last executing test programs: 1m16.998131531s ago: executing program 3 (id=41): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) socket(0x1e, 0x4, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="b1950c58ccd53309f6a4e35db6620370b3e2c8dea44e7ebc28147f6a7e0c86c8ffc295f2f32a7eb138d345b02d5cc285c30bf101b68663fa40bc6d092fbcb72c7ff0b01e9fc00292c787b46113ebd998b66b379c66b9aa3e29746048bf417574fd3d24c5fa7be2b12888f477d12530", 0x6f}, {&(0x7f0000000300)="4e8757be9e3fde84804f91b55a21b3232b5160aa5bd097d4973b1c68a89da0d66b1303ba5d912407e49160860e1ea3bc778866daa07f6f", 0x37}, {&(0x7f0000000b00)="fcc4daed6e7e88930250f662d1cd422fd2f9bfb71a54dace75b1c4532601c8c7e860e9f66aa6a664cd1821f3f2b9b9fc3f496149814ab96b33ee31078bbb7cd5e9e9ee2a508e6498dd97eeaed42ccb7b1baa69911bca382486e17822b6a2bc711cd2d0edc35b47762176f5a16ea15042779157b64a7d6678d93054284cdb272b749d1f7fac7e142f903110ba1fb01050ec67db3edf587bc058f3e16800248140d403da6f3a1c783ca060985524d2a1285a9c105c4aeee99e62b40f0d73c870c0242befe08ec41e56353afd1454cb809e78f331712888b4f6", 0xd8}, {&(0x7f0000000c00)="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", 0x1000}], 0x4, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 1m16.960897333s ago: executing program 3 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 1m16.875879211s ago: executing program 3 (id=47): r0 = io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.832278884s ago: executing program 3 (id=50): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 1m16.465827954s ago: executing program 3 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1m14.30406447s ago: executing program 3 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 1m14.30391084s ago: executing program 32 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 12.187259495s ago: executing program 5 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x4, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 12.154074597s ago: executing program 5 (id=2362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 12.135813609s ago: executing program 5 (id=2363): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 12.11780904s ago: executing program 5 (id=2366): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='net_prio.prioidx\x00', 0x275a, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[], 0x15) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) 11.51169155s ago: executing program 5 (id=2388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 11.330268215s ago: executing program 5 (id=2396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r0, 0x1) sendto$inet(r2, &(0x7f0000000200)="23e51cb518c7", 0x6, 0x24000084, 0x0, 0x0) 11.241885922s ago: executing program 33 (id=2396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r0, 0x1) sendto$inet(r2, &(0x7f0000000200)="23e51cb518c7", 0x6, 0x24000084, 0x0, 0x0) 1.195671012s ago: executing program 4 (id=2726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1.155986106s ago: executing program 4 (id=2730): open(0x0, 0x880ff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 832.113352ms ago: executing program 2 (id=2733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 810.781704ms ago: executing program 2 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 740.911319ms ago: executing program 6 (id=2737): syz_emit_ethernet(0x7a, &(0x7f0000001180)={@link_local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "0de71a", 0x44, 0x2f, 0x1, @mcast2, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x6, 0x3, 0x1, 0x2, 0x6, 0xb}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x10, 0x1, 0x0, 0x0, 0x7, 0xd}, 0x2, {0x4, 0x81, 0x0, 0x4, 0x0, 0x1, 0x3, 0x1}}}}}}}}}, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_rr_get_interval(0x0, 0x0) 715.522071ms ago: executing program 6 (id=2738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000740)={0x0, 0x4, 0x40, 0x2, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 698.471443ms ago: executing program 6 (id=2740): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 684.304204ms ago: executing program 6 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000000), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 621.087449ms ago: executing program 0 (id=2744): r0 = socket(0x22, 0x2, 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0x1, 0x18, r2}}], 0x20, 0x4004004}], 0x1, 0x48850) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x5}, 0x40}}, [0x54c6, 0xee3, 0x8, 0x800, 0x4, 0x3, 0x9, 0x42, 0x59, 0x0, 0x2, 0xc3, 0xffff, 0x4, 0x9]}, &(0x7f0000000300)=0x100) 620.94348ms ago: executing program 0 (id=2745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 599.549161ms ago: executing program 0 (id=2747): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 599.151551ms ago: executing program 0 (id=2748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 590.915852ms ago: executing program 6 (id=2749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 551.422855ms ago: executing program 6 (id=2750): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 550.782575ms ago: executing program 0 (id=2760): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 550.348755ms ago: executing program 1 (id=2751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100}, 0x94) 506.752779ms ago: executing program 0 (id=2752): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x8, &(0x7f0000000200)=[{0x8, 0x36, 0x3f, 0x3}, {0x6cc, 0xc, 0x0, 0x7fff}, {0x7ff, 0xf8, 0x9, 0x7}, {0x1, 0x80, 0x2, 0x1}, {0xc000, 0x7, 0xc5, 0x5000}, {0x40, 0x4, 0xff, 0x9}, {0x81, 0x9, 0x4, 0x1}, {0x6f7c, 0x40, 0x7, 0x7911e664}]}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084) 487.21858ms ago: executing program 1 (id=2753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1, 0x5}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 402.346787ms ago: executing program 1 (id=2754): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) unshare(0x2040400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 335.651392ms ago: executing program 1 (id=2755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x80000001, 0x8, 0x10000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 318.751464ms ago: executing program 1 (id=2756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) 283.094356ms ago: executing program 2 (id=2757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 223.968332ms ago: executing program 4 (id=2758): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 223.394612ms ago: executing program 4 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 215.808642ms ago: executing program 2 (id=2761): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(r0) 170.608266ms ago: executing program 4 (id=2762): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) 170.163806ms ago: executing program 2 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) 72.117504ms ago: executing program 2 (id=2764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 71.606424ms ago: executing program 4 (id=2765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=2766): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) kernel console output (not intermixed with test programs): 0000000-0000-0000-0000-000000000000. [ 49.286508][ T5522] loop4: detected capacity change from 0 to 4096 [ 49.307476][ T5522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.384141][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.930079][ T5598] loop4: detected capacity change from 0 to 512 [ 49.950581][ T5598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.993483][ T5598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.009626][ T5598] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.087699][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.183423][ T5638] loop0: detected capacity change from 0 to 512 [ 50.222201][ T5638] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.237419][ T5638] EXT4-fs (loop0): 1 truncate cleaned up [ 50.245632][ T5644] io-wq is not configured for unbound workers [ 50.245669][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.294084][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.333087][ T5653] loop0: detected capacity change from 0 to 2048 [ 50.383786][ T5653] Alternate GPT is invalid, using primary GPT. [ 50.390242][ T5653] loop0: p2 p3 p7 [ 50.516698][ T5676] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.321772][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.378407][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.647322][ T5758] net_ratelimit: 64 callbacks suppressed [ 51.647337][ T5758] IPv4: Oversized IP packet from 127.202.26.0 [ 51.744054][ T5764] loop1: detected capacity change from 0 to 128 [ 51.859532][ T5756] syz.1.931: attempt to access beyond end of device [ 51.859532][ T5756] loop1: rw=524288, sector=353, nr_sectors = 256 limit=128 [ 51.873744][ T5756] syz.1.931: attempt to access beyond end of device [ 51.873744][ T5756] loop1: rw=524288, sector=609, nr_sectors = 256 limit=128 [ 51.887670][ T5756] syz.1.931: attempt to access beyond end of device [ 51.887670][ T5756] loop1: rw=0, sector=353, nr_sectors = 8 limit=128 [ 51.887699][ T5775] sctp: [Deprecated]: syz.2.939 (pid 5775) Use of int in max_burst socket option deprecated. [ 51.887699][ T5775] Use struct sctp_assoc_value instead [ 51.900859][ T5756] syz.1.931: attempt to access beyond end of device [ 51.900859][ T5756] loop1: rw=0, sector=353, nr_sectors = 8 limit=128 [ 51.968061][ T5779] loop1: detected capacity change from 0 to 2048 [ 52.020335][ T5779] Alternate GPT is invalid, using primary GPT. [ 52.026606][ T5779] loop1: p1 p2 p3 [ 52.471164][ T5783] __nla_validate_parse: 8 callbacks suppressed [ 52.471222][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 52.490688][ T5785] loop1: detected capacity change from 0 to 512 [ 52.498331][ T5783] erspan0: entered promiscuous mode [ 52.503957][ T5783] macvtap1: entered promiscuous mode [ 52.509527][ T5783] macvtap1: entered allmulticast mode [ 52.514903][ T5783] erspan0: entered allmulticast mode [ 52.525298][ T5785] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.952: iget: bogus i_mode (0) [ 52.536625][ T5785] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.952: couldn't read orphan inode 17 (err -117) [ 52.549796][ T5783] erspan0: left allmulticast mode [ 52.554887][ T5783] erspan0: left promiscuous mode [ 52.567135][ T5785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.601939][ T5785] batman_adv: batadv0: Adding interface: ipvlan2 [ 52.608345][ T5785] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.633882][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.644361][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.657051][ T5785] batman_adv: batadv0: Interface activated: ipvlan2 [ 52.657061][ T5772] 9pnet_fd: p9_fd_create_tcp (5772): problem connecting socket to 127.0.0.1 [ 52.709195][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.739448][ T5802] loop4: detected capacity change from 0 to 764 [ 52.746490][ T5802] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 52.772203][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 52.781238][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 52.790117][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 52.799464][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 52.808351][ T5808] netlink: 'syz.1.954': attribute type 6 has an invalid length. [ 52.852140][ T3387] IPVS: starting estimator thread 0... [ 52.882004][ T5825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 52.899146][ T5825] netlink: 5448 bytes leftover after parsing attributes in process `syz.4.961'. [ 52.938467][ T5821] IPVS: using max 2832 ests per chain, 141600 per kthread [ 53.047163][ T5840] loop4: detected capacity change from 0 to 2048 [ 53.071512][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.969'. [ 53.080438][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.969'. [ 53.089371][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.969'. [ 53.098368][ T5845] netlink: 'syz.5.969': attribute type 6 has an invalid length. [ 53.107520][ T5840] Alternate GPT is invalid, using primary GPT. [ 53.113910][ T5840] loop4: p1 p2 p3 [ 53.316529][ T5868] loop5: detected capacity change from 0 to 512 [ 53.328721][ T5868] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 53.337229][ T5868] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.982: invalid indirect mapped block 2683928664 (level 1) [ 53.352458][ T5868] EXT4-fs (loop5): Remounting filesystem read-only [ 53.359196][ T5868] EXT4-fs (loop5): 1 truncate cleaned up [ 53.365311][ T5868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.390803][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.526339][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 53.526356][ T29] audit: type=1400 audit(1753967737.589:861): avc: denied { map } for pid=5870 comm="syz.4.983" path="socket:[12763]" dev="sockfs" ino=12763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.619594][ T5889] loop5: detected capacity change from 0 to 1024 [ 53.626428][ T5889] EXT4-fs: inline encryption not supported [ 53.632401][ T5889] EXT4-fs: Ignoring removed i_version option [ 53.640503][ T5889] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.659947][ T5889] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.990: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.678015][ T5889] Quota error (device loop5): write_blk: dquota write failed [ 53.685535][ T5889] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 53.707407][ T5894] loop2: detected capacity change from 0 to 2048 [ 53.709009][ T5889] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.990: Failed to acquire dquot type 0 [ 53.725463][ T5889] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.990: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.739457][ T5889] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.990: Invalid inode bitmap blk 0 in block_group 0 [ 53.760595][ T5889] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 53.769557][ T3913] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.784874][ T5889] EXT4-fs (loop5): 1 orphan inode deleted [ 53.790961][ T3913] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 53.799425][ T3913] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 0 [ 53.800127][ T5889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.833672][ T5889] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.990: iget: bad extra_isize 65535 (inode size 256) [ 53.857560][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.299208][ T29] audit: type=1400 audit(1753967738.369:862): avc: denied { read write } for pid=5929 comm="syz.0.1006" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.323301][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.323682][ T29] audit: type=1400 audit(1753967738.369:863): avc: denied { open } for pid=5929 comm="syz.0.1006" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.330731][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.386140][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.393596][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.401010][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.408407][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.415847][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.423602][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.431007][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.438489][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.445879][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.453336][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.463483][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.470947][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.478418][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.485908][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.493323][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.500763][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.508145][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.515556][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.522946][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.530332][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.537706][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.545116][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.552586][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.559966][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.567343][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.575781][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.768371][ T5937] syzkaller0: entered promiscuous mode [ 54.773918][ T5937] syzkaller0: entered allmulticast mode [ 54.902316][ T29] audit: type=1400 audit(1753967738.969:864): avc: denied { load_policy } for pid=5942 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.918348][ T5943] SELinux: failed to load policy [ 54.958260][ T29] audit: type=1326 audit(1753967738.999:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 54.981823][ T29] audit: type=1326 audit(1753967738.999:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 55.005146][ T29] audit: type=1326 audit(1753967739.009:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 55.112277][ T5955] loop5: detected capacity change from 0 to 512 [ 55.122391][ T5958] syz_tun: entered promiscuous mode [ 55.138364][ T5958] batadv_slave_0: entered promiscuous mode [ 55.144589][ T5958] hsr1: entered allmulticast mode [ 55.149674][ T5958] syz_tun: entered allmulticast mode [ 55.154973][ T5958] batadv_slave_0: entered allmulticast mode [ 55.171756][ T5955] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #17: comm syz.5.1016: iget: bogus i_mode (0) [ 55.183810][ T5955] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1016: couldn't read orphan inode 17 (err -117) [ 55.212697][ T5955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.298186][ T5955] batman_adv: batadv0: Adding interface: ipvlan2 [ 55.304560][ T5955] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.329908][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.340602][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.350666][ T5955] batman_adv: batadv0: Interface activated: ipvlan2 [ 55.370826][ T5967] bridge: RTM_NEWNEIGH with invalid ether address [ 55.380170][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.593709][ T6001] loop4: detected capacity change from 0 to 512 [ 55.608959][ T6001] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.1036: iget: bogus i_mode (0) [ 55.647134][ T6001] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1036: couldn't read orphan inode 17 (err -117) [ 55.660355][ T6001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.696827][ T6001] batman_adv: batadv0: Adding interface: ipvlan2 [ 55.703214][ T6001] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.728639][ T6001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.739089][ T6001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.749446][ T6001] batman_adv: batadv0: Interface activated: ipvlan2 [ 55.775855][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.796982][ T6014] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 55.804821][ T6014] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 55.831938][ T6014] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 55.839704][ T6014] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 56.062742][ T6051] loop2: detected capacity change from 0 to 512 [ 56.072569][ T6051] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.1053: iget: bogus i_mode (0) [ 56.093490][ T6051] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1053: couldn't read orphan inode 17 (err -117) [ 56.124512][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.165437][ T6051] batman_adv: batadv0: Adding interface: ipvlan2 [ 56.171864][ T6051] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.197220][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.207704][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.217910][ T6051] batman_adv: batadv0: Interface activated: ipvlan2 [ 56.241523][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.294361][ T6062] SELinux: failed to load policy [ 56.351356][ T6072] syz.5.1069 (6072) used greatest stack depth: 9880 bytes left [ 56.660215][ T6095] loop5: detected capacity change from 0 to 164 [ 56.670364][ T6095] syz.5.1087: attempt to access beyond end of device [ 56.670364][ T6095] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 56.685734][ T6095] syz.5.1087: attempt to access beyond end of device [ 56.685734][ T6095] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.767727][ T6098] SELinux: failed to load policy [ 56.939309][ T6127] bridge: RTM_NEWNEIGH with invalid ether address [ 57.082949][ T6142] loop5: detected capacity change from 0 to 8192 [ 57.108786][ T6146] SELinux: failed to load policy [ 57.213454][ T6164] loop4: detected capacity change from 0 to 512 [ 57.230267][ T6164] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.243546][ T6164] EXT4-fs (loop4): 1 orphan inode deleted [ 57.249333][ T6164] EXT4-fs (loop4): 1 truncate cleaned up [ 57.274295][ T6164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.298601][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.397829][ T6183] SELinux: failed to load policy [ 57.429523][ T6191] geneve0: entered allmulticast mode [ 57.773261][ T6210] __nla_validate_parse: 12 callbacks suppressed [ 57.773277][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1121'. [ 58.074846][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 58.106329][ T6224] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 58.141224][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.180882][ T6224] bond0: (slave veth5): Enslaving as an active interface with a down link [ 58.194680][ T6224] bond0: (slave veth0_to_bond): making interface the new active one [ 58.204056][ T6224] veth0_to_bond: entered promiscuous mode [ 58.209924][ T6224] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 58.290863][ T6241] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 58.743352][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 58.743367][ T29] audit: type=1400 audit(1753967742.809:939): avc: denied { rename } for pid=6278 comm="syz.4.1152" name="file0" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.816668][ T29] audit: type=1400 audit(1753967742.859:940): avc: denied { mounton } for pid=6278 comm="syz.4.1152" path="/260/file7" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.839820][ T29] audit: type=1326 audit(1753967742.869:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.863223][ T29] audit: type=1326 audit(1753967742.869:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.886650][ T29] audit: type=1326 audit(1753967742.879:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.910179][ T29] audit: type=1326 audit(1753967742.879:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.933589][ T29] audit: type=1326 audit(1753967742.879:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.956905][ T29] audit: type=1326 audit(1753967742.879:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 58.980247][ T29] audit: type=1326 audit(1753967742.879:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 59.003575][ T29] audit: type=1326 audit(1753967742.879:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 59.284502][ T6303] wg2: entered promiscuous mode [ 59.289403][ T6303] wg2: entered allmulticast mode [ 59.392907][ T6314] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 59.545511][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 59.919364][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1185'. [ 60.160929][ T6425] syzkaller0: entered promiscuous mode [ 60.166510][ T6425] syzkaller0: entered allmulticast mode [ 60.461904][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 60.734970][ T6532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1232'. [ 60.777644][ T6544] loop0: detected capacity change from 0 to 512 [ 60.802796][ T6544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.815519][ T6544] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.869518][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.964589][ T6566] sctp: [Deprecated]: syz.1.1237 (pid 6566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.964589][ T6566] Use struct sctp_sack_info instead [ 61.057867][ T6575] syz.0.1241 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.123529][ T6583] netlink: 1092 bytes leftover after parsing attributes in process `syz.0.1245'. [ 61.723122][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 61.759527][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 61.890668][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1260'. [ 61.911534][ T6615] loop4: detected capacity change from 0 to 128 [ 61.975374][ T6615] syz.4.1261: attempt to access beyond end of device [ 61.975374][ T6615] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 62.034850][ T6623] sctp: [Deprecated]: syz.2.1264 (pid 6623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.034850][ T6623] Use struct sctp_sack_info instead [ 62.067398][ T6627] loop4: detected capacity change from 0 to 512 [ 62.091690][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.118317][ T6627] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.202961][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.607729][ T6685] syz.4.1278 (6685) used greatest stack depth: 9600 bytes left [ 63.027695][ T6742] __nla_validate_parse: 3 callbacks suppressed [ 63.027768][ T6742] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1290'. [ 63.043335][ T6742] unsupported nla_type 65024 [ 63.596773][ T6813] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6813 comm=syz.1.1303 [ 63.904416][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 63.904428][ T29] audit: type=1400 audit(1753967747.969:975): avc: denied { bind } for pid=6841 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.947569][ T29] audit: type=1400 audit(1753967747.999:976): avc: denied { connect } for pid=6841 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.997811][ T6848] loop2: detected capacity change from 0 to 1024 [ 64.004623][ T6848] EXT4-fs: Ignoring removed oldalloc option [ 64.011288][ T6848] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 64.031617][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.055613][ T29] audit: type=1400 audit(1753967748.119:977): avc: denied { append } for pid=6845 comm="syz.2.1321" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.087974][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.124173][ T6861] loop2: detected capacity change from 0 to 128 [ 64.174361][ T6861] syz.2.1325: attempt to access beyond end of device [ 64.174361][ T6861] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 64.455010][ T6914] loop1: detected capacity change from 0 to 128 [ 64.456845][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.486606][ T6914] syz.1.1340: attempt to access beyond end of device [ 64.486606][ T6914] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 64.494601][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.574345][ T29] audit: type=1400 audit(1753967748.639:978): avc: denied { module_load } for pid=6927 comm="syz.1.1342" path="/sys/power/wakeup_count" dev="sysfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 64.974636][ T6980] loop4: detected capacity change from 0 to 1024 [ 65.000237][ T6980] EXT4-fs: inline encryption not supported [ 65.006086][ T6980] EXT4-fs: Ignoring removed i_version option [ 65.028278][ T6980] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.049193][ T6980] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1346: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.071117][ T6980] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 65.079304][ T6980] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.1346: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.102063][ T6980] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 65.110882][ T6980] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1346: Failed to acquire dquot type 0 [ 65.128389][ T6980] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 65.149732][ T6980] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1346: mark_inode_dirty error [ 65.194837][ T7018] netlink: 'syz.5.1348': attribute type 1 has an invalid length. [ 65.223283][ T6980] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 65.242725][ T6980] EXT4-fs (loop4): 1 orphan inode deleted [ 65.249260][ T6980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.263731][ T7026] sctp: [Deprecated]: syz.1.1352 (pid 7026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.263731][ T7026] Use struct sctp_sack_info instead [ 65.281190][ T3913] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.300712][ T3913] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 65.309213][ T3913] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 0 [ 65.321425][ T7025] ALSA: seq fatal error: cannot create timer (-16) [ 65.351541][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.361851][ T3299] EXT4-fs error (device loop4): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.376295][ T3299] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 65.386215][ T3299] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 65.403158][ T7032] loop0: detected capacity change from 0 to 1024 [ 65.420389][ T7032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.436233][ T7032] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 65.459484][ T7032] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 65.471887][ T7032] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.471887][ T7032] [ 65.481604][ T7032] EXT4-fs (loop0): Total free blocks count 0 [ 65.487597][ T7032] EXT4-fs (loop0): Free/Dirty block details [ 65.493511][ T7032] EXT4-fs (loop0): free_blocks=20480 [ 65.498823][ T7032] EXT4-fs (loop0): dirty_blocks=96 [ 65.503981][ T7032] EXT4-fs (loop0): Block reservation details [ 65.509982][ T7032] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 65.540004][ T3885] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.566092][ T29] audit: type=1400 audit(1753967749.629:979): avc: denied { write } for pid=7052 comm="syz.0.1362" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.627962][ T7061] ALSA: seq fatal error: cannot create timer (-16) [ 65.646862][ T29] audit: type=1326 audit(1753967749.709:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec498e9a9 code=0x7ffc0000 [ 65.670261][ T29] audit: type=1326 audit(1753967749.709:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8ec498e9a9 code=0x7ffc0000 [ 65.928802][ T7092] ALSA: seq fatal error: cannot create timer (-16) [ 65.938042][ T7097] veth1_to_bond: entered promiscuous mode [ 65.947336][ T7097] macsec1: entered promiscuous mode [ 65.952792][ T7097] macsec1: entered allmulticast mode [ 65.958148][ T7097] veth1_to_bond: entered allmulticast mode [ 65.973491][ T7097] veth1_to_bond: left allmulticast mode [ 65.979298][ T7097] veth1_to_bond: left promiscuous mode [ 65.990171][ T7101] netem: incorrect ge model size [ 65.995115][ T7101] netem: change failed [ 66.324506][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 66.464537][ T7153] loop2: detected capacity change from 0 to 2048 [ 66.492293][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.620867][ T7166] loop0: detected capacity change from 0 to 1024 [ 66.642563][ T7166] EXT4-fs: Ignoring removed orlov option [ 66.685326][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.744097][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.778975][ T7177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7177 comm=syz.4.1417 [ 66.801720][ T7164] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.820871][ T7164] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 66.833397][ T7164] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.833397][ T7164] [ 66.843081][ T7164] EXT4-fs (loop2): Total free blocks count 0 [ 66.849150][ T7164] EXT4-fs (loop2): Free/Dirty block details [ 66.855035][ T7164] EXT4-fs (loop2): free_blocks=2415919104 [ 66.860949][ T7164] EXT4-fs (loop2): dirty_blocks=8208 [ 66.866230][ T7164] EXT4-fs (loop2): Block reservation details [ 66.872230][ T7164] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 66.925477][ T2685] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 67.016316][ T7198] netlink: 'syz.4.1427': attribute type 10 has an invalid length. [ 67.024362][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1427'. [ 67.043938][ T7198] dummy0: entered promiscuous mode [ 67.051203][ T7198] bridge0: port 3(dummy0) entered blocking state [ 67.057591][ T7198] bridge0: port 3(dummy0) entered disabled state [ 67.082939][ T7199] loop0: detected capacity change from 0 to 8192 [ 67.090186][ T7198] dummy0: entered allmulticast mode [ 67.096106][ T7198] bridge0: port 3(dummy0) entered blocking state [ 67.102568][ T7198] bridge0: port 3(dummy0) entered forwarding state [ 67.172922][ T7210] loop5: detected capacity change from 0 to 1024 [ 67.213672][ T7210] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.318032][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 67.327073][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1440'. [ 67.442675][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 67.510989][ T7241] pim6reg1: entered promiscuous mode [ 67.516345][ T7241] pim6reg1: entered allmulticast mode [ 67.709188][ T7261] vlan3: entered allmulticast mode [ 67.754051][ T7268] loop4: detected capacity change from 0 to 2048 [ 67.885822][ T7282] loop2: detected capacity change from 0 to 8192 [ 67.939911][ T7290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7290 comm=syz.2.1465 [ 68.027629][ T7298] loop4: detected capacity change from 0 to 2048 [ 68.100607][ T3299] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 68.115322][ T3299] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 68.233514][ T7319] netlink: 'syz.5.1477': attribute type 10 has an invalid length. [ 68.241455][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1477'. [ 68.251535][ T7319] dummy0: entered promiscuous mode [ 68.257229][ T7319] bridge0: port 3(dummy0) entered blocking state [ 68.263754][ T7319] bridge0: port 3(dummy0) entered disabled state [ 68.273626][ T7319] dummy0: entered allmulticast mode [ 68.280031][ T7319] bridge0: port 3(dummy0) entered blocking state [ 68.286435][ T7319] bridge0: port 3(dummy0) entered forwarding state [ 68.319286][ T7330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 68.330811][ T7329] IPVS: stopping master sync thread 7330 ... [ 68.467403][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 68.476388][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 68.558764][ T7353] loop2: detected capacity change from 0 to 128 [ 68.694270][ T7362] pim6reg1: entered promiscuous mode [ 68.699724][ T7362] pim6reg1: entered allmulticast mode [ 68.810683][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 68.846430][ T7383] team1: entered promiscuous mode [ 68.851600][ T7383] team1: entered allmulticast mode [ 68.936375][ T7396] loop1: detected capacity change from 0 to 1024 [ 69.024794][ T7396] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 69.097420][ T7406] loop5: detected capacity change from 0 to 8192 [ 69.302331][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 69.302344][ T29] audit: type=1326 audit(1753967753.369:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.333054][ T29] audit: type=1326 audit(1753967753.369:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.356628][ T29] audit: type=1326 audit(1753967753.369:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.380370][ T29] audit: type=1326 audit(1753967753.369:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.403937][ T29] audit: type=1326 audit(1753967753.369:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.427442][ T59] veth0_to_bond: left promiscuous mode [ 69.433037][ T29] audit: type=1326 audit(1753967753.369:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.456498][ T29] audit: type=1326 audit(1753967753.369:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.457226][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.480178][ T29] audit: type=1326 audit(1753967753.379:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.480268][ T29] audit: type=1326 audit(1753967753.379:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.490779][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.511979][ T29] audit: type=1326 audit(1753967753.379:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7412 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 69.750694][ T7422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7422 comm=syz.4.1513 [ 69.824686][ T7430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.004851][ T7441] loop1: detected capacity change from 0 to 164 [ 70.031840][ T7441] syz.1.1520: attempt to access beyond end of device [ 70.031840][ T7441] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.056836][ T7441] syz.1.1520: attempt to access beyond end of device [ 70.056836][ T7441] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.154760][ T7448] syzkaller1: entered promiscuous mode [ 70.160352][ T7448] syzkaller1: entered allmulticast mode [ 70.166685][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 70.189679][ T7456] IPVS: Error joining to the multicast group [ 70.196920][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 70.220044][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 70.269541][ T7469] loop1: detected capacity change from 0 to 128 [ 70.346860][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 70.605206][ T7509] loop1: detected capacity change from 0 to 512 [ 70.615560][ T7509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.633446][ T7509] EXT4-fs (loop1): 1 truncate cleaned up [ 70.646008][ T7509] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 70.646008][ T7509] program syz.1.1545 not setting count and/or reply_len properly [ 70.675344][ T7522] syzkaller1: entered promiscuous mode [ 70.680894][ T7522] syzkaller1: entered allmulticast mode [ 70.694357][ T7518] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1549'. [ 70.724808][ T7531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.755835][ T7529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.930461][ T7559] loop5: detected capacity change from 0 to 164 [ 70.947017][ T7559] syz.5.1568: attempt to access beyond end of device [ 70.947017][ T7559] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.969012][ T7559] syz.5.1568: attempt to access beyond end of device [ 70.969012][ T7559] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.970261][ T7552] loop0: detected capacity change from 0 to 8192 [ 71.042296][ T7552] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.083097][ T7572] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 71.121900][ T7578] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 71.146231][ T7578] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 71.181309][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 71.190212][ T7585] IPVS: Unknown mcast interface: vcan0 [ 71.230442][ T7595] loop0: detected capacity change from 0 to 164 [ 71.240052][ T7595] syz.0.1584: attempt to access beyond end of device [ 71.240052][ T7595] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.255718][ T7595] syz.0.1584: attempt to access beyond end of device [ 71.255718][ T7595] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.301024][ T7606] loop0: detected capacity change from 0 to 512 [ 71.336172][ T7606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.351609][ T7606] EXT4-fs (loop0): 1 truncate cleaned up [ 71.357628][ T7606] EXT4-fs mount: 10 callbacks suppressed [ 71.357640][ T7606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.385471][ T7606] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 71.385471][ T7606] program syz.0.1590 not setting count and/or reply_len properly [ 71.414125][ T7625] dummy0: left allmulticast mode [ 71.419975][ T7625] dummy0: left promiscuous mode [ 71.424982][ T7625] bridge0: port 3(dummy0) entered disabled state [ 71.432325][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.451888][ T7625] bridge_slave_1: left allmulticast mode [ 71.457550][ T7625] bridge_slave_1: left promiscuous mode [ 71.463293][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.473126][ T7625] bridge_slave_0: left allmulticast mode [ 71.478818][ T7625] bridge_slave_0: left promiscuous mode [ 71.484543][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.516397][ T7632] loop2: detected capacity change from 0 to 8192 [ 72.031112][ T7651] loop0: detected capacity change from 0 to 512 [ 72.032250][ T7637] Set syz1 is full, maxelem 65536 reached [ 72.054321][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.071247][ T7655] IPVS: Error joining to the multicast group [ 72.092204][ T7651] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.128187][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 72.157049][ T3307] EXT4-fs (loop0): Remounting filesystem read-only [ 72.165686][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.175171][ T3913] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.197401][ T3913] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.270215][ T7681] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 72.280702][ T7681] dummy0: entered promiscuous mode [ 72.286617][ T7681] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 72.322443][ T7689] IPVS: Error joining to the multicast group [ 72.390010][ T7697] loop0: detected capacity change from 0 to 128 [ 72.399563][ T7699] batadv1: entered promiscuous mode [ 72.404799][ T7699] batadv1: entered allmulticast mode [ 72.494249][ T7706] loop2: detected capacity change from 0 to 128 [ 72.556693][ T7706] syz.2.1633: attempt to access beyond end of device [ 72.556693][ T7706] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 72.609832][ T7706] syz.2.1633: attempt to access beyond end of device [ 72.609832][ T7706] loop2: rw=34817, sector=169, nr_sectors = 848 limit=128 [ 72.626010][ T7713] loop1: detected capacity change from 0 to 8192 [ 72.765817][ T7735] loop0: detected capacity change from 0 to 512 [ 72.773772][ T7735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 72.782108][ T7735] System zones: 1-12 [ 72.786661][ T7735] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1647: error while reading EA inode 32 err=-116 [ 72.801197][ T7735] EXT4-fs (loop0): Remounting filesystem read-only [ 72.807732][ T7735] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.817989][ T7735] EXT4-fs (loop0): 1 orphan inode deleted [ 72.825196][ T7735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.881726][ T7747] bridge_slave_1: left allmulticast mode [ 72.887394][ T7747] bridge_slave_1: left promiscuous mode [ 72.893286][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.904733][ T7747] bridge_slave_0: left promiscuous mode [ 72.910583][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.946311][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.042353][ T7764] loop5: detected capacity change from 0 to 512 [ 73.082630][ T7764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.120045][ T7764] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.170428][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.177915][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.189798][ T7773] loop0: detected capacity change from 0 to 8192 [ 73.207275][ T3761] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 73.218233][ T3761] EXT4-fs (loop5): Remounting filesystem read-only [ 73.225203][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.232785][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.242312][ T7778] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 73.242392][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.249147][ T7778] batman_adv: batadv0: Removing interface: ipvlan2 [ 73.265039][ T3877] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.275891][ T3877] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.371588][ T7796] __nla_validate_parse: 13 callbacks suppressed [ 73.371601][ T7796] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1682'. [ 73.565789][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 73.598353][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 73.622035][ T7826] bond1: entered promiscuous mode [ 73.627078][ T7826] bond1: entered allmulticast mode [ 73.636755][ T7826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.668689][ T7826] bond1 (unregistering): Released all slaves [ 73.806936][ T7838] loop5: detected capacity change from 0 to 8192 [ 73.861722][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1698'. [ 74.063797][ T7874] loop2: detected capacity change from 0 to 512 [ 74.071559][ T7874] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 74.084798][ T7874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.092585][ T7874] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1707: Block bitmap for bg 0 marked uninitialized [ 74.123124][ T7874] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 74.133231][ T7874] EXT4-fs (loop2): 1 orphan inode deleted [ 74.151214][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.173354][ T7874] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 74.182881][ T7874] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 74.225540][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.326188][ T7885] SELinux: failed to load policy [ 74.358717][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 74.358731][ T29] audit: type=1326 audit(1753967758.429:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.373892][ T7893] loop4: detected capacity change from 0 to 8192 [ 74.395097][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1717'. [ 74.414545][ T29] audit: type=1326 audit(1753967758.459:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.437877][ T29] audit: type=1326 audit(1753967758.459:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.461275][ T29] audit: type=1326 audit(1753967758.459:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.484669][ T29] audit: type=1326 audit(1753967758.459:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.509190][ T29] audit: type=1326 audit(1753967758.579:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.532847][ T29] audit: type=1326 audit(1753967758.579:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.5.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c153e9a9 code=0x7ffc0000 [ 74.610691][ T7905] loop5: detected capacity change from 0 to 512 [ 74.631254][ T7905] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 74.641767][ T7905] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 74.652465][ T7905] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1720: Failed to acquire dquot type 1 [ 74.677173][ T7905] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1720: corrupted inode contents [ 74.678547][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1725'. [ 74.693461][ T7905] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #16: comm syz.5.1720: mark_inode_dirty error [ 74.711190][ T7905] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1720: corrupted inode contents [ 74.715057][ T29] audit: type=1400 audit(1753967758.779:1177): avc: denied { ioctl } for pid=7916 comm="syz.4.1723" path="socket:[18169]" dev="sockfs" ino=18169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.725183][ T7905] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1720: mark_inode_dirty error [ 74.748992][ T7917] netlink: 'syz.4.1723': attribute type 27 has an invalid length. [ 74.782669][ T7905] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1720: corrupted inode contents [ 74.797131][ T7905] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 74.806903][ T7905] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1720: corrupted inode contents [ 74.819695][ T7905] EXT4-fs error (device loop5): ext4_truncate:4592: inode #16: comm syz.5.1720: mark_inode_dirty error [ 74.832055][ T7905] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 74.842167][ T7905] EXT4-fs (loop5): 1 truncate cleaned up [ 74.848713][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.862228][ T7905] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.938145][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.941990][ T7939] loop0: detected capacity change from 0 to 164 [ 74.957967][ T7939] syz.0.1729: attempt to access beyond end of device [ 74.957967][ T7939] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.973030][ T7939] syz.0.1729: attempt to access beyond end of device [ 74.973030][ T7939] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 75.060837][ T7917] dummy0: left promiscuous mode [ 75.119049][ T7951] loop5: detected capacity change from 0 to 8192 [ 75.383280][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.419514][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.522904][ T7966] loop5: detected capacity change from 0 to 512 [ 75.564070][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.597335][ T7966] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.624400][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.670275][ T7917] ipip0: left promiscuous mode [ 75.691554][ T7917] macvtap1: left promiscuous mode [ 75.696672][ T7917] macvtap1: left allmulticast mode [ 75.707716][ T7917] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 75.742930][ T7917] team1: left promiscuous mode [ 75.747736][ T7917] team1: left allmulticast mode [ 75.763018][ T3885] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.775694][ T3860] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.791658][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1744'. [ 75.829116][ T3860] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.838185][ T3860] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.908704][ T7977] SELinux: failed to load policy [ 75.931763][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1753'. [ 75.957466][ T7994] loop5: detected capacity change from 0 to 8192 [ 75.992712][ T7994] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.020473][ T8004] netlink: 'syz.0.1756': attribute type 12 has an invalid length. [ 76.085913][ T8012] loop0: detected capacity change from 0 to 1024 [ 76.103753][ T8012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.173347][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1767'. [ 76.196205][ T8012] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1759: Allocating blocks 449-513 which overlap fs metadata [ 76.211237][ T8027] SELinux: failed to load policy [ 76.310550][ T8010] EXT4-fs (loop0): pa ffff8881071a5620: logic 48, phys. 177, len 21 [ 76.318618][ T8010] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 76.377898][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.407322][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 76.633322][ T8068] loop4: detected capacity change from 0 to 512 [ 76.651770][ T8058] SELinux: failed to load policy [ 76.660775][ T8068] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1783: Failed to acquire dquot type 1 [ 76.689715][ T8068] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1783: corrupted inode contents [ 76.726488][ T8068] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.1783: mark_inode_dirty error [ 76.751826][ T8068] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1783: corrupted inode contents [ 76.776839][ T8068] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1783: mark_inode_dirty error [ 76.788560][ T8068] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1783: corrupted inode contents [ 76.801061][ T8068] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 76.809816][ T8068] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.1783: corrupted inode contents [ 76.822064][ T8068] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.1783: mark_inode_dirty error [ 76.833800][ T8068] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 76.844564][ T8068] EXT4-fs (loop4): 1 truncate cleaned up [ 76.850908][ T8068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.864811][ T8068] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.887208][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.934885][ T8094] netlink: 'syz.1.1794': attribute type 27 has an invalid length. [ 77.224580][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.236380][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.302858][ T8094] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 77.321522][ T8094] hsr1: left allmulticast mode [ 77.326309][ T8094] syz_tun: left allmulticast mode [ 77.331383][ T8094] batadv_slave_0: left allmulticast mode [ 77.345089][ T8100] netlink: 'syz.5.1797': attribute type 12 has an invalid length. [ 77.355494][ T8104] vlan0: entered allmulticast mode [ 77.360688][ T8104] bridge_slave_0: entered allmulticast mode [ 77.383214][ T3877] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.392164][ T3877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.443518][ T3877] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.452467][ T3877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.480263][ T3877] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.489340][ T3877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.502089][ T3877] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.511062][ T3877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.586749][ T8131] loop2: detected capacity change from 0 to 1024 [ 77.616113][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8135 comm=syz.0.1807 [ 77.638564][ T8131] EXT4-fs: Ignoring removed orlov option [ 77.687187][ T8131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.766524][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.813619][ T8147] loop4: detected capacity change from 0 to 4096 [ 77.823342][ T8147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.865574][ T8156] vlan3: entered allmulticast mode [ 77.865794][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.060211][ T8172] tipc: Started in network mode [ 78.065117][ T8172] tipc: Node identity ac14140f, cluster identity 4711 [ 78.098640][ T8172] tipc: New replicast peer: 255.255.255.255 [ 78.104787][ T8172] tipc: Enabled bearer , priority 10 [ 78.593755][ T8189] vlan3: entered allmulticast mode [ 78.681951][ T8193] __nla_validate_parse: 4 callbacks suppressed [ 78.681968][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1832'. [ 78.697359][ T8197] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1831'. [ 78.706563][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 78.725906][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 78.787076][ T8206] netlink: 'syz.5.1837': attribute type 13 has an invalid length. [ 79.067822][ T8206] bridge0: port 3(dummy0) entered disabled state [ 79.074425][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.081585][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.111491][ T7933] tipc: Node number set to 2886997007 [ 79.301742][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 79.361755][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1852'. [ 79.425583][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.445214][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.539696][ T8206] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 79.552300][ T8224] tipc: Started in network mode [ 79.557195][ T8224] tipc: Node identity ac14140f, cluster identity 4711 [ 79.579278][ T8224] tipc: New replicast peer: 255.255.255.255 [ 79.585307][ T8224] tipc: Enabled bearer , priority 10 [ 79.591572][ T8232] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1846'. [ 79.618333][ T3860] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.627247][ T3860] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.684657][ T3860] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.693659][ T3860] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.713282][ T3860] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.722281][ T3860] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.731886][ T3860] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.740840][ T3860] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.819762][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 79.887787][ T8278] netlink: 'syz.0.1867': attribute type 13 has an invalid length. [ 80.003319][ T8287] loop4: detected capacity change from 0 to 2048 [ 80.036439][ T8287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.123046][ T8287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.138201][ T8287] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1782 with error 28 [ 80.150810][ T8287] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.150810][ T8287] [ 80.160482][ T8287] EXT4-fs (loop4): Total free blocks count 0 [ 80.166470][ T8287] EXT4-fs (loop4): Free/Dirty block details [ 80.172370][ T8287] EXT4-fs (loop4): free_blocks=2415919104 [ 80.178090][ T8287] EXT4-fs (loop4): dirty_blocks=1792 [ 80.183369][ T8287] EXT4-fs (loop4): Block reservation details [ 80.189386][ T8287] EXT4-fs (loop4): i_reserved_data_blocks=112 [ 80.208739][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.215980][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.268372][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.307594][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'. [ 80.379343][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.389705][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.419771][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 80.584415][ T3907] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.618244][ T3907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.632274][ T3907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.642346][ T3907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.700381][ T7940] tipc: Node number set to 2886997007 [ 81.577936][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 81.577949][ T29] audit: type=1400 audit(1753967765.639:1223): avc: denied { mount } for pid=8345 comm="syz.0.1893" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.633929][ T29] audit: type=1326 audit(1753967765.699:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.657442][ T29] audit: type=1326 audit(1753967765.699:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.680850][ T29] audit: type=1326 audit(1753967765.699:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.704228][ T29] audit: type=1326 audit(1753967765.699:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.727633][ T29] audit: type=1326 audit(1753967765.699:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.750969][ T29] audit: type=1326 audit(1753967765.699:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.774522][ T29] audit: type=1326 audit(1753967765.699:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.797938][ T29] audit: type=1326 audit(1753967765.699:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.821395][ T29] audit: type=1326 audit(1753967765.729:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 81.865467][ T8359] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.917866][ T8362] pim6reg1: entered promiscuous mode [ 81.923238][ T8362] pim6reg1: entered allmulticast mode [ 81.933087][ T8359] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.992773][ T8359] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.069764][ T8359] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.126028][ T3907] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.138617][ T3907] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.152629][ T3907] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.164627][ T3907] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.371787][ T8410] loop0: detected capacity change from 0 to 512 [ 82.387524][ T8410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.410739][ T8410] EXT4-fs (loop0): 1 truncate cleaned up [ 82.417118][ T8410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.447324][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.469729][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.479343][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.491592][ T8427] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010 [ 82.654751][ T8449] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 82.668601][ T8449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.691704][ T8449] bond1: (slave veth11): Enslaving as an active interface with a down link [ 82.705527][ T8449] bond1: (slave dummy0): making interface the new active one [ 82.714289][ T8449] dummy0: entered promiscuous mode [ 82.719659][ T8449] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 82.752112][ T8458] veth0: entered promiscuous mode [ 82.757920][ T8458] veth0 (unregistering): left promiscuous mode [ 82.798294][ T8462] veth5: entered promiscuous mode [ 82.994273][ T8485] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.155838][ T8503] batadv0: entered promiscuous mode [ 83.161371][ T8503] batadv0: entered allmulticast mode [ 83.267020][ T8515] loop0: detected capacity change from 0 to 8192 [ 83.297553][ T8517] netlink: 'syz.5.1970': attribute type 12 has an invalid length. [ 83.305522][ T8517] netlink: 'syz.5.1970': attribute type 29 has an invalid length. [ 83.313511][ T8517] netlink: 'syz.5.1970': attribute type 2 has an invalid length. [ 83.342602][ T8521] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 83.375867][ T8527] netlink: 'syz.2.1975': attribute type 10 has an invalid length. [ 83.383847][ T8527] team0: entered promiscuous mode [ 83.388900][ T8527] team_slave_0: entered promiscuous mode [ 83.394653][ T8527] team_slave_1: entered promiscuous mode [ 83.400392][ T8527] team0: entered allmulticast mode [ 83.405496][ T8527] team_slave_0: entered allmulticast mode [ 83.411228][ T8527] team_slave_1: entered allmulticast mode [ 83.421506][ T8527] bridge0: port 3(team0) entered blocking state [ 83.427892][ T8527] bridge0: port 3(team0) entered disabled state [ 83.436433][ T8527] bridge0: port 3(team0) entered blocking state [ 83.442731][ T8527] bridge0: port 3(team0) entered forwarding state [ 83.606982][ T8546] loop9: detected capacity change from 0 to 7 [ 83.614524][ T8546] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.622736][ T8546] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.630725][ T8546] loop9: unable to read partition table [ 83.637558][ T8546] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.637558][ T8546] ) failed (rc=-5) [ 83.765557][ T8550] loop9: detected capacity change from 0 to 7 [ 83.773286][ T8550] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.781534][ T8550] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.789373][ T8550] loop9: unable to read partition table [ 83.823722][ T8550] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.823722][ T8550] ) failed (rc=-5) [ 84.163585][ T8582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8582 comm=syz.5.1997 [ 84.211053][ T8587] pim6reg: entered allmulticast mode [ 84.222720][ T8587] pim6reg: left allmulticast mode [ 84.267256][ T8591] loop2: detected capacity change from 0 to 2048 [ 84.287080][ T8593] loop0: detected capacity change from 0 to 512 [ 84.291929][ T8591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.311122][ T8593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.324861][ T8593] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.328690][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.345282][ T8593] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 84.361632][ T8593] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.373831][ T8593] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.373831][ T8593] [ 84.377380][ T8601] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 84.383605][ T8593] EXT4-fs (loop0): Total free blocks count 0 [ 84.383621][ T8593] EXT4-fs (loop0): Free/Dirty block details [ 84.383633][ T8593] EXT4-fs (loop0): free_blocks=65281 [ 84.383646][ T8593] EXT4-fs (loop0): dirty_blocks=1 [ 84.383658][ T8593] EXT4-fs (loop0): Block reservation details [ 84.391383][ T8601] __nla_validate_parse: 18 callbacks suppressed [ 84.391394][ T8601] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.2004'. [ 84.397331][ T8593] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 84.458069][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.996339][ T8666] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 85.017606][ T8666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.046227][ T8666] vlan3: entered allmulticast mode [ 85.051477][ T8666] bond1: entered allmulticast mode [ 85.347875][ T8705] loop4: detected capacity change from 0 to 512 [ 85.360392][ T8705] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2048: iget: bad i_size value: 38620345925642 [ 85.408933][ T8705] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2048: couldn't read orphan inode 15 (err -117) [ 85.409121][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 85.436282][ T8705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.474002][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.561115][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 85.570043][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 85.859067][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 85.906358][ T8763] tipc: Started in network mode [ 85.911299][ T8763] tipc: Node identity 5a109cae0d0f, cluster identity 4711 [ 85.918501][ T8763] tipc: Enabled bearer , priority 0 [ 85.926825][ T8763] tipc: Disabling bearer [ 85.988742][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2079'. [ 86.001838][ T8773] bridge0: entered promiscuous mode [ 86.002167][ T8773] bridge0: port 4(macvlan2) entered blocking state [ 86.013842][ T8773] bridge0: port 4(macvlan2) entered disabled state [ 86.015177][ T8773] macvlan2: entered allmulticast mode [ 86.025919][ T8773] bridge0: entered allmulticast mode [ 86.032995][ T8773] macvlan2: left allmulticast mode [ 86.038127][ T8773] bridge0: left allmulticast mode [ 86.044539][ T8773] bridge0: left promiscuous mode [ 86.078817][ T8779] capability: warning: `syz.2.2082' uses deprecated v2 capabilities in a way that may be insecure [ 86.188707][ T7940] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 86.196241][ T7940] hid-generic 0000:0D17:0000.0002: unknown main item tag 0x0 [ 86.204180][ T7940] hid-generic 0000:0D17:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 86.252914][ T8796] bridge0: port 4(batadv1) entered blocking state [ 86.259492][ T8796] bridge0: port 4(batadv1) entered disabled state [ 86.266361][ T8796] batadv1: entered allmulticast mode [ 86.272196][ T8796] batadv1: entered promiscuous mode [ 86.358751][ T8804] loop2: detected capacity change from 0 to 512 [ 86.367002][ T8804] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2091: iget: bad i_size value: 38620345925642 [ 86.379888][ T8804] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2091: couldn't read orphan inode 15 (err -117) [ 86.392172][ T8804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.415853][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.450075][ T8812] syzkaller1: entered promiscuous mode [ 86.455549][ T8812] syzkaller1: entered allmulticast mode [ 86.737097][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 86.737109][ T29] audit: type=1326 audit(1753967770.799:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.769355][ T3907] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 86.778728][ T3907] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 86.781893][ T29] audit: type=1326 audit(1753967770.799:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.811290][ T29] audit: type=1326 audit(1753967770.799:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.834991][ T29] audit: type=1326 audit(1753967770.799:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.858443][ T29] audit: type=1326 audit(1753967770.799:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.881971][ T29] audit: type=1326 audit(1753967770.799:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.905380][ T29] audit: type=1326 audit(1753967770.799:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.928898][ T29] audit: type=1326 audit(1753967770.799:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.952347][ T29] audit: type=1326 audit(1753967770.799:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 86.975806][ T29] audit: type=1326 audit(1753967770.819:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 87.045316][ T8838] tipc: Enabled bearer , priority 0 [ 87.052968][ T8838] tipc: Disabling bearer [ 87.258702][ T8854] cgroup: Unknown subsys name 'cpuset' [ 87.484447][ T8887] vlan3: entered allmulticast mode [ 87.527676][ T8892] loop0: detected capacity change from 0 to 1024 [ 87.540675][ T8892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.657406][ T8892] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 87.745530][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.789713][ T8915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2138'. [ 87.863808][ T8917] syz.2.2140 (8917) used greatest stack depth: 9176 bytes left [ 87.916252][ T8935] vlan2: entered allmulticast mode [ 87.921418][ T8935] syz_tun: entered allmulticast mode [ 88.036653][ T8948] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.2148'. [ 88.045871][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2148'. [ 88.150278][ T8965] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 88.192791][ T8965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.219091][ T8965] bond1: (slave veth13): Enslaving as an active interface with a down link [ 88.237160][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.244439][ T8965] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 88.289934][ T8984] vlan0: entered allmulticast mode [ 88.346466][ T8987] macvlan2: entered promiscuous mode [ 88.353191][ T8987] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 88.368049][ T8987] macvlan3: entered promiscuous mode [ 88.374459][ T8987] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 88.391715][ T8989] loop4: detected capacity change from 0 to 512 [ 88.398192][ T8989] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 88.574050][ T9006] pim6reg1: entered promiscuous mode [ 88.579468][ T9006] pim6reg1: entered allmulticast mode [ 88.765446][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 88.872529][ T9024] loop9: detected capacity change from 0 to 7 [ 88.879008][ T9024] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.886858][ T9024] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.894807][ T9024] loop9: unable to read partition table [ 88.901978][ T9024] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.901978][ T9024] ) failed (rc=-5) [ 89.503785][ T9067] loop5: detected capacity change from 0 to 512 [ 89.539777][ T9067] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 89.892277][ T9091] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 89.918343][ T9091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.955945][ T9091] bond2: (slave veth7): Enslaving as an active interface with a down link [ 89.991135][ T9091] bond2: (slave dummy0): making interface the new active one [ 90.002247][ T9091] dummy0: entered promiscuous mode [ 90.007429][ T9091] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 90.271938][ T9106] __nla_validate_parse: 3 callbacks suppressed [ 90.272041][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'. [ 90.297746][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 90.307466][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 90.307819][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 90.317726][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 90.326165][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 90.344723][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 90.357515][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 90.429433][ T9117] veth0: entered promiscuous mode [ 90.436907][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2227'. [ 90.446711][ T9117] veth0 (unregistering): left promiscuous mode [ 90.614065][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 90.716216][ T9142] syzkaller0: entered promiscuous mode [ 90.721735][ T9142] syzkaller0: entered allmulticast mode [ 90.879939][ T9163] netlink: 'syz.4.2250': attribute type 17 has an invalid length. [ 90.891156][ T9163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.975290][ T9179] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 90.994798][ T9179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.016962][ T9179] bond2: (slave veth13): Enslaving as an active interface with a down link [ 91.036862][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.046634][ T9179] bond2: (slave batadv1): making interface the new active one [ 91.056725][ T9179] batadv1: entered promiscuous mode [ 91.062992][ T9179] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 91.117741][ T9195] loop4: detected capacity change from 0 to 512 [ 91.126219][ T9195] journal_path: Lookup failure for './file0/../file0' [ 91.133155][ T9195] EXT4-fs: error: could not find journal device path [ 91.155564][ T9195] bond3: entered promiscuous mode [ 91.160777][ T9195] bond3: entered allmulticast mode [ 91.168391][ T9195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.189569][ T9195] bond3 (unregistering): Released all slaves [ 91.693350][ T9269] bridge0: port 3(batadv1) entered blocking state [ 91.698195][ T9270] hub 9-0:1.0: USB hub found [ 91.699825][ T9269] bridge0: port 3(batadv1) entered disabled state [ 91.707218][ T9270] hub 9-0:1.0: 8 ports detected [ 91.712341][ T9269] batadv1: entered allmulticast mode [ 91.722010][ T9269] batadv1: entered promiscuous mode [ 91.789987][ T9278] loop2: detected capacity change from 0 to 1024 [ 91.813554][ T9278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.838400][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 91.838413][ T29] audit: type=1326 audit(1753967775.909:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 91.871725][ T29] audit: type=1326 audit(1753967775.909:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 91.895260][ T29] audit: type=1326 audit(1753967775.909:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 91.918873][ T29] audit: type=1326 audit(1753967775.909:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 91.942626][ T29] audit: type=1326 audit(1753967775.939:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9277 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 91.967895][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.976992][ T9287] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 92.011753][ T29] audit: type=1400 audit(1753967776.079:1511): avc: denied { write } for pid=9290 comm="syz.5.2306" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.198471][ T3885] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 92.207881][ T3885] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 92.321683][ T9323] loop4: detected capacity change from 0 to 256 [ 92.344866][ T9323] FAT-fs (loop4): Directory bread(block 64) failed [ 92.351451][ T9323] FAT-fs (loop4): Directory bread(block 65) failed [ 92.358044][ T9323] FAT-fs (loop4): Directory bread(block 66) failed [ 92.374692][ T9323] FAT-fs (loop4): Directory bread(block 67) failed [ 92.389409][ T9323] FAT-fs (loop4): Directory bread(block 68) failed [ 92.400794][ T9323] FAT-fs (loop4): Directory bread(block 69) failed [ 92.407624][ T9323] FAT-fs (loop4): Directory bread(block 70) failed [ 92.415069][ T9323] FAT-fs (loop4): Directory bread(block 71) failed [ 92.423394][ T9323] FAT-fs (loop4): Directory bread(block 72) failed [ 92.430761][ T9323] FAT-fs (loop4): Directory bread(block 73) failed [ 92.449080][ T9333] loop2: detected capacity change from 0 to 512 [ 92.456368][ T9333] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 92.473036][ T9323] syz.4.2320: attempt to access beyond end of device [ 92.473036][ T9323] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 92.476309][ T9333] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 92.513143][ T9335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9335 comm=syz.0.2326 [ 92.525617][ T9335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9335 comm=syz.0.2326 [ 92.557683][ T29] audit: type=1326 audit(1753967776.619:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 92.592755][ T29] audit: type=1326 audit(1753967776.619:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 92.616353][ T29] audit: type=1326 audit(1753967776.649:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 92.640014][ T29] audit: type=1326 audit(1753967776.659:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00899e9a9 code=0x7ffc0000 [ 92.764603][ T9364] bond0: entered promiscuous mode [ 92.769719][ T9364] veth0_to_bond: entered promiscuous mode [ 92.781390][ T9364] batadv0: entered promiscuous mode [ 92.787557][ T9364] debugfs: 'hsr1' already exists in 'hsr' [ 92.793409][ T9364] Cannot create hsr debugfs directory [ 92.799549][ T9364] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 92.809454][ T9364] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 92.820180][ T9364] hsr1: entered allmulticast mode [ 92.825242][ T9364] bond0: entered allmulticast mode [ 92.830378][ T9364] veth0_to_bond: entered allmulticast mode [ 92.836178][ T9364] batadv0: entered allmulticast mode [ 92.841656][ T9364] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 92.849398][ T9364] bond0: left promiscuous mode [ 92.854153][ T9364] veth0_to_bond: left promiscuous mode [ 92.860425][ T9364] batadv0: left promiscuous mode [ 93.116636][ T9408] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.186344][ T9421] loop5: detected capacity change from 0 to 256 [ 93.268547][ T9421] loop5: detected capacity change from 256 to 0 [ 93.277080][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.288079][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.298336][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.298336][ T9432] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 93.313003][ T9432] FAT-fs (loop5): unable to read inode block for updating (i_pos 203) [ 93.323613][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.323613][ T9432] loop5: rw=0, sector=4, nr_sectors = 4 limit=0 [ 93.336701][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.342940][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.342940][ T9432] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 93.356133][ T9432] FAT-fs (loop5): unable to read inode block for updating (i_pos 203) [ 93.364709][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.364709][ T9432] loop5: rw=0, sector=4, nr_sectors = 4 limit=0 [ 93.377712][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.384061][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.384061][ T9432] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 93.397150][ T9432] FAT-fs (loop5): unable to read inode block for updating (i_pos 203) [ 93.405535][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.405535][ T9432] loop5: rw=0, sector=4, nr_sectors = 4 limit=0 [ 93.418507][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.424695][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.424695][ T9432] loop5: rw=0, sector=12, nr_sectors = 4 limit=0 [ 93.437971][ T9432] FAT-fs (loop5): unable to read inode block for updating (i_pos 203) [ 93.446300][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.446300][ T9432] loop5: rw=0, sector=4, nr_sectors = 4 limit=0 [ 93.459342][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.465527][ T9432] syz.5.2366: attempt to access beyond end of device [ 93.465527][ T9432] loop5: rw=0, sector=4, nr_sectors = 4 limit=0 [ 93.478562][ T9432] FAT-fs (loop5): FAT read failed (blocknr 1) [ 93.484714][ T9432] FAT-fs (loop5): unable to read inode block for updating (i_pos 203) [ 93.748015][ T3761] FAT-fs (loop5): Directory bread(block 3) failed [ 93.787909][ T9470] netlink: 'syz.1.2389': attribute type 3 has an invalid length. [ 93.857241][ T7451] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 94.081792][ T9495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9495 comm=syz.1.2402 [ 94.111129][ T9497] loop4: detected capacity change from 0 to 128 [ 94.122958][ T9497] EXT4-fs: Ignoring removed nobh option [ 94.128659][ T292] dummy0: left promiscuous mode [ 94.166011][ T9497] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.179759][ T9510] bond0: (slave bond_slave_0): Releasing backup interface [ 94.186325][ T9497] ext4 filesystem being mounted at /542/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.209275][ T9510] bond0: (slave bond_slave_1): Releasing backup interface [ 94.241461][ T9510] team0: Port device team_slave_0 removed [ 94.277509][ T9510] team0: Port device team_slave_1 removed [ 94.283501][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.292645][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.300435][ T9510] batman_adv: batadv0: Removing interface: ipvlan2 [ 94.314875][ T9510] bond1: (slave veth13): Releasing active interface [ 94.341457][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.460499][ T9536] vlan0: entered allmulticast mode [ 94.465673][ T9536] syz_tun: entered allmulticast mode [ 94.492643][ T2685] batadv1: left allmulticast mode [ 94.497694][ T2685] batadv1: left promiscuous mode [ 94.502821][ T2685] bridge0: port 4(batadv1) entered disabled state [ 94.510622][ T2685] dummy0: left allmulticast mode [ 94.515770][ T2685] bridge0: port 3(dummy0) entered disabled state [ 94.522544][ T2685] bridge_slave_1: left allmulticast mode [ 94.528187][ T2685] bridge_slave_1: left promiscuous mode [ 94.534169][ T2685] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.542352][ T2685] bridge_slave_0: left promiscuous mode [ 94.547975][ T2685] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.660135][ T2685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.669478][ T2685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.678509][ T2685] bond0 (unregistering): Released all slaves [ 94.727611][ T2685] tipc: Left network mode [ 94.756976][ T2685] hsr_slave_0: left promiscuous mode [ 94.762729][ T2685] hsr_slave_1: left promiscuous mode [ 94.768487][ T2685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.776049][ T2685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.783819][ T2685] batman_adv: batadv0: Removing interface: ipvlan2 [ 94.825958][ T2685] team0 (unregistering): Port device team_slave_1 removed [ 94.835941][ T2685] team0 (unregistering): Port device team_slave_0 removed [ 94.870675][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 94.930679][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.937753][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.944955][ T9498] bridge_slave_0: entered allmulticast mode [ 94.952817][ T9498] bridge_slave_0: entered promiscuous mode [ 94.963988][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.971559][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.979032][ T9498] bridge_slave_1: entered allmulticast mode [ 94.985862][ T9498] bridge_slave_1: entered promiscuous mode [ 95.007039][ T9498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.021907][ T9498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.046843][ T9498] team0: Port device team_slave_0 added [ 95.058033][ T9498] team0: Port device team_slave_1 added [ 95.092862][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.099854][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.125863][ T9498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.140585][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.147783][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.173697][ T9498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.203308][ T9591] team0 (unregistering): Port device team_slave_0 removed [ 95.211617][ T9591] team0 (unregistering): Port device team_slave_1 removed [ 95.258924][ T9498] hsr_slave_0: entered promiscuous mode [ 95.267274][ T9498] hsr_slave_1: entered promiscuous mode [ 95.276551][ T9498] debugfs: 'hsr0' already exists in 'hsr' [ 95.282319][ T9498] Cannot create hsr debugfs directory [ 95.389938][ T9498] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.401395][ T9498] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.416497][ T9498] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.427195][ T9498] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.584185][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.599500][ T9498] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.612439][ T3860] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.619625][ T3860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.637798][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.644907][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.704482][ T9498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.804270][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.943289][ T9675] wireguard0: entered promiscuous mode [ 95.948844][ T9675] wireguard0: entered allmulticast mode [ 95.987679][ T9679] bond1: (slave dummy0): Releasing active interface [ 96.004366][ T9679] bond0: (slave bond_slave_0): Releasing backup interface [ 96.014325][ T9679] bond0: (slave bond_slave_1): Releasing backup interface [ 96.022305][ T9679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.032743][ T9679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.040315][ T9679] batman_adv: batadv0: Removing interface: ipvlan2 [ 96.049909][ T9679] bond1: (slave veth11): Releasing active interface [ 96.061119][ T9679] bond2: (slave veth13): Releasing active interface [ 96.067733][ T9679] bond2: (slave veth13): the permanent HWaddr of slave - 6e:33:b2:74:32:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 96.091116][ T9682] loop2: detected capacity change from 0 to 512 [ 96.097683][ T9682] vfat: Bad value for 'allow_utime' [ 96.119341][ T9679] bond2: (slave batadv1): Releasing active interface [ 96.129997][ T9679] batadv1: left promiscuous mode [ 96.154730][ T9498] veth0_vlan: entered promiscuous mode [ 96.163611][ T9498] veth1_vlan: entered promiscuous mode [ 96.178671][ T9498] veth0_macvtap: entered promiscuous mode [ 96.206150][ T9498] veth1_macvtap: entered promiscuous mode [ 96.216724][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.239881][ T9685] pim6reg1: entered promiscuous mode [ 96.245288][ T9685] pim6reg1: entered allmulticast mode [ 96.254413][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.274436][ T292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.289502][ T292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.331460][ T292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349024][ T292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522357][ T9713] __nla_validate_parse: 18 callbacks suppressed [ 96.522371][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 96.625829][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2480'. [ 96.629593][ T9725] loop6: detected capacity change from 0 to 512 [ 96.653315][ T9725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.669528][ T9730] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 96.677408][ T9725] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.722443][ T9498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.776301][ T9745] netlink: 'syz.6.2489': attribute type 10 has an invalid length. [ 96.784338][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2489'. [ 96.793820][ T9745] team0: entered promiscuous mode [ 96.798936][ T9745] team_slave_0: entered promiscuous mode [ 96.804845][ T9745] team_slave_1: entered promiscuous mode [ 96.810867][ T9745] team0: entered allmulticast mode [ 96.815972][ T9745] team_slave_0: entered allmulticast mode [ 96.821721][ T9745] team_slave_1: entered allmulticast mode [ 96.828818][ T9745] bridge0: port 3(team0) entered blocking state [ 96.835126][ T9745] bridge0: port 3(team0) entered disabled state [ 96.835206][ T9752] loop2: detected capacity change from 0 to 1024 [ 96.848172][ T9752] EXT4-fs: Ignoring removed orlov option [ 96.856098][ T9745] bridge0: port 3(team0) entered blocking state [ 96.862403][ T9745] bridge0: port 3(team0) entered forwarding state [ 96.876299][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.908743][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 96.939839][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.980911][ T9770] bridge0: port 3(team0) entered disabled state [ 96.989029][ T9770] bond2: (slave dummy0): Releasing active interface [ 96.995632][ T9770] dummy0: left promiscuous mode [ 97.014492][ T9770] bridge_slave_0: left allmulticast mode [ 97.020251][ T9770] bridge_slave_0: left promiscuous mode [ 97.025988][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.059879][ T9770] bridge_slave_1: left allmulticast mode [ 97.065551][ T9770] bridge_slave_1: left promiscuous mode [ 97.071397][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.132755][ T9770] bond0: (slave bond_slave_0): Releasing backup interface [ 97.153017][ T9770] bond0: (slave bond_slave_1): Releasing backup interface [ 97.170025][ T9770] team_slave_0: left promiscuous mode [ 97.175591][ T9770] team_slave_0: left allmulticast mode [ 97.194583][ T9770] team0: Port device team_slave_0 removed [ 97.202865][ T9770] team_slave_1: left promiscuous mode [ 97.208351][ T9770] team_slave_1: left allmulticast mode [ 97.226030][ T9770] team0: Port device team_slave_1 removed [ 97.232589][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 97.246927][ T9770] bond0: (slave macvlan2): Releasing backup interface [ 97.265370][ T9770] bond2: (slave veth7): Releasing active interface [ 97.298160][ T9782] veth0: entered promiscuous mode [ 97.314153][ T9783] veth0 (unregistering): left promiscuous mode [ 97.640684][ T9812] bridge_slave_0: left allmulticast mode [ 97.646393][ T9812] bridge_slave_0: left promiscuous mode [ 97.652274][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.654802][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2519'. [ 97.710632][ T9812] bridge_slave_1: left allmulticast mode [ 97.716424][ T9812] bridge_slave_1: left promiscuous mode [ 97.722290][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.736060][ T9812] bond0: (slave veth0_to_bond): Releasing active interface [ 97.743924][ T9812] veth0_to_bond: left allmulticast mode [ 97.754752][ T9812] : (slave bond_slave_0): Releasing backup interface [ 97.772665][ T9812] : (slave bond_slave_1): Releasing backup interface [ 97.791515][ T9812] team0: Port device team_slave_0 removed [ 97.807166][ T9812] team0: Port device team_slave_1 removed [ 97.814171][ T9812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.823214][ T9812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.832074][ T9812] bond0: (slave veth5): Releasing active interface [ 97.851838][ T9812] batadv1: left allmulticast mode [ 97.856984][ T9812] batadv1: left promiscuous mode [ 97.862502][ T9812] bridge0: port 3(batadv1) entered disabled state [ 97.893474][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 97.904755][ T9827] capability: warning: `syz.2.2524' uses 32-bit capabilities (legacy support in use) [ 97.930501][ T9839] loop4: detected capacity change from 0 to 1024 [ 97.965571][ T9839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.993553][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 97.993638][ T29] audit: type=1400 audit(1753967782.059:1727): avc: denied { create } for pid=9838 comm="syz.4.2529" name=22050820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 98.029275][ T29] audit: type=1326 audit(1753967782.099:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 98.052705][ T29] audit: type=1326 audit(1753967782.099:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 98.076150][ T29] audit: type=1326 audit(1753967782.099:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 98.099665][ T29] audit: type=1326 audit(1753967782.099:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8386e9a9 code=0x7ffc0000 [ 98.130374][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.167024][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2538'. [ 98.210774][ T9867] loop2: detected capacity change from 0 to 256 [ 98.236278][ T9867] FAT-fs (loop2): bogus number of FAT sectors [ 98.242425][ T9867] FAT-fs (loop2): Can't find a valid FAT filesystem [ 98.327868][ T9878] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2543'. [ 98.347040][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 98.442029][ T9888] loop6: detected capacity change from 0 to 8192 [ 98.468473][ T29] audit: type=1400 audit(1753967782.529:1732): avc: denied { append } for pid=9896 comm="syz.2.2551" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.495027][ T9862] loop4: detected capacity change from 0 to 32768 [ 98.538851][ T9862] loop4: p1 p2 p3 < > [ 98.542989][ T9862] loop4: p1 size 242222080 extends beyond EOD, truncated [ 98.555555][ T9862] loop4: p2 start 4294967295 is beyond EOD, truncated [ 98.644228][ T9912] loop6: detected capacity change from 0 to 1024 [ 98.682432][ T9912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.700896][ T29] audit: type=1326 audit(1753967782.769:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.6.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 98.724402][ T29] audit: type=1326 audit(1753967782.769:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.6.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 98.747930][ T29] audit: type=1326 audit(1753967782.769:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.6.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 98.780500][ T29] audit: type=1326 audit(1753967782.819:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.6.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 98.804948][ T9498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.840263][ T9923] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.882572][ T9929] wg2: entered promiscuous mode [ 98.887456][ T9929] wg2: entered allmulticast mode [ 98.930374][ T9930] syzkaller0: entered promiscuous mode [ 98.936033][ T9930] syzkaller0: entered allmulticast mode [ 98.973654][ T9934] loop4: detected capacity change from 0 to 8192 [ 99.047167][ T9945] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.075945][ T9950] tipc: Started in network mode [ 99.080897][ T9950] tipc: Node identity 16ec51fb6b88, cluster identity 4711 [ 99.088367][ T9950] tipc: Enabled bearer , priority 0 [ 99.100804][ T9950] tipc: Disabling bearer [ 99.416195][ T9985] netlink: 'syz.1.2590': attribute type 13 has an invalid length. [ 99.782164][ T9996] wireguard0: entered promiscuous mode [ 99.787801][ T9996] wireguard0: entered allmulticast mode [ 99.857869][T10000] tipc: Started in network mode [ 99.862778][T10000] tipc: Node identity 1a6c25443f3c, cluster identity 4711 [ 99.869933][T10000] tipc: Enabled bearer , priority 0 [ 99.896340][T10000] tipc: Disabling bearer [ 100.031413][T10009] veth0: entered promiscuous mode [ 100.334649][T10032] serio: Serial port ttyS3 [ 100.359784][T10036] loop4: detected capacity change from 0 to 512 [ 100.384741][T10036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.413816][T10036] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.468771][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.561614][T10053] sctp: [Deprecated]: syz.4.2616 (pid 10053) Use of int in max_burst socket option deprecated. [ 100.561614][T10053] Use struct sctp_assoc_value instead [ 100.564785][T10057] netlink: 'syz.6.2620': attribute type 19 has an invalid length. [ 100.589610][ T2685] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.589702][T10057] netlink: 'syz.6.2620': attribute type 19 has an invalid length. [ 100.604903][ T2685] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.654638][ T2685] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.675660][ T2685] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.886723][T10096] batadv0: entered promiscuous mode [ 100.892130][T10096] batadv0: entered allmulticast mode [ 100.902065][T10096] bridge0: port 1(batadv0) entered blocking state [ 100.908809][T10096] bridge0: port 1(batadv0) entered disabled state [ 101.083368][T10111] syzkaller1: entered promiscuous mode [ 101.089003][T10111] syzkaller1: entered allmulticast mode [ 101.137357][T10108] loop2: detected capacity change from 0 to 32768 [ 101.178663][T10108] loop2: p1 p2 p3 < > [ 101.182841][T10108] loop2: p1 size 242222080 extends beyond EOD, truncated [ 101.190979][T10108] loop2: p2 start 4294967295 is beyond EOD, truncated [ 101.487185][ T2685] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 101.496501][ T2685] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 101.869897][T10168] sctp: [Deprecated]: syz.6.2663 (pid 10168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.869897][T10168] Use struct sctp_sack_info instead [ 101.912855][T10173] loop6: detected capacity change from 0 to 1024 [ 101.939928][T10173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.958447][T10173] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.979669][T10173] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 102.025646][T10173] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 102.038044][T10173] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.038044][T10173] [ 102.047697][T10173] EXT4-fs (loop6): Total free blocks count 0 [ 102.053685][T10173] EXT4-fs (loop6): Free/Dirty block details [ 102.059660][T10173] EXT4-fs (loop6): free_blocks=4293918720 [ 102.065376][T10173] EXT4-fs (loop6): dirty_blocks=48 [ 102.070738][T10173] EXT4-fs (loop6): Block reservation details [ 102.081872][T10173] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 102.164234][ T3860] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28 [ 102.406456][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.413934][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.421753][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.429295][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.436761][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.444424][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.451878][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.459358][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.466785][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.474245][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.481692][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.489231][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.496748][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.504133][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.511532][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.518913][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.526336][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.533720][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.541118][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.548554][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.555938][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.563316][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.570729][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.578103][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.585646][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.593037][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.600429][ T8106] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.611383][ T8106] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.714583][T10216] __nla_validate_parse: 12 callbacks suppressed [ 102.714594][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'. [ 102.765129][T10216] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 102.914845][T10234] loop2: detected capacity change from 0 to 128 [ 102.924481][T10234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.936899][T10234] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.961437][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.980300][T10237] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2692'. [ 103.008155][T10239] loop2: detected capacity change from 0 to 2048 [ 103.040627][T10239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.209701][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.257609][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2698'. [ 103.307068][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 103.360536][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 103.648041][T10281] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2709'. [ 103.673321][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'. [ 103.995387][T10310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 104.001990][T10310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.009579][T10310] vhci_hcd vhci_hcd.0: Device attached [ 104.016427][T10311] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 104.030701][ T3860] vhci_hcd: stop threads [ 104.035059][ T3860] vhci_hcd: release socket [ 104.039506][ T3860] vhci_hcd: disconnect device [ 104.072955][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 104.072971][ T29] audit: type=1326 audit(1753967788.139:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.105172][ T29] audit: type=1326 audit(1753967788.139:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.128810][ T29] audit: type=1326 audit(1753967788.139:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.152360][ T29] audit: type=1326 audit(1753967788.139:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.175894][ T29] audit: type=1326 audit(1753967788.139:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.199509][ T29] audit: type=1326 audit(1753967788.139:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.201889][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2729'. [ 104.223003][ T29] audit: type=1326 audit(1753967788.139:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.255493][ T29] audit: type=1326 audit(1753967788.139:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.278970][ T29] audit: type=1326 audit(1753967788.139:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.302495][ T29] audit: type=1326 audit(1753967788.139:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a8fae9a9 code=0x7ffc0000 [ 104.602984][T10356] loop6: detected capacity change from 0 to 128 [ 104.610757][T10357] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2736'. [ 104.622009][T10356] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.636008][T10344] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2736'. [ 104.645398][T10356] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.677399][T10366] atomic_op ffff888118ca0528 conn xmit_atomic 0000000000000000 [ 104.700925][ T9498] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.033106][T10393] openvswitch: netlink: Message has 6 unknown bytes. [ 105.134197][T10402] vlan0: entered allmulticast mode [ 105.323272][T10378] ================================================================== [ 105.331368][T10378] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 105.338309][T10378] [ 105.340617][T10378] read-write to 0xffff8881247c596c of 4 bytes by task 10383 on cpu 0: [ 105.348781][T10378] fifo_open+0x86/0x5d0 [ 105.352935][T10378] do_dentry_open+0x646/0xa20 [ 105.357623][T10378] vfs_open+0x37/0x1e0 [ 105.361696][T10378] path_openat+0x1c5e/0x2170 [ 105.366300][T10378] do_filp_open+0x109/0x230 [ 105.370814][T10378] do_sys_openat2+0xa6/0x110 [ 105.375412][T10378] __x64_sys_open+0xe6/0x110 [ 105.380011][T10378] x64_sys_call+0x1457/0x2ff0 [ 105.384687][T10378] do_syscall_64+0xd2/0x200 [ 105.389197][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.395092][T10378] [ 105.397406][T10378] read to 0xffff8881247c596c of 4 bytes by task 10378 on cpu 1: [ 105.405030][T10378] wait_for_partner+0xb5/0x1c0 [ 105.409808][T10378] fifo_open+0x462/0x5d0 [ 105.414056][T10378] do_dentry_open+0x646/0xa20 [ 105.418733][T10378] vfs_open+0x37/0x1e0 [ 105.422834][T10378] path_openat+0x1c5e/0x2170 [ 105.427437][T10378] do_filp_open+0x109/0x230 [ 105.431957][T10378] do_sys_openat2+0xa6/0x110 [ 105.436567][T10378] __x64_sys_openat+0xf2/0x120 [ 105.441333][T10378] x64_sys_call+0x2e9c/0x2ff0 [ 105.446001][T10378] do_syscall_64+0xd2/0x200 [ 105.450511][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.456406][T10378] [ 105.458721][T10378] value changed: 0x00000001 -> 0x00000002 [ 105.464433][T10378] [ 105.466752][T10378] Reported by Kernel Concurrency Sanitizer on: [ 105.472922][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.6.2750 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 105.485084][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.495143][T10378] ==================================================================