last executing test programs: 51.538206993s ago: executing program 32 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 46.578246848s ago: executing program 2 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x6}}, {@block_validity}]}, 0x0, 0x61f, &(0x7f00000003c0)="$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") 46.486981369s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r1, 0x0, 0x8000000004}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) 46.470064339s ago: executing program 2 (id=320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 46.350657171s ago: executing program 2 (id=323): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 46.050836665s ago: executing program 2 (id=328): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)={0x16, 0x0, 0x20, 0x70bd26, 0x0, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x1000, 0x0, 0xfffc}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/240) 46.028117136s ago: executing program 33 (id=328): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)={0x16, 0x0, 0x20, 0x70bd26, 0x0, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x1000, 0x0, 0xfffc}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/240) 40.38354244s ago: executing program 6 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 40.29374747s ago: executing program 6 (id=493): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x6, @empty, 0x1}, 0x1c) 40.278271401s ago: executing program 6 (id=494): socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x51d2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 39.429347892s ago: executing program 6 (id=530): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x1217, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736c71c358220000000f0ffffffff00", [0x5]}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="83", 0x1}], 0x1, 0x405412, 0x0, 0x0) 39.041419937s ago: executing program 6 (id=541): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) get_robust_list(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) 38.637365652s ago: executing program 6 (id=557): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010510000904000001020d0000052406000105240008000d240f01a8fd0000ff0007000706241a4d01000905810320009508080904010000020d00000942d2e49b4cba977caa8604010102020d000009058202ff030708d40905030220efcc0581"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 38.583712373s ago: executing program 34 (id=557): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010510000904000001020d0000052406000105240008000d240f01a8fd0000ff0007000706241a4d01000905810320009508080904010000020d00000942d2e49b4cba977caa8604010102020d000009058202ff030708d40905030220efcc0581"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.583608447s ago: executing program 5 (id=1007): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 24.485332668s ago: executing program 5 (id=1012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 23.57402528s ago: executing program 5 (id=1044): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 23.483165471s ago: executing program 5 (id=1049): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b63583d9d432ff2d70a8ea6b95965a084c8d9ee47d61244ed498769deef6ce4adfa3ffad724030133fd28811f8308b3ad04f4cacf28506d0a7977af17513c7200a8e1da6d9d5dad4600b614448b176b30b808fc8049c9d5d35cfc60ee47a39", 0x60) 23.263140634s ago: executing program 5 (id=1052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100006000000070020"], 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 22.996953328s ago: executing program 5 (id=1058): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) close(r1) 22.977393148s ago: executing program 35 (id=1058): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) close(r1) 18.575004296s ago: executing program 1 (id=1177): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 18.545919676s ago: executing program 1 (id=1179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/197, 0xc5}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 18.495845077s ago: executing program 1 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 18.402004278s ago: executing program 1 (id=1190): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x1217, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736c71c358220000000f0ffffffff00", [0x5]}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="83", 0x1}], 0x1, 0x405412, 0x0, 0x0) 17.988518024s ago: executing program 1 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "6ece307b792ac3b0e6e71b0e0edf999a"}, 0x20) 17.47512363s ago: executing program 1 (id=1205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 17.47485792s ago: executing program 36 (id=1205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 8.713542325s ago: executing program 7 (id=1442): openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) 8.712761775s ago: executing program 7 (id=1444): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 7.352639993s ago: executing program 7 (id=1462): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x2, 0x0, 0x8ec4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0xffffffff, 0xffffffff, 0x0, 0xfff, 0x8, 0x8, 0x10002, 0x1, 0x61, 0x7fff, 0xfffff02c, 0x401, 0x750, 0x3201}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 7.021911498s ago: executing program 7 (id=1472): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6.980361448s ago: executing program 7 (id=1475): perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@errors_remount}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpid}]}, 0x4, 0x45f, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 6.650444382s ago: executing program 7 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000070021006262"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 6.650073172s ago: executing program 37 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000070021006262"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 5.948730652s ago: executing program 4 (id=1507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x8802) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 5.872624413s ago: executing program 0 (id=1508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000380)=[{r2, 0xa010}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 4.947467345s ago: executing program 0 (id=1513): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 4.918661835s ago: executing program 0 (id=1516): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 4.789415017s ago: executing program 0 (id=1518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 4.684852208s ago: executing program 0 (id=1519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) shutdown(r0, 0x1) 4.131105296s ago: executing program 0 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.111304356s ago: executing program 38 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.501558337s ago: executing program 3 (id=1552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 2.361063829s ago: executing program 3 (id=1554): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) close(r0) 2.293347879s ago: executing program 3 (id=1555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2.061644053s ago: executing program 3 (id=1559): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 830.260149ms ago: executing program 8 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) 829.634829ms ago: executing program 9 (id=1572): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x4, 0x0, 0x2, 0x20000}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) 822.141939ms ago: executing program 4 (id=1515): memfd_create(0x0, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44ff) 802.680269ms ago: executing program 8 (id=1573): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 731.11894ms ago: executing program 9 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 706.99726ms ago: executing program 4 (id=1575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x34000}], 0x1) 687.771111ms ago: executing program 8 (id=1576): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff8100"/20, @ANYRES32=r3, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB="2b286b26ba"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 684.375771ms ago: executing program 9 (id=1585): r0 = socket(0x2, 0x3, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)="166da19415e63de511f3854200"/24, 0x18}], 0x1}}], 0x1, 0x0) 683.759501ms ago: executing program 4 (id=1577): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsync(r2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) 640.795671ms ago: executing program 9 (id=1578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) 608.718002ms ago: executing program 9 (id=1579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180010000000000020000c00000000009500000000000000f62dce07ef9f4e3993c37763332a8acf9576459d5639ae9439fea76e1741321e877b81097c86d1c8d56f25c8e7ac858401f6ea2acafff1ecfb67941b5bcaf1a1f7a34997fdb0cf2343685db9f9b52938ef32b287dbd7c88c25d2860889afe0e81a68af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 571.191832ms ago: executing program 8 (id=1580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x100}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 539.922573ms ago: executing program 4 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 538.967502ms ago: executing program 9 (id=1591): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x19, 0xb7, 0xdc, {0x7, 0x25, 0x1, 0x1, 0xfa, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x40, 0x1, {0x7, 0x25, 0x1, 0x0, 0x81, 0x12}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 209.409937ms ago: executing program 3 (id=1582): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close(r0) 189.026987ms ago: executing program 4 (id=1583): socket(0x10, 0x803, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 118.124848ms ago: executing program 8 (id=1584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 51.485339ms ago: executing program 3 (id=1586): memfd_create(0x0, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44ff) 10.057309ms ago: executing program 8 (id=1587): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0), &(0x7f0000000400)=0x8) 0s ago: executing program 2 (id=1526): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) kernel console output (not intermixed with test programs): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.172714][ T5214] loop4: detected capacity change from 0 to 512 [ 54.181338][ T5214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.212462][ T5214] EXT4-fs (loop4): 1 truncate cleaned up [ 54.218829][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.252256][ T5214] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 54.277385][ T5214] EXT4-fs (loop4): Remounting filesystem read-only [ 54.305053][ T5229] sd 0:0:1:0: device reset [ 54.312088][ T5227] smc: net device bond0 applied user defined pnetid SYZ0 [ 54.319628][ T5227] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.327138][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.363193][ T5232] syzkaller0: entered promiscuous mode [ 54.369046][ T5232] syzkaller0: entered allmulticast mode [ 54.541093][ T5254] loop5: detected capacity change from 0 to 512 [ 54.551674][ T5254] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.741: casefold flag without casefold feature [ 54.564422][ T5254] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.741: couldn't read orphan inode 15 (err -117) [ 54.577310][ T5254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.597695][ T5259] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 54.697329][ T3836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.926102][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 55.026678][ T5311] loop0: detected capacity change from 0 to 512 [ 55.033782][ T5311] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.046723][ T5311] EXT4-fs (loop0): 1 truncate cleaned up [ 55.053413][ T5311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.071538][ T5315] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 55.103031][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.112275][ T5319] loop1: detected capacity change from 0 to 512 [ 55.142611][ T5319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.156842][ T5319] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.193571][ T5319] Cannot find add_set index 0 as target [ 55.213123][ T5330] netlink: 32 bytes leftover after parsing attributes in process `syz.7.774'. [ 55.230273][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.316725][ T5336] SELinux: failed to load policy [ 55.386246][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 55.491460][ T5358] loop4: detected capacity change from 0 to 1024 [ 55.514766][ T5358] EXT4-fs: Ignoring removed orlov option [ 55.520530][ T5358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.537416][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.538335][ T5362] netlink: 92 bytes leftover after parsing attributes in process `syz.5.790'. [ 55.559256][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.790'. [ 55.568159][ T5362] netlink: 'syz.5.790': attribute type 2 has an invalid length. [ 55.575967][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.790'. [ 55.639067][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.790141][ T5390] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.798774][ T5390] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 55.975899][ T5406] can0: slcan on ttyS3. [ 56.009308][ T5406] can0 (unregistered): slcan off ttyS3. [ 56.021654][ T5406] can0: slcan on ttyS3. [ 56.076568][ T5405] can0 (unregistered): slcan off ttyS3. [ 56.577552][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 56.577566][ T29] audit: type=1400 audit(1745799058.353:1439): avc: denied { bind } for pid=5447 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.604447][ T5448] ALSA: seq fatal error: cannot create timer (-22) [ 56.654881][ T29] audit: type=1400 audit(1745799058.433:1440): avc: denied { create } for pid=5451 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.691653][ T29] audit: type=1326 audit(1745799058.463:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.4.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7209be969 code=0x0 [ 56.749983][ T29] audit: type=1400 audit(1745799058.493:1442): avc: denied { validate_trans } for pid=5450 comm="syz.0.828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.816275][ T5458] netlink: 'syz.5.832': attribute type 4 has an invalid length. [ 56.832684][ T29] audit: type=1400 audit(1745799058.613:1443): avc: denied { read write } for pid=5459 comm="syz.0.831" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.866670][ T29] audit: type=1400 audit(1745799058.613:1444): avc: denied { open } for pid=5459 comm="syz.0.831" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.993821][ T29] audit: type=1400 audit(1745799058.773:1445): avc: denied { append } for pid=5465 comm="syz.5.835" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.018665][ T5466] random: crng reseeded on system resumption [ 57.088265][ T29] audit: type=1400 audit(1745799058.803:1446): avc: denied { open } for pid=5465 comm="syz.5.835" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.349414][ T29] audit: type=1400 audit(1745799059.123:1447): avc: denied { mount } for pid=5477 comm="syz.7.841" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.372376][ T29] audit: type=1400 audit(1745799059.153:1448): avc: denied { unmount } for pid=5477 comm="syz.7.841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.563340][ T5495] loop7: detected capacity change from 0 to 8192 [ 57.651782][ T5499] SELinux: failed to load policy [ 57.680296][ T5507] loop4: detected capacity change from 0 to 164 [ 57.686766][ T5506] loop7: detected capacity change from 0 to 1024 [ 57.695657][ T5507] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.709252][ T5506] EXT4-fs: Ignoring removed orlov option [ 57.714952][ T5506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.722586][ T5507] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.732324][ T5507] Symlink component flag not implemented [ 57.738065][ T5507] Symlink component flag not implemented [ 57.744526][ T5507] Symlink component flag not implemented (7) [ 57.750577][ T5507] Symlink component flag not implemented (116) [ 57.759601][ T5513] loop1: detected capacity change from 0 to 256 [ 57.960350][ T5533] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 57.972816][ T5536] __nla_validate_parse: 3 callbacks suppressed [ 57.972846][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 58.068021][ T5544] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.075520][ T5544] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.087855][ T5548] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 58.123055][ T5553] IPVS: stopping master sync thread 5556 ... [ 58.129219][ T5556] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 58.153448][ T5561] loop7: detected capacity change from 0 to 1024 [ 58.179118][ T5557] SELinux: ebitmap: truncated map [ 58.210794][ T5557] SELinux: failed to load policy [ 58.218341][ T5568] loop5: detected capacity change from 0 to 512 [ 58.240132][ T5568] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.878: casefold flag without casefold feature [ 58.256005][ T5568] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.878: couldn't read orphan inode 15 (err -117) [ 58.447098][ T5587] sd 0:0:1:0: device reset [ 58.588624][ T5600] loop7: detected capacity change from 0 to 128 [ 58.598714][ T5601] loop4: detected capacity change from 0 to 128 [ 58.632845][ T5601] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 58.636864][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.7.891'. [ 58.641008][ T5601] FAT-fs (loop4): Filesystem has been set read-only [ 58.673008][ T5601] bio_check_eod: 4 callbacks suppressed [ 58.673027][ T5601] syz.4.890: attempt to access beyond end of device [ 58.673027][ T5601] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.962642][ T5618] SELinux: ebitmap: truncated map [ 58.982534][ T5618] SELinux: failed to load policy [ 59.019801][ T5621] loop4: detected capacity change from 0 to 256 [ 59.028498][ T5621] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.052537][ T5621] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 59.061362][ T5621] FAT-fs (loop4): Filesystem has been set read-only [ 59.201844][ T5628] hub 2-0:1.0: USB hub found [ 59.212987][ T5628] hub 2-0:1.0: 8 ports detected [ 59.279615][ T5633] vlan2: entered allmulticast mode [ 59.284829][ T5633] dummy0: entered allmulticast mode [ 59.318530][ T5635] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 59.326815][ T5635] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 59.413188][ T5647] loop0: detected capacity change from 0 to 256 [ 59.472101][ T5649] vhci_hcd: invalid port number 96 [ 59.477417][ T5649] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 59.507524][ T5656] loop0: detected capacity change from 0 to 1024 [ 59.524523][ T5656] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.918: Allocating blocks 497-513 which overlap fs metadata [ 59.540428][ T5656] EXT4-fs (loop0): pa ffff8881068b31c0: logic 0, phys. 257, len 16 [ 59.548408][ T5656] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 59.596270][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 59.598460][ T5672] vlan2: entered allmulticast mode [ 59.610679][ T5672] dummy0: entered allmulticast mode [ 59.788001][ T5688] loop0: detected capacity change from 0 to 4096 [ 59.860725][ T5700] loop7: detected capacity change from 0 to 1764 [ 59.905553][ T5707] loop7: detected capacity change from 0 to 128 [ 59.979144][ T5713] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 60.275375][ T5726] loop7: detected capacity change from 0 to 4096 [ 60.362890][ T5733] loop4: detected capacity change from 0 to 4096 [ 60.474269][ T5737] SELinux: ebitmap: truncated map [ 60.482004][ T5737] SELinux: failed to load policy [ 60.505250][ T5739] sd 0:0:1:0: device reset [ 60.600459][ T5749] ALSA: seq fatal error: cannot create timer (-19) [ 60.764063][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115398200: rx timeout, send abort [ 60.772369][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115398200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 60.962803][ T5773] loop5: detected capacity change from 0 to 1024 [ 60.991324][ T5773] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.054078][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.061613][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.069175][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.076644][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.084132][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.091684][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.099174][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.106562][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.113998][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.121561][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.121780][ T5786] loop5: detected capacity change from 0 to 512 [ 61.128976][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.129003][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.136909][ T5786] EXT4-fs: Ignoring removed oldalloc option [ 61.142609][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.142632][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.142812][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.163045][ T5786] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.974: Parent and EA inode have the same ino 15 [ 61.163460][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.174046][ T5786] EXT4-fs (loop5): Remounting filesystem read-only [ 61.178306][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.190490][ T5786] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 61.197883][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.207181][ T5786] EXT4-fs (loop5): 1 orphan inode deleted [ 61.211809][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.242681][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.250668][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.258308][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.265805][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.273271][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.280768][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.288156][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.295571][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.302988][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.312032][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.377053][ T5791] loop1: detected capacity change from 0 to 8192 [ 61.384800][ T5797] loop0: detected capacity change from 0 to 128 [ 61.414822][ T5797] syz.0.979: attempt to access beyond end of device [ 61.414822][ T5797] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 61.428582][ T5797] syz.0.979: attempt to access beyond end of device [ 61.428582][ T5797] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 61.445561][ T5797] syz.0.979: attempt to access beyond end of device [ 61.445561][ T5797] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 61.459417][ T5797] syz.0.979: attempt to access beyond end of device [ 61.459417][ T5797] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 61.473036][ T5797] syz.0.979: attempt to access beyond end of device [ 61.473036][ T5797] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 61.486634][ T5797] syz.0.979: attempt to access beyond end of device [ 61.486634][ T5797] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 61.500467][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.983'. [ 61.516005][ T5797] syz.0.979: attempt to access beyond end of device [ 61.516005][ T5797] loop0: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 61.565765][ T5797] syz.0.979: attempt to access beyond end of device [ 61.565765][ T5797] loop0: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 61.590849][ T5797] syz.0.979: attempt to access beyond end of device [ 61.590849][ T5797] loop0: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 61.612850][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 61.612866][ T29] audit: type=1326 audit(1745799063.393:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.642862][ T29] audit: type=1326 audit(1745799063.403:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.666459][ T29] audit: type=1326 audit(1745799063.403:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.689813][ T29] audit: type=1326 audit(1745799063.403:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.713194][ T29] audit: type=1326 audit(1745799063.403:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.736778][ T29] audit: type=1326 audit(1745799063.403:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.760309][ T29] audit: type=1326 audit(1745799063.403:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.783686][ T29] audit: type=1326 audit(1745799063.403:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.807107][ T29] audit: type=1326 audit(1745799063.403:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.7.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5fa5e969 code=0x7ffc0000 [ 61.848526][ T29] audit: type=1400 audit(1745799063.623:1523): avc: denied { create } for pid=5822 comm="syz.7.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.869365][ T5823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.876897][ T5823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.896498][ T5825] loop4: detected capacity change from 0 to 512 [ 61.941397][ T5825] EXT4-fs (loop4): 1 orphan inode deleted [ 61.947919][ T5825] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.959100][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 62.081654][ T5835] xt_CT: No such helper "snmp" [ 62.081847][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.992'. [ 62.246841][ T5838] netlink: 'syz.4.995': attribute type 4 has an invalid length. [ 62.469689][ T5855] vlan2: entered allmulticast mode [ 62.474855][ T5855] bond0: entered allmulticast mode [ 62.480150][ T5855] bond_slave_0: entered allmulticast mode [ 62.485932][ T5855] bond_slave_1: entered allmulticast mode [ 62.579443][ T5858] loop7: detected capacity change from 0 to 1024 [ 62.597552][ T5860] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.606334][ T5858] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1014: Allocating blocks 497-513 which overlap fs metadata [ 62.632832][ T5858] EXT4-fs (loop7): pa ffff8881068b3230: logic 16, phys. 145, len 23 [ 62.640946][ T5858] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 62.651736][ T5858] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 62.664077][ T5858] EXT4-fs (loop7): This should not happen!! Data will be lost [ 62.664077][ T5858] [ 62.665709][ T5864] loop1: detected capacity change from 0 to 1024 [ 62.673728][ T5858] EXT4-fs (loop7): Total free blocks count 0 [ 62.681921][ T5864] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.686101][ T5858] EXT4-fs (loop7): Free/Dirty block details [ 62.695841][ T5864] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 62.701775][ T5858] EXT4-fs (loop7): free_blocks=16 [ 62.711470][ T5864] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 62.716326][ T5858] EXT4-fs (loop7): dirty_blocks=0 [ 62.728786][ T5864] EXT4-fs (loop1): journal inode is deleted [ 62.731133][ T5858] EXT4-fs (loop7): Block reservation details [ 62.743076][ T5858] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 63.148731][ T5907] SELinux: failed to load policy [ 63.181623][ T5913] loop7: detected capacity change from 0 to 128 [ 63.369088][ T5926] loop4: detected capacity change from 0 to 512 [ 63.390756][ T5926] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.483906][ T5940] loop4: detected capacity change from 0 to 512 [ 63.522508][ T5940] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.529020][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1037: corrupted inode contents [ 63.565331][ T5940] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.1037: mark_inode_dirty error [ 63.565894][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1037: corrupted inode contents [ 63.579911][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1037: corrupted inode contents [ 63.637882][ T5940] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.1037: mark_inode_dirty error [ 63.638110][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1037: corrupted inode contents [ 63.638252][ T5940] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1037: mark_inode_dirty error [ 63.713603][ T5940] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.1037: corrupted inode contents [ 63.713912][ T5940] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.1037: mark_inode_dirty error [ 63.757897][ T5949] hub 9-0:1.0: USB hub found [ 63.758023][ T5949] hub 9-0:1.0: 8 ports detected [ 63.876745][ T5964] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.887791][ T5966] SELinux: syz.0.1046 (5966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.889243][ T5964] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.954109][ T5971] loop5: detected capacity change from 0 to 1024 [ 63.971973][ T5971] EXT4-fs: Ignoring removed bh option [ 63.977725][ T5971] EXT4-fs: Ignoring removed orlov option [ 63.983482][ T5971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.068937][ T5971] loop5: detected capacity change from 1024 to 64 [ 64.078674][ T5971] bio_check_eod: 9 callbacks suppressed [ 64.078690][ T5971] syz.5.1049: attempt to access beyond end of device [ 64.078690][ T5971] loop5: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 64.097729][ T5971] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 64.109055][ T5971] EXT4-fs (loop5): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 64.121666][ T5971] Buffer I/O error on device loop5, logical block 128 [ 64.159272][ T3836] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /158/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 64.200781][ T5977] kmmpd-loop5: attempt to access beyond end of device [ 64.200781][ T5977] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 64.214489][ T5977] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 64.238626][ T5984] netlink: 'syz.0.1054': attribute type 3 has an invalid length. [ 64.595939][ T6014] serio: Serial port ptm0 [ 64.650067][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 64.703217][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.710423][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.717870][ T5994] bridge_slave_0: entered allmulticast mode [ 64.724744][ T5994] bridge_slave_0: entered promiscuous mode [ 64.733754][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.740910][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.748201][ T5994] bridge_slave_1: entered allmulticast mode [ 64.755118][ T5994] bridge_slave_1: entered promiscuous mode [ 64.767734][ T6034] loop0: detected capacity change from 0 to 512 [ 64.774844][ T6034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.775982][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.785457][ T6034] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.800570][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.816385][ T6034] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1072: bg 0: block 248: padding at end of block bitmap is not set [ 64.830925][ T6034] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1072: Failed to acquire dquot type 1 [ 64.849521][ T5994] team0: Port device team_slave_0 added [ 64.858643][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 64.863290][ T5994] team0: Port device team_slave_1 added [ 64.872825][ T6038] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.909787][ T6038] SELinux: failed to load policy [ 64.916287][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.923369][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.949414][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.960747][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.967703][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.993667][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.010283][ T6040] loop0: detected capacity change from 0 to 512 [ 65.035794][ T5994] hsr_slave_0: entered promiscuous mode [ 65.047170][ T6043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6043 comm=syz.7.1076 [ 65.081744][ T5994] hsr_slave_1: entered promiscuous mode [ 65.087798][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.096238][ T5994] Cannot create hsr debugfs directory [ 65.108486][ T6040] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.133480][ T6040] EXT4-fs (loop0): mount failed [ 65.301823][ T5994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 65.323470][ T5994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 65.338698][ T6063] bridge0: port 3(gretap0) entered blocking state [ 65.345364][ T6063] bridge0: port 3(gretap0) entered disabled state [ 65.369979][ T6063] gretap0: entered allmulticast mode [ 65.375922][ T6063] gretap0: entered promiscuous mode [ 65.391936][ T6063] bridge0: port 3(gretap0) entered blocking state [ 65.398433][ T6063] bridge0: port 3(gretap0) entered forwarding state [ 65.410249][ T5994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 65.420970][ T5994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 65.430308][ T6066] netlink: 'syz.0.1083': attribute type 12 has an invalid length. [ 65.438301][ T6066] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 65.446203][ T6066] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1083'. [ 65.455337][ T6066] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 65.463153][ T6066] netlink: 'syz.0.1083': attribute type 2 has an invalid length. [ 65.470905][ T6066] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1083'. [ 65.483650][ T6066] netlink: 'syz.0.1083': attribute type 12 has an invalid length. [ 65.491709][ T6066] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 65.499579][ T6066] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1083'. [ 65.508626][ T6066] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 65.516394][ T6066] netlink: 'syz.0.1083': attribute type 2 has an invalid length. [ 65.524224][ T6066] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1083'. [ 65.608420][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.618553][ T6076] syz.4.1088: attempt to access beyond end of device [ 65.618553][ T6076] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 65.634618][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.644947][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.652070][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.666423][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 65.690652][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.697913][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.726534][ T6082] sd 0:0:1:0: device reset [ 65.776560][ T6086] loop4: detected capacity change from 0 to 512 [ 65.816234][ T6086] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.828463][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.840380][ T6086] EXT4-fs (loop4): mount failed [ 65.871237][ T6096] syzkaller0: refused to change device tx_queue_len [ 66.044087][ T5994] veth0_vlan: entered promiscuous mode [ 66.055408][ T5994] veth1_vlan: entered promiscuous mode [ 66.079856][ T5994] veth0_macvtap: entered promiscuous mode [ 66.089350][ T5994] veth1_macvtap: entered promiscuous mode [ 66.142076][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.152769][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.162676][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.173127][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.183051][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.193593][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.203506][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.214033][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.223912][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.234380][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.246237][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.272932][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.283669][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.293645][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.304163][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.314060][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.324517][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.334444][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.338013][ T6122] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 66.344894][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.362119][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.372847][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.386133][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.425285][ T5994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.434097][ T5994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.442848][ T5994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.451687][ T5994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.681275][ T6142] loop7: detected capacity change from 0 to 512 [ 66.688166][ T6142] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.702274][ T6142] EXT4-fs (loop7): 1 truncate cleaned up [ 66.760954][ T6153] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.764346][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 66.764372][ T29] audit: type=1400 audit(1745799068.543:1604): avc: denied { shutdown } for pid=6146 comm="syz.0.1108" laddr=fe80::40 lport=39791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.768536][ T6153] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.781290][ T29] audit: type=1400 audit(1745799068.553:1605): avc: denied { getopt } for pid=6146 comm="syz.0.1108" laddr=fe80::40 lport=39791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.825573][ T6147] syz.0.1108 (6147) used greatest stack depth: 8912 bytes left [ 66.934132][ T6171] loop4: detected capacity change from 0 to 1024 [ 66.941124][ T6171] EXT4-fs: inline encryption not supported [ 66.947172][ T6171] EXT4-fs: Ignoring removed bh option [ 67.015579][ T6178] loop0: detected capacity change from 0 to 512 [ 67.025857][ T6178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.040706][ T6178] EXT4-fs (loop0): 1 truncate cleaned up [ 67.378053][ T6199] loop7: detected capacity change from 0 to 512 [ 67.385497][ T6199] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.392769][ T6199] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 67.404836][ T6199] EXT4-fs (loop7): 1 truncate cleaned up [ 67.443001][ T6206] loop0: detected capacity change from 0 to 1024 [ 67.472242][ T6206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 67.481963][ T6206] System zones: 0-1, 3-12 [ 67.486930][ T6206] EXT4-fs mount: 32 callbacks suppressed [ 67.486962][ T6206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.520441][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.532207][ T29] audit: type=1400 audit(1745799069.303:1606): avc: denied { map } for pid=6205 comm="syz.0.1132" path="/257/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.557031][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.574506][ T6215] xt_l2tp: wrong L2TP version: 0 [ 67.590668][ T29] audit: type=1326 audit(1745799069.373:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a94e5e969 code=0x7ffc0000 [ 67.635173][ T29] audit: type=1326 audit(1745799069.393:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6a94e5e969 code=0x7ffc0000 [ 67.658808][ T29] audit: type=1326 audit(1745799069.393:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a94e5e969 code=0x7ffc0000 [ 67.708188][ T6223] loop8: detected capacity change from 0 to 256 [ 67.788738][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.813553][ T6233] hub 2-0:1.0: USB hub found [ 67.818610][ T6233] hub 2-0:1.0: 8 ports detected [ 67.842239][ T29] audit: type=1400 audit(1745799069.623:1610): avc: denied { setopt } for pid=6236 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.882125][ T6244] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.890586][ T6244] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.897610][ T29] audit: type=1400 audit(1745799069.623:1611): avc: denied { bind } for pid=6236 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.960503][ T6248] sd 0:0:1:0: device reset [ 67.981423][ T29] audit: type=1326 audit(1745799069.763:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 68.004945][ T29] audit: type=1326 audit(1745799069.763:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 68.043794][ T6254] msdos: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 68.105707][ T6239] loop7: detected capacity change from 0 to 512 [ 68.121727][ T6239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.141056][ T6239] EXT4-fs (loop7): orphan cleanup on readonly fs [ 68.147891][ T6239] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1149: bg 0: block 248: padding at end of block bitmap is not set [ 68.163761][ T6239] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1149: Failed to acquire dquot type 1 [ 68.180518][ T6239] EXT4-fs (loop7): 1 truncate cleaned up [ 68.189341][ T6239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.204929][ T6265] program syz.8.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.216293][ T6265] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.255098][ T4807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.367852][ T6278] loop8: detected capacity change from 0 to 1024 [ 68.377425][ T6278] EXT4-fs: Ignoring removed nobh option [ 68.383091][ T6278] EXT4-fs: Ignoring removed bh option [ 68.404548][ T6278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.426694][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.441076][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.462693][ T6287] loop4: detected capacity change from 0 to 128 [ 68.477521][ T6287] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.500134][ T6287] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.548312][ T6287] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.4.1169: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 68.549555][ T5994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.597076][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.655388][ T6296] loop4: detected capacity change from 0 to 2048 [ 68.691780][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.710030][ T6296] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.725945][ T6296] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.738327][ T6296] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.738327][ T6296] [ 68.748132][ T6296] EXT4-fs (loop4): Total free blocks count 0 [ 68.754394][ T6296] EXT4-fs (loop4): Free/Dirty block details [ 68.760358][ T6296] EXT4-fs (loop4): free_blocks=2415919104 [ 68.766244][ T6296] EXT4-fs (loop4): dirty_blocks=16 [ 68.771418][ T6296] EXT4-fs (loop4): Block reservation details [ 68.777604][ T6296] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 68.807768][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.947284][ T6326] sd 0:0:1:0: device reset [ 68.986478][ T6331] macvlan2: entered promiscuous mode [ 68.991886][ T6331] macvlan2: entered allmulticast mode [ 68.997530][ T6331] bond0: entered allmulticast mode [ 69.002752][ T6331] bond_slave_0: entered allmulticast mode [ 69.008526][ T6331] bond_slave_1: entered allmulticast mode [ 69.021397][ T6323] loop8: detected capacity change from 0 to 8192 [ 69.030661][ T6331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.039210][ T6331] team0: Port device macvlan2 added [ 69.147870][ T6335] loop1: detected capacity change from 0 to 8192 [ 69.180881][ T6335] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.238893][ T6335] loop1: detected capacity change from 8192 to 0 [ 69.255866][ T6348] syz.1.1190: attempt to access beyond end of device [ 69.255866][ T6348] loop1: rw=0, sector=77, nr_sectors = 1 limit=0 [ 69.298893][ T6348] syz.1.1190: attempt to access beyond end of device [ 69.298893][ T6348] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 69.330455][ T6348] FAT-fs (loop1): FAT read failed (blocknr 1) [ 69.339880][ T6348] syz.1.1190: attempt to access beyond end of device [ 69.339880][ T6348] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 69.367939][ T6348] FAT-fs (loop1): FAT read failed (blocknr 1) [ 69.375122][ T6348] syz.1.1190: attempt to access beyond end of device [ 69.375122][ T6348] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 69.390258][ T6348] FAT-fs (loop1): FAT read failed (blocknr 1) [ 69.415374][ T3305] syz-executor: attempt to access beyond end of device [ 69.415374][ T3305] loop1: rw=0, sector=65, nr_sectors = 1 limit=0 [ 69.451706][ T3305] FAT-fs (loop1): Directory bread(block 65) failed [ 69.458383][ T3305] syz-executor: attempt to access beyond end of device [ 69.458383][ T3305] loop1: rw=0, sector=66, nr_sectors = 1 limit=0 [ 69.486780][ T6360] loop8: detected capacity change from 0 to 2048 [ 69.496240][ T6358] loop0: detected capacity change from 0 to 1024 [ 69.503119][ T3305] FAT-fs (loop1): Directory bread(block 66) failed [ 69.518863][ T3305] syz-executor: attempt to access beyond end of device [ 69.518863][ T3305] loop1: rw=0, sector=67, nr_sectors = 1 limit=0 [ 69.526897][ T6358] EXT4-fs: Ignoring removed nobh option [ 69.537616][ T6358] EXT4-fs: Ignoring removed bh option [ 69.538897][ T3305] FAT-fs (loop1): Directory bread(block 67) failed [ 69.548152][ T6360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.558851][ T3305] syz-executor: attempt to access beyond end of device [ 69.558851][ T3305] loop1: rw=0, sector=68, nr_sectors = 1 limit=0 [ 69.570164][ T6360] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.574737][ T3305] FAT-fs (loop1): Directory bread(block 68) failed [ 69.592678][ T6360] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.598886][ T3305] syz-executor: attempt to access beyond end of device [ 69.598886][ T3305] loop1: rw=0, sector=69, nr_sectors = 1 limit=0 [ 69.608032][ T6360] EXT4-fs (loop8): This should not happen!! Data will be lost [ 69.608032][ T6360] [ 69.630833][ T6360] EXT4-fs (loop8): Total free blocks count 0 [ 69.636833][ T6360] EXT4-fs (loop8): Free/Dirty block details [ 69.642779][ T6360] EXT4-fs (loop8): free_blocks=2415919104 [ 69.648515][ T6360] EXT4-fs (loop8): dirty_blocks=16 [ 69.653824][ T6360] EXT4-fs (loop8): Block reservation details [ 69.659849][ T6360] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 69.670500][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.686632][ T3305] FAT-fs (loop1): Directory bread(block 69) failed [ 69.693292][ T3305] syz-executor: attempt to access beyond end of device [ 69.693292][ T3305] loop1: rw=0, sector=70, nr_sectors = 1 limit=0 [ 69.708706][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.717960][ T3305] FAT-fs (loop1): Directory bread(block 70) failed [ 69.725101][ T3305] FAT-fs (loop1): Directory bread(block 71) failed [ 69.743081][ T12] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044) [ 69.762854][ T5994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.855398][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 69.864912][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.872220][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.028750][ T6389] loop4: detected capacity change from 0 to 512 [ 70.061810][ T6389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.094298][ T6389] EXT4-fs (loop4): 1 truncate cleaned up [ 70.105087][ T6389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.135429][ T6393] loop7: detected capacity change from 0 to 8192 [ 70.150279][ T6406] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.160740][ T6393] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.177522][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.189663][ T6406] smc: net device bond0 erased user defined pnetid SYZ0 [ 70.229053][ T6393] loop7: detected capacity change from 8192 to 0 [ 70.251470][ T6393] FAT-fs (loop7): FAT read failed (blocknr 1) [ 70.257691][ T6393] FAT-fs (loop7): FAT read failed (blocknr 1) [ 70.265406][ T6408] syzkaller0: entered promiscuous mode [ 70.271082][ T6408] syzkaller0: entered allmulticast mode [ 70.279371][ T6393] FAT-fs (loop7): FAT read failed (blocknr 1) [ 70.309564][ T4807] FAT-fs (loop7): Directory bread(block 65) failed [ 70.312227][ T6385] chnl_net:caif_netlink_parms(): no params data found [ 70.316127][ T4807] FAT-fs (loop7): Directory bread(block 66) failed [ 70.329554][ T4807] FAT-fs (loop7): Directory bread(block 67) failed [ 70.336140][ T4807] FAT-fs (loop7): Directory bread(block 68) failed [ 70.342940][ T4807] FAT-fs (loop7): Directory bread(block 69) failed [ 70.360602][ T4807] FAT-fs (loop7): Directory bread(block 70) failed [ 70.367309][ T4807] FAT-fs (loop7): Directory bread(block 71) failed [ 70.382085][ T12] FAT-fs (loop7): unable to read inode block for updating (i_pos 1044) [ 70.471270][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.478434][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.487274][ T6385] bridge_slave_0: entered allmulticast mode [ 70.493989][ T6385] bridge_slave_0: entered promiscuous mode [ 70.502784][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.510042][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.517461][ T6385] bridge_slave_1: entered allmulticast mode [ 70.525564][ T6385] bridge_slave_1: entered promiscuous mode [ 70.552009][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.566925][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 70.579367][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.607943][ T6385] team0: Port device team_slave_0 added [ 70.620662][ T6385] team0: Port device team_slave_1 added [ 70.639507][ T6432] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 70.674369][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.681415][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.690746][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 70.707477][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.736435][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.743505][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.769661][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.784067][ T6436] bridge0: port 3(gretap0) entered disabled state [ 70.790639][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.797798][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.846425][ T6385] hsr_slave_0: entered promiscuous mode [ 70.868049][ T6385] hsr_slave_1: entered promiscuous mode [ 70.874051][ T6385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.894039][ T6385] Cannot create hsr debugfs directory [ 71.065262][ T6385] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 71.076003][ T6385] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 71.084655][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 71.093394][ T6385] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 71.106233][ T6385] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 71.170020][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.177113][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.186402][ T6433] bridge_slave_0: entered allmulticast mode [ 71.193070][ T6433] bridge_slave_0: entered promiscuous mode [ 71.213938][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.221113][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.230535][ T6433] bridge_slave_1: entered allmulticast mode [ 71.237232][ T6433] bridge_slave_1: entered promiscuous mode [ 71.254128][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.279794][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.290394][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.317268][ T6385] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.325386][ T6433] team0: Port device team_slave_0 added [ 71.335675][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.342766][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.353139][ T6433] team0: Port device team_slave_1 added [ 71.374253][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.381509][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.407435][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.422767][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.429879][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.438512][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.445546][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.471530][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.506671][ T6433] hsr_slave_0: entered promiscuous mode [ 71.512949][ T6433] hsr_slave_1: entered promiscuous mode [ 71.519237][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.526812][ T6433] Cannot create hsr debugfs directory [ 71.603080][ T6433] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.632750][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.653821][ T6433] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.702167][ T6433] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.747399][ T6385] veth0_vlan: entered promiscuous mode [ 71.755386][ T6385] veth1_vlan: entered promiscuous mode [ 71.763827][ T6433] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.785666][ T6385] veth0_macvtap: entered promiscuous mode [ 71.793053][ T6385] veth1_macvtap: entered promiscuous mode [ 71.803491][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.814117][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.824056][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.834544][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.844408][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.854854][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.864729][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.875159][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.885035][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.895591][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.905413][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.915960][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.926603][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.937172][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.947678][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957507][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.968044][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977962][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.988407][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.998234][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.008713][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.018630][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.029227][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.039073][ T6385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.049602][ T6385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.060720][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.073942][ T6385] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.082759][ T6385] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.091638][ T6385] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.100430][ T6385] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.127636][ T6433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.140092][ T6433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.150640][ T6433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.159594][ T6433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.186572][ T6481] SELinux: security policydb version 18 (MLS) not backwards compatible [ 72.201485][ T6481] SELinux: failed to load policy [ 72.260123][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.288890][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.323083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.330349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.342178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.349373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.374494][ T6433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.385055][ T6433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.392602][ T6491] loop4: detected capacity change from 0 to 512 [ 72.461267][ T6491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.471268][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 72.471280][ T29] audit: type=1400 audit(1745799074.233:1631): avc: denied { mounton } for pid=6490 comm="syz.4.1245" path="/251/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.569924][ T6491] EXT4-fs (loop4): 1 truncate cleaned up [ 72.579781][ T6491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.596848][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.649064][ T6491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.909020][ T6433] veth0_vlan: entered promiscuous mode [ 72.917521][ T6433] veth1_vlan: entered promiscuous mode [ 72.976894][ T6433] veth0_macvtap: entered promiscuous mode [ 72.985225][ T6433] veth1_macvtap: entered promiscuous mode [ 72.996496][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.007026][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.016912][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.027497][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.037387][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.047892][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.057782][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.068246][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.078180][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.088762][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.098707][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.109194][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.119039][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.129499][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.141988][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.150509][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.161238][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.171195][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.181710][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.191610][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.202113][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.211944][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.222447][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.232284][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.242845][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.252896][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.263448][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.273554][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.284017][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.296855][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.326829][ T6433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.335797][ T6433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.344690][ T6433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.353508][ T6433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.398290][ T6548] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 73.490613][ T29] audit: type=1400 audit(1745799075.253:1632): avc: denied { write } for pid=6433 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 73.517717][ T29] audit: type=1400 audit(1745799075.253:1633): avc: denied { open } for pid=6433 comm="syz-executor" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 73.587746][ T6561] SELinux: security policydb version 18 (MLS) not backwards compatible [ 73.596358][ T6561] SELinux: failed to load policy [ 73.662382][ T6567] random: crng reseeded on system resumption [ 73.676207][ T6563] loop8: detected capacity change from 0 to 8192 [ 73.693122][ T6565] SELinux: failed to load policy [ 73.794682][ T29] audit: type=1400 audit(1745799075.573:1634): avc: denied { ioctl } for pid=6566 comm="syz.9.1265" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.822409][ T6567] Restarting kernel threads ... done. [ 73.861583][ T29] audit: type=1326 audit(1745799075.643:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 73.885105][ T29] audit: type=1326 audit(1745799075.643:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 73.910437][ T29] audit: type=1326 audit(1745799075.673:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 73.934031][ T29] audit: type=1326 audit(1745799075.673:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 73.957632][ T29] audit: type=1326 audit(1745799075.673:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 73.981291][ T29] audit: type=1326 audit(1745799075.673:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.8.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 74.068169][ T6590] loop8: detected capacity change from 0 to 1024 [ 74.075832][ T6590] EXT4-fs: Ignoring removed orlov option [ 74.081572][ T6590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.124412][ T6590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.152210][ T6601] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 74.179316][ T5994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.231920][ T6603] SELinux: failed to load policy [ 74.259591][ T6609] loop7: detected capacity change from 0 to 164 [ 74.284781][ T6609] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.295569][ T6609] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.309080][ T6609] Symlink component flag not implemented [ 74.314752][ T6609] Symlink component flag not implemented [ 74.329076][ T6609] Symlink component flag not implemented (7) [ 74.335103][ T6609] Symlink component flag not implemented (116) [ 74.401750][ T6619] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 74.425201][ T6617] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.432970][ T6617] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.513451][ T6635] loop7: detected capacity change from 0 to 256 [ 74.541239][ T6636] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 74.664692][ T6649] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 74.762618][ T6657] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.770258][ T6657] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.809261][ T6665] loop8: detected capacity change from 0 to 512 [ 74.816895][ T6665] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.832408][ T6667] loop7: detected capacity change from 0 to 512 [ 74.841140][ T6667] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1306: casefold flag without casefold feature [ 74.854230][ T6667] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1306: couldn't read orphan inode 15 (err -117) [ 74.866700][ T6665] EXT4-fs (loop8): 1 truncate cleaned up [ 74.866823][ T6667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.885743][ T6665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.902566][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.932323][ T6433] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.956556][ T6679] loop7: detected capacity change from 0 to 1024 [ 74.964585][ T6679] EXT4-fs: Ignoring removed nobh option [ 74.970250][ T6679] EXT4-fs: inline encryption not supported [ 74.976192][ T6679] EXT4-fs: Ignoring removed bh option [ 74.994686][ T6679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.025976][ T6679] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1308: Allocating blocks 385-513 which overlap fs metadata [ 75.041455][ T6677] EXT4-fs (loop7): pa ffff8881068b32a0: logic 16, phys. 129, len 24 [ 75.049528][ T6677] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 75.061077][ T6687] sd 0:0:1:0: device reset [ 75.071524][ T6433] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.086426][ T6689] loop9: detected capacity change from 0 to 256 [ 75.157245][ T6695] can0: slcan on ttyS3. [ 75.198975][ T6695] can0 (unregistered): slcan off ttyS3. [ 75.207854][ T6695] can0: slcan on ttyS3. [ 75.258735][ T6707] loop8: detected capacity change from 0 to 512 [ 75.268441][ T6693] can0 (unregistered): slcan off ttyS3. [ 75.277083][ T6706] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.284529][ T6706] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.309806][ T6707] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1323: casefold flag without casefold feature [ 75.324409][ T6707] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1323: couldn't read orphan inode 15 (err -117) [ 75.337334][ T6712] loop9: detected capacity change from 0 to 1024 [ 75.345156][ T6707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.375975][ T6712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.410344][ T6721] loop4: detected capacity change from 0 to 1024 [ 75.417185][ T6721] EXT4-fs: Ignoring removed nobh option [ 75.422875][ T6721] EXT4-fs: inline encryption not supported [ 75.428718][ T6721] EXT4-fs: Ignoring removed bh option [ 75.437195][ T5994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.449758][ T6385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.466500][ T6724] sd 0:0:1:0: device reset [ 75.485150][ T6727] loop8: detected capacity change from 0 to 256 [ 75.486246][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.516241][ T6721] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1328: Allocating blocks 385-513 which overlap fs metadata [ 75.533571][ T6720] EXT4-fs (loop4): pa ffff8881068b32a0: logic 16, phys. 129, len 24 [ 75.541829][ T6720] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 75.562223][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.604967][ T6737] loop9: detected capacity change from 0 to 256 [ 75.673937][ T6745] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.681601][ T6745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.695116][ T6743] loop7: detected capacity change from 0 to 256 [ 75.737000][ T6746] hub 2-0:1.0: USB hub found [ 75.748981][ T6746] hub 2-0:1.0: 8 ports detected [ 75.780758][ T6754] random: crng reseeded on system resumption [ 75.845968][ T6757] loop9: detected capacity change from 0 to 256 [ 75.853411][ T6757] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.926116][ T6757] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.934809][ T6757] FAT-fs (loop9): Filesystem has been set read-only [ 75.950326][ T6754] Restarting kernel threads ... done. [ 76.090775][ T6769] loop7: detected capacity change from 0 to 512 [ 76.098289][ T6769] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.113713][ T6769] EXT4-fs (loop7): 1 truncate cleaned up [ 76.128585][ T6769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.147819][ T6769] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.165782][ T6777] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 76.174098][ T6777] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 76.428095][ T6781] loop8: detected capacity change from 0 to 256 [ 76.489023][ T6789] hub 2-0:1.0: USB hub found [ 76.496065][ T6789] hub 2-0:1.0: 8 ports detected [ 76.662217][ T6808] loop7: detected capacity change from 0 to 512 [ 76.698892][ T6808] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1368: bg 0: block 35: padding at end of block bitmap is not set [ 76.731337][ T6808] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.750695][ T6808] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1368: invalid indirect mapped block 4294967295 (level 1) [ 76.808691][ T6808] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1368: invalid indirect mapped block 4294967295 (level 2) [ 76.829041][ T6808] EXT4-fs (loop7): 1 truncate cleaned up [ 76.835171][ T6808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.890640][ T6433] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.894568][ T6820] hub 2-0:1.0: USB hub found [ 76.904849][ T6820] hub 2-0:1.0: 8 ports detected [ 77.312869][ T6861] SELinux: failed to load policy [ 77.939944][ T6910] loop9: detected capacity change from 0 to 512 [ 77.957520][ T6910] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1424: bg 0: block 35: padding at end of block bitmap is not set [ 77.975311][ T6910] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 77.984667][ T6910] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1424: invalid indirect mapped block 4294967295 (level 1) [ 78.003587][ T6910] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1424: invalid indirect mapped block 4294967295 (level 2) [ 78.017964][ T6910] EXT4-fs (loop9): 1 truncate cleaned up [ 78.028103][ T6910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.064727][ T6385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.105831][ T6921] SELinux: ebitmap: truncated map [ 78.113382][ T6921] SELinux: failed to load policy [ 78.204171][ T6932] SELinux: ebitmap: truncated map [ 78.214832][ T6932] SELinux: failed to load policy [ 78.303041][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 78.303076][ T29] audit: type=1326 audit(1745799080.083:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3752ae969 code=0x7ffc0000 [ 78.384546][ T29] audit: type=1326 audit(1745799080.163:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3752ae969 code=0x7ffc0000 [ 78.408029][ T29] audit: type=1326 audit(1745799080.163:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3752ae969 code=0x7ffc0000 [ 78.557548][ T6964] loop8: detected capacity change from 0 to 512 [ 78.565841][ T6964] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1436: bg 0: block 35: padding at end of block bitmap is not set [ 78.581303][ T6964] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.590352][ T6964] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1436: invalid indirect mapped block 4294967295 (level 1) [ 78.604638][ T6964] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1436: invalid indirect mapped block 4294967295 (level 2) [ 78.619229][ T6964] EXT4-fs (loop8): 1 truncate cleaned up [ 78.627927][ T6964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.667794][ T5994] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.712042][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.719608][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.727051][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.734719][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.742178][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.749682][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.757223][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.764723][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.772688][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.780241][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.782761][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1441'. [ 78.787635][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.803938][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.811372][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.818771][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.826777][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.834249][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.841698][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.849244][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.856921][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.864457][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.871973][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.879405][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.886804][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.894229][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.901622][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.909065][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.916451][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.923940][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 78.931939][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 79.026777][ T29] audit: type=1326 audit(1745799080.803:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.8.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 79.050317][ T29] audit: type=1326 audit(1745799080.803:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.8.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 79.090798][ T6991] SELinux: policydb magic number 0x6d616574 does not match expected magic number 0xf97cff8c [ 79.094380][ T29] audit: type=1326 audit(1745799080.873:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.8.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 79.101985][ T6991] SELinux: failed to load policy [ 79.124542][ T29] audit: type=1326 audit(1745799080.873:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.8.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 79.152955][ T29] audit: type=1326 audit(1745799080.873:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.8.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26cf7e969 code=0x7ffc0000 [ 79.272439][ T6999] hub 1-0:1.0: USB hub found [ 79.274969][ T7000] vlan2: entered allmulticast mode [ 79.278906][ T6999] hub 1-0:1.0: 8 ports detected [ 79.282835][ T7000] bond0: entered allmulticast mode [ 79.292860][ T7000] bond_slave_0: entered allmulticast mode [ 79.298623][ T7000] bond_slave_1: entered allmulticast mode [ 79.352014][ T7006] loop4: detected capacity change from 0 to 512 [ 79.392642][ T7006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1454: bg 0: block 35: padding at end of block bitmap is not set [ 79.410036][ T7012] loop7: detected capacity change from 0 to 16384 [ 79.417751][ T7006] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 79.427285][ T7006] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1454: invalid indirect mapped block 4294967295 (level 1) [ 79.446311][ T7006] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1454: invalid indirect mapped block 4294967295 (level 2) [ 79.461827][ T7006] EXT4-fs (loop4): 1 truncate cleaned up [ 79.467944][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.504299][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.549328][ T7012] I/O error, dev loop7, sector 6272 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 79.569212][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.576731][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.578778][ T7015] I/O error, dev loop7, sector 2640 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 79.584177][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.594068][ T7015] Buffer I/O error on dev loop7, logical block 330, lost async page write [ 79.610096][ T7015] Buffer I/O error on dev loop7, logical block 331, lost async page write [ 79.616895][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.618608][ T7015] Buffer I/O error on dev loop7, logical block 332, lost async page write [ 79.626037][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.634568][ T7015] Buffer I/O error on dev loop7, logical block 333, lost async page write [ 79.642012][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.650469][ T7015] Buffer I/O error on dev loop7, logical block 334, lost async page write [ 79.650493][ T7015] Buffer I/O error on dev loop7, logical block 335, lost async page write [ 79.650512][ T7015] Buffer I/O error on dev loop7, logical block 336, lost async page write [ 79.650529][ T7015] Buffer I/O error on dev loop7, logical block 337, lost async page write [ 79.657906][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.657929][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.657949][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.666495][ T7015] Buffer I/O error on dev loop7, logical block 338, lost async page write [ 79.675000][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.675081][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.683590][ T7015] Buffer I/O error on dev loop7, logical block 339, lost async page write [ 79.692099][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.727881][ T7012] I/O error, dev loop7, sector 6456 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 79.730708][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.740287][ T7012] I/O error, dev loop7, sector 6272 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.746583][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.764142][ T7015] I/O error, dev loop7, sector 3664 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 79.780716][ T7026] loop4: detected capacity change from 0 to 512 [ 79.804939][ T7026] EXT4-fs: Ignoring removed oldalloc option [ 79.812098][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.819613][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.827057][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.831474][ T7015] I/O error, dev loop7, sector 4688 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 79.834499][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.851009][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 79.851849][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.864854][ T7015] I/O error, dev loop7, sector 5712 op 0x1:(WRITE) flags 0x800 phys_seg 70 prio class 0 [ 79.867980][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.868004][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.892751][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.897146][ T7026] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1457: Parent and EA inode have the same ino 15 [ 79.900206][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.900234][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.900260][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.915619][ T7026] EXT4-fs (loop4): Remounting filesystem read-only [ 79.920004][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.927325][ T7026] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 79.934733][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.941322][ T7026] EXT4-fs (loop4): 1 orphan inode deleted [ 79.948711][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 79.959330][ T7026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.976327][ T7015] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.002567][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.013270][ T7015] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.022620][ T7015] loop7: unable to read partition table [ 80.028528][ T7015] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á“;Ûo×ÿ) failed (rc=-5) [ 80.055003][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.123853][ T29] audit: type=1326 audit(1745799081.903:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7209be969 code=0x7ffc0000 [ 80.150118][ T7037] loop9: detected capacity change from 0 to 1024 [ 80.164057][ T29] audit: type=1326 audit(1745799081.903:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7038 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7209be969 code=0x7ffc0000 [ 80.203312][ T7037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.241544][ T7045] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 80.242167][ T7031] SELinux: failed to load policy [ 80.265698][ T7037] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.1466: Allocating blocks 497-513 which overlap fs metadata [ 80.286438][ T7047] vlan2: entered allmulticast mode [ 80.291669][ T7047] bond0: entered allmulticast mode [ 80.296815][ T7047] bond_slave_0: entered allmulticast mode [ 80.302565][ T7047] bond_slave_1: entered allmulticast mode [ 80.312143][ T7037] EXT4-fs (loop9): pa ffff8881068b3380: logic 16, phys. 145, len 23 [ 80.320305][ T7037] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 80.337993][ T7037] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 80.350375][ T7037] EXT4-fs (loop9): This should not happen!! Data will be lost [ 80.350375][ T7037] [ 80.360094][ T7037] EXT4-fs (loop9): Total free blocks count 0 [ 80.366109][ T7037] EXT4-fs (loop9): Free/Dirty block details [ 80.372156][ T7037] EXT4-fs (loop9): free_blocks=16 [ 80.377202][ T7037] EXT4-fs (loop9): dirty_blocks=0 [ 80.382454][ T7037] EXT4-fs (loop9): Block reservation details [ 80.388495][ T7037] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 80.475618][ T7061] loop8: detected capacity change from 0 to 164 [ 80.489827][ T7061] bio_check_eod: 14 callbacks suppressed [ 80.489842][ T7061] syz.8.1477: attempt to access beyond end of device [ 80.489842][ T7061] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.513389][ T7061] syz.8.1477: attempt to access beyond end of device [ 80.513389][ T7061] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.513536][ T7057] SELinux: failed to load policy [ 80.538292][ T7063] hub 1-0:1.0: USB hub found [ 80.543264][ T7063] hub 1-0:1.0: 8 ports detected [ 80.665547][ T7078] loop4: detected capacity change from 0 to 1024 [ 80.690548][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.706410][ T7078] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1486: Allocating blocks 497-513 which overlap fs metadata [ 80.738069][ T7078] EXT4-fs (loop4): pa ffff8881068b33f0: logic 16, phys. 145, len 23 [ 80.739134][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.746204][ T7078] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 80.775603][ T7078] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 80.788030][ T7078] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.788030][ T7078] [ 80.797940][ T7078] EXT4-fs (loop4): Total free blocks count 0 [ 80.803992][ T7078] EXT4-fs (loop4): Free/Dirty block details [ 80.810215][ T7078] EXT4-fs (loop4): free_blocks=16 [ 80.815294][ T7078] EXT4-fs (loop4): dirty_blocks=0 [ 80.820374][ T7078] EXT4-fs (loop4): Block reservation details [ 80.826372][ T7078] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 80.844257][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.914565][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.916658][ T7099] loop8: detected capacity change from 0 to 256 [ 80.932505][ T7099] FAT-fs (loop8): bogus logical sector size 0 [ 80.938760][ T7099] FAT-fs (loop8): Can't find a valid FAT filesystem [ 80.988877][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.004298][ T7105] SELinux: failed to load policy [ 81.009977][ T7103] loop4: detected capacity change from 0 to 256 [ 81.020934][ T7103] FAT-fs (loop4): bogus logical sector size 0 [ 81.027511][ T7103] FAT-fs (loop4): Can't find a valid FAT filesystem [ 81.042707][ T7107] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 81.095289][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 81.180575][ T37] bridge_slave_1: left allmulticast mode [ 81.186279][ T37] bridge_slave_1: left promiscuous mode [ 81.192097][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.193686][ T7126] loop4: detected capacity change from 0 to 164 [ 81.214407][ T7121] SELinux: failed to load policy [ 81.222697][ T7126] syz.4.1499: attempt to access beyond end of device [ 81.222697][ T7126] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.237262][ T37] bridge_slave_0: left allmulticast mode [ 81.242996][ T37] bridge_slave_0: left promiscuous mode [ 81.243148][ T7126] syz.4.1499: attempt to access beyond end of device [ 81.243148][ T7126] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.248672][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.303399][ T7130] loop4: detected capacity change from 0 to 1024 [ 81.310430][ T7130] EXT4-fs: Ignoring removed bh option [ 81.315885][ T7130] EXT4-fs: Ignoring removed orlov option [ 81.321634][ T7130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.341158][ T7130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.369042][ T7130] loop4: detected capacity change from 1024 to 64 [ 81.376694][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.377762][ T7130] syz.4.1503: attempt to access beyond end of device [ 81.377762][ T7130] loop4: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 81.398717][ T7130] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 128) [ 81.410137][ T7130] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 81.422843][ T7130] Buffer I/O error on device loop4, logical block 128 [ 81.434672][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.447364][ T3315] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /302/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 81.468597][ T37] bond0 (unregistering): Released all slaves [ 81.484529][ T7135] SELinux: failed to load policy [ 81.490392][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.497468][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.505001][ T7086] bridge_slave_0: entered allmulticast mode [ 81.509869][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.513917][ T7086] bridge_slave_0: entered promiscuous mode [ 81.527454][ T7131] kmmpd-loop4: attempt to access beyond end of device [ 81.527454][ T7131] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 81.551479][ T37] hsr_slave_0: left promiscuous mode [ 81.557997][ T37] hsr_slave_1: left promiscuous mode [ 81.566027][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.573688][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.584615][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.592076][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.606222][ T37] veth1_macvtap: left promiscuous mode [ 81.612041][ T37] veth0_macvtap: left promiscuous mode [ 81.617651][ T37] veth1_vlan: left promiscuous mode [ 81.622971][ T37] veth0_vlan: left promiscuous mode [ 81.686608][ T37] team0 (unregistering): Port device team_slave_1 removed [ 81.696813][ T37] team0 (unregistering): Port device team_slave_0 removed [ 81.730722][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.737822][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.745929][ T7086] bridge_slave_1: entered allmulticast mode [ 81.752509][ T7086] bridge_slave_1: entered promiscuous mode [ 81.774596][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.785179][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.804878][ T7146] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 81.824921][ T7086] team0: Port device team_slave_0 added [ 81.834353][ T7086] team0: Port device team_slave_1 added [ 81.849836][ T7150] serio: Serial port ptm0 [ 81.855611][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.862645][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.888684][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.900228][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.907251][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.933424][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.964753][ T7086] hsr_slave_0: entered promiscuous mode [ 81.970922][ T7086] hsr_slave_1: entered promiscuous mode [ 81.976894][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.984579][ T7086] Cannot create hsr debugfs directory [ 82.264414][ T7086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.273405][ T7086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.282771][ T7086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.291791][ T7086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.334767][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.348492][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.358902][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.366050][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.379059][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.386246][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.448318][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.513623][ T7162] loop8: detected capacity change from 0 to 1024 [ 82.539171][ T7162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.581785][ T7086] veth0_vlan: entered promiscuous mode [ 82.590622][ T7162] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.1523: Allocating blocks 497-513 which overlap fs metadata [ 82.608090][ T7179] loop9: detected capacity change from 0 to 512 [ 82.611549][ T7162] EXT4-fs (loop8): pa ffff8881069ab930: logic 16, phys. 145, len 23 [ 82.622494][ T7162] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 82.636013][ T7162] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 82.648331][ T7162] EXT4-fs (loop8): This should not happen!! Data will be lost [ 82.648331][ T7162] [ 82.658058][ T7162] EXT4-fs (loop8): Total free blocks count 0 [ 82.664107][ T7162] EXT4-fs (loop8): Free/Dirty block details [ 82.666291][ T7086] veth1_vlan: entered promiscuous mode [ 82.670044][ T7162] EXT4-fs (loop8): free_blocks=16 [ 82.670059][ T7162] EXT4-fs (loop8): dirty_blocks=0 [ 82.670070][ T7162] EXT4-fs (loop8): Block reservation details [ 82.691891][ T7162] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 82.711005][ T7179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.711131][ T7086] veth0_macvtap: entered promiscuous mode [ 82.732544][ T7086] veth1_macvtap: entered promiscuous mode [ 82.740569][ T7179] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.755220][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.765782][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.775747][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.786305][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.796203][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.806654][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.816628][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.827076][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.837000][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.847608][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.857450][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.867893][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.877714][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.888148][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.900879][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.913037][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.923580][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.933590][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.944164][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.954146][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.964676][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.974562][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.985009][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.994854][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.005362][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.015384][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.025920][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.035759][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.046202][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.057161][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.074415][ T7086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.083256][ T7086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092144][ T7086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.100880][ T7086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.192344][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 83.270930][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.278034][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.285764][ T7173] bridge_slave_0: entered allmulticast mode [ 83.296728][ T7173] bridge_slave_0: entered promiscuous mode [ 83.343453][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.353887][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.366606][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.373933][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.381310][ T7173] bridge_slave_1: entered allmulticast mode [ 83.387800][ T7173] bridge_slave_1: entered promiscuous mode [ 83.417161][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.432018][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.442479][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.453945][ T6385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.471441][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.527835][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.538173][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.552842][ T7173] team0: Port device team_slave_0 added [ 83.583211][ T7173] team0: Port device team_slave_1 added [ 83.601670][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.609324][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.616889][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.624510][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.632041][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.639579][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.647023][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.654939][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.662616][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.670120][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.677790][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.685232][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.692644][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.700283][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.707710][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.715126][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.722647][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.730283][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.737663][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.745187][ T23] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 83.753548][ T23] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.02 Device [syz0] on syz1 [ 83.766520][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.777013][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.832222][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.839267][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.865270][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.906545][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.913569][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.939708][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.987721][ T31] bridge_slave_1: left allmulticast mode [ 83.993474][ T31] bridge_slave_1: left promiscuous mode [ 83.999269][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.007099][ T31] bridge_slave_0: left allmulticast mode [ 84.012989][ T31] bridge_slave_0: left promiscuous mode [ 84.018629][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.181421][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.190223][ T31] bond_slave_0: left allmulticast mode [ 84.197117][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.206096][ T31] bond_slave_1: left allmulticast mode [ 84.212977][ T31] bond0 (unregistering): Released all slaves [ 84.253856][ T7173] hsr_slave_0: entered promiscuous mode [ 84.260053][ T7173] hsr_slave_1: entered promiscuous mode [ 84.266060][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.273841][ T7173] Cannot create hsr debugfs directory [ 84.285750][ T31] hsr_slave_0: left promiscuous mode [ 84.292504][ T31] hsr_slave_1: left promiscuous mode [ 84.298189][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.306253][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.314617][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.322174][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.334350][ T7262] SELinux: syz.9.1551 (7262) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.348512][ T31] veth1_macvtap: left promiscuous mode [ 84.354670][ T31] veth0_macvtap: left promiscuous mode [ 84.362376][ T31] veth1_vlan: left promiscuous mode [ 84.367661][ T31] veth0_vlan: left promiscuous mode [ 84.467119][ T31] team0 (unregistering): Port device team_slave_1 removed [ 84.476952][ T31] team0 (unregistering): Port device team_slave_0 removed [ 84.600605][ T7212] chnl_net:caif_netlink_parms(): no params data found [ 84.732248][ T7173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.793516][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.800758][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.820809][ T7212] bridge_slave_0: entered allmulticast mode [ 84.830539][ T7212] bridge_slave_0: entered promiscuous mode [ 84.843504][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.850714][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.867863][ T7212] bridge_slave_1: entered allmulticast mode [ 84.875376][ T7212] bridge_slave_1: entered promiscuous mode [ 84.885390][ T7173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.932287][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.954434][ T7173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.971845][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.996706][ T7173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.023292][ T7212] team0: Port device team_slave_0 added [ 85.037752][ T7212] team0: Port device team_slave_1 added [ 85.076347][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.083423][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.109535][ T7212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.129452][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.136483][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.162524][ T7212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.201505][ T7362] bridge0: port 3(gretap0) entered blocking state [ 85.208100][ T7362] bridge0: port 3(gretap0) entered disabled state [ 85.214833][ T7362] gretap0: entered allmulticast mode [ 85.221136][ T7362] gretap0: entered promiscuous mode [ 85.226582][ T7362] bridge0: port 3(gretap0) entered blocking state [ 85.233198][ T7362] bridge0: port 3(gretap0) entered forwarding state [ 85.261961][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 85.261979][ T29] audit: type=1400 audit(1745799087.043:1723): avc: denied { write } for pid=7379 comm="syz.9.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.288298][ T29] audit: type=1400 audit(1745799087.043:1724): avc: denied { read } for pid=7379 comm="syz.9.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.475314][ T7173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.505940][ T7212] hsr_slave_0: entered promiscuous mode [ 85.549486][ T7212] hsr_slave_1: entered promiscuous mode [ 85.557758][ T7212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.573574][ T7212] Cannot create hsr debugfs directory [ 85.580896][ T7173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.604059][ T7173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.626314][ T7173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.706985][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.724901][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.734809][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.741922][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.761670][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.768820][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.805208][ T7460] loop9: detected capacity change from 0 to 8192 [ 85.843263][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.928550][ T7212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.937553][ T7212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.947218][ T7212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.960152][ T7212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.000601][ T7173] veth0_vlan: entered promiscuous mode [ 86.011855][ T7173] veth1_vlan: entered promiscuous mode [ 86.038638][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.052421][ T7173] veth0_macvtap: entered promiscuous mode [ 86.056975][ T7173] veth1_macvtap: entered promiscuous mode [ 86.069971][ T7484] SELinux: failed to load policy [ 86.072299][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.085820][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.092987][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.111318][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.118501][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.135504][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.146170][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.156069][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.166532][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.176400][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.186843][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.196727][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.207207][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.217516][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.228358][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.238346][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.248838][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.258693][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.269145][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.280745][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.297062][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.307681][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.317559][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.328008][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.337875][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.348327][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.358183][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.368643][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.378686][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.389141][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.398984][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.409491][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.419322][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.429758][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.440436][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.451976][ T7173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.460903][ T7486] Falling back ldisc for ttyS3. [ 86.465928][ T7173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.474782][ T7173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.483604][ T7173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.497325][ T7212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.507746][ T7212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.617562][ T7212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.638333][ T7502] SELinux: failed to load policy [ 86.648878][ T7506] netlink: 'syz.8.1573': attribute type 5 has an invalid length. [ 86.656702][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881189be600: rx timeout, send abort [ 86.664991][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881189be600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.791962][ T7212] veth0_vlan: entered promiscuous mode [ 86.797652][ T7517] loop4: detected capacity change from 0 to 8192 [ 86.809523][ T7212] veth1_vlan: entered promiscuous mode [ 86.826002][ T7212] veth0_macvtap: entered promiscuous mode [ 86.849423][ T7212] veth1_macvtap: entered promiscuous mode [ 86.864653][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.875409][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.885305][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.895784][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.905621][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.916056][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.925951][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.936412][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.946416][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.956842][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.966678][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.977115][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.987029][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.997463][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.007296][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.017843][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.030264][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.038503][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.049080][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.059064][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.069646][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.079515][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.090106][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.100034][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.110545][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.120390][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.130864][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140775][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.151222][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.161060][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.171553][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.181472][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.191936][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.204090][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.224634][ T7212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.233535][ T7212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.242343][ T7212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.251247][ T7212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278350][ T29] audit: type=1400 audit(1745799089.053:1725): avc: denied { connect } for pid=7545 comm="syz.3.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.305821][ T7543] bridge0: port 3(gretap0) entered blocking state [ 87.312598][ T7543] bridge0: port 3(gretap0) entered disabled state [ 87.339074][ T7543] gretap0: entered allmulticast mode [ 87.345067][ T7543] gretap0: entered promiscuous mode [ 87.351406][ T7543] bridge0: port 3(gretap0) entered blocking state [ 87.357955][ T7543] bridge0: port 3(gretap0) entered forwarding state [ 87.405822][ T7548] SELinux: failed to load policy [ 87.461408][ T7544] ================================================================== [ 87.469544][ T7544] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 87.476961][ T7544] [ 87.479289][ T7544] read-write to 0xffff8881030d5b80 of 8 bytes by interrupt on cpu 0: [ 87.487372][ T7544] rtc_pie_update_irq+0x93/0xf0 [ 87.492247][ T7544] __hrtimer_run_queues+0x20c/0x5a0 [ 87.497457][ T7544] hrtimer_interrupt+0x21a/0x460 [ 87.502415][ T7544] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 87.508357][ T7544] sysvec_apic_timer_interrupt+0x32/0x80 [ 87.514017][ T7544] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.520013][ T7544] [ 87.522340][ T7544] read to 0xffff8881030d5b80 of 8 bytes by task 7544 on cpu 1: [ 87.529918][ T7544] rtc_dev_poll+0x78/0xb0 [ 87.534260][ T7544] __io_read+0x2e4/0xc10 [ 87.538543][ T7544] io_read+0x1c/0x60 [ 87.542452][ T7544] io_issue_sqe+0x15d/0xb70 [ 87.547064][ T7544] io_req_task_submit+0x6b/0xc0 [ 87.551930][ T7544] io_handle_tw_list+0x18d/0x1c0 [ 87.556881][ T7544] tctx_task_work_run+0x6d/0x1a0 [ 87.561832][ T7544] tctx_task_work+0x3f/0x80 [ 87.566346][ T7544] task_work_run+0x12e/0x1a0 [ 87.570953][ T7544] get_signal+0xe13/0xf70 [ 87.575303][ T7544] arch_do_signal_or_restart+0x97/0x480 [ 87.580870][ T7544] syscall_exit_to_user_mode+0x68/0xb0 [ 87.586351][ T7544] do_syscall_64+0xdd/0x1a0 [ 87.590866][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.596769][ T7544] [ 87.599095][ T7544] value changed: 0x000000000000c7c0 -> 0x000000000000c8c0 [ 87.606251][ T7544] [ 87.608577][ T7544] Reported by Kernel Concurrency Sanitizer on: [ 87.614751][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.4.1583 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 87.625433][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.635505][ T7544] ==================================================================