last executing test programs: 3.107477593s ago: executing program 3 (id=641): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000005f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 2.690854822s ago: executing program 2 (id=647): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x65) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x17, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') 2.349481203s ago: executing program 2 (id=649): socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8002, &(0x7f0000000740)={[{@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@nojournal_checksum}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743c, 0x2000000c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000880) 2.094122017s ago: executing program 3 (id=653): r0 = io_uring_setup(0x17c7, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x20000000}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x10c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bind$rxrpc(r1, 0x0, 0x0) listen(r1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.62559892s ago: executing program 2 (id=655): syz_read_part_table(0x603, &(0x7f0000000600)="$eJzs2z9olGccB/Dfae7ORGg6OLnUOHQSiuLoDVUup2IhnEohOGhrETFThMBJDw90aG9QvEE6dpHCLZpM+TNkKAkJdC4hQ0sgQ5ZCsoSmQ95yubdJc7QkLbmh9PNZfs/78Hvf7/uDZ32C/7SeyKarJL9TPvqss6X3zw9J/946F7ebxcFrSZIktyIycSeyMfD9e+M7n93/1Ti707/nzbd9M19vXM02l29ufnh3rn4s3a9FPt6PiJO5A389/88mpRveFub7nz0fLb1oPZSqq9ufRrxbL5anbtQb49ezV+639p9GLKT97YPRG4+jEk/iUdzr+TepmX35tVZ+pfBwqVRd/aa5cn77dKk5+eDS1pmZl7MXIsZaEUMd78XB5+tQdudP88cGXg03qpfPTZx6fbEyvVheO/5r0pZGZo8qGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbnhbmO9/9ny09KJSeLhUqq5+9eMPn7xbL5anbtQb49dzV+6nfQtp7Unr46jEk3gU92IkRuKLGD185HDmb/N/64tYOb99utScfHBpa3Dm5eyFtG/oKIb9C53zjw28Gm5UL5+bOPX6YmV6sbx2vN03ko/PI9te57v0LwAAAAAAAAAAAAAAAAAAAPx/FQevnRn6uHwrIhN3TkTEL18ea+0n6SX3P+7qn03rT/mI3oh4cyKitnE121y+uZm7O1f/Oe2vRT5qEXHyu6nbER/s5jyNvo7kTPeH40C/BwAA//+NLZU9") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000264, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket(0x11, 0x800000003, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) 1.575793105s ago: executing program 3 (id=657): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0385868, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) semget(0x3, 0x2, 0x284) r0 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x2, 0x1, 0x630) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.529697859s ago: executing program 3 (id=658): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4040080) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, &(0x7f0000000f80)=""/199, 0xc7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") 1.29760261s ago: executing program 1 (id=660): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 1.29722224s ago: executing program 2 (id=661): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x2c, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x3c, &(0x7f0000000580)="0000ffffffffa000", &(0x7f0000000540)=""/23, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 1.229617867s ago: executing program 3 (id=662): syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000005640)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9116eb423cdacfa7e32fe0231368b2264f94504c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4acef2ce3519f455c7c65bac835adb3be79f2f0517ccca0e1823a2971a50f713d4e21b942a8a69917a0b4aef2236f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864029d2e7d7ff6ff72ba8972b122b09789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2565cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da0049f8bf406472cf971d54a9698cf3270f420edc858176070bfff7909413f3fbd3ced3284db730b368ddca654dd77e6f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672ca8fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b74039300342051d4b74f9e767202093c25e94eb43e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663599d896cf0ac8f61b45853673df72dc813f7454ae62d79ac48034282f030401c0f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817e84aa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d9aff16764b8e59e04d02835f803f69907ad225856f2fb3d7df2c622842f2e71796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd208bc5b7a73d9501bf3f5af9a14a5fdf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154005db335c23a8b36322ede147c7af7568dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c8d64720e077753a1f5d5320cc68da419059cd6c29a6caea5e60cf1bdcdc204e3df27080de5adac7ee2f24aea3a8e1973183a57d3daebebb94b59f3677bba19e6b8ea65f2287d556cc1f1739b34651ea066193c9df4d09119651982dec920e92aecce"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) lseek(0xffffffffffffffff, 0x9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.228378937s ago: executing program 2 (id=673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffdfd, 0x2000000}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.213295838s ago: executing program 1 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_read_part_table(0x5e1, &(0x7f0000001840)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") 1.049713443s ago: executing program 1 (id=665): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000005f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 1.027121455s ago: executing program 4 (id=667): syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz81twkAQBeBnrzeWu/ApShOpIkoLaSN/ipRaONACR3qhCaMFc6AB4PB9l9Fo9j1pw109JZn7ZMlU2v67HduY1nPtvi4vX4arYKlJn8M4/33X5PV0/E/2P8nyOeSjjeRtKrVbE614Kdk9n9dW/L65zS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LEdAwAA//+Oww6X") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}}, 0x801) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 790.040137ms ago: executing program 4 (id=668): syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz7FNA0EQBdC/wN3tBUQkZLRCSAOUAxItUAQStIbkAi4Za+3AkguwHbwX/d2ZH0y4rrts1ata/p+Tn/HzlmQ9zGpXlamN2J8ev9bM7bxey+9yTB/1Oacn41mV9Ne8JA/Jd7LVqTGNpeQ+aXn/u9CVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDT9gEAAP//1jwUcA==") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync() sync() open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x0) getdents64(r0, 0x0, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) sched_setscheduler(0x0, 0x1, 0x0) mincore(&(0x7f000091d000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/133) 496.256154ms ago: executing program 4 (id=670): syz_read_part_table(0x603, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000264, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket(0x11, 0x800000003, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) 495.132834ms ago: executing program 0 (id=681): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, 0x0, 0x800) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 479.644886ms ago: executing program 0 (id=671): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x6, 0x69) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 386.498145ms ago: executing program 0 (id=672): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 340.102379ms ago: executing program 2 (id=674): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000700)={@remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) shmget(0x1, 0x2000, 0x20e, &(0x7f00001cb000/0x2000)=nil) shmget(0x1, 0x3000, 0x0, &(0x7f00001c9000/0x3000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$ptp(r2, &(0x7f00000000c0)=""/173, 0xad) 338.843349ms ago: executing program 4 (id=675): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = getpgid(0xffffffffffffffff) capget(&(0x7f00000010c0)={0x19980330, r0}, &(0x7f0000001100)={0x2, 0x6, 0x4, 0x1, 0x1, 0xa}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001080), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000001040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ffffffffffff60000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000800010009081000000000000d040000", 0x58}], 0x1) 313.852371ms ago: executing program 3 (id=676): ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000440)={'team_slave_0\x00', 0x200}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r1, 0x5452, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 242.349978ms ago: executing program 0 (id=677): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000001c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) unshare(0x20000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00'}, 0x28) write(r0, &(0x7f0000000000)="8f2a0a65bd00000080000000000fcfe2714eca7e5aa5ce", 0x17) 241.922918ms ago: executing program 4 (id=678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x36) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 241.417578ms ago: executing program 0 (id=679): r0 = io_uring_setup(0xdac, &(0x7f0000000180)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) 197.837932ms ago: executing program 0 (id=680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffeea, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000300)='./file0\x00', 0x14927e, 0x160) syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000004c0)) fallocate(r1, 0x0, 0x0, 0x1000f4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0xe, 0x4, 0x13c8, 0xffffffff, 0x0, 0x190, 0xc0, 0xffffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'ip6tnl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, 0xff000000, 0xff000000, 'syzkaller1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x73, 0x3, 0x54}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x4, 0x0, 0xbc5c6e8455f233f1, 0x1], 0x1, 0x4}, {0x4, [0x0, 0x6, 0x7, 0x0, 0x4, 0x3], 0x2}}}}, {{@ip={@loopback, @empty, 0xff, 0xff000000, 'geneve1\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x2, 0x82}, 0x0, 0x10a0, 0x11c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8039, {0x2}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:wireless_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428) r2 = open(&(0x7f0000000340)='./file0\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 145.893437ms ago: executing program 1 (id=682): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_io_uring_setup(0x2f68, &(0x7f0000000300), &(0x7f0000000100), 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000080)) munmap(&(0x7f0000b05000/0x2000)=nil, 0x2000) munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 121.199099ms ago: executing program 4 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 77.198103ms ago: executing program 1 (id=684): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./bus/file0\x00', 0x230813, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000300), 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) memfd_secret(0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1276, &(0x7f0000001f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_set_self_attr(0x66, 0x0, 0x28, 0x0) kernel console output (not intermixed with test programs): (loop3): mounted filesystem 00000003-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.965127][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 59.999908][ T4434] loop1: detected capacity change from 0 to 256 [ 60.008675][ T1675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.046453][ T4434] FAT-fs (loop1): Directory bread(block 64) failed [ 60.052986][ T4434] FAT-fs (loop1): Directory bread(block 65) failed [ 60.070777][ T1675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.114556][ T4434] FAT-fs (loop1): Directory bread(block 66) failed [ 60.125954][ T4434] FAT-fs (loop1): Directory bread(block 67) failed [ 60.132631][ T4434] FAT-fs (loop1): Directory bread(block 68) failed [ 60.149300][ T4434] FAT-fs (loop1): Directory bread(block 69) failed [ 60.159981][ T1675] team0: Port device netdevsim1 removed [ 60.175774][ T1675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.186318][ T4434] FAT-fs (loop1): Directory bread(block 70) failed [ 60.192830][ T4434] FAT-fs (loop1): Directory bread(block 71) failed [ 60.209570][ T4434] FAT-fs (loop1): Directory bread(block 72) failed [ 60.224470][ T4434] FAT-fs (loop1): Directory bread(block 73) failed [ 60.260599][ T1675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.345962][ T4443] loop2: detected capacity change from 0 to 2048 [ 60.374537][ T1675] bridge_slave_1: left allmulticast mode [ 60.380220][ T1675] bridge_slave_1: left promiscuous mode [ 60.385908][ T1675] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.399987][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.412746][ T1675] bridge_slave_0: left allmulticast mode [ 60.418539][ T1675] bridge_slave_0: left promiscuous mode [ 60.424142][ T1675] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.521402][ T4450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 60.541865][ T4450] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 60.554508][ T4450] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.554508][ T4450] [ 60.564628][ T4450] EXT4-fs (loop2): Total free blocks count 0 [ 60.570696][ T4450] EXT4-fs (loop2): Free/Dirty block details [ 60.576765][ T4450] EXT4-fs (loop2): free_blocks=66060288 [ 60.582363][ T4450] EXT4-fs (loop2): dirty_blocks=3712 [ 60.588020][ T4450] EXT4-fs (loop2): Block reservation details [ 60.593995][ T4450] EXT4-fs (loop2): i_reserved_data_blocks=239 [ 60.617397][ T1675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.627905][ T1675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.647617][ T1675] bond0 (unregistering): Released all slaves [ 60.756384][ T1675] hsr_slave_0: left promiscuous mode [ 60.782093][ T1675] hsr_slave_1: left promiscuous mode [ 60.795637][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.803058][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.840100][ T56] kworker/u8:4: attempt to access beyond end of device [ 60.840100][ T56] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 60.855754][ T1675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.863159][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.875948][ T56] kworker/u8:4: attempt to access beyond end of device [ 60.875948][ T56] loop1: rw=1, sector=1864, nr_sectors = 3464 limit=256 [ 60.893478][ T1675] veth1_macvtap: left promiscuous mode [ 60.899202][ T1675] veth0_macvtap: left promiscuous mode [ 60.904748][ T1675] veth1_vlan: left promiscuous mode [ 60.909989][ T1675] veth0_vlan: left promiscuous mode [ 60.913730][ T56] kworker/u8:4: attempt to access beyond end of device [ 60.913730][ T56] loop1: rw=1, sector=5328, nr_sectors = 2048 limit=256 [ 60.954056][ T56] kworker/u8:4: attempt to access beyond end of device [ 60.954056][ T56] loop1: rw=1, sector=7376, nr_sectors = 2224 limit=256 [ 60.996559][ T56] kworker/u8:4: attempt to access beyond end of device [ 60.996559][ T56] loop1: rw=1, sector=9600, nr_sectors = 2096 limit=256 [ 61.036797][ T56] kworker/u8:4: attempt to access beyond end of device [ 61.036797][ T56] loop1: rw=1, sector=11696, nr_sectors = 2816 limit=256 [ 61.066847][ T1675] team0 (unregistering): Port device team_slave_1 removed [ 61.113090][ T1675] team0 (unregistering): Port device team_slave_0 removed [ 61.130177][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 61.143766][ T3672] EXT4-fs (loop3): unmounting filesystem 00000003-0000-0000-0000-000000000000. [ 61.188681][ T4473] loop3: detected capacity change from 0 to 512 [ 61.219379][ T4471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 61.248571][ T4473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.267771][ T4473] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.304115][ T4480] loop2: detected capacity change from 0 to 1024 [ 61.321657][ T4480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.338226][ T4480] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.351623][ T4473] EXT4-fs error (device loop3): ext4_get_first_dir_block:3532: inode #12: comm syz.3.199: Directory hole found for htree leaf block 0 [ 61.425336][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.449145][ T4480] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 61.456720][ T4447] chnl_net:caif_netlink_parms(): no params data found [ 61.498653][ T4508] netlink: 'syz.4.204': attribute type 27 has an invalid length. [ 61.672610][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.702017][ T4508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.803168][ T4508] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.811626][ T4508] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.820236][ T4508] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.828751][ T4508] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.943888][ T4532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.978042][ T4532] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.008450][ T4532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.048335][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 62.048389][ T29] audit: type=1400 audit(1727466895.121:596): avc: denied { bind } for pid=4573 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.051933][ T4575] tipc: Enabling of bearer rejected, failed to enable media [ 62.210023][ T29] audit: type=1400 audit(1727466895.281:597): avc: denied { create } for pid=4577 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.272631][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.279797][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.331668][ T4447] bridge_slave_0: entered allmulticast mode [ 62.347610][ T4447] bridge_slave_0: entered promiscuous mode [ 62.355073][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.362167][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.369987][ T4447] bridge_slave_1: entered allmulticast mode [ 62.376567][ T4447] bridge_slave_1: entered promiscuous mode [ 62.401888][ T4447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.419225][ T4447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.421898][ T4591] loop1: detected capacity change from 0 to 512 [ 62.436215][ T4589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 62.436404][ T4591] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.455129][ T4591] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 62.499449][ T4447] team0: Port device team_slave_0 added [ 62.509819][ T4447] team0: Port device team_slave_1 added [ 62.529345][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.536433][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.562383][ T4447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.581203][ T4595] loop3: detected capacity change from 0 to 512 [ 62.591428][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.598404][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.624458][ T4447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.690794][ T4447] hsr_slave_0: entered promiscuous mode [ 62.696710][ T4593] loop4: detected capacity change from 0 to 1024 [ 62.703286][ T4447] hsr_slave_1: entered promiscuous mode [ 62.703623][ T4593] EXT4-fs: Ignoring removed orlov option [ 62.714709][ T4593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.723412][ T4595] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.747217][ T4595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.216: bg 0: block 248: padding at end of block bitmap is not set [ 62.793867][ T4595] Quota error (device loop3): write_blk: dquota write failed [ 62.801379][ T4595] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 62.811307][ T4595] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.216: Failed to acquire dquot type 1 [ 62.869881][ T29] audit: type=1400 audit(1727466895.941:598): avc: denied { execute } for pid=4605 comm="syz.2.220" name="file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.891963][ T29] audit: type=1400 audit(1727466895.941:599): avc: denied { execute_no_trans } for pid=4605 comm="syz.2.220" path="/8/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.932525][ T4595] EXT4-fs (loop3): 1 truncate cleaned up [ 63.006027][ T4606] loop2: detected capacity change from 0 to 128 [ 63.042492][ T29] audit: type=1400 audit(1727466896.101:600): avc: denied { mounton } for pid=4605 comm="syz.2.220" path="/8/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.051188][ T4606] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.075032][ T4595] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 63.099355][ T4595] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.135272][ T4614] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.386390][ T4623] pim6reg1: entered promiscuous mode [ 63.391708][ T4623] pim6reg1: entered allmulticast mode [ 63.522495][ T4634] can0: slcan on ttyS3. [ 63.528140][ T4447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.540427][ T4447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.772711][ T4447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.780043][ T4634] can0 (unregistered): slcan off ttyS3. [ 63.820709][ T4447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.907463][ T4639] loop1: detected capacity change from 0 to 2048 [ 63.980596][ T4639] Alternate GPT is invalid, using primary GPT. [ 63.987015][ T4639] loop1: p2 p3 p7 [ 64.058712][ T4447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.068606][ T4647] loop2: detected capacity change from 0 to 128 [ 64.080267][ T4447] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.096908][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102356][ T4639] loop1: detected capacity change from 0 to 1024 [ 64.103958][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.120735][ T4639] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.135074][ T4639] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.230: Invalid block bitmap block 0 in block_group 0 [ 64.149875][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.156999][ T4639] Quota error (device loop1): write_blk: dquota write failed [ 64.157034][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.171714][ T4639] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 64.195503][ T4639] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.230: Failed to acquire dquot type 0 [ 64.210756][ T4447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.223968][ T4639] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.230: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.250380][ T4639] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.230: Invalid inode bitmap blk 0 in block_group 0 [ 64.267117][ T141] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 64.276375][ T141] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 0 [ 64.276434][ T4639] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 64.298720][ T4639] EXT4-fs (loop1): 1 orphan inode deleted [ 64.363053][ T4658] netlink: 'syz.2.235': attribute type 27 has an invalid length. [ 64.399962][ T4659] loop4: detected capacity change from 0 to 128 [ 64.409960][ T4659] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.454587][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.461835][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.513223][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.528022][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.565586][ T4658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.574599][ T4658] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.583483][ T4658] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.592658][ T4658] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.608134][ T4447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.640138][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.647919][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.657559][ T4665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.788289][ T4447] veth0_vlan: entered promiscuous mode [ 64.801891][ T4447] veth1_vlan: entered promiscuous mode [ 64.823667][ T4447] veth0_macvtap: entered promiscuous mode [ 64.880273][ T4673] loop2: detected capacity change from 0 to 512 [ 64.913129][ T4447] veth1_macvtap: entered promiscuous mode [ 64.930008][ T4673] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.939298][ T4673] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.948370][ T4683] can0: slcan on ttyS3. [ 64.954080][ T4673] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.238: Failed to acquire dquot type 1 [ 64.981011][ T4673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.238: bg 0: block 40: padding at end of block bitmap is not set [ 65.011432][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.021947][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.031848][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.042348][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.074673][ T4686] can0 (unregistered): slcan off ttyS3. [ 65.080468][ T4673] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.107111][ T4673] EXT4-fs (loop2): 1 truncate cleaned up [ 65.175768][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.214259][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.224824][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.234712][ T4447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.245136][ T4447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.277833][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.287242][ T4447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.296041][ T4447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.304803][ T4447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.313579][ T4447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.425387][ T4694] loop1: detected capacity change from 0 to 512 [ 65.434497][ T4694] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.442190][ T4694] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.467908][ T4694] EXT4-fs (loop1): 1 orphan inode deleted [ 65.473713][ T4694] EXT4-fs (loop1): 1 truncate cleaned up [ 65.481811][ T4691] loop4: detected capacity change from 0 to 128 [ 65.521355][ T4696] bridge0: port 3(gretap0) entered blocking state [ 65.528019][ T4696] bridge0: port 3(gretap0) entered disabled state [ 65.536480][ T4696] gretap0: entered allmulticast mode [ 65.544351][ T4696] gretap0: entered promiscuous mode [ 65.550015][ T4696] bridge0: port 3(gretap0) entered blocking state [ 65.556558][ T4696] bridge0: port 3(gretap0) entered forwarding state [ 65.557209][ T4702] loop1: detected capacity change from 0 to 2048 [ 65.575409][ T4691] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.736730][ T4708] pim6reg1: entered promiscuous mode [ 65.742050][ T4708] pim6reg1: entered allmulticast mode [ 65.795228][ T4717] loop1: detected capacity change from 0 to 2048 [ 65.950118][ T4728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 65.998400][ T4728] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 770 with error 28 [ 66.010991][ T4728] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.010991][ T4728] [ 66.020894][ T4728] EXT4-fs (loop1): Total free blocks count 0 [ 66.026943][ T4728] EXT4-fs (loop1): Free/Dirty block details [ 66.030849][ T4723] loop0: detected capacity change from 0 to 8192 [ 66.032836][ T4728] EXT4-fs (loop1): free_blocks=66060288 [ 66.044818][ T4728] EXT4-fs (loop1): dirty_blocks=1072 [ 66.050192][ T4728] EXT4-fs (loop1): Block reservation details [ 66.056219][ T4728] EXT4-fs (loop1): i_reserved_data_blocks=98 [ 66.068832][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.099573][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.147793][ T3268] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.171612][ T4736] loop0: detected capacity change from 0 to 2048 [ 66.172960][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.212641][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.247026][ T3268] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.304118][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.318924][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 66.320843][ T141] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 770 with max blocks 1716 with error 28 [ 66.334116][ T3268] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 66.345598][ T141] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.345598][ T141] [ 66.370723][ T3268] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 66.769831][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.781516][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.793249][ T4567] bond0 (unregistering): Released all slaves [ 66.836279][ T4567] hsr_slave_0: left promiscuous mode [ 66.850963][ T4567] hsr_slave_1: left promiscuous mode [ 66.866054][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.878845][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.959226][ T4567] team0 (unregistering): Port device team_slave_1 removed [ 66.978220][ T4567] team0 (unregistering): Port device team_slave_0 removed [ 67.222281][ T4768] ref_ctr increment failed for inode: 0x80 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115286f40 [ 67.245646][ T4768] uprobe: syz.2.265:4768 failed to unregister, leaking uprobe [ 67.294722][ T4771] syzkaller0: entered promiscuous mode [ 67.300250][ T4771] syzkaller0: entered allmulticast mode [ 67.309838][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 67.332089][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 67.332101][ T29] audit: type=1400 audit(1727466900.401:606): avc: denied { ioctl } for pid=4770 comm="syz.0.266" path="socket:[8855]" dev="sockfs" ino=8855 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.369438][ T4774] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 67.377685][ T4774] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 67.467277][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.474353][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.486326][ T4751] bridge_slave_0: entered allmulticast mode [ 67.492789][ T4751] bridge_slave_0: entered promiscuous mode [ 67.503254][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.510328][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.518759][ T4751] bridge_slave_1: entered allmulticast mode [ 67.525268][ T4751] bridge_slave_1: entered promiscuous mode [ 67.560419][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.580627][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.583986][ T4786] syz.2.272 uses obsolete (PF_INET,SOCK_PACKET) [ 67.589718][ T29] audit: type=1400 audit(1727466900.651:607): avc: denied { bind } for pid=4783 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.616188][ T4786] loop2: detected capacity change from 0 to 128 [ 67.636735][ T4786] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.675580][ T4751] team0: Port device team_slave_0 added [ 67.686685][ T4751] team0: Port device team_slave_1 added [ 67.692550][ T4786] €: renamed from bond0 (while UP) [ 67.709545][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.716525][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.742590][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.754093][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.761100][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.787280][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.823112][ T4751] hsr_slave_0: entered promiscuous mode [ 67.829431][ T4751] hsr_slave_1: entered promiscuous mode [ 67.835465][ T4751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.843057][ T4751] Cannot create hsr debugfs directory [ 68.116646][ T4751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.125801][ T4751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.135090][ T4751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.143457][ T4751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.179816][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.192061][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.201485][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.208632][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.219762][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.226898][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.284374][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.377855][ T4751] veth0_vlan: entered promiscuous mode [ 68.385071][ T29] audit: type=1400 audit(1727466901.461:608): avc: denied { unlink } for pid=2950 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.386437][ T4751] veth1_vlan: entered promiscuous mode [ 68.423638][ T4751] veth0_macvtap: entered promiscuous mode [ 68.435892][ T4751] veth1_macvtap: entered promiscuous mode [ 68.460372][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.470950][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.480920][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.491381][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.501269][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.511813][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522697][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.532395][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.543118][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.552969][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.563411][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.573313][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.583812][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.585851][ T29] audit: type=1400 audit(1727466901.631:609): avc: denied { bind } for pid=4810 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.594552][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.621036][ T4751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.629801][ T4751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.638594][ T4751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.647333][ T4751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744244][ T4830] tipc: Started in network mode [ 68.749680][ T4830] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 68.759546][ T4830] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 68.767911][ T4830] tipc: Enabled bearer , priority 10 [ 68.787379][ T29] audit: type=1326 audit(1727466901.861:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 68.810936][ T29] audit: type=1326 audit(1727466901.861:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 68.834296][ T29] audit: type=1326 audit(1727466901.861:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 68.857495][ T29] audit: type=1326 audit(1727466901.861:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 68.880817][ T29] audit: type=1326 audit(1727466901.861:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 68.904128][ T29] audit: type=1326 audit(1727466901.861:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc82771dff9 code=0x7ffc0000 [ 69.338800][ T4841] loop0: detected capacity change from 0 to 128 [ 69.398458][ T4847] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 69.663273][ T4858] xt_nfacct: accounting object `syz1' does not exists [ 69.691371][ T4857] loop3: detected capacity change from 0 to 2048 [ 69.727037][ T4857] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.750953][ T4857] EXT4-fs (loop3): Remounting filesystem read-only [ 69.871331][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.879893][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.887716][ T3403] tipc: Node number set to 1 [ 70.440452][ T4891] loop0: detected capacity change from 0 to 256 [ 70.449681][ T4891] capability: warning: `syz.0.299' uses 32-bit capabilities (legacy support in use) [ 70.523379][ T4901] loop2: detected capacity change from 0 to 128 [ 70.541293][ T4901] EXT4-fs mount: 28 callbacks suppressed [ 70.541308][ T4901] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.566080][ T4898] loop3: detected capacity change from 0 to 1024 [ 70.573680][ T4901] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.605894][ T4898] EXT4-fs: Ignoring removed orlov option [ 70.611563][ T4898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.633827][ T4898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.668235][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 70.679029][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.758257][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 70.769895][ T4918] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 70.778647][ T4918] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 70.788338][ T4918] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 70.799182][ T4918] netlink: 'syz.0.309': attribute type 29 has an invalid length. [ 70.817188][ T4311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.848313][ T4924] netlink: 199796 bytes leftover after parsing attributes in process `syz.2.310'. [ 70.989025][ T4935] pim6reg1: entered promiscuous mode [ 70.994360][ T4935] pim6reg1: entered allmulticast mode [ 71.170762][ T4945] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 71.182852][ T4945] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 71.193112][ T4945] batman_adv: batadv0: Adding interface: ip6gretap1 [ 71.199745][ T4945] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.225473][ T4945] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 71.237990][ T4946] loop2: detected capacity change from 0 to 512 [ 71.244905][ T4946] journal_path: Lookup failure for './file0' [ 71.250980][ T4946] EXT4-fs: error: could not find journal device path [ 71.301482][ T4950] loop4: detected capacity change from 0 to 128 [ 71.313822][ T4950] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.317738][ T4952] loop1: detected capacity change from 0 to 512 [ 71.321733][ T4950] FAT-fs (loop4): Filesystem has been set read-only [ 71.335131][ T4950] bio_check_eod: 33 callbacks suppressed [ 71.335144][ T4950] syz.4.322: attempt to access beyond end of device [ 71.335144][ T4950] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.341269][ T4952] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.355071][ T4950] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.368807][ T4950] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.375263][ T4952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.377052][ T4950] syz.4.322: attempt to access beyond end of device [ 71.377052][ T4950] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.403048][ T4950] syz.4.322: attempt to access beyond end of device [ 71.403048][ T4950] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.426224][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.543556][ T4965] loop4: detected capacity change from 0 to 256 [ 71.572521][ T4965] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.582772][ T4965] FAT-fs (loop4): Filesystem has been set read-only [ 71.593359][ T4965] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.612371][ T4751] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 71.620209][ T4751] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 71.648670][ T4970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 71.799109][ T4976] infiniband syz1: set active [ 71.803917][ T4976] infiniband syz1: added bond_slave_1 [ 71.867206][ T4976] RDS/IB: syz1: added [ 71.883956][ T4976] smc: adding ib device syz1 with port count 1 [ 71.890995][ T4976] smc: ib device syz1 port 1 has pnetid [ 72.198063][ T4988] netlink: 'syz.0.336': attribute type 3 has an invalid length. [ 72.506589][ T4525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.551567][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 72.551581][ T29] audit: type=1400 audit(1727466905.621:841): avc: denied { mounton } for pid=5010 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.594591][ T29] audit: type=1400 audit(1727466905.661:842): avc: denied { sys_module } for pid=5010 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.618955][ T4525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.679570][ T4525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.782565][ T4525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.859815][ T29] audit: type=1326 audit(1727466905.931:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 72.864683][ T5021] loop0: detected capacity change from 0 to 512 [ 72.883092][ T29] audit: type=1326 audit(1727466905.931:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 72.931302][ T29] audit: type=1326 audit(1727466905.931:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 72.954743][ T29] audit: type=1326 audit(1727466905.931:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07a6fee033 code=0x7ffc0000 [ 72.977867][ T29] audit: type=1326 audit(1727466905.931:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07a6fecadf code=0x7ffc0000 [ 73.000912][ T29] audit: type=1326 audit(1727466905.931:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f07a6fee087 code=0x7ffc0000 [ 73.024054][ T29] audit: type=1326 audit(1727466905.931:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07a6fec990 code=0x7ffc0000 [ 73.047492][ T29] audit: type=1326 audit(1727466905.931:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07a6fedbfb code=0x7ffc0000 [ 73.071323][ T4525] bridge_slave_1: left allmulticast mode [ 73.077059][ T4525] bridge_slave_1: left promiscuous mode [ 73.082829][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.111097][ T4525] bridge_slave_0: left allmulticast mode [ 73.116815][ T4525] bridge_slave_0: left promiscuous mode [ 73.122537][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.134628][ T5021] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.346: bg 0: block 131: padding at end of block bitmap is not set [ 73.193962][ T5021] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 73.203195][ T5021] EXT4-fs (loop0): 1 truncate cleaned up [ 73.210678][ T5021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.236847][ T4525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.250081][ T4525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.263812][ T4525] bond0 (unregistering): Released all slaves [ 73.285573][ T5010] chnl_net:caif_netlink_parms(): no params data found [ 73.391155][ T4525] tipc: Disabling bearer [ 73.396443][ T4525] tipc: Left network mode [ 73.458431][ T4525] hsr_slave_0: left promiscuous mode [ 73.476627][ T4525] hsr_slave_1: left promiscuous mode [ 73.484376][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.491923][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.501511][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.508941][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.526503][ T4525] veth1_macvtap: left promiscuous mode [ 73.532074][ T4525] veth0_macvtap: left promiscuous mode [ 73.537631][ T4525] veth1_vlan: left promiscuous mode [ 73.542860][ T4525] veth0_vlan: left promiscuous mode [ 73.671399][ T4525] team0 (unregistering): Port device team_slave_1 removed [ 73.691763][ T4525] team0 (unregistering): Port device team_slave_0 removed [ 73.759080][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.766256][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.780181][ T5010] bridge_slave_0: entered allmulticast mode [ 73.786892][ T5010] bridge_slave_0: entered promiscuous mode [ 73.793708][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.800808][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.812011][ T5010] bridge_slave_1: entered allmulticast mode [ 73.819903][ T5010] bridge_slave_1: entered promiscuous mode [ 73.847607][ T5010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.858606][ T5010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.878718][ T5010] team0: Port device team_slave_0 added [ 73.885390][ T5010] team0: Port device team_slave_1 added [ 73.902205][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.909245][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.935382][ T5010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.946753][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.946801][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.962735][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.979610][ T5041] loop2: detected capacity change from 0 to 2048 [ 73.988775][ T5010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.006078][ T5041] EXT4-fs (loop2): unsupported inode size: 32768 [ 74.012727][ T5041] EXT4-fs (loop2): blocksize: 2048 [ 74.026412][ T5010] hsr_slave_0: entered promiscuous mode [ 74.041344][ T5010] hsr_slave_1: entered promiscuous mode [ 74.047809][ T5010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.054311][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.055775][ T5010] Cannot create hsr debugfs directory [ 74.069802][ T5043] loop0: detected capacity change from 0 to 256 [ 74.076811][ T5043] vfat: Bad value for 'fmask' [ 74.093813][ T5043] loop0: detected capacity change from 0 to 2048 [ 74.100411][ T5043] EXT4-fs: Ignoring removed bh option [ 74.105900][ T5043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.112546][ T5043] EXT4-fs: Ignoring removed nobh option [ 74.146258][ T5043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.159144][ T5043] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.352: bg 0: block 2: invalid block bitmap [ 74.177863][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.195734][ T5051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'. [ 74.217209][ T5053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 74.377186][ T5010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.386662][ T5010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.395816][ T5010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.404139][ T5010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.440183][ T5010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.451609][ T5010] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.460764][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.467856][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.478616][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.485737][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.547909][ T5010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.646398][ T5010] veth0_vlan: entered promiscuous mode [ 74.654049][ T5010] veth1_vlan: entered promiscuous mode [ 74.668078][ T5010] veth0_macvtap: entered promiscuous mode [ 74.675699][ T5010] veth1_macvtap: entered promiscuous mode [ 74.685610][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.696188][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.706083][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.716623][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.726542][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.736985][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.748182][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.759048][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.769700][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.779557][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.789988][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.799929][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.810329][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.821398][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.829718][ T5010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838442][ T5010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.847222][ T5010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.855934][ T5010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.293398][ T5090] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.361'. [ 75.339867][ T5092] netlink: 596 bytes leftover after parsing attributes in process `syz.1.362'. [ 75.350543][ T5092] program syz.1.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.359995][ T5092] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.369896][ T5097] loop0: detected capacity change from 0 to 128 [ 75.398526][ T5097] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 75.406418][ T5097] FAT-fs (loop0): Filesystem has been set read-only [ 75.420157][ T5099] loop1: detected capacity change from 0 to 256 [ 75.423319][ T5097] syz.0.364: attempt to access beyond end of device [ 75.423319][ T5097] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 75.440389][ T5097] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 75.448297][ T5097] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 75.453075][ T5099] FAT-fs (loop1): Directory bread(block 64) failed [ 75.466568][ T5097] syz.0.364: attempt to access beyond end of device [ 75.466568][ T5097] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.470640][ T5099] FAT-fs (loop1): Directory bread(block 65) failed [ 75.494622][ T5099] FAT-fs (loop1): Directory bread(block 66) failed [ 75.496537][ T5097] syz.0.364: attempt to access beyond end of device [ 75.496537][ T5097] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.501258][ T5099] FAT-fs (loop1): Directory bread(block 67) failed [ 75.523943][ T5099] FAT-fs (loop1): Directory bread(block 68) failed [ 75.532620][ T5099] FAT-fs (loop1): Directory bread(block 69) failed [ 75.542959][ T5099] FAT-fs (loop1): Directory bread(block 70) failed [ 75.554364][ T5099] FAT-fs (loop1): Directory bread(block 71) failed [ 75.565450][ T5099] FAT-fs (loop1): Directory bread(block 72) failed [ 75.575615][ T5099] FAT-fs (loop1): Directory bread(block 73) failed [ 75.690858][ T5099] syz.1.365: attempt to access beyond end of device [ 75.690858][ T5099] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 75.780749][ T5099] syz.1.365: attempt to access beyond end of device [ 75.780749][ T5099] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 75.911580][ T5108] loop0: detected capacity change from 0 to 512 [ 76.124814][ T5108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.161465][ T5108] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.352492][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.391112][ T5127] netlink: 199796 bytes leftover after parsing attributes in process `syz.1.374'. [ 76.550715][ T5145] loop3: detected capacity change from 0 to 256 [ 76.577090][ T5145] FAT-fs (loop3): Directory bread(block 64) failed [ 76.583698][ T5145] FAT-fs (loop3): Directory bread(block 65) failed [ 76.604135][ T5145] FAT-fs (loop3): Directory bread(block 66) failed [ 76.615708][ T5145] FAT-fs (loop3): Directory bread(block 67) failed [ 76.626586][ T5145] FAT-fs (loop3): Directory bread(block 68) failed [ 76.633476][ T5145] FAT-fs (loop3): Directory bread(block 69) failed [ 76.640375][ T5145] FAT-fs (loop3): Directory bread(block 70) failed [ 76.647116][ T5145] FAT-fs (loop3): Directory bread(block 71) failed [ 76.653799][ T5145] FAT-fs (loop3): Directory bread(block 72) failed [ 76.660394][ T5145] FAT-fs (loop3): Directory bread(block 73) failed [ 76.679288][ T5149] loop1: detected capacity change from 0 to 512 [ 76.720996][ T5149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.734476][ T5149] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.843462][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.153264][ T5181] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 77.300709][ T5185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 77.381565][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.381565][ T4514] loop3: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 77.396620][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.396620][ T4514] loop3: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 77.415475][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.415475][ T4514] loop3: rw=1, sector=1864, nr_sectors = 2048 limit=256 [ 77.433078][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.433078][ T4514] loop3: rw=1, sector=3912, nr_sectors = 2048 limit=256 [ 77.450017][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.450017][ T4514] loop3: rw=1, sector=5960, nr_sectors = 2136 limit=256 [ 77.467493][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.467493][ T4514] loop3: rw=1, sector=8096, nr_sectors = 2048 limit=256 [ 77.485206][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.485206][ T4514] loop3: rw=1, sector=10144, nr_sectors = 2984 limit=256 [ 77.502611][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.502611][ T4514] loop3: rw=1, sector=13128, nr_sectors = 2064 limit=256 [ 77.519198][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.519198][ T4514] loop3: rw=1, sector=15192, nr_sectors = 2056 limit=256 [ 77.536923][ T4514] kworker/u8:24: attempt to access beyond end of device [ 77.536923][ T4514] loop3: rw=1, sector=17248, nr_sectors = 2840 limit=256 [ 77.668281][ T5192] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 77.697238][ T29] kauditd_printk_skb: 7777 callbacks suppressed [ 77.697253][ T29] audit: type=1326 audit(1727466910.771:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.734374][ T29] audit: type=1326 audit(1727466910.771:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.751926][ T5196] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 77.757854][ T29] audit: type=1326 audit(1727466910.801:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.791212][ T29] audit: type=1326 audit(1727466910.801:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.791624][ T5196] batman_adv: batadv0: Adding interface: ip6gretap1 [ 77.814778][ T29] audit: type=1326 audit(1727466910.801:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.821143][ T5196] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.821171][ T5196] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 77.836757][ T5196] loop4: detected capacity change from 0 to 512 [ 77.844657][ T29] audit: type=1326 audit(1727466910.801:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 77.846802][ T29] audit: type=1400 audit(1727466910.811:8622): avc: denied { relabelfrom } for pid=5195 comm="syz.4.399" name="NETLINK" dev="sockfs" ino=11355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.934540][ T29] audit: type=1400 audit(1727466910.811:8623): avc: denied { mac_admin } for pid=5195 comm="syz.4.399" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.955581][ T29] audit: type=1400 audit(1727466910.811:8624): avc: denied { relabelto } for pid=5195 comm="syz.4.399" name="NETLINK" dev="sockfs" ino=11355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:device_t:s0" [ 77.969636][ T5196] journal_path: Lookup failure for './file0' [ 77.983449][ T29] audit: type=1400 audit(1727466910.811:8625): avc: denied { ioctl } for pid=5195 comm="syz.4.399" path="socket:[11358]" dev="sockfs" ino=11358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.989441][ T5196] EXT4-fs: error: could not find journal device path [ 78.041454][ T5201] netlink: 'syz.1.401': attribute type 3 has an invalid length. [ 78.081345][ T5216] SELinux: Context Ü is not valid (left unmapped). [ 79.349016][ T5242] loop3: detected capacity change from 0 to 2048 [ 79.568019][ T5249] loop1: detected capacity change from 0 to 128 [ 80.062596][ T5249] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 80.070530][ T5249] FAT-fs (loop1): Filesystem has been set read-only [ 80.167794][ T5249] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 80.175690][ T5249] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 80.487472][ T5275] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 80.518814][ T5271] loop1: detected capacity change from 0 to 512 [ 80.546495][ T5271] EXT4-fs (loop1): filesystem is read-only [ 80.859899][ T5279] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 81.002931][ T9] IPVS: starting estimator thread 0... [ 81.091605][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.104470][ T5291] IPVS: using max 2736 ests per chain, 136800 per kthread [ 81.236202][ T5307] ref_ctr increment failed for inode: 0x157 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881119c5500 [ 81.248360][ T5307] uprobe: syz.3.438:5307 failed to unregister, leaking uprobe [ 81.277301][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 81.330152][ T5316] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 82.060695][ T5331] loop4: detected capacity change from 0 to 1024 [ 82.068944][ T5331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.085932][ T5331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.358868][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.477138][ T24] kernel read not supported for file inotify (pid: 24 comm: kworker/1:0) [ 83.136742][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 83.136756][ T29] audit: type=1400 audit(1727466916.211:8748): avc: denied { execute_no_trans } for pid=5449 comm="syz.1.451" path="/96/file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.292138][ T5490] loop1: detected capacity change from 0 to 128 [ 83.311016][ T29] audit: type=1326 audit(1727466916.371:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.334443][ T29] audit: type=1326 audit(1727466916.371:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.357769][ T29] audit: type=1326 audit(1727466916.381:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.381267][ T29] audit: type=1326 audit(1727466916.381:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.404663][ T29] audit: type=1326 audit(1727466916.381:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.428002][ T29] audit: type=1326 audit(1727466916.381:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.452646][ T5495] loop4: detected capacity change from 0 to 128 [ 83.463142][ T5490] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.469285][ T29] audit: type=1400 audit(1727466916.431:8755): avc: denied { mounton } for pid=5449 comm="syz.1.451" path="/96/file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.497677][ T29] audit: type=1326 audit(1727466916.531:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.502592][ T5490] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.521180][ T29] audit: type=1326 audit(1727466916.531:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.2.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 83.546628][ T5495] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.568079][ T5495] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.610209][ T5490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.236604][ T5515] loop1: detected capacity change from 0 to 2048 [ 84.247617][ T5517] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 84.251052][ T5010] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.427032][ T5523] loop3: detected capacity change from 0 to 256 [ 84.441864][ T5523] FAT-fs (loop3): Directory bread(block 64) failed [ 84.448760][ T5523] FAT-fs (loop3): Directory bread(block 65) failed [ 84.456198][ T5523] FAT-fs (loop3): Directory bread(block 66) failed [ 84.462850][ T5523] FAT-fs (loop3): Directory bread(block 67) failed [ 84.483970][ T5523] FAT-fs (loop3): Directory bread(block 68) failed [ 84.495550][ T5523] FAT-fs (loop3): Directory bread(block 69) failed [ 84.502289][ T5523] FAT-fs (loop3): Directory bread(block 70) failed [ 84.514624][ T5523] FAT-fs (loop3): Directory bread(block 71) failed [ 84.534772][ T5523] FAT-fs (loop3): Directory bread(block 72) failed [ 84.544496][ T5523] FAT-fs (loop3): Directory bread(block 73) failed [ 84.659869][ T5530] ref_ctr increment failed for inode: 0x82 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100057480 [ 84.672648][ T5530] uprobe: syz.4.469:5530 failed to unregister, leaking uprobe [ 84.695408][ T5537] loop1: detected capacity change from 0 to 2048 [ 84.783603][ T5537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.438581][ T5545] loop2: detected capacity change from 0 to 128 [ 85.450645][ T5545] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.451405][ T5546] loop4: detected capacity change from 0 to 2048 [ 85.458549][ T5545] FAT-fs (loop2): Filesystem has been set read-only [ 85.471566][ T5545] bio_check_eod: 5 callbacks suppressed [ 85.471579][ T5545] syz.2.472: attempt to access beyond end of device [ 85.471579][ T5545] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.490795][ T5545] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.498688][ T5545] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 85.507256][ T5546] loop4: p2 < > [ 85.507954][ T5545] syz.2.472: attempt to access beyond end of device [ 85.507954][ T5545] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.524037][ T5545] syz.2.472: attempt to access beyond end of device [ 85.524037][ T5545] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.542482][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 85.556034][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.691786][ T5560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.701059][ T5560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.712387][ T5558] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 85.768049][ T5564] loop4: detected capacity change from 0 to 1024 [ 85.788825][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 85.797726][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.805266][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.813059][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.820567][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.828273][ T5564] batman_adv: batadv0: Removing interface: ip6gretap1 [ 88.145767][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 88.145781][ T29] audit: type=1400 audit(1727466921.221:8952): avc: denied { bind } for pid=5582 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.145802][ T29] audit: type=1400 audit(1727466921.221:8953): avc: denied { name_bind } for pid=5582 comm="syz.1.497" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.145825][ T29] audit: type=1400 audit(1727466921.221:8954): avc: denied { node_bind } for pid=5582 comm="syz.1.497" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.146531][ T29] audit: type=1400 audit(1727466921.221:8955): avc: denied { write } for pid=5582 comm="syz.1.497" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.362418][ T29] audit: type=1400 audit(1727466921.431:8956): avc: denied { bind } for pid=5595 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.382695][ T29] audit: type=1326 audit(1727466921.431:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 88.406239][ T29] audit: type=1326 audit(1727466921.431:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 88.418371][ T5597] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 88.430233][ T29] audit: type=1326 audit(1727466921.431:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 88.460569][ T29] audit: type=1326 audit(1727466921.431:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 88.483929][ T29] audit: type=1326 audit(1727466921.431:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a6fedff9 code=0x7ffc0000 [ 88.508614][ T5597] team0: Port device netdevsim1 added [ 88.818345][ T5606] loop1: detected capacity change from 0 to 2048 [ 89.441481][ T5616] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 89.482254][ T5618] loop1: detected capacity change from 0 to 512 [ 89.518993][ T5618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.538024][ T5625] loop3: detected capacity change from 0 to 128 [ 89.542290][ T5618] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.596489][ T5628] loop3: detected capacity change from 0 to 512 [ 89.603611][ T5628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.614366][ T5628] EXT4-fs (loop3): orphan cleanup on readonly fs [ 89.622888][ T5628] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.496: bg 0: block 248: padding at end of block bitmap is not set [ 89.637443][ T5628] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.496: Failed to acquire dquot type 1 [ 89.650568][ T5628] EXT4-fs (loop3): 1 truncate cleaned up [ 89.656960][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.687541][ T5630] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.494: corrupted inode contents [ 89.709895][ T5630] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.494: mark_inode_dirty error [ 89.729437][ T5630] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.494: corrupted inode contents [ 89.746829][ T5632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.750904][ T5630] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.494: mark_inode_dirty error [ 89.768186][ T5630] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.494: mark inode dirty (error -117) [ 89.768222][ T5632] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.496: Abort forced by user [ 89.791627][ T5632] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 89.792083][ T5630] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 89.816716][ T5632] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.830349][ T5632] ext4 filesystem being remounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.871643][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.004158][ T5637] loop0: detected capacity change from 0 to 512 [ 90.010968][ T5637] EXT4-fs (loop0): filesystem is read-only [ 90.590846][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.620997][ T5652] openvswitch: netlink: IPv4 tun info is not correct [ 90.733798][ T5665] netlink: 180 bytes leftover after parsing attributes in process `syz.2.514'. [ 90.743950][ T5665] netlink: 56 bytes leftover after parsing attributes in process `syz.2.514'. [ 90.973135][ T5674] loop2: detected capacity change from 0 to 256 [ 90.983897][ T5674] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.040680][ T5674] syz.2.516[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.041358][ T5674] syz.2.516[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.080204][ T5674] syz.2.516[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.094811][ T5678] Process accounting resumed [ 91.199901][ T5682] loop1: detected capacity change from 0 to 2048 [ 91.254734][ T5682] loop1: p1 < > p4 [ 91.259478][ T5682] loop1: p4 size 393216 extends beyond EOD, truncated [ 91.270120][ T5682] syz.1.519[5682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.270296][ T5682] syz.1.519[5682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.281956][ T5682] syz.1.519[5682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.296863][ T5682] SELinux: Context is not valid (left unmapped). [ 91.458210][ T5691] loop3: detected capacity change from 0 to 128 [ 91.467061][ T5691] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.479356][ T5691] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.557003][ T5698] loop4: detected capacity change from 0 to 1024 [ 91.563791][ T5698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.570991][ T5698] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.596344][ T5698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.616748][ T5706] loop2: detected capacity change from 0 to 2048 [ 91.628887][ T5698] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 91.656864][ T5706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.690591][ T3672] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.701115][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.719209][ T5713] openvswitch: netlink: IPv4 tun info is not correct [ 91.735809][ T5715] loop4: detected capacity change from 0 to 256 [ 91.756728][ T5715] FAT-fs (loop4): Directory bread(block 64) failed [ 91.763449][ T5715] FAT-fs (loop4): Directory bread(block 65) failed [ 91.771044][ T5715] FAT-fs (loop4): Directory bread(block 66) failed [ 91.777834][ T5715] FAT-fs (loop4): Directory bread(block 67) failed [ 91.785339][ T5715] FAT-fs (loop4): Directory bread(block 68) failed [ 91.796241][ T5715] FAT-fs (loop4): Directory bread(block 69) failed [ 91.803547][ T5715] FAT-fs (loop4): Directory bread(block 70) failed [ 91.811643][ T5715] FAT-fs (loop4): Directory bread(block 71) failed [ 91.852473][ T5715] FAT-fs (loop4): Directory bread(block 72) failed [ 91.866958][ T5715] FAT-fs (loop4): Directory bread(block 73) failed [ 91.892186][ T5719] netlink: 180 bytes leftover after parsing attributes in process `syz.3.528'. [ 91.916494][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.018778][ T5719] netlink: 56 bytes leftover after parsing attributes in process `syz.3.528'. [ 92.094834][ T5721] loop2: detected capacity change from 0 to 512 [ 92.101430][ T5721] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.105318][ T5724] loop4: detected capacity change from 0 to 2048 [ 92.115311][ T5721] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.529: corrupted in-inode xattr: invalid ea_ino [ 92.129634][ T5721] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.529: couldn't read orphan inode 15 (err -117) [ 92.136224][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.142142][ T5721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.188294][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.207659][ T5731] loop3: detected capacity change from 0 to 2048 [ 92.236207][ T5731] loop3: p1 < > p4 [ 92.240504][ T5731] loop3: p4 size 393216 extends beyond EOD, truncated [ 92.251230][ T5731] syz.3.531[5731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.251287][ T5731] syz.3.531[5731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.262664][ T5731] syz.3.531[5731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.314765][ T5738] loop3: detected capacity change from 0 to 2048 [ 92.351237][ T5738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.388215][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.473117][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.539'. [ 92.507518][ T5749] loop2: detected capacity change from 0 to 1024 [ 92.567384][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 92.576374][ T5749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.583884][ T5749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.591493][ T5749] batman_adv: batadv0: Removing interface: ip6gretap1 [ 92.898777][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.047745][ T5764] loop2: detected capacity change from 0 to 256 [ 93.070733][ T5764] FAT-fs (loop2): Directory bread(block 64) failed [ 93.078994][ T5764] FAT-fs (loop2): Directory bread(block 65) failed [ 93.088492][ T5764] FAT-fs (loop2): Directory bread(block 66) failed [ 93.103069][ T5764] FAT-fs (loop2): Directory bread(block 67) failed [ 93.116301][ T5764] FAT-fs (loop2): Directory bread(block 68) failed [ 93.119627][ T5769] loop3: detected capacity change from 0 to 512 [ 93.124883][ T5764] FAT-fs (loop2): Directory bread(block 69) failed [ 93.135934][ T5769] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.137535][ T5764] FAT-fs (loop2): Directory bread(block 70) failed [ 93.143763][ T5769] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.545: corrupted in-inode xattr: invalid ea_ino [ 93.162131][ T5764] FAT-fs (loop2): Directory bread(block 71) failed [ 93.162172][ T5764] FAT-fs (loop2): Directory bread(block 72) failed [ 93.175924][ T5764] FAT-fs (loop2): Directory bread(block 73) failed [ 93.176720][ T5769] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.545: couldn't read orphan inode 15 (err -117) [ 93.197290][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 93.197358][ T29] audit: type=1326 audit(1727466926.271:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.199155][ T5769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.203556][ T29] audit: type=1326 audit(1727466926.271:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.263810][ T29] audit: type=1326 audit(1727466926.271:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.287160][ T29] audit: type=1326 audit(1727466926.271:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.310763][ T29] audit: type=1326 audit(1727466926.271:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.334182][ T29] audit: type=1326 audit(1727466926.271:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.357399][ T29] audit: type=1326 audit(1727466926.271:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.380788][ T29] audit: type=1326 audit(1727466926.271:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.404484][ T29] audit: type=1326 audit(1727466926.271:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.427696][ T29] audit: type=1326 audit(1727466926.271:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 93.465454][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.492943][ T5805] loop2: detected capacity change from 0 to 512 [ 93.514759][ T5810] loop0: detected capacity change from 0 to 2048 [ 93.521542][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.534829][ T5810] loop0: p1 < > p4 [ 93.535192][ T5805] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.542899][ T5810] loop0: p4 size 393216 extends beyond EOD, truncated [ 93.574579][ T5810] syz.0.547[5810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.603770][ T5823] pim6reg1: entered promiscuous mode [ 93.608110][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.615034][ T5823] pim6reg1: entered allmulticast mode [ 93.680736][ T5828] loop3: detected capacity change from 0 to 4096 [ 93.699240][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.739276][ T5844] loop0: detected capacity change from 0 to 512 [ 93.774292][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.787515][ T5844] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.832026][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.979434][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.004925][ T5898] tipc: Enabling of bearer rejected, failed to enable media [ 94.069110][ T5911] loop3: detected capacity change from 0 to 1024 [ 94.086829][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 94.095728][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.103208][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.115082][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.122573][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.162754][ T5926] loop4: detected capacity change from 0 to 256 [ 94.170168][ T5925] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 94.171079][ T5926] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.172131][ T5928] loop2: detected capacity change from 0 to 2048 [ 94.234737][ T5928] loop2: p1 < > p4 [ 94.238873][ T5928] loop2: p4 size 8388608 extends beyond EOD, truncated [ 94.324076][ T5926] Process accounting resumed [ 94.418478][ T5933] loop0: detected capacity change from 0 to 512 [ 94.442876][ T5933] EXT4-fs (loop0): 1 truncate cleaned up [ 94.448976][ T5933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.485771][ T5936] loop1: detected capacity change from 0 to 128 [ 94.515623][ T5936] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.542271][ T5936] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.638129][ T5944] loop4: detected capacity change from 0 to 4096 [ 94.651710][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 94.668813][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 94.692568][ T5944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.707075][ T3273] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 94.796944][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 94.826420][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 94.897103][ T3273] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 94.937783][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 94.982336][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 95.002395][ T3273] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 95.019951][ T3273] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 95.281370][ T3273] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.293037][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.322339][ T5949] loop0: detected capacity change from 0 to 2048 [ 95.330479][ T4561] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.386491][ T5953] loop2: detected capacity change from 0 to 512 [ 95.397619][ T4561] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.414929][ T5953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.421959][ T5953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.566: bg 0: block 248: padding at end of block bitmap is not set [ 95.449139][ T5953] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.566: Failed to acquire dquot type 1 [ 95.464314][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.475219][ T4561] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.487244][ T5953] EXT4-fs (loop2): 1 truncate cleaned up [ 95.493667][ T5953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.497750][ T5959] loop3: detected capacity change from 0 to 2048 [ 95.513072][ T5953] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 95.527351][ T4561] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.538061][ T5953] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.546111][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.600088][ T5972] netlink: 180 bytes leftover after parsing attributes in process `syz.4.571'. [ 95.610190][ T5953] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 95.623729][ T5970] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 95.623861][ T5972] netlink: 56 bytes leftover after parsing attributes in process `syz.4.571'. [ 95.713879][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.749146][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.751403][ T4561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.772215][ T4561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.784137][ T4561] bond0 (unregistering): Released all slaves [ 95.938544][ T5990] loop3: detected capacity change from 0 to 2048 [ 95.947113][ T4561] hsr_slave_0: left promiscuous mode [ 95.952796][ T4561] hsr_slave_1: left promiscuous mode [ 95.958696][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.966167][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.973865][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.981354][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.991686][ T4561] veth1_macvtap: left promiscuous mode [ 95.997277][ T4561] veth0_macvtap: left promiscuous mode [ 96.002948][ T4561] veth1_vlan: left promiscuous mode [ 96.005180][ T5996] netlink: 180 bytes leftover after parsing attributes in process `syz.0.586'. [ 96.008297][ T4561] veth0_vlan: left promiscuous mode [ 96.017236][ T5996] netlink: 56 bytes leftover after parsing attributes in process `syz.0.586'. [ 96.096330][ T4561] team0 (unregistering): Port device team_slave_1 removed [ 96.107185][ T4561] team0 (unregistering): Port device team_slave_0 removed [ 96.163208][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 96.236172][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.243295][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.255418][ T5956] bridge_slave_0: entered allmulticast mode [ 96.262175][ T5956] bridge_slave_0: entered promiscuous mode [ 96.266374][ T6012] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 96.269726][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.286565][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.294811][ T5956] bridge_slave_1: entered allmulticast mode [ 96.301729][ T5956] bridge_slave_1: entered promiscuous mode [ 96.352039][ T6008] loop3: detected capacity change from 0 to 512 [ 96.365176][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.377004][ T6008] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.388556][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.394831][ T6008] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.412737][ T6008] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.582: Failed to acquire dquot type 1 [ 96.446891][ T6008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.582: bg 0: block 40: padding at end of block bitmap is not set [ 96.462509][ T6008] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 96.473372][ T6008] EXT4-fs (loop3): 1 truncate cleaned up [ 96.484756][ T5956] team0: Port device team_slave_0 added [ 96.491150][ T5956] team0: Port device team_slave_1 added [ 96.507368][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.514320][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.540358][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.552063][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.553050][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.559018][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.559111][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.438531][ T5956] hsr_slave_0: entered promiscuous mode [ 97.445190][ T5956] hsr_slave_1: entered promiscuous mode [ 97.451090][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.458676][ T5956] Cannot create hsr debugfs directory [ 97.538674][ T6033] netlink: 'syz.0.594': attribute type 3 has an invalid length. [ 97.584344][ T6037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 97.590910][ T6037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.598413][ T6037] vhci_hcd vhci_hcd.0: Device attached [ 97.619184][ T6038] vhci_hcd: connection closed [ 97.619552][ T4560] vhci_hcd: stop threads [ 97.628590][ T4560] vhci_hcd: release socket [ 97.633003][ T4560] vhci_hcd: disconnect device [ 97.638235][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.699122][ T6044] loop0: detected capacity change from 0 to 128 [ 97.708877][ T6043] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 97.709921][ T6044] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.732370][ T6044] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.847102][ T6052] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36906 - 0 [ 97.856047][ T6052] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36906 - 0 [ 97.864927][ T6052] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36906 - 0 [ 97.873700][ T6052] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36906 - 0 [ 97.882990][ T6052] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 46630 - 0 [ 97.892077][ T6052] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 46630 - 0 [ 97.900930][ T6052] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 46630 - 0 [ 97.909789][ T6052] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 46630 - 0 [ 97.918847][ T6052] geneve2: entered promiscuous mode [ 97.924069][ T6052] geneve2: entered allmulticast mode [ 97.958303][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.989794][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.017587][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.047734][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.056643][ T6059] loop4: detected capacity change from 0 to 2048 [ 98.093358][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.101283][ T6059] loop4: p1 < > p4 [ 98.105768][ T6059] loop4: p4 size 8388608 extends beyond EOD, truncated [ 98.117784][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.219912][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.227068][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.264322][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.271440][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.334277][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 98.334290][ T29] audit: type=1400 audit(1727466931.401:9419): avc: denied { create } for pid=6064 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.376005][ T6065] bpf_get_probe_write_proto: 5 callbacks suppressed [ 98.376023][ T6065] syz.2.604[6065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.389537][ T6065] syz.2.604[6065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.430216][ T6070] loop2: detected capacity change from 0 to 512 [ 98.431117][ T6065] syz.2.604[6065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.441954][ T29] audit: type=1400 audit(1727466931.501:9420): avc: denied { ioctl } for pid=6064 comm="syz.2.604" path="socket:[13699]" dev="sockfs" ino=13699 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.450308][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.472700][ T29] audit: type=1400 audit(1727466931.541:9421): avc: denied { mounton } for pid=6064 comm="syz.2.604" path="/94/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.541251][ T6070] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.556360][ T4447] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.572837][ T6070] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 98.710571][ T29] audit: type=1326 audit(1727466931.781:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.733980][ T29] audit: type=1326 audit(1727466931.781:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.757409][ T29] audit: type=1326 audit(1727466931.781:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.780719][ T29] audit: type=1326 audit(1727466931.781:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.798653][ T6073] loop0: detected capacity change from 0 to 512 [ 98.804055][ T29] audit: type=1326 audit(1727466931.781:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.833688][ T29] audit: type=1326 audit(1727466931.781:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b8a88cadf code=0x7ffc0000 [ 98.855944][ T5956] veth0_vlan: entered promiscuous mode [ 98.856917][ T29] audit: type=1326 audit(1727466931.781:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a88dff9 code=0x7ffc0000 [ 98.873659][ T5956] veth1_vlan: entered promiscuous mode [ 98.910457][ T6073] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.934819][ T6073] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.957482][ T6088] netlink: 'syz.2.607': attribute type 4 has an invalid length. [ 98.973404][ T6073] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.605: Failed to acquire dquot type 1 [ 98.989720][ T6084] netlink: 'syz.2.607': attribute type 4 has an invalid length. [ 99.030669][ T5956] veth0_macvtap: entered promiscuous mode [ 99.244015][ T5956] veth1_macvtap: entered promiscuous mode [ 99.261393][ T6095] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 99.263364][ T6073] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.605: bg 0: block 40: padding at end of block bitmap is not set [ 99.314901][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.325391][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.383167][ T6073] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 99.387592][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.395868][ T6073] EXT4-fs (loop0): 1 truncate cleaned up [ 99.415495][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.424086][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.438497][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.449541][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.463342][ T5956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.472227][ T5956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.480972][ T5956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489853][ T5956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.531787][ T6098] loop4: detected capacity change from 0 to 4096 [ 99.542334][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.568077][ T6104] bridge: RTM_NEWNEIGH with invalid ether address [ 99.595998][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 99.675153][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 99.682597][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.690028][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.697455][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.704884][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.712287][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.719762][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.727274][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.734829][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.742221][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.749755][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.757146][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 99.764685][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.772058][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.779434][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.786802][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.794252][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.801653][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.809085][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.816489][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.823944][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.831314][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.838821][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.846296][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.853796][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.861169][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.868546][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.875916][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.883413][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.890815][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.898321][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.905772][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.913248][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.920620][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.927991][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.935416][ T985] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.981676][ T985] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 100.070983][ T6115] loop3: detected capacity change from 0 to 2048 [ 100.159530][ T6125] loop0: detected capacity change from 0 to 4096 [ 100.910039][ T3672] EXT4-fs unmount: 4 callbacks suppressed [ 100.910054][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.955716][ T6142] loop4: detected capacity change from 0 to 128 [ 100.963319][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.965078][ T6140] loop3: detected capacity change from 0 to 2048 [ 100.994380][ T6147] loop7: detected capacity change from 0 to 16384 [ 101.095751][ T6140] loop3: p1 < > p4 [ 101.100923][ T6140] loop3: p4 size 8388608 extends beyond EOD, truncated [ 101.118795][ T6156] loop0: detected capacity change from 0 to 1024 [ 101.125933][ T6156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.135805][ T6156] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.628: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 101.320016][ T6156] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.628: Bad quota inode: 3, type: 0 [ 101.462647][ T6156] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.512240][ T6156] EXT4-fs (loop0): mount failed [ 101.744961][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 101.752444][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.759870][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.767293][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.774692][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.782170][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.844021][ T6145] I/O error, dev loop7, sector 12288 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 101.854178][ T6145] Buffer I/O error on dev loop7, logical block 1536, lost async page write [ 101.862828][ T6145] Buffer I/O error on dev loop7, logical block 1537, lost async page write [ 101.871441][ T6145] Buffer I/O error on dev loop7, logical block 1538, lost async page write [ 101.880094][ T6145] Buffer I/O error on dev loop7, logical block 1539, lost async page write [ 101.888823][ T6145] Buffer I/O error on dev loop7, logical block 1540, lost async page write [ 101.897520][ T6145] Buffer I/O error on dev loop7, logical block 1541, lost async page write [ 101.906128][ T6145] Buffer I/O error on dev loop7, logical block 1542, lost async page write [ 101.914751][ T6145] Buffer I/O error on dev loop7, logical block 1543, lost async page write [ 101.923372][ T6145] Buffer I/O error on dev loop7, logical block 1544, lost async page write [ 101.931990][ T6145] Buffer I/O error on dev loop7, logical block 1545, lost async page write [ 101.966108][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.973512][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.981015][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.988510][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.995900][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.003302][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 102.010747][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.018234][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.026094][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.033474][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.040927][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.044203][ T6145] I/O error, dev loop7, sector 13312 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 102.048438][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.048462][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.073243][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.080757][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.088200][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.091858][ T6145] I/O error, dev loop7, sector 14336 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 102.095582][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.095603][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.120634][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.126298][ T6145] I/O error, dev loop7, sector 15360 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 102.128177][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.145584][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.152956][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.160342][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.167427][ T6175] loop4: detected capacity change from 0 to 512 [ 102.167734][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.181385][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.188852][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.196245][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.203616][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.206985][ T6175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.211019][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.226784][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.236551][ T6175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.241486][ T3403] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.250150][ T6175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.631: bg 0: block 248: padding at end of block bitmap is not set [ 102.298312][ T6177] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 102.320331][ T6181] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 102.320460][ T6175] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.631: Failed to acquire dquot type 1 [ 102.351859][ T6175] EXT4-fs (loop4): 1 truncate cleaned up [ 102.373705][ T6175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.390631][ T6188] loop3: detected capacity change from 0 to 128 [ 102.502609][ T6204] loop3: detected capacity change from 0 to 512 [ 102.526191][ T6204] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.641: corrupted in-inode xattr: invalid ea_ino [ 102.551745][ T6204] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.641: couldn't read orphan inode 15 (err -117) [ 102.581801][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.620540][ T6213] loop0: detected capacity change from 0 to 512 [ 102.635402][ T6213] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.665835][ T6213] EXT4-fs (loop0): 1 orphan inode deleted [ 102.671592][ T6213] EXT4-fs (loop0): 1 truncate cleaned up [ 102.682961][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.799141][ T6213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.867036][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.925583][ T6224] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 102.941969][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 102.949430][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.956971][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.964353][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.971769][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.979192][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.987267][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.990288][ T6226] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 102.994654][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.009677][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.017069][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.024479][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.031857][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 103.039231][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.046634][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.053989][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.061358][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.068779][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.076339][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.084188][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.091656][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.099035][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.106459][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.113880][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.121260][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.128660][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.136121][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.143554][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.150970][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.158337][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.165713][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.173074][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.180478][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.187914][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.195289][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.202678][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.210116][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.218662][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.270741][ T6233] loop0: detected capacity change from 0 to 2048 [ 103.285929][ T6230] loop2: detected capacity change from 0 to 1024 [ 103.292912][ T6230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.309546][ T6230] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.649: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 103.317119][ T6233] loop0: p1 < > p4 [ 103.329556][ T6230] EXT4-fs error (device loop2): ext4_quota_enable:7056: comm syz.2.649: Bad quota inode: 3, type: 0 [ 103.345095][ T6233] loop0: p4 size 8388608 extends beyond EOD, truncated [ 103.345644][ T6230] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 103.414803][ T6230] EXT4-fs (loop2): mount failed [ 103.521266][ T3672] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.534095][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 103.534108][ T29] audit: type=1326 audit(1727466936.601:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.572140][ T29] audit: type=1326 audit(1727466936.641:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.595560][ T29] audit: type=1326 audit(1727466936.641:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.618953][ T29] audit: type=1326 audit(1727466936.641:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.642314][ T29] audit: type=1326 audit(1727466936.641:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.665624][ T29] audit: type=1326 audit(1727466936.641:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.688998][ T29] audit: type=1326 audit(1727466936.641:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.712636][ T29] audit: type=1326 audit(1727466936.641:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.735987][ T29] audit: type=1326 audit(1727466936.641:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 103.759489][ T29] audit: type=1326 audit(1727466936.641:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6169b3dff9 code=0x7ffc0000 [ 104.007392][ T6250] loop2: detected capacity change from 0 to 2048 [ 104.045257][ T6250] loop2: p1 < > p4 [ 104.049779][ T6250] loop2: p4 size 393216 extends beyond EOD, truncated [ 104.088684][ T6260] syz.3.658[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.088780][ T6260] syz.3.658[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.089122][ T6250] syz.2.655[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.146288][ T6260] syz.3.658[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.180769][ T6264] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 104.204270][ T6263] loop3: detected capacity change from 0 to 512 [ 104.210617][ T6250] syz.2.655[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.210728][ T6250] syz.2.655[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.242946][ T6263] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.302937][ T6263] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 104.331361][ T6271] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 104.353090][ T6271] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 104.403087][ T6280] loop0: detected capacity change from 0 to 512 [ 104.417680][ T6280] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.431385][ T6278] loop1: detected capacity change from 0 to 2048 [ 104.449272][ T6280] EXT4-fs (loop0): 1 truncate cleaned up [ 104.455781][ T6280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.482830][ T6278] Alternate GPT is invalid, using primary GPT. [ 104.489159][ T6278] loop1: p1 p2 p3 [ 104.571682][ T6285] loop1: detected capacity change from 0 to 512 [ 104.591862][ T6285] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.665: corrupted in-inode xattr: invalid ea_ino [ 104.625024][ T6285] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.665: couldn't read orphan inode 15 (err -117) [ 104.652455][ T6285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.678994][ T6287] loop4: detected capacity change from 0 to 8192 [ 104.735980][ T6287] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 104.741206][ T6287] loop4: partition table partially beyond EOD, truncated [ 104.768600][ T6287] loop4: p1 start 277760 is beyond EOD, truncated [ 104.775150][ T6287] loop4: p2 start 6684676 is beyond EOD, truncated [ 104.784367][ T6287] loop4: p5 start 6684676 is beyond EOD, truncated [ 104.816011][ T4447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.899233][ T6292] loop4: detected capacity change from 0 to 8192 [ 104.945162][ T6292] loop4: p1 p2 p4 < > [ 104.949266][ T6292] loop4: partition table partially beyond EOD, truncated [ 104.959103][ T6292] loop4: p1 size 108986237 extends beyond EOD, truncated [ 104.966780][ T6292] loop4: p2 start 65535 is beyond EOD, truncated [ 104.973142][ T6292] loop4: p4 start 50331648 is beyond EOD, truncated [ 105.126283][ T6300] loop4: detected capacity change from 0 to 2048 [ 105.164770][ T6300] loop4: p1 < > p4 [ 105.169198][ T6300] loop4: p4 size 393216 extends beyond EOD, truncated [ 105.180035][ T6300] syz.4.670[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.180196][ T6300] syz.4.670[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.191821][ T6300] syz.4.670[6300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.227030][ T6304] loop0: detected capacity change from 0 to 512 [ 105.245395][ T6304] EXT4-fs: Ignoring removed oldalloc option [ 105.246762][ T6304] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.672: Parent and EA inode have the same ino 15 [ 105.246942][ T6304] EXT4-fs (loop0): Remounting filesystem read-only [ 105.246955][ T6304] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 105.247014][ T6304] EXT4-fs (loop0): 1 orphan inode deleted [ 105.247282][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.247363][ T6304] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 105.248010][ T6304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.267243][ T6309] capability: warning: `syz.4.675' uses deprecated v2 capabilities in a way that may be insecure [ 105.369398][ T6317] syzkaller0: entered promiscuous mode [ 105.375005][ T6317] syzkaller0: entered allmulticast mode [ 105.453542][ T6322] loop0: detected capacity change from 0 to 8192 [ 105.453726][ T5956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.536568][ T6331] loop1: detected capacity change from 0 to 512 [ 105.647777][ T6333] loop1: detected capacity change from 0 to 8192 [ 105.667760][ T6330] ================================================================== [ 105.675866][ T6330] BUG: KCSAN: data-race in dio_bio_end_io / dio_new_bio [ 105.682822][ T6330] [ 105.685134][ T6330] read-write to 0xffff88812cc84058 of 8 bytes by interrupt on cpu 1: [ 105.693190][ T6330] dio_bio_end_io+0x53/0xd0 [ 105.697699][ T6330] bio_endio+0x369/0x410 [ 105.701949][ T6330] blk_update_request+0x382/0x880 [ 105.706974][ T6330] blk_mq_end_request+0x26/0x50 [ 105.711827][ T6330] lo_complete_rq+0xce/0x180 [ 105.716422][ T6330] blk_done_softirq+0x74/0xb0 [ 105.721113][ T6330] handle_softirqs+0xbf/0x280 [ 105.725794][ T6330] run_ksoftirqd+0x1c/0x30 [ 105.730203][ T6330] smpboot_thread_fn+0x31c/0x4c0 [ 105.735129][ T6330] kthread+0x1d1/0x210 [ 105.739185][ T6330] ret_from_fork+0x4b/0x60 [ 105.743589][ T6330] ret_from_fork_asm+0x1a/0x30 [ 105.748346][ T6330] [ 105.750657][ T6330] read to 0xffff88812cc84058 of 8 bytes by task 6330 on cpu 0: [ 105.758184][ T6330] dio_new_bio+0x249/0x460 [ 105.762600][ T6330] dio_send_cur_page+0x1f2/0x7a0 [ 105.767537][ T6330] submit_page_section+0x1a3/0x5b0 [ 105.772655][ T6330] __blockdev_direct_IO+0x11bb/0x1e80 [ 105.778023][ T6330] fat_direct_IO+0x10a/0x1d0 [ 105.782609][ T6330] generic_file_direct_write+0xf7/0x250 [ 105.788143][ T6330] __generic_file_write_iter+0xae/0x120 [ 105.793675][ T6330] generic_file_write_iter+0x77/0x1c0 [ 105.799034][ T6330] do_iter_readv_writev+0x394/0x450 [ 105.804285][ T6330] vfs_writev+0x2d4/0x880 [ 105.808606][ T6330] __se_sys_pwritev2+0x10c/0x1d0 [ 105.813531][ T6330] __x64_sys_pwritev2+0x78/0x90 [ 105.818374][ T6330] x64_sys_call+0x271f/0x2d60 [ 105.823043][ T6330] do_syscall_64+0xc9/0x1c0 [ 105.827542][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.833435][ T6330] [ 105.835743][ T6330] value changed: 0xffff888135991c00 -> 0xffff88812c07ae40 [ 105.842834][ T6330] [ 105.845143][ T6330] Reported by Kernel Concurrency Sanitizer on: [ 105.851276][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.0.680 Tainted: G W 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 105.862984][ T6330] Tainted: [W]=WARN [ 105.866771][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.876816][ T6330] ================================================================== [ 108.508331][ T4561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.577738][ T4561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.637297][ T4561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.697783][ T4561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.767873][ T4561] gretap0: left allmulticast mode [ 108.772919][ T4561] gretap0: left promiscuous mode [ 108.778035][ T4561] bridge0: port 3(gretap0) entered disabled state [ 108.785722][ T4561] bridge_slave_1: left allmulticast mode [ 108.791447][ T4561] bridge_slave_1: left promiscuous mode [ 108.797296][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.805457][ T4561] bridge_slave_0: left allmulticast mode [ 108.811171][ T4561] bridge_slave_0: left promiscuous mode [ 108.816916][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.938908][ T4561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.949852][ T4561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.960740][ T4561] bond0 (unregistering): Released all slaves [ 109.031593][ T4561] hsr_slave_0: left promiscuous mode [ 109.037420][ T4561] hsr_slave_1: left promiscuous mode [ 109.042968][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.050387][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.059680][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.067208][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.077245][ T4561] veth1_macvtap: left promiscuous mode [ 109.082715][ T4561] veth0_macvtap: left promiscuous mode [ 109.088420][ T4561] veth1_vlan: left promiscuous mode [ 109.093771][ T4561] veth0_vlan: left promiscuous mode [ 109.172591][ T4561] team0 (unregistering): Port device team_slave_1 removed [ 109.183549][ T4561] team0 (unregistering): Port device team_slave_0 removed [ 109.436352][ T4561] IPVS: stop unused estimator thread 0...