode [ 60.770528][ T50] veth1_vlan: left promiscuous mode [ 60.775761][ T50] veth0_vlan: left promiscuous mode [ 60.848466][ T50] team0 (unregistering): Port device team_slave_1 removed [ 60.858663][ T50] team0 (unregistering): Port device team_slave_0 removed [ 61.153903][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 62.203906][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 63.233897][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 64.273905][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 65.313898][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 66.353917][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 67.393877][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available