last executing test programs: 2.818439947s ago: executing program 0 (id=3368): r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000dcc000/0x2000)=nil) shmat(r0, &(0x7f00000d4000/0x400000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000008c0)=""/25) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0x23c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4f5e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0xe23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "89c38b7d9e2e255fe5e2b013289f6a9812955cdc2fe0f0b33f43911676bc1f091e8e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6c}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "f0d069cd82bff7e20b9a49fe477e8f85705cfaf74984c29db6bac89dd07eb312475d1ab0a19512896f5dc3cbf09efc858551e627d0950e31f1f0cddeba4c2d5ce33f7d8757fabce77ba666b5fca6546b24ff1610df2e60f50fa2ea1de1fab05962b731fb90bcaeb207ef6ecc4a8c4f70269229c06212cc7caeecbad3f8b1694b76005dc9220061c0b8e6ee38747a8ebb4ded125e689d424a7b0a6be95b085645387a2f22b6a6c3b452a9d8"}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) mount(0x0, 0x0, 0x0, 0x2012024, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2cb, &(0x7f0000001e00)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3e, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) inotify_rm_watch(r9, 0x0) getsockname$packet(r9, &(0x7f0000000740), &(0x7f0000000780)=0x14) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x84, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000015}, 0x881) 2.717643509s ago: executing program 0 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@remote, @empty, 0x0}, &(0x7f0000000280)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @broadcast}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000340)={@val={0xa, 0x6}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x65, 0x0, 0x9, 0x2, 0x0, @broadcast, @broadcast}, {0x22, 0x4, 0x0, @remote}}}}}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r13 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100100000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa19a, 0x8}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0xa59, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 2.374276945s ago: executing program 4 (id=3379): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x29, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.311265206s ago: executing program 0 (id=3381): r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000dcc000/0x2000)=nil) shmat(r0, &(0x7f00000d4000/0x400000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000008c0)=""/25) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0x23c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4f5e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0xe23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "89c38b7d9e2e255fe5e2b013289f6a9812955cdc2fe0f0b33f43911676bc1f091e8e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6c}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "f0d069cd82bff7e20b9a49fe477e8f85705cfaf74984c29db6bac89dd07eb312475d1ab0a19512896f5dc3cbf09efc858551e627d0950e31f1f0cddeba4c2d5ce33f7d8757fabce77ba666b5fca6546b24ff1610df2e60f50fa2ea1de1fab05962b731fb90bcaeb207ef6ecc4a8c4f70269229c06212cc7caeecbad3f8b1694b76005dc9220061c0b8e6ee38747a8ebb4ded125e689d424a7b0a6be95b085645387a2f22b6a6c3b452a9d8"}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) mount(0x0, 0x0, 0x0, 0x2012024, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2cb, &(0x7f0000001e00)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3e, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) inotify_rm_watch(r9, 0x0) getsockname$packet(r9, &(0x7f0000000740), &(0x7f0000000780)=0x14) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x84, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000015}, 0x881) 2.11901632s ago: executing program 0 (id=3385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000001240)={'erspan0\x00', 0x0, 0x9, 0x700, 0x5, 0xf, {{0x22, 0x4, 0x3, 0x5, 0x88, 0x68, 0x0, 0x80, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0x29, 0x0, 0x6, [0xc]}, @ssrr={0x89, 0x17, 0x83, [@rand_addr=0x64010100, @private=0xa010100, @broadcast, @private=0xa010101, @private=0xa010100]}, @cipso={0x86, 0x4d, 0x3, [{0x5, 0x12, "c74bb4c5fc8ec89abffe6c188d98368c"}, {0x0, 0xb, "40c4e4417cc7e1eeed"}, {0x0, 0x2}, {0x0, 0xc, "e556c0b1ac02c757a3b1"}, {0x2, 0x11, "e7628ad8de95a5ae5ca999c32c4ad6"}, {0x5, 0x6, "d06d3d6c"}, {0x5, 0x2}, {0x5, 0x3, "91"}]}, @end, @lsrr={0x83, 0x3, 0xfd}, @noop, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r4, 0x0, 0x6}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$eJzs3d9rW1UcAPDvTX9s66brYAwVkcIenOjStfXHBMH5KDoc6PssbSyj6TKadKx1sO3BvfgiQxBxID74pu8+Dv8B/4qBDoeMog++VG5602ZLsmZZ1mTm84Fbzrk/es43956Tc3NuSAADayL9k4t4PiK+SiIORkSSbRuObOPE5n7r9y7PpUsSGxsf/5VU90vztf9VO25/lnkuIn79IuLVXGO55dW1xdlisbCc5ScrSxcmy6tDcW5pdqGwUDg/PTNz8o2Z6bfferNrsb5y5p9vP7r1/skvj65/8/OdQzeSOBUHsm31cTyGq/WZiZjIXpOROPXAjlNdKKyfJL2uAB0Zytr5SKR9wMEYylo98P93JSI2OvVux0cCfSHpvP0DT7XaOKB2b9+l++Cnxt33Nm+AGuMf3vxsJPZW743G1pP77ozS+93xLpSflvHLHzdvpEt073MIgB1dvRYRJ4aHG/u/JOv/OneijX0eLEP/B7vnVjr+ea3Z+Ce3Nf6JJuOf/U3abid2bv+5O10opqV0/PdO0/Hv1qTV+FCWe6Y65htJPjtXLKR927MRcSxG9qT5h83nnFy/vdFqW/34L13S8mtjwawed4b33H/M/Gxl9nFirnf3WsQLTce/ydb5T5qc//T1ONNmGUcKN19qtW3n+J+sjR8iXm56/rdntJLt+cm1443zk5PV62GydlU0+vv6kd9ald8Y/2jsZvzp+R97ePzjSf18bfnRy/h+77+FVtvuiz/av/5Hk0+q6dFs3aXZSmV5KmI0+bBx/fT2sbV8bf80/mNHH97/Nbv+90XEp23Gf/3wTy+2FX8Prv80/vlHOv+Pnrj9wefftSq/vf7v9WrqWLamnf5vp3qNdXw1AwAAAAAAQP/KRcSBSHL5rXQul89vPt9xOMZyxfHN5z9iPqrflR2PkVxtpvtg3fMQU9nzsLX89AP5mYg4FBFfD+2r5vNzpeJ8r4MHAAAAAAAAAAAAAAAAAACAPrG/xff/U78P9bp2wBPnJ79hcO3Y/rvxS09AX/L+D4NL+4fBpf3D4NL+YXDVtf89vawHsPu8/8Pg0v5hcGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FVnTp9Ol431e5fn0vz8xdWVxdLF4/OF8mJ+aWUuP1davpBfKJUWioX8XGlpp/9XLJUuTE3HyqXJSqFcmSyvrp1dKq2cr5w9tzS7UDhbGNmVqAAAAAAAAAAAAAAAAAAAAODpUl5dW5wtFgvLEhIdJYb7oxqbifSSrltzpZYY7XXFmiT+/LEvqtEq0eueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/RcAAP//NFYwZA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r3, 0x0, 0x0, 0x22, 0x0, &(0x7f0000000380)=""/34, 0x2, 0x0, 0x93, 0x72, &(0x7f0000001680)="56cc57e7d44dcc8a9b167054b88a87c0ceae6f86fdf93aa1c08ce918441da60815524e59d0ceef11e144b93844cea6a285912d5457310639da3b0bb6d69813ea07495ac2e5ec4644804bf0804fd03380e85becf89e5ab1be99b2a909bc9ba36fe2323b5ea42cab6a86b47d579c6e37d40ba102fe9cbc69f366676e26790ca64c36ca920ecb3069ec99f32f422eb67b5c9cb7e5", &(0x7f0000001740)="f161580759e55b3eae845a5120c1718a2458659a8b233fe7d68c0bfa0b3da66990bc6bfbc578012d2335c1abaa5ad853bc45c41cdc8023dc8d12d533e885780e255712878a14b823a9104a54c801fb8fdc7138a34f37ff36b777ebbc16bafc953bcc7c3aa6e4d3e77c316fa1dcd58bae099c", 0x4, 0x0, 0xb}, 0x50) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) 2.090396791s ago: executing program 4 (id=3387): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x200002c2, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000005000000060000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) 1.776018206s ago: executing program 0 (id=3390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x428c, &(0x7f00000000c0)=ANY=[], 0x46, 0x37a, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$inet6_sctp(0xa, 0x801, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x100000000}, 0x18) epoll_create1(0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r8, r5}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 1.466937452s ago: executing program 2 (id=3393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) syz_emit_ethernet(0x2634, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private}, {@remote}, {@multicast2}]}]}}}}}}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}, {@access_client}]}}) 1.437177703s ago: executing program 2 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000500)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 1.400782194s ago: executing program 2 (id=3395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x200004, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='cachefiles_mark_failed\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8f"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffe, 0xa, 0xd2, 0x5, 0x2000000000002, 0x7, 0x0, 0xc}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs\x00', 0x1ff) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) 1.344366475s ago: executing program 3 (id=3396): r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000dcc000/0x2000)=nil) shmat(r0, &(0x7f00000d4000/0x400000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000008c0)=""/25) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0x23c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4f5e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0xe23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "89c38b7d9e2e255fe5e2b013289f6a9812955cdc2fe0f0b33f43911676bc1f091e8e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3d6c}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "f0d069cd82bff7e20b9a49fe477e8f85705cfaf74984c29db6bac89dd07eb312475d1ab0a19512896f5dc3cbf09efc858551e627d0950e31f1f0cddeba4c2d5ce33f7d8757fabce77ba666b5fca6546b24ff1610df2e60f50fa2ea1de1fab05962b731fb90bcaeb207ef6ecc4a8c4f70269229c06212cc7caeecbad3f8b1694b76005dc9220061c0b8e6ee38747a8ebb4ded125e689d424a7b0a6be95b085645387a2f22b6a6c3b452a9d8"}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) mount(0x0, 0x0, 0x0, 0x2012024, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2cb, &(0x7f0000001e00)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3e, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x24, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) inotify_rm_watch(r9, 0x0) getsockname$packet(r9, &(0x7f0000000740), &(0x7f0000000780)=0x14) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x84, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000015}, 0x881) 1.168686698s ago: executing program 3 (id=3397): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x29, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.137299458s ago: executing program 4 (id=3398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) 933.159832ms ago: executing program 4 (id=3399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8}, 0x50) 893.317393ms ago: executing program 0 (id=3401): keyctl$clear(0x7, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) sched_rr_get_interval(r0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000005b00000000000000000a971d00000000000000000000000032fdf9e414cd0fc0213b7aeaeb0c1302d2ca4a591d0686523b8ec628453267309f0d11d1e015d2df985e1e33dfc8e4578904f948f9988652554d7d87a1f8caeb69ab47195f8c336dc7634cd23c89ff8461d070c1d8eba87a195099671cc10e83f6dd094b1ae8977ca06661b980f50384f8bcf76abb7828171776"], 0x48) unshare(0x62040200) 885.373473ms ago: executing program 2 (id=3402): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 822.316374ms ago: executing program 1 (id=3403): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_init() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x40}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x2, 0xa, 0x73) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) lstat(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rmdir(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c7, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x2) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 821.997484ms ago: executing program 2 (id=3404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000500)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 821.585765ms ago: executing program 3 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 820.896815ms ago: executing program 4 (id=3406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a010400000000000000000100000009000380"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) 758.537506ms ago: executing program 3 (id=3407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) syz_emit_ethernet(0x2634, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private}, {@remote}, {@multicast2}]}]}}}}}}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}, {@access_client}]}}) 754.541385ms ago: executing program 2 (id=3408): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x200002c2, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) 457.868622ms ago: executing program 1 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000500)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 456.484481ms ago: executing program 3 (id=3410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x10, 0x2a, 0x1, 0x70bd2a}, 0x10}], 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xffb8) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0xf, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000400)={@mcast2, 0x16, r4}) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000fffffff800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) setrlimit(0xc, &(0x7f0000000380)={0x8, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, 0xffffffffffffffff, 0x6ad42000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 397.680953ms ago: executing program 3 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b00000007000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1b, &(0x7f0000000280)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x46}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x7b, &(0x7f00000001c0)=""/123, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x200002, 0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x3, 0x5, 0x6, 0x2}, {0x5, 0x5, 0xf, 0x6}, {0x2, 0x5, 0x7, 0x9}], 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x8000000000000000}}, './bus\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='afs_file_error\x00', r3, 0x0, 0x9d}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000500000000000000000000000800"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000002480)=0x3) r5 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16=r6], 0x1, 0x25e, &(0x7f0000000540)="$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") ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0xfdfd, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) fsmount(r5, 0x0, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 340.228613ms ago: executing program 1 (id=3412): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 256.714405ms ago: executing program 1 (id=3413): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) tkill(r0, 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 118.251528ms ago: executing program 1 (id=3414): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c7, &(0x7f0000000cc0)="$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") 63.342159ms ago: executing program 1 (id=3415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b00000007000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1b, &(0x7f0000000280)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x46}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x7b, &(0x7f00000001c0)=""/123, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x200002, 0x2, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x3, 0x5, 0x6, 0x2}, {0x5, 0x5, 0xf, 0x6}, {0x2, 0x5, 0x7, 0x9}], 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x8000000000000000}}, './bus\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='afs_file_error\x00', r3, 0x0, 0x9d}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000500000000000000000000000800"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000002480)=0x3) r5 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16=r6], 0x1, 0x25e, &(0x7f0000000540)="$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") ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0xfdfd, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) r9 = fsmount(r5, 0x0, 0x1) fchdir(r9) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3416): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) (fail_nth: 3) kernel console output (not intermixed with test programs): de -- potential data loss! (inode 15, error -30) [ 223.627245][T12198] netlink: 'syz.2.2944': attribute type 1 has an invalid length. [ 223.648709][T12198] bond8: entered promiscuous mode [ 223.657447][T12198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 223.690881][T12192] bond5: entered promiscuous mode [ 223.696447][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2940'. [ 223.709787][T12192] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.726706][T12200] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.733505][T12205] loop2: detected capacity change from 0 to 128 [ 223.735628][T12200] bond5: (slave bond6): making interface the new active one [ 223.747179][T12200] bond6: entered promiscuous mode [ 223.753559][T12200] bond5: (slave bond6): Enslaving as an active interface with an up link [ 223.768436][T12194] netlink: 'syz.3.2943': attribute type 21 has an invalid length. [ 223.778171][T12198] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.786812][T12198] bond8: (slave bond9): making interface the new active one [ 223.794357][T12198] bond9: entered promiscuous mode [ 223.801169][T12198] bond8: (slave bond9): Enslaving as an active interface with an up link [ 223.809947][T12192] loop1: detected capacity change from 0 to 128 [ 223.820078][T12205] wg2: left promiscuous mode [ 223.824728][T12205] wg2: left allmulticast mode [ 223.838193][T12198] wg2: entered promiscuous mode [ 223.843117][T12198] wg2: entered allmulticast mode [ 223.885493][T12208] SELinux: security_context_str_to_sid () failed with errno=-22 [ 223.916356][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.935190][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.950003][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.973216][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.981902][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.001507][T12220] loop3: detected capacity change from 0 to 256 [ 224.041930][T12227] loop3: detected capacity change from 0 to 1024 [ 224.058738][T12227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.073156][T12226] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2954: bg 0: block 494: padding at end of block bitmap is not set [ 224.098480][T12226] EXT4-fs (loop3): Remounting filesystem read-only [ 224.115236][T12226] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 224.203221][T12031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.212402][T12225] loop1: detected capacity change from 0 to 32768 [ 224.341921][T12238] loop1: detected capacity change from 0 to 256 [ 224.360538][T12239] loop3: detected capacity change from 0 to 256 [ 224.412891][T12244] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 224.436734][T12244] batman_adv: batadv0: Adding interface: bond1 [ 224.443115][T12244] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.468297][T12244] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 224.490667][T12244] loop3: detected capacity change from 0 to 128 [ 224.497578][T12233] netlink: 'syz.4.2957': attribute type 21 has an invalid length. [ 224.505979][T12233] __nla_validate_parse: 3 callbacks suppressed [ 224.505999][T12233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2957'. [ 224.532024][T12244] wg2: entered promiscuous mode [ 224.536951][T12244] wg2: entered allmulticast mode [ 224.610140][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 224.697352][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 224.697372][ T29] audit: type=1326 audit(1757945664.753:27383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf2ca35b67 code=0x7ffc0000 [ 224.727134][ T29] audit: type=1326 audit(1757945664.753:27384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf2c9dada9 code=0x7ffc0000 [ 224.750854][ T29] audit: type=1326 audit(1757945664.753:27385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf2ca3eba9 code=0x7ffc0000 [ 224.774293][ T29] audit: type=1326 audit(1757945664.753:27386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf2ca35b67 code=0x7ffc0000 [ 224.797862][ T29] audit: type=1326 audit(1757945664.753:27387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf2c9dada9 code=0x7ffc0000 [ 224.821363][ T29] audit: type=1326 audit(1757945664.753:27388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf2ca3eba9 code=0x7ffc0000 [ 224.856274][ T29] audit: type=1326 audit(1757945664.853:27389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf2ca35b67 code=0x7ffc0000 [ 224.880044][ T29] audit: type=1326 audit(1757945664.853:27390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf2c9dada9 code=0x7ffc0000 [ 224.903664][ T29] audit: type=1326 audit(1757945664.853:27391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf2ca3eba9 code=0x7ffc0000 [ 224.927138][ T29] audit: type=1326 audit(1757945664.853:27392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.4.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf2ca35b67 code=0x7ffc0000 [ 224.941626][T12267] netlink: 'syz.2.2968': attribute type 13 has an invalid length. [ 225.092798][T12273] loop2: detected capacity change from 0 to 256 [ 225.158384][T12275] netlink: 'syz.2.2971': attribute type 13 has an invalid length. [ 225.198104][T12277] loop2: detected capacity change from 0 to 1024 [ 225.211627][T12277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.224507][T12277] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.259304][ T383] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 393: padding at end of block bitmap is not set [ 225.274958][ T383] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 225.287574][ T383] EXT4-fs (loop2): This should not happen!! Data will be lost [ 225.287574][ T383] [ 225.301033][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.501984][T12290] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 225.539573][T12290] bond7: entered promiscuous mode [ 225.552080][T12290] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.594576][T12290] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.603190][T12290] bond7: (slave bond8): making interface the new active one [ 225.610685][T12290] bond8: entered promiscuous mode [ 225.617148][T12290] bond7: (slave bond8): Enslaving as an active interface with an up link [ 225.636040][T12290] loop1: detected capacity change from 0 to 128 [ 225.651657][T12290] wg2: entered promiscuous mode [ 225.656561][T12290] wg2: entered allmulticast mode [ 225.680247][T12304] SELinux: security_context_str_to_sid () failed with errno=-22 [ 225.740016][T12283] chnl_net:caif_netlink_parms(): no params data found [ 225.786044][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.793324][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.801482][T12283] bridge_slave_0: entered allmulticast mode [ 225.808487][T12283] bridge_slave_0: entered promiscuous mode [ 225.815720][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.822846][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.823139][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'. [ 225.833400][T12283] bridge_slave_1: entered allmulticast mode [ 225.845747][T12283] bridge_slave_1: entered promiscuous mode [ 225.868463][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.881318][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.908341][T12283] team0: Port device team_slave_0 added [ 225.915274][T12283] team0: Port device team_slave_1 added [ 225.934128][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.941171][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.967149][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.985071][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.992146][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.018173][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.028522][T12328] loop0: detected capacity change from 0 to 1024 [ 226.058409][T12328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.072773][T12283] hsr_slave_0: entered promiscuous mode [ 226.073964][T12328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2987: bg 0: block 494: padding at end of block bitmap is not set [ 226.079276][T12283] hsr_slave_1: entered promiscuous mode [ 226.093774][T12328] EXT4-fs (loop0): Remounting filesystem read-only [ 226.099153][T12283] debugfs: 'hsr0' already exists in 'hsr' [ 226.105117][T12328] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 226.110635][T12283] Cannot create hsr debugfs directory [ 226.141393][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 226.211501][T12283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.271202][T12283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.287115][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.319954][T12283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.400924][T12283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.442679][T12343] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 226.450514][T12343] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 226.568384][T12283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.577773][T12283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.587490][T12283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.596734][T12283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.682071][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.694812][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.719231][T12360] loop1: detected capacity change from 0 to 128 [ 226.722934][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.732663][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.745829][T12360] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 226.749692][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.753878][T12360] FAT-fs (loop1): Filesystem has been set read-only [ 226.760928][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.787021][T12283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.816836][T12358] loop3: detected capacity change from 0 to 1024 [ 226.823327][T12360] bio_check_eod: 14407 callbacks suppressed [ 226.823345][T12360] syz.1.2995: attempt to access beyond end of device [ 226.823345][T12360] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 226.837997][T12358] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.854260][T12358] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 226.866389][T12358] JBD2: no valid journal superblock found [ 226.872217][T12358] EXT4-fs (loop3): Could not load journal inode [ 226.891951][T12350] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 226.916481][T12360] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 226.923256][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.924573][T12360] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 226.951479][T12359] syz.1.2995: attempt to access beyond end of device [ 226.951479][T12359] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.964898][T12360] syz.1.2995: attempt to access beyond end of device [ 226.964898][T12360] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.979183][T12359] syz.1.2995: attempt to access beyond end of device [ 226.979183][T12359] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.996092][T12360] syz.1.2995: attempt to access beyond end of device [ 226.996092][T12360] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.013955][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.020841][T12360] syz.1.2995: attempt to access beyond end of device [ 227.020841][T12360] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.036456][T12360] syz.1.2995: attempt to access beyond end of device [ 227.036456][T12360] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.057915][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.059088][T12359] syz.1.2995: attempt to access beyond end of device [ 227.059088][T12359] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.080074][T12360] syz.1.2995: attempt to access beyond end of device [ 227.080074][T12360] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.095239][T12359] syz.1.2995: attempt to access beyond end of device [ 227.095239][T12359] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 227.117015][T12283] veth0_vlan: entered promiscuous mode [ 227.126063][T12283] veth1_vlan: entered promiscuous mode [ 227.135966][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.148694][T12376] buffer_io_error: 13462 callbacks suppressed [ 227.148710][T12376] Buffer I/O error on dev loop1, logical block 2065, async page read [ 227.163937][T12376] Buffer I/O error on dev loop1, logical block 2066, async page read [ 227.172396][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.184144][T12283] veth0_macvtap: entered promiscuous mode [ 227.193216][T12283] veth1_macvtap: entered promiscuous mode [ 227.208060][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.222388][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.227397][T12376] Buffer I/O error on dev loop1, logical block 2067, async page read [ 227.241478][ T383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.253546][ T383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.262353][T12376] Buffer I/O error on dev loop1, logical block 2068, async page read [ 227.262387][T12376] Buffer I/O error on dev loop1, logical block 2069, async page read [ 227.262438][T12376] Buffer I/O error on dev loop1, logical block 2070, async page read [ 227.262465][T12376] Buffer I/O error on dev loop1, logical block 2071, async page read [ 227.298454][ T383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.308312][T12376] Buffer I/O error on dev loop1, logical block 2072, async page read [ 227.316614][T12360] Buffer I/O error on dev loop1, logical block 2065, async page read [ 227.328948][ T383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.332695][T12360] Buffer I/O error on dev loop1, logical block 2066, async page read [ 227.485466][T12386] loop2: detected capacity change from 0 to 512 [ 227.499520][T12386] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.538527][T12386] EXT4-fs (loop2): 1 truncate cleaned up [ 227.578753][T12390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.651622][T12400] loop1: detected capacity change from 0 to 512 [ 227.659218][T12386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.686521][T12400] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 227.707242][T12283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.716846][T12400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.742667][T12400] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3004: Failed to acquire dquot type 1 [ 227.778704][T12400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3004: bg 0: block 40: padding at end of block bitmap is not set [ 227.854453][T12400] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 227.874303][T12391] chnl_net:caif_netlink_parms(): no params data found [ 227.916589][T12416] loop2: detected capacity change from 0 to 256 [ 227.925598][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.932784][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.940466][T12391] bridge_slave_0: entered allmulticast mode [ 227.947790][T12391] bridge_slave_0: entered promiscuous mode [ 227.953989][T12400] EXT4-fs (loop1): 1 truncate cleaned up [ 227.956498][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.960068][T12400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.966794][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.986902][T12391] bridge_slave_1: entered allmulticast mode [ 227.993791][T12391] bridge_slave_1: entered promiscuous mode [ 228.021473][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.033183][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.059045][T12391] team0: Port device team_slave_0 added [ 228.065913][T12391] team0: Port device team_slave_1 added [ 228.086279][T12391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.093347][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.119368][T12391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.132051][T12427] SELinux: security_context_str_to_sid () failed with errno=-22 [ 228.140297][T12391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.147314][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.173424][T12391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.222305][T12391] hsr_slave_0: entered promiscuous mode [ 228.222349][T12431] loop0: detected capacity change from 0 to 1024 [ 228.228609][T12391] hsr_slave_1: entered promiscuous mode [ 228.240533][T12391] debugfs: 'hsr0' already exists in 'hsr' [ 228.246390][T12391] Cannot create hsr debugfs directory [ 228.297690][T12431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.326735][T12391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.338358][T12431] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.398673][T12391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.409655][ T3466] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 393: padding at end of block bitmap is not set [ 228.426775][ T3466] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 228.439419][ T3466] EXT4-fs (loop0): This should not happen!! Data will be lost [ 228.439419][ T3466] [ 228.450656][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.499374][T12391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.516197][T12445] loop2: detected capacity change from 0 to 1024 [ 228.529861][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.543655][T12445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.569204][T12445] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.581679][T12391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.630547][T12453] can0: slcan on ttyS3. [ 228.656279][T12391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.670057][ T52] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 228.685882][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 228.698560][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 228.698560][ T52] [ 228.708762][T12391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.709668][T12283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.730108][T12391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.746548][T12391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.758645][T12460] validate_nla: 1 callbacks suppressed [ 228.758663][T12460] netlink: 'syz.2.3023': attribute type 13 has an invalid length. [ 228.773384][T12453] can0 (unregistered): slcan off ttyS3. [ 228.792126][T12455] netlink: 'syz.3.3024': attribute type 13 has an invalid length. [ 228.804255][T12457] can0: slcan on ttyS3. [ 228.872814][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 228.883503][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.894176][T12473] bridge0: entered promiscuous mode [ 228.902930][T12473] bridge0: port 3(macsec1) entered blocking state [ 228.909488][T12473] bridge0: port 3(macsec1) entered disabled state [ 228.916184][T12473] macsec1: entered allmulticast mode [ 228.921620][T12473] bridge0: entered allmulticast mode [ 228.929170][T12473] macsec1: left allmulticast mode [ 228.934291][T12473] bridge0: left allmulticast mode [ 228.941761][T12473] bridge0: left promiscuous mode [ 228.941941][T12458] loop0: detected capacity change from 0 to 32768 [ 228.971122][ T3466] bridge_slave_1: left allmulticast mode [ 228.976931][ T3466] bridge_slave_1: left promiscuous mode [ 228.982675][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.992028][ T3466] bridge_slave_0: left allmulticast mode [ 228.997998][ T3466] bridge_slave_0: left promiscuous mode [ 229.003757][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.036047][T12473] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3028'. [ 229.081290][T12483] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 229.160529][T12489] loop1: detected capacity change from 0 to 1024 [ 229.179120][T12489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.193154][T12493] loop3: detected capacity change from 0 to 128 [ 229.194009][T12488] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3034: bg 0: block 494: padding at end of block bitmap is not set [ 229.214871][T12488] EXT4-fs (loop1): Remounting filesystem read-only [ 229.221617][T12488] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 229.234953][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.245595][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.255405][ T3466] bond0 (unregistering): Released all slaves [ 229.266324][ T3466] bond1 (unregistering): (slave bond2): Releasing backup interface [ 229.274678][ T3466] bond2 (unregistering): left promiscuous mode [ 229.283428][ T3466] bond1 (unregistering): Released all slaves [ 229.289396][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 229.293701][ T3466] bond2 (unregistering): Released all slaves [ 229.307957][ T3466] bond3 (unregistering): Released all slaves [ 229.318796][ T3466] bond4 (unregistering): (slave bond5): Releasing backup interface [ 229.326120][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.326946][ T3466] bond5 (unregistering): left promiscuous mode [ 229.343599][ T3466] bond4 (unregistering): Released all slaves [ 229.352750][ T3466] bond5 (unregistering): Released all slaves [ 229.362151][ T3466] bond6 (unregistering): (slave bond7): Releasing backup interface [ 229.370388][ T3466] bond7 (unregistering): left promiscuous mode [ 229.377065][ T3466] bond6 (unregistering): Released all slaves [ 229.386538][ T3466] bond7 (unregistering): Released all slaves [ 229.397930][ T3466] bond8 (unregistering): (slave bond9): Releasing backup interface [ 229.405942][ T3466] bond9 (unregistering): left promiscuous mode [ 229.413360][ T3466] bond8 (unregistering): Released all slaves [ 229.422990][ T3466] bond9 (unregistering): Released all slaves [ 229.460700][T12473] batadv1: entered promiscuous mode [ 229.465993][T12473] batadv1: entered allmulticast mode [ 229.483689][T12486] bond2 (unregistering): Released all slaves [ 229.497402][T12458] can0 (unregistered): slcan off ttyS3. [ 229.508766][ T3466] hsr_slave_0: left promiscuous mode [ 229.514824][ T3466] hsr_slave_1: left promiscuous mode [ 229.524081][ T3466] veth1_macvtap: left promiscuous mode [ 229.529770][ T3466] veth0_macvtap: left promiscuous mode [ 229.535336][ T3466] veth1_vlan: left promiscuous mode [ 229.540740][ T3466] veth0_vlan: left promiscuous mode [ 229.588412][T12500] loop0: detected capacity change from 0 to 128 [ 229.598897][T12500] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 229.606926][T12500] FAT-fs (loop0): Filesystem has been set read-only [ 229.614648][T12500] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 229.622571][T12500] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 229.783131][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 229.800233][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 229.908779][T12391] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.921468][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.928592][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.960572][T12391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.971228][T12391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.984542][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.991670][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.021999][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'. [ 230.044464][T12505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.052188][T12505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.069760][T12505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.077497][T12505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.089997][T12505] batman_adv: batadv0: Removing interface: bond1 [ 230.128781][T12516] netlink: 'syz.2.3041': attribute type 1 has an invalid length. [ 230.147045][T12516] bond1 (unregistering): Released all slaves [ 230.161482][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.205095][T12520] loop2: detected capacity change from 0 to 128 [ 230.246577][T12520] wg2: entered promiscuous mode [ 230.251764][T12520] wg2: entered allmulticast mode [ 230.403719][T12391] veth0_vlan: entered promiscuous mode [ 230.413436][T12391] veth1_vlan: entered promiscuous mode [ 230.434181][T12391] veth0_macvtap: entered promiscuous mode [ 230.441860][T12391] veth1_macvtap: entered promiscuous mode [ 230.458444][T12391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.469506][T12391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.486513][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.497437][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.506400][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.520672][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.551449][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 230.615428][T12551] SELinux: security_context_str_to_sid () failed with errno=-22 [ 230.664835][T12554] loop1: detected capacity change from 0 to 1024 [ 230.715613][T12554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.729945][T12553] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3050: bg 0: block 494: padding at end of block bitmap is not set [ 230.744608][T12553] EXT4-fs (loop1): Remounting filesystem read-only [ 230.751850][T12553] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 230.819867][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.854737][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 230.865322][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 230.886840][T12568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.899530][T12568] FAULT_INJECTION: forcing a failure. [ 230.899530][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.912642][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.4.3051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.912677][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.912766][T12568] Call Trace: [ 230.912775][T12568] [ 230.912791][T12568] __dump_stack+0x1d/0x30 [ 230.912818][T12568] dump_stack_lvl+0xe8/0x140 [ 230.912844][T12568] dump_stack+0x15/0x1b [ 230.912866][T12568] should_fail_ex+0x265/0x280 [ 230.912923][T12568] should_fail+0xb/0x20 [ 230.912951][T12568] should_fail_usercopy+0x1a/0x20 [ 230.913017][T12568] _copy_from_user+0x1c/0xb0 [ 230.913055][T12568] memdup_user+0x5e/0xd0 [ 230.913107][T12568] strndup_user+0x68/0xb0 [ 230.913134][T12568] __se_sys_mount+0x4d/0x2e0 [ 230.913165][T12568] ? fput+0x8f/0xc0 [ 230.913237][T12568] ? ksys_write+0x192/0x1a0 [ 230.913268][T12568] __x64_sys_mount+0x67/0x80 [ 230.913294][T12568] x64_sys_call+0x2b4d/0x2ff0 [ 230.913315][T12568] do_syscall_64+0xd2/0x200 [ 230.913365][T12568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.913454][T12568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.913550][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.913573][T12568] RIP: 0033:0x7fafe737eba9 [ 230.913617][T12568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.913641][T12568] RSP: 002b:00007fafe5da5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.913666][T12568] RAX: ffffffffffffffda RBX: 00007fafe75c6180 RCX: 00007fafe737eba9 [ 230.913682][T12568] RDX: 0000200000001400 RSI: 0000200000000300 RDI: 0000200000000240 [ 230.913770][T12568] RBP: 00007fafe5da5090 R08: 0000200000000340 R09: 0000000000000000 [ 230.913786][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.913798][T12568] R13: 00007fafe75c6218 R14: 00007fafe75c6180 R15: 00007ffe63a0e308 [ 230.913817][T12568] [ 231.110151][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.178580][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.192253][T12563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.199730][T12563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.290129][T12563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.297610][T12563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.401653][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.413309][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.496691][T12549] chnl_net:caif_netlink_parms(): no params data found [ 231.526784][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 231.526803][ T29] audit: type=1326 audit(1757945671.623:27964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.557655][ T29] audit: type=1326 audit(1757945671.623:27965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.581447][ T29] audit: type=1326 audit(1757945671.633:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.605063][ T29] audit: type=1326 audit(1757945671.633:27967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.628705][ T29] audit: type=1326 audit(1757945671.633:27968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.652373][ T29] audit: type=1326 audit(1757945671.633:27969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.676052][ T29] audit: type=1326 audit(1757945671.633:27970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.699752][ T29] audit: type=1326 audit(1757945671.643:27971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.723431][ T29] audit: type=1326 audit(1757945671.643:27972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.747158][ T29] audit: type=1326 audit(1757945671.643:27973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.1.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7994eba9 code=0x7ffc0000 [ 231.794245][T12549] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.801545][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.810243][T12549] bridge_slave_0: entered allmulticast mode [ 231.817227][T12549] bridge_slave_0: entered promiscuous mode [ 231.835346][T12549] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.842775][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.852627][T12549] bridge_slave_1: entered allmulticast mode [ 231.859387][T12549] bridge_slave_1: entered promiscuous mode [ 231.870768][T12584] loop4: detected capacity change from 0 to 256 [ 231.885062][T12549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.889278][T12586] loop1: detected capacity change from 0 to 512 [ 231.930979][T12549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.956888][T12549] team0: Port device team_slave_0 added [ 231.974011][ T52] bridge_slave_1: left allmulticast mode [ 231.979751][ T52] bridge_slave_1: left promiscuous mode [ 231.985541][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.993805][ T52] bridge_slave_0: left allmulticast mode [ 231.999610][ T52] bridge_slave_0: left promiscuous mode [ 232.005311][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.013023][T12586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.025784][T12586] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.114546][T12599] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3061'. [ 232.149952][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.159881][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.170445][ T52] bond0 (unregistering): Released all slaves [ 232.181298][ T52] bond1 (unregistering): (slave bond2): Releasing backup interface [ 232.190288][ T52] bond2 (unregistering): left promiscuous mode [ 232.197092][ T52] bond1 (unregistering): Released all slaves [ 232.206614][ T52] bond2 (unregistering): Released all slaves [ 232.218160][ T52] bond3 (unregistering): (slave bond4): Releasing backup interface [ 232.226134][ T52] bond4 (unregistering): left promiscuous mode [ 232.233330][ T52] bond3 (unregistering): Released all slaves [ 232.242037][ T52] bond4 (unregistering): Released all slaves [ 232.251303][ T52] bond5 (unregistering): (slave bond6): Releasing backup interface [ 232.259258][ T52] bond6 (unregistering): left promiscuous mode [ 232.266023][ T52] bond5 (unregistering): Released all slaves [ 232.274639][ T52] bond6 (unregistering): Released all slaves [ 232.283720][ T52] bond7 (unregistering): (slave bond8): Releasing backup interface [ 232.291853][ T52] bond8 (unregistering): left promiscuous mode [ 232.298522][ T52] bond7 (unregistering): Released all slaves [ 232.307151][ T52] bond8 (unregistering): Released all slaves [ 232.316426][ T52] bond9 (unregistering): (slave bond10): Releasing backup interface [ 232.324595][ T52] bond10 (unregistering): left promiscuous mode [ 232.331473][ T52] bond9 (unregistering): Released all slaves [ 232.340403][ T52] bond10 (unregistering): Released all slaves [ 232.350449][T12549] team0: Port device team_slave_1 added [ 232.383662][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.398010][T12549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.405078][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.431491][T12549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.436651][T12604] loop2: detected capacity change from 0 to 256 [ 232.451299][ T52] hsr_slave_0: left promiscuous mode [ 232.457173][ T52] hsr_slave_1: left promiscuous mode [ 232.467884][ T52] veth1_macvtap: left promiscuous mode [ 232.469468][T12606] loop2: detected capacity change from 0 to 128 [ 232.473410][ T52] veth0_macvtap: left promiscuous mode [ 232.485264][ T52] veth1_vlan: left promiscuous mode [ 232.491417][ T52] veth0_vlan: left promiscuous mode [ 232.499689][T12606] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 232.507718][T12606] FAT-fs (loop2): Filesystem has been set read-only [ 232.516852][T12606] bio_check_eod: 32192 callbacks suppressed [ 232.516870][T12606] syz.2.3064: attempt to access beyond end of device [ 232.516870][T12606] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 232.539498][T12606] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 232.547542][T12606] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 232.555721][T12605] syz.2.3064: attempt to access beyond end of device [ 232.555721][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.585298][T12605] syz.2.3064: attempt to access beyond end of device [ 232.585298][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.607923][T12605] syz.2.3064: attempt to access beyond end of device [ 232.607923][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.624255][ T52] team0 (unregistering): Port device team_slave_1 removed [ 232.624516][T12606] syz.2.3064: attempt to access beyond end of device [ 232.624516][T12606] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.645116][T12605] syz.2.3064: attempt to access beyond end of device [ 232.645116][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.645532][ T52] team0 (unregistering): Port device team_slave_0 removed [ 232.669964][T12606] syz.2.3064: attempt to access beyond end of device [ 232.669964][T12606] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.683538][T12605] syz.2.3064: attempt to access beyond end of device [ 232.683538][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.697290][T12606] syz.2.3064: attempt to access beyond end of device [ 232.697290][T12606] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.710785][T12605] syz.2.3064: attempt to access beyond end of device [ 232.710785][T12605] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 232.726617][T12549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.733777][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.755135][T12617] buffer_io_error: 31342 callbacks suppressed [ 232.755158][T12617] Buffer I/O error on dev loop2, logical block 2065, async page read [ 232.759994][T12549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.766139][T12617] Buffer I/O error on dev loop2, logical block 2066, async page read [ 232.798416][T12617] Buffer I/O error on dev loop2, logical block 2067, async page read [ 232.806566][T12617] Buffer I/O error on dev loop2, logical block 2068, async page read [ 232.817929][T12617] Buffer I/O error on dev loop2, logical block 2069, async page read [ 232.826977][T12617] Buffer I/O error on dev loop2, logical block 2070, async page read [ 232.835190][T12617] Buffer I/O error on dev loop2, logical block 2071, async page read [ 232.840878][T12618] can0: slcan on ttyS3. [ 232.843414][T12617] Buffer I/O error on dev loop2, logical block 2072, async page read [ 232.863059][T12606] Buffer I/O error on dev loop2, logical block 2065, async page read [ 232.874622][T12549] hsr_slave_0: entered promiscuous mode [ 232.881415][T12549] hsr_slave_1: entered promiscuous mode [ 232.890264][T12549] debugfs: 'hsr0' already exists in 'hsr' [ 232.896049][T12549] Cannot create hsr debugfs directory [ 232.897390][T12606] Buffer I/O error on dev loop2, logical block 2066, async page read [ 233.009715][T12619] can0 (unregistered): slcan off ttyS3. [ 233.023173][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 233.100341][T12620] loop4: detected capacity change from 0 to 32768 [ 233.144580][T12630] loop3: detected capacity change from 0 to 512 [ 233.173372][T12632] SELinux: security_context_str_to_sid () failed with errno=-22 [ 233.181278][T12630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.238922][T12630] EXT4-fs (loop3): 1 truncate cleaned up [ 233.245011][T12630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.308859][T12549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.318744][T12549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.327946][T12549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.340411][T12549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.372212][T12636] netlink: 'syz.1.3072': attribute type 21 has an invalid length. [ 233.394262][T12636] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3072'. [ 233.405068][T12645] loop4: detected capacity change from 0 to 512 [ 233.419192][T12031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.419923][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.440574][T12549] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.446261][T12647] loop2: detected capacity change from 0 to 256 [ 233.454938][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.462043][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.471601][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.478731][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.498040][T12549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.508545][T12549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.526945][T12645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.550723][T12645] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.602170][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.658023][T12391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.686038][T12549] veth0_vlan: entered promiscuous mode [ 233.708518][T12549] veth1_vlan: entered promiscuous mode [ 233.721343][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 233.727708][T12549] veth0_macvtap: entered promiscuous mode [ 233.739828][T12549] veth1_macvtap: entered promiscuous mode [ 233.754039][T12549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.767205][T12549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.778454][ T3466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.787242][ T3466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.803001][T12666] loop3: detected capacity change from 0 to 256 [ 233.803643][ T3466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.825012][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.867695][T12682] can0: slcan on ttyS3. [ 233.874928][T12679] loop4: detected capacity change from 0 to 1024 [ 233.908724][T12682] can0 (unregistered): slcan off ttyS3. [ 233.922432][T12658] netlink: 'syz.2.3076': attribute type 21 has an invalid length. [ 233.941223][T12679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.947375][T12658] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3076'. [ 233.980773][T12678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3080: bg 0: block 494: padding at end of block bitmap is not set [ 234.029726][T12691] loop2: detected capacity change from 0 to 128 [ 234.037356][T12689] wireguard0: entered promiscuous mode [ 234.042882][T12689] wireguard0: entered allmulticast mode [ 234.058676][T12678] EXT4-fs (loop4): Remounting filesystem read-only [ 234.070985][T12691] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.077098][T12678] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 234.079011][T12691] FAT-fs (loop2): Filesystem has been set read-only [ 234.128407][T12691] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.136304][T12691] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 234.153476][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3080'. [ 234.176995][T12682] loop1: detected capacity change from 0 to 32768 [ 234.475661][T12391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.548710][T12712] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 234.734295][T12718] loop4: detected capacity change from 0 to 128 [ 234.758946][T12712] bond1 (unregistering): Released all slaves [ 234.874078][T12716] loop3: detected capacity change from 0 to 256 [ 234.874887][T12703] chnl_net:caif_netlink_parms(): no params data found [ 234.935516][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.942707][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.958056][T12703] bridge_slave_0: entered allmulticast mode [ 234.965251][T12703] bridge_slave_0: entered promiscuous mode [ 234.973978][T12718] wg2: entered promiscuous mode [ 234.978958][T12718] wg2: entered allmulticast mode [ 235.016178][T12731] loop0: detected capacity change from 0 to 1024 [ 235.024099][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.031500][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.038774][T12703] bridge_slave_1: entered allmulticast mode [ 235.045255][T12703] bridge_slave_1: entered promiscuous mode [ 235.055698][T12735] loop2: detected capacity change from 0 to 1024 [ 235.062399][T12734] loop3: detected capacity change from 0 to 256 [ 235.071231][T12731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.092798][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.095623][T12739] loop4: detected capacity change from 0 to 512 [ 235.110351][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'. [ 235.121140][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.145093][T12735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.159881][T12703] team0: Port device team_slave_0 added [ 235.166665][T12703] team0: Port device team_slave_1 added [ 235.178472][T12739] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 235.195154][T12739] EXT4-fs (loop4): orphan cleanup on readonly fs [ 235.195761][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.208606][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.224531][T12739] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3093: Failed to acquire dquot type 1 [ 235.234804][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.247736][T12739] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3093: bg 0: block 40: padding at end of block bitmap is not set [ 235.258647][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.278008][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.304135][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.317492][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.338612][T12739] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 235.356832][T12703] hsr_slave_0: entered promiscuous mode [ 235.363130][T12703] hsr_slave_1: entered promiscuous mode [ 235.370404][T12703] debugfs: 'hsr0' already exists in 'hsr' [ 235.376177][T12703] Cannot create hsr debugfs directory [ 235.388478][T12739] EXT4-fs (loop4): 1 truncate cleaned up [ 235.394835][T12739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.419336][T12752] loop0: detected capacity change from 0 to 1024 [ 235.426676][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'. [ 235.462042][T12752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.478348][T12703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.485437][T12752] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.516908][ T31] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 235.533952][T12283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.538694][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 235.555516][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 235.555516][ T31] [ 235.566909][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.577960][T12703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.590648][T12391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.612159][T12759] loop0: detected capacity change from 0 to 128 [ 235.623703][T12759] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 235.631781][T12759] FAT-fs (loop0): Filesystem has been set read-only [ 235.639350][T12759] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 235.639723][T12703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.647206][T12759] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 235.740325][T12703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.790182][T12766] loop2: detected capacity change from 0 to 256 [ 235.846593][T12703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.860207][T12703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.882417][T12703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.895946][T12703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.923110][T12776] SELinux: security_context_str_to_sid () failed with errno=-22 [ 235.980735][T12703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.999819][T12703] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.010866][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.017989][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.029289][T12782] loop2: detected capacity change from 0 to 1024 [ 236.037913][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.045048][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.073708][T12782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.091440][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'. [ 236.157441][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.203072][T12283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.257859][T12799] loop3: detected capacity change from 0 to 256 [ 236.265035][T12703] veth0_vlan: entered promiscuous mode [ 236.274061][T12703] veth1_vlan: entered promiscuous mode [ 236.299980][T12703] veth0_macvtap: entered promiscuous mode [ 236.316810][T12703] veth1_macvtap: entered promiscuous mode [ 236.330216][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.343099][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.356088][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.368210][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.377752][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.388425][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.397173][T12805] loop2: detected capacity change from 0 to 512 [ 236.449543][T12805] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 236.450004][T12810] loop1: detected capacity change from 0 to 256 [ 236.475414][T12805] EXT4-fs (loop2): orphan cleanup on readonly fs [ 236.484226][T12805] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3109: Failed to acquire dquot type 1 [ 236.497249][T12805] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3109: bg 0: block 40: padding at end of block bitmap is not set [ 236.516644][T12805] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 236.600362][T12818] loop1: detected capacity change from 0 to 1024 [ 236.608308][T12805] EXT4-fs (loop2): 1 truncate cleaned up [ 236.614538][T12805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.618767][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3114'. [ 236.651316][T12818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.667543][T12818] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.695289][T12827] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 236.717052][T12830] loop3: detected capacity change from 0 to 1024 [ 236.724518][ T52] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 236.725538][T12827] bond1 (unregistering): Released all slaves [ 236.745937][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 236.758563][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.758563][ T52] [ 236.762776][T12283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.777696][T12832] loop4: detected capacity change from 0 to 128 [ 236.780214][T12830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.796687][T12703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.819966][T12836] loop2: detected capacity change from 0 to 256 [ 236.830026][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 236.844254][T12838] netlink: 'syz.1.3118': attribute type 1 has an invalid length. [ 236.853738][T12827] wg2: left promiscuous mode [ 236.858435][T12827] wg2: left allmulticast mode [ 236.868339][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.877609][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.879376][T12031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.899996][T12827] wg2: entered promiscuous mode [ 236.904909][T12827] wg2: entered allmulticast mode [ 236.908534][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.921861][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.927630][T12844] FAULT_INJECTION: forcing a failure. [ 236.927630][T12844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.942768][T12844] CPU: 0 UID: 0 PID: 12844 Comm: syz.3.3121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.942876][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.942893][T12844] Call Trace: [ 236.942899][T12844] [ 236.942907][T12844] __dump_stack+0x1d/0x30 [ 236.942929][T12844] dump_stack_lvl+0xe8/0x140 [ 236.942951][T12844] dump_stack+0x15/0x1b [ 236.943025][T12844] should_fail_ex+0x265/0x280 [ 236.943053][T12844] should_fail+0xb/0x20 [ 236.943075][T12844] should_fail_usercopy+0x1a/0x20 [ 236.943103][T12844] _copy_from_user+0x1c/0xb0 [ 236.943192][T12844] restore_altstack+0x4b/0x2d0 [ 236.943220][T12844] ? __set_task_blocked+0x23a/0x2a0 [ 236.943298][T12844] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 236.943340][T12844] ? _raw_spin_unlock_irq+0x26/0x50 [ 236.943365][T12844] ? signal_setup_done+0x266/0x290 [ 236.943385][T12844] ? xfd_validate_state+0x45/0xf0 [ 236.943469][T12844] ? fpu__clear_user_states+0x63/0x1e0 [ 236.943579][T12844] ? fpregs_mark_activate+0x66/0x140 [ 236.943609][T12844] ? fpu__clear_user_states+0x63/0x1e0 [ 236.943718][T12844] ? arch_do_signal_or_restart+0x2f3/0x480 [ 236.943742][T12844] ? __rcu_read_unlock+0x4f/0x70 [ 236.943767][T12844] x64_sys_call+0x2d3c/0x2ff0 [ 236.943802][T12844] do_syscall_64+0xd2/0x200 [ 236.943836][T12844] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.943862][T12844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.943967][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.944012][T12844] RIP: 0033:0x7f8662c0ada9 [ 236.944028][T12844] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 236.944050][T12844] RSP: 002b:00007f86616d6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 236.944070][T12844] RAX: ffffffffffffffda RBX: 00007f8662eb5fa0 RCX: 00007f8662c0ada9 [ 236.944084][T12844] RDX: 00007f86616d6a80 RSI: 00007f86616d6bb0 RDI: 0000000000000021 [ 236.944168][T12844] RBP: 00007f86616d7090 R08: 0000000000000000 R09: 00000000fffffffc [ 236.944181][T12844] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 236.944194][T12844] R13: 00007f8662eb6038 R14: 00007f8662eb5fa0 R15: 00007ffe06dc94a8 [ 236.944215][T12844] [ 236.945734][T12838] bond1 (unregistering): Released all slaves [ 236.956070][T12845] loop1: detected capacity change from 0 to 128 [ 237.119412][T12849] loop3: detected capacity change from 0 to 256 [ 237.266966][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 237.281125][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 237.281143][ T29] audit: type=1326 audit(1757945677.383:28444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.297734][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.318548][ T29] audit: type=1326 audit(1757945677.423:28445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.319160][T12857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.345042][ T29] audit: type=1326 audit(1757945677.453:28446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.376928][ T29] audit: type=1326 audit(1757945677.483:28447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.403383][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.410949][T12857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.411163][ T29] audit: type=1326 audit(1757945677.513:28448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.441833][ T29] audit: type=1326 audit(1757945677.513:28449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.468275][ T29] audit: type=1326 audit(1757945677.523:28450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.470487][T12863] 9pnet_fd: Insufficient options for proto=fd [ 237.491978][ T29] audit: type=1326 audit(1757945677.523:28451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.492072][ T29] audit: type=1326 audit(1757945677.523:28452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.545428][ T29] audit: type=1326 audit(1757945677.523:28453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f20e97beba9 code=0x7ffc0000 [ 237.611269][T12868] loop2: detected capacity change from 0 to 256 [ 237.662774][T12872] loop1: detected capacity change from 0 to 1024 [ 237.696710][T12872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.717999][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.737442][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.756348][T12878] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 237.765810][T12872] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.808343][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.816791][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.838520][T12878] bond1 (unregistering): Released all slaves [ 237.850794][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 237.867040][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 237.879658][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 237.879658][ T37] [ 237.891232][T12883] loop4: detected capacity change from 0 to 128 [ 237.898535][T12703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.986967][T12883] wg2: left promiscuous mode [ 237.991653][T12883] wg2: left allmulticast mode [ 238.034428][T12883] wg2: entered promiscuous mode [ 238.039401][T12883] wg2: entered allmulticast mode [ 238.190711][T12892] netlink: 'syz.4.3137': attribute type 21 has an invalid length. [ 238.199981][T12890] loop1: detected capacity change from 0 to 256 [ 238.207706][T12892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3137'. [ 238.216796][T12892] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 238.436936][T12898] loop1: detected capacity change from 0 to 1024 [ 238.476423][T12900] 9pnet_fd: Insufficient options for proto=fd [ 238.532261][T12898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.585470][T12905] loop3: detected capacity change from 0 to 512 [ 238.606900][T12898] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.622375][T12905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.649473][T12905] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.695692][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 238.711890][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 238.724601][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 238.724601][ T37] [ 238.742212][T12703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.751770][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.769904][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.804735][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.819114][T12916] SELinux: security_context_str_to_sid () failed with errno=-22 [ 238.827913][T12031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.829531][T12920] loop4: detected capacity change from 0 to 1024 [ 238.844223][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.857807][T12919] loop0: detected capacity change from 0 to 1024 [ 238.865831][T12920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.887249][T12926] bridge0: entered promiscuous mode [ 238.894984][T12926] bridge0: port 3(macsec1) entered blocking state [ 238.900532][T12919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.901493][T12926] bridge0: port 3(macsec1) entered disabled state [ 238.923435][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'. [ 238.929908][T12926] macsec1: entered allmulticast mode [ 238.934519][T12920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3146: bg 0: block 494: padding at end of block bitmap is not set [ 238.937772][T12926] bridge0: entered allmulticast mode [ 238.957776][T12920] EXT4-fs (loop4): Remounting filesystem read-only [ 238.958226][T12926] macsec1: left allmulticast mode [ 238.964430][T12920] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 238.969430][T12926] bridge0: left allmulticast mode [ 238.998059][T12926] bridge0: left promiscuous mode [ 239.043811][T12549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.055067][T12931] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3149'. [ 239.072972][T12931] batadv1: entered promiscuous mode [ 239.078440][T12931] batadv1: entered allmulticast mode [ 239.100297][T12391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.132355][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3151'. [ 239.132527][T12941] loop4: detected capacity change from 0 to 1024 [ 239.141796][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.155474][T12939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.159745][T12941] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.174292][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.181760][T12939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.202923][ T1456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 393: padding at end of block bitmap is not set [ 239.219461][ T1456] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 239.235051][ T1456] EXT4-fs (loop4): This should not happen!! Data will be lost [ 239.235051][ T1456] [ 239.318572][T12950] netlink: 'syz.0.3155': attribute type 1 has an invalid length. [ 239.330128][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.339061][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.340062][T12950] bond1 (unregistering): Released all slaves [ 239.374692][T12954] loop4: detected capacity change from 0 to 1024 [ 239.381296][T12955] loop0: detected capacity change from 0 to 128 [ 239.393547][T12955] wg2: entered promiscuous mode [ 239.398561][T12955] wg2: entered allmulticast mode [ 239.407976][T12953] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3156: bg 0: block 494: padding at end of block bitmap is not set [ 239.410982][T12959] loop2: detected capacity change from 0 to 1024 [ 239.423091][T12953] EXT4-fs (loop4): Remounting filesystem read-only [ 239.435586][T12953] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 239.449591][T12959] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.474589][ T1456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 393: padding at end of block bitmap is not set [ 239.499346][ T1456] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 239.512061][ T1456] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.512061][ T1456] [ 239.541792][T12964] loop0: detected capacity change from 0 to 1024 [ 239.561708][T12962] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3159: bg 0: block 494: padding at end of block bitmap is not set [ 239.580371][T12962] EXT4-fs (loop0): Remounting filesystem read-only [ 239.587024][T12962] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 239.604063][T12971] netlink: 'syz.2.3161': attribute type 13 has an invalid length. [ 239.695329][T12976] loop4: detected capacity change from 0 to 256 [ 239.696795][T12978] bridge0: entered promiscuous mode [ 239.709921][T12978] bridge0: port 3(macsec1) entered blocking state [ 239.716570][T12978] bridge0: port 3(macsec1) entered disabled state [ 239.723295][T12978] macsec1: entered allmulticast mode [ 239.728705][T12978] bridge0: entered allmulticast mode [ 239.735279][T12978] macsec1: left allmulticast mode [ 239.740501][T12978] bridge0: left allmulticast mode [ 239.747422][T12978] bridge0: left promiscuous mode [ 239.775876][T12982] loop4: detected capacity change from 0 to 512 [ 239.782943][T12982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.794183][T12980] batadv0: entered promiscuous mode [ 239.799651][T12980] batadv0: entered allmulticast mode [ 239.812652][T12986] netlink: 'syz.3.3167': attribute type 1 has an invalid length. [ 239.828270][T12982] EXT4-fs (loop4): 1 truncate cleaned up [ 239.836048][T12986] bond2: entered promiscuous mode [ 239.837774][T12990] loop2: detected capacity change from 0 to 1024 [ 239.849534][T12986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.877695][T12990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3168: bg 0: block 494: padding at end of block bitmap is not set [ 239.884503][T12997] loop1: detected capacity change from 0 to 1024 [ 239.893298][T12994] netlink: 'syz.4.3169': attribute type 1 has an invalid length. [ 239.910572][T12986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.918777][T12990] EXT4-fs (loop2): Remounting filesystem read-only [ 239.919654][T12986] bond2: (slave bond3): making interface the new active one [ 239.925346][T12990] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 239.932710][T12986] bond3: entered promiscuous mode [ 239.950321][T12986] bond2: (slave bond3): Enslaving as an active interface with an up link [ 239.963599][T13000] loop3: detected capacity change from 0 to 128 [ 239.971753][T12997] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.987771][T12994] bond1: entered promiscuous mode [ 240.000315][T12994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.015851][ T3466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 393: padding at end of block bitmap is not set [ 240.037598][ T3466] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 240.050280][ T3466] EXT4-fs (loop1): This should not happen!! Data will be lost [ 240.050280][ T3466] [ 240.050440][T12994] loop4: detected capacity change from 0 to 128 [ 240.082911][T13002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.091778][T13002] bond1: (slave bond2): making interface the new active one [ 240.099149][T13002] bond2: entered promiscuous mode [ 240.105323][T13002] bond1: (slave bond2): Enslaving as an active interface with an up link [ 240.110516][T13008] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.142501][T12986] wg2: left promiscuous mode [ 240.147177][T12986] wg2: left allmulticast mode [ 240.169694][T12986] wg2: entered promiscuous mode [ 240.174676][T12986] wg2: entered allmulticast mode [ 240.244957][T13016] loop4: detected capacity change from 0 to 1024 [ 240.256388][T13010] netlink: 'syz.0.3174': attribute type 21 has an invalid length. [ 240.265912][T13016] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.276847][T13010] __nla_validate_parse: 3 callbacks suppressed [ 240.276866][T13010] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3174'. [ 240.294317][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 240.297100][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 240.322691][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 240.326827][T13024] loop3: detected capacity change from 0 to 1024 [ 240.335423][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.335423][ T37] [ 240.354931][T13023] loop2: detected capacity change from 0 to 256 [ 240.407049][T13024] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3177: bg 0: block 494: padding at end of block bitmap is not set [ 240.421524][T13031] loop2: detected capacity change from 0 to 1024 [ 240.434370][T13035] loop4: detected capacity change from 0 to 256 [ 240.442304][T13024] EXT4-fs (loop3): Remounting filesystem read-only [ 240.449303][T13024] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 240.531984][T13031] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.615299][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 240.630714][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 240.643390][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 240.643390][ T37] [ 240.670859][T13046] SELinux: security_context_str_to_sid () failed with errno=-22 [ 240.712514][T13052] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 240.747220][T13052] bond1: entered promiscuous mode [ 240.753900][T13052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.843780][T13052] loop2: detected capacity change from 0 to 128 [ 240.861929][T13052] wg2: left promiscuous mode [ 240.866601][T13052] wg2: left allmulticast mode [ 240.997709][T13056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.050319][T13056] bond1: (slave bond2): making interface the new active one [ 241.057701][T13056] bond2: entered promiscuous mode [ 241.121809][T13056] bond1: (slave bond2): Enslaving as an active interface with an up link [ 241.131994][T13052] wg2: entered promiscuous mode [ 241.136927][T13052] wg2: entered allmulticast mode [ 241.185774][T13068] loop3: detected capacity change from 0 to 256 [ 241.251605][T13075] bridge0: entered promiscuous mode [ 241.262632][T13075] bridge0: port 3(macsec1) entered blocking state [ 241.269272][T13075] bridge0: port 3(macsec1) entered disabled state [ 241.276110][T13075] macsec1: entered allmulticast mode [ 241.281463][T13075] bridge0: entered allmulticast mode [ 241.288053][T13075] macsec1: left allmulticast mode [ 241.293131][T13075] bridge0: left allmulticast mode [ 241.304204][T13075] bridge0: left promiscuous mode [ 241.352082][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 241.370775][T13082] loop3: detected capacity change from 0 to 256 [ 241.371858][T13084] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 241.463031][T13084] bond1 (unregistering): Released all slaves [ 241.494921][T13092] loop3: detected capacity change from 0 to 1024 [ 241.509765][T13096] loop0: detected capacity change from 0 to 128 [ 241.524080][T13098] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 241.559380][T13092] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.574563][T13088] loop4: detected capacity change from 0 to 256 [ 241.597943][T13098] bond1 (unregistering): Released all slaves [ 241.610647][T13091] netlink: 'syz.2.3202': attribute type 21 has an invalid length. [ 241.618723][T13091] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3202'. [ 241.629748][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3202'. [ 241.640368][T13104] loop1: detected capacity change from 0 to 128 [ 241.666353][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 241.684379][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 241.697132][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 241.697132][ T37] [ 241.755700][T13114] loop0: detected capacity change from 0 to 512 [ 241.763975][T13114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.802002][T13104] wg2: entered promiscuous mode [ 241.806954][T13104] wg2: entered allmulticast mode [ 241.807872][T13114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3209: bg 0: block 4: invalid block bitmap [ 241.830887][T13114] EXT4-fs (loop0): Remounting filesystem read-only [ 241.834535][T13120] can0: slcan on ttyS3. [ 241.838530][T13114] EXT4-fs (loop0): 1 truncate cleaned up [ 241.871038][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 241.880256][T13119] can0 (unregistered): slcan off ttyS3. [ 241.881317][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 241.973525][T13129] bridge0: entered promiscuous mode [ 241.981281][T13129] bridge0: port 3(macsec1) entered blocking state [ 241.988052][T13129] bridge0: port 3(macsec1) entered disabled state [ 241.995019][T13128] loop1: detected capacity change from 0 to 512 [ 241.995345][T13129] macsec1: entered allmulticast mode [ 242.006801][T13129] bridge0: entered allmulticast mode [ 242.016776][T13129] macsec1: left allmulticast mode [ 242.022024][T13129] bridge0: left allmulticast mode [ 242.034871][T13128] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.049887][T13129] bridge0: left promiscuous mode [ 242.077115][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3215'. [ 242.106227][T13135] loop1: detected capacity change from 0 to 1024 [ 242.133088][T13134] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3216: bg 0: block 494: padding at end of block bitmap is not set [ 242.152920][T13134] EXT4-fs (loop1): Remounting filesystem read-only [ 242.159743][T13134] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 242.226601][T13137] netlink: 'syz.0.3217': attribute type 21 has an invalid length. [ 242.234595][T13137] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3217'. [ 242.244302][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 242.257412][T13143] loop3: detected capacity change from 0 to 256 [ 242.287771][ T29] kauditd_printk_skb: 880 callbacks suppressed [ 242.287789][ T29] audit: type=1326 audit(1757945682.393:29334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafe7375b67 code=0x7ffc0000 [ 242.321247][T13145] SELinux: security_context_str_to_sid () failed with errno=-22 [ 242.324956][ T29] audit: type=1326 audit(1757945682.423:29335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafe731ada9 code=0x7ffc0000 [ 242.353314][ T29] audit: type=1326 audit(1757945682.453:29336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafe7375b67 code=0x7ffc0000 [ 242.376949][ T29] audit: type=1326 audit(1757945682.453:29337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafe731ada9 code=0x7ffc0000 [ 242.400486][ T29] audit: type=1326 audit(1757945682.453:29338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fafe737eba9 code=0x7ffc0000 [ 242.424863][ T29] audit: type=1326 audit(1757945682.483:29339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafe7375b67 code=0x7ffc0000 [ 242.430273][T13149] loop1: detected capacity change from 0 to 512 [ 242.448597][ T29] audit: type=1326 audit(1757945682.483:29340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafe731ada9 code=0x7ffc0000 [ 242.472981][T13153] loop3: detected capacity change from 0 to 512 [ 242.478352][ T29] audit: type=1326 audit(1757945682.483:29341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fafe737eba9 code=0x7ffc0000 [ 242.500684][T13153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.508008][ T29] audit: type=1326 audit(1757945682.493:29342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafe7375b67 code=0x7ffc0000 [ 242.523992][T13149] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 242.541358][ T29] audit: type=1326 audit(1757945682.493:29343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13121 comm="syz.4.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafe731ada9 code=0x7ffc0000 [ 242.550709][T13153] EXT4-fs (loop3): 1 truncate cleaned up [ 242.574621][T13156] bond1 (unregistering): Released all slaves [ 242.586869][T13159] loop0: detected capacity change from 0 to 128 [ 242.601503][T13149] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.613465][T13159] wg2: left promiscuous mode [ 242.618184][T13159] wg2: left allmulticast mode [ 242.645808][T13149] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3220: Failed to acquire dquot type 1 [ 242.658146][T13159] wg2: entered promiscuous mode [ 242.663064][T13159] wg2: entered allmulticast mode [ 242.663568][T13149] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3220: bg 0: block 40: padding at end of block bitmap is not set [ 242.688136][T13149] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 242.697679][T13149] EXT4-fs (loop1): 1 truncate cleaned up [ 242.718345][T13165] loop2: detected capacity change from 0 to 512 [ 242.763687][T13165] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.775604][T13171] loop3: detected capacity change from 0 to 1024 [ 242.819261][T13170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3230: bg 0: block 494: padding at end of block bitmap is not set [ 242.859815][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.867323][T13170] EXT4-fs (loop3): Remounting filesystem read-only [ 242.877424][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.887364][T13170] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 242.908769][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.917212][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.936612][T13183] loop2: detected capacity change from 0 to 256 [ 243.074947][T13198] bond3: entered promiscuous mode [ 243.080504][T13198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.095803][T13201] loop3: detected capacity change from 0 to 1024 [ 243.097576][T13198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.111862][T13198] bond3: (slave bond4): making interface the new active one [ 243.119248][T13198] bond4: entered promiscuous mode [ 243.125310][T13198] bond3: (slave bond4): Enslaving as an active interface with an up link [ 243.144692][T13198] loop2: detected capacity change from 0 to 128 [ 243.162202][T13198] wg2: left promiscuous mode [ 243.166958][T13198] wg2: left allmulticast mode [ 243.189055][T13198] wg2: entered promiscuous mode [ 243.194032][T13198] wg2: entered allmulticast mode [ 243.216363][T13211] loop0: detected capacity change from 0 to 512 [ 243.230316][T13211] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.326665][T13225] loop3: detected capacity change from 0 to 256 [ 243.418570][T13230] loop2: detected capacity change from 0 to 512 [ 243.425472][T13230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.426169][T13232] bridge0: entered promiscuous mode [ 243.437700][T13230] EXT4-fs (loop2): 1 truncate cleaned up [ 243.442753][T13232] bridge0: port 3(macsec1) entered blocking state [ 243.452832][T13232] bridge0: port 3(macsec1) entered disabled state [ 243.460134][T13232] macsec1: entered allmulticast mode [ 243.465668][T13232] bridge0: entered allmulticast mode [ 243.472528][T13232] macsec1: left allmulticast mode [ 243.477721][T13232] bridge0: left allmulticast mode [ 243.491384][T13232] bridge0: left promiscuous mode [ 243.922652][T13248] can0: slcan on ttyS3. [ 243.934060][T13250] bond3: entered promiscuous mode [ 243.941186][T13250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.963316][T13250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.971927][T13250] bond3: (slave bond4): making interface the new active one [ 243.979356][T13250] bond4: entered promiscuous mode [ 243.985098][T13250] bond3: (slave bond4): Enslaving as an active interface with an up link [ 243.996713][T13250] loop4: detected capacity change from 0 to 128 [ 244.007615][T13247] can0 (unregistered): slcan off ttyS3. [ 244.046159][T13258] can0: slcan on ttyS3. [ 244.054551][T13260] loop4: detected capacity change from 0 to 512 [ 244.068291][T13258] can0 (unregistered): slcan off ttyS3. [ 244.075781][T13260] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 244.097683][T13260] EXT4-fs (loop4): orphan cleanup on readonly fs [ 244.128044][T13260] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3262: Failed to acquire dquot type 1 [ 244.168015][T13260] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3262: bg 0: block 40: padding at end of block bitmap is not set [ 244.200775][T13273] SELinux: security_context_str_to_sid () failed with errno=-22 [ 244.215785][T13271] loop3: detected capacity change from 0 to 256 [ 244.237340][T13260] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 244.251420][T13275] can0: slcan on ttyS3. [ 244.259297][T13275] loop0: detected capacity change from 0 to 128 [ 244.267142][T13260] EXT4-fs (loop4): 1 truncate cleaned up [ 244.326891][T13279] bond4: entered promiscuous mode [ 244.342947][T13279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.351579][T13258] loop2: detected capacity change from 0 to 32768 [ 244.361664][T13283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.369200][T13283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.379737][T13283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.387171][T13283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.394732][T13281] can0 (unregistered): slcan off ttyS3. [ 244.419213][T13279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.441221][T13291] loop3: detected capacity change from 0 to 128 [ 244.446125][T13279] bond4: (slave bond5): making interface the new active one [ 244.455183][T13279] bond5: entered promiscuous mode [ 244.469736][T13279] bond4: (slave bond5): Enslaving as an active interface with an up link [ 244.481019][T13290] can0: slcan on ttyS3. [ 244.488123][T13290] loop4: detected capacity change from 0 to 128 [ 244.532711][T13295] loop2: detected capacity change from 0 to 512 [ 244.544602][T13295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.562342][T13299] validate_nla: 6 callbacks suppressed [ 244.562362][T13299] netlink: 'syz.0.3279': attribute type 13 has an invalid length. [ 244.571485][T13302] loop1: detected capacity change from 0 to 1024 [ 244.579799][T13295] EXT4-fs (loop2): 1 truncate cleaned up [ 244.617599][T13300] can0 (unregistered): slcan off ttyS3. [ 244.629139][T13302] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.632311][T13311] SELinux: security_context_str_to_sid () failed with errno=-22 [ 244.666230][T13309] loop3: detected capacity change from 0 to 256 [ 244.686014][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.693430][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.717172][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 244.735157][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 244.747970][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.747970][ T31] [ 244.780555][T13318] SELinux: security_context_str_to_sid () failed with errno=-22 [ 244.833884][T13322] loop1: detected capacity change from 0 to 512 [ 244.841893][T13313] netlink: 'syz.2.3283': attribute type 21 has an invalid length. [ 244.846891][T13324] loop3: detected capacity change from 0 to 512 [ 244.858807][T13324] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 244.868808][T13324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.871451][T13322] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.875836][T13324] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3287: Failed to acquire dquot type 1 [ 244.909468][T13324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3287: bg 0: block 40: padding at end of block bitmap is not set [ 244.932286][T13324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 244.941410][T13324] EXT4-fs (loop3): 1 truncate cleaned up [ 244.953836][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.963295][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.973731][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.983419][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.090448][T13338] loop1: detected capacity change from 0 to 1024 [ 245.105051][T13340] loop2: detected capacity change from 0 to 512 [ 245.115351][T13335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3291: bg 0: block 494: padding at end of block bitmap is not set [ 245.116006][T13340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.139757][T13335] EXT4-fs (loop1): Remounting filesystem read-only [ 245.146769][T13335] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 245.156967][T13340] EXT4-fs (loop2): 1 truncate cleaned up [ 245.265432][T13355] loop2: detected capacity change from 0 to 1024 [ 245.284264][T13357] bridge0: entered promiscuous mode [ 245.292388][T13357] bridge0: port 3(macsec1) entered blocking state [ 245.298910][T13357] bridge0: port 3(macsec1) entered disabled state [ 245.321986][T13363] loop1: detected capacity change from 0 to 512 [ 245.338601][T13357] macsec1: entered allmulticast mode [ 245.341344][T13355] __nla_validate_parse: 12 callbacks suppressed [ 245.341367][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'. [ 245.343944][T13357] bridge0: entered allmulticast mode [ 245.363117][T13366] loop4: detected capacity change from 0 to 1024 [ 245.365090][T13357] macsec1: left allmulticast mode [ 245.376190][T13357] bridge0: left allmulticast mode [ 245.376734][T13363] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.383854][T13366] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.406390][T13357] bridge0: left promiscuous mode [ 245.435764][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'. [ 245.444716][T13364] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3299'. [ 245.467219][T13364] batadv0: entered promiscuous mode [ 245.472795][T13364] batadv0: entered allmulticast mode [ 245.483121][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 245.498465][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 245.511100][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 245.511100][ T52] [ 245.526322][T13377] loop1: detected capacity change from 0 to 1024 [ 245.546451][T13377] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3302: bg 0: block 494: padding at end of block bitmap is not set [ 245.561896][T13377] EXT4-fs (loop1): Remounting filesystem read-only [ 245.570384][T13377] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 245.572624][T13385] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 245.614078][T13385] bond5: entered promiscuous mode [ 245.617127][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 245.619485][T13385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.643873][T13391] loop3: detected capacity change from 0 to 1024 [ 245.655709][T13392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.677573][T13392] bond5: (slave bond6): making interface the new active one [ 245.684926][T13392] bond6: entered promiscuous mode [ 245.691227][T13392] bond5: (slave bond6): Enslaving as an active interface with an up link [ 245.704220][T13391] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.752802][T13401] loop4: detected capacity change from 0 to 1024 [ 245.768616][T13403] loop2: detected capacity change from 0 to 512 [ 245.776522][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 245.788294][T13400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3310: bg 0: block 494: padding at end of block bitmap is not set [ 245.791838][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 245.805455][T13403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.812779][T13403] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3312: bg 0: block 4: invalid block bitmap [ 245.818013][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.818013][ T37] [ 245.827954][T13400] EXT4-fs (loop4): Remounting filesystem read-only [ 245.842728][T13403] EXT4-fs (loop2): Remounting filesystem read-only [ 245.850952][T13400] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 245.864444][T13403] EXT4-fs (loop2): 1 truncate cleaned up [ 245.886096][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 245.891590][T13410] loop1: detected capacity change from 0 to 1024 [ 245.895542][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 245.922534][T13410] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.939930][T13412] loop3: detected capacity change from 0 to 512 [ 245.960452][T13412] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.980075][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'. [ 245.990789][ T3466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 393: padding at end of block bitmap is not set [ 246.008576][ T3466] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 246.021254][ T3466] EXT4-fs (loop1): This should not happen!! Data will be lost [ 246.021254][ T3466] [ 246.065740][T13421] loop1: detected capacity change from 0 to 1024 [ 246.109586][T13426] loop4: detected capacity change from 0 to 256 [ 246.150375][T13437] can0: slcan on ttyS3. [ 246.156521][T13439] netlink: 'syz.4.3323': attribute type 1 has an invalid length. [ 246.159829][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3315'. [ 246.175887][T13442] SELinux: security_context_str_to_sid () failed with errno=-22 [ 246.189073][T13439] bond5: entered promiscuous mode [ 246.194383][T13439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.222262][T13439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.229049][T13436] can0 (unregistered): slcan off ttyS3. [ 246.241813][T13439] bond5: (slave bond6): making interface the new active one [ 246.249467][T13439] bond6: entered promiscuous mode [ 246.256328][T13439] bond5: (slave bond6): Enslaving as an active interface with an up link [ 246.279693][T13448] loop3: detected capacity change from 0 to 256 [ 246.301454][T13453] loop0: detected capacity change from 0 to 256 [ 246.308581][T13453] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.321822][T13453] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.395107][T13471] SELinux: security_context_str_to_sid () failed with errno=-22 [ 246.403713][T13467] SELinux: security_context_str_to_sid () failed with errno=-22 [ 246.454550][T13475] loop4: detected capacity change from 0 to 512 [ 246.469340][T13475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.481142][T13480] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 246.492699][T13475] EXT4-fs (loop4): 1 truncate cleaned up [ 246.499921][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.516800][T13487] loop3: detected capacity change from 0 to 1024 [ 246.534415][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.535214][T13487] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.554833][T13480] bond1: entered promiscuous mode [ 246.564675][T13480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.572907][T13495] loop1: detected capacity change from 0 to 256 [ 246.583048][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.601596][T13492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.607586][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.624769][ T3466] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 393: padding at end of block bitmap is not set [ 246.630449][T13492] bond1: (slave bond2): making interface the new active one [ 246.646609][T13492] bond2: entered promiscuous mode [ 246.653009][ T3466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 246.655631][T13492] bond1: (slave bond2): Enslaving as an active interface with an up link [ 246.665698][ T3466] EXT4-fs (loop3): This should not happen!! Data will be lost [ 246.665698][ T3466] [ 246.701094][T13501] loop1: detected capacity change from 0 to 1024 [ 246.713519][T13505] SELinux: security_context_str_to_sid () failed with errno=-22 [ 246.728532][T13507] SELinux: security_context_str_to_sid () failed with errno=-22 [ 246.738324][T13501] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.763938][T13511] FAULT_INJECTION: forcing a failure. [ 246.763938][T13511] name failslab, interval 1, probability 0, space 0, times 0 [ 246.775694][T13513] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 246.776686][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.4.3352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.776719][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.776741][T13511] Call Trace: [ 246.776750][T13511] [ 246.776762][T13511] __dump_stack+0x1d/0x30 [ 246.776794][T13511] dump_stack_lvl+0xe8/0x140 [ 246.776840][T13511] dump_stack+0x15/0x1b [ 246.776937][T13511] should_fail_ex+0x265/0x280 [ 246.776973][T13511] should_failslab+0x8c/0xb0 [ 246.777011][T13511] kmem_cache_alloc_node_noprof+0x57/0x320 [ 246.777055][T13511] ? __alloc_skb+0x101/0x320 [ 246.777099][T13511] __alloc_skb+0x101/0x320 [ 246.777122][T13511] netlink_alloc_large_skb+0xba/0xf0 [ 246.777148][T13511] netlink_sendmsg+0x3cf/0x6b0 [ 246.777213][T13511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.777251][T13511] __sock_sendmsg+0x142/0x180 [ 246.777305][T13511] ____sys_sendmsg+0x31e/0x4e0 [ 246.777347][T13511] ___sys_sendmsg+0x17b/0x1d0 [ 246.777468][T13511] __x64_sys_sendmsg+0xd4/0x160 [ 246.777566][T13511] x64_sys_call+0x191e/0x2ff0 [ 246.777607][T13511] do_syscall_64+0xd2/0x200 [ 246.777653][T13511] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.777689][T13511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.777808][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.777838][T13511] RIP: 0033:0x7fafe737eba9 [ 246.777874][T13511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.777900][T13511] RSP: 002b:00007fafe5de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.777926][T13511] RAX: ffffffffffffffda RBX: 00007fafe75c5fa0 RCX: 00007fafe737eba9 [ 246.777944][T13511] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 246.777984][T13511] RBP: 00007fafe5de7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.778002][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.778019][T13511] R13: 00007fafe75c6038 R14: 00007fafe75c5fa0 R15: 00007ffe63a0e308 [ 246.778045][T13511] [ 246.830559][T13517] loop3: detected capacity change from 0 to 1024 [ 246.851175][ T1456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 393: padding at end of block bitmap is not set [ 246.861504][T13513] bond3: entered promiscuous mode [ 246.976512][T13526] loop0: detected capacity change from 0 to 128 [ 246.986512][ T1456] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 247.013727][T13513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.019889][ T1456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 247.019889][ T1456] [ 247.035161][T13517] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.049142][T13528] loop4: detected capacity change from 0 to 1024 [ 247.070411][T13522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.079209][T13522] bond3: (slave bond4): making interface the new active one [ 247.086542][T13522] bond4: entered promiscuous mode [ 247.092991][T13522] bond3: (slave bond4): Enslaving as an active interface with an up link [ 247.112849][T13528] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.130347][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 247.145466][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 247.158111][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 247.158111][ T37] [ 247.196808][T13538] loop0: detected capacity change from 0 to 512 [ 247.213500][T13540] loop3: detected capacity change from 0 to 128 [ 247.235868][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 247.252870][T13538] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.263902][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 247.276493][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 247.276493][ T37] [ 247.326892][T13551] netlink: 'syz.4.3364': attribute type 1 has an invalid length. [ 247.327073][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 247.327091][ T29] audit: type=1326 audit(1757945687.423:29962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.345674][T13551] bond7: entered promiscuous mode [ 247.369941][ T29] audit: type=1326 audit(1757945687.443:29963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.393732][ T29] audit: type=1326 audit(1757945687.443:29964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.417424][ T29] audit: type=1326 audit(1757945687.443:29965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.441308][ T29] audit: type=1326 audit(1757945687.443:29966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.450046][T13551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.465053][ T29] audit: type=1326 audit(1757945687.443:29967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.495494][ T29] audit: type=1326 audit(1757945687.443:29968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.523306][ T29] audit: type=1326 audit(1757945687.473:29969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.547280][ T29] audit: type=1326 audit(1757945687.473:29970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.571101][ T29] audit: type=1326 audit(1757945687.543:29971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13548 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe345e8eba9 code=0x7ffc0000 [ 247.616730][T13554] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.625652][T13554] bond7: (slave bond8): making interface the new active one [ 247.633239][T13554] bond8: entered promiscuous mode [ 247.639424][T13554] bond7: (slave bond8): Enslaving as an active interface with an up link [ 247.683017][T13549] can0: slcan on ttyS3. [ 247.747884][T13558] can0 (unregistered): slcan off ttyS3. [ 247.758905][T13560] loop2: detected capacity change from 0 to 32768 [ 247.779533][T13567] loop4: detected capacity change from 0 to 1024 [ 247.789783][T13568] loop0: detected capacity change from 0 to 256 [ 247.807385][T13566] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3369: bg 0: block 494: padding at end of block bitmap is not set [ 247.829404][T13566] EXT4-fs (loop4): Remounting filesystem read-only [ 247.836528][T13566] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 247.855889][T13574] bridge0: port 3(macsec1) entered blocking state [ 247.862532][T13574] bridge0: port 3(macsec1) entered disabled state [ 247.869302][T13574] macsec1: entered allmulticast mode [ 247.874770][T13574] bridge0: entered allmulticast mode [ 247.881372][T13574] macsec1: left allmulticast mode [ 247.886423][T13574] bridge0: left allmulticast mode [ 247.909252][T13575] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3370'. [ 247.921330][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 247.924905][T13575] batadv0: entered promiscuous mode [ 247.935847][T13575] batadv0: entered allmulticast mode [ 247.993244][T13582] SELinux: security_context_str_to_sid () failed with errno=-22 [ 248.043263][T13584] loop2: detected capacity change from 0 to 1024 [ 248.079872][T13586] loop4: detected capacity change from 0 to 1024 [ 248.104028][T13592] loop3: detected capacity change from 0 to 512 [ 248.111142][T13584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3375: bg 0: block 494: padding at end of block bitmap is not set [ 248.125881][T13584] EXT4-fs (loop2): Remounting filesystem read-only [ 248.127603][T13586] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.133199][T13584] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 248.172580][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 248.188576][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 248.201163][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 248.201163][ T37] [ 248.217101][T13592] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.235945][T13601] loop1: detected capacity change from 0 to 512 [ 248.254507][T13603] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 248.262732][T13601] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 248.272782][T13601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 248.285689][T13603] bond9: entered promiscuous mode [ 248.291364][T13603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.301044][T13601] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3380: Failed to acquire dquot type 1 [ 248.312844][T13608] loop0: detected capacity change from 0 to 256 [ 248.313394][T13601] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3380: bg 0: block 40: padding at end of block bitmap is not set [ 248.348980][T13603] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.357413][T13601] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 248.358373][T13603] bond9: (slave bond10): making interface the new active one [ 248.373710][T13603] bond10: entered promiscuous mode [ 248.380303][T13603] bond9: (slave bond10): Enslaving as an active interface with an up link [ 248.395322][T13601] EXT4-fs (loop1): 1 truncate cleaned up [ 248.415805][T13611] can0: slcan on ttyS3. [ 248.444074][T13620] loop0: detected capacity change from 0 to 1024 [ 248.458990][T13621] loop3: detected capacity change from 0 to 512 [ 248.467461][T13611] can0 (unregistered): slcan off ttyS3. [ 248.473634][T13618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3385: bg 0: block 494: padding at end of block bitmap is not set [ 248.490722][T13621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.512061][T13618] EXT4-fs (loop0): Remounting filesystem read-only [ 248.528514][T13621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3386: bg 0: block 4: invalid block bitmap [ 248.580895][T13618] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 248.619409][T13621] EXT4-fs (loop3): Remounting filesystem read-only [ 248.646220][T13611] loop2: detected capacity change from 0 to 32768 [ 248.646323][T13621] EXT4-fs (loop3): 1 truncate cleaned up [ 248.797182][T13634] loop0: detected capacity change from 0 to 128 [ 248.806344][T13632] loop2: detected capacity change from 0 to 256 [ 248.827131][T13637] loop3: detected capacity change from 0 to 1024 [ 248.839341][T13634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 248.847228][T13634] FAT-fs (loop0): Filesystem has been set read-only [ 248.862031][T13634] bio_check_eod: 62466 callbacks suppressed [ 248.862048][T13634] syz.0.3390: attempt to access beyond end of device [ 248.862048][T13634] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 248.881924][T13634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 248.889799][T13634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 248.898063][T13633] syz.0.3390: attempt to access beyond end of device [ 248.898063][T13633] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.903164][T13637] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.922574][T13634] syz.0.3390: attempt to access beyond end of device [ 248.922574][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.936138][T13634] syz.0.3390: attempt to access beyond end of device [ 248.936138][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.949613][T13634] syz.0.3390: attempt to access beyond end of device [ 248.949613][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.963041][T13634] syz.0.3390: attempt to access beyond end of device [ 248.963041][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.976443][T13634] syz.0.3390: attempt to access beyond end of device [ 248.976443][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.977832][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 248.989957][T13634] syz.0.3390: attempt to access beyond end of device [ 248.989957][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.005273][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 249.017803][T13634] syz.0.3390: attempt to access beyond end of device [ 249.017803][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.030316][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 249.030316][ T52] [ 249.043626][T13634] syz.0.3390: attempt to access beyond end of device [ 249.043626][T13634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.086286][T13642] loop3: detected capacity change from 0 to 1024 [ 249.098970][T13645] buffer_io_error: 60206 callbacks suppressed [ 249.098990][T13645] Buffer I/O error on dev loop0, logical block 2065, async page read [ 249.113368][T13645] Buffer I/O error on dev loop0, logical block 2066, async page read [ 249.118136][T13648] SELinux: security_context_str_to_sid () failed with errno=-22 [ 249.122208][T13645] Buffer I/O error on dev loop0, logical block 2067, async page read [ 249.138616][T13642] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.150649][T13645] Buffer I/O error on dev loop0, logical block 2068, async page read [ 249.159489][T13645] Buffer I/O error on dev loop0, logical block 2069, async page read [ 249.167801][T13645] Buffer I/O error on dev loop0, logical block 2070, async page read [ 249.171815][T13651] loop2: detected capacity change from 0 to 512 [ 249.176402][T13645] Buffer I/O error on dev loop0, logical block 2071, async page read [ 249.191642][T13645] Buffer I/O error on dev loop0, logical block 2072, async page read [ 249.191935][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 249.199992][T13645] Buffer I/O error on dev loop0, logical block 2065, async page read [ 249.214779][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 249.222913][T13645] Buffer I/O error on dev loop0, logical block 2066, async page read [ 249.234959][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 249.234959][ T52] [ 249.245243][T13651] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 249.268153][T13651] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.283666][T13651] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3395: Failed to acquire dquot type 1 [ 249.316583][T13651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3395: bg 0: block 40: padding at end of block bitmap is not set [ 249.334654][T13655] loop3: detected capacity change from 0 to 256 [ 249.383553][T13658] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 249.397717][T13651] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 249.416153][T13651] EXT4-fs (loop2): 1 truncate cleaned up [ 249.435959][T13658] bond6: entered promiscuous mode [ 249.441221][T13660] loop4: detected capacity change from 0 to 512 [ 249.442123][T13658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.521214][T13660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.534238][T13658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.554797][T13658] bond6: (slave bond7): making interface the new active one [ 249.562192][T13658] bond7: entered promiscuous mode [ 249.569886][T13660] EXT4-fs (loop4): 1 truncate cleaned up [ 249.595051][T13658] bond6: (slave bond7): Enslaving as an active interface with an up link [ 249.742624][T13681] SELinux: security_context_str_to_sid () failed with errno=-22 [ 249.755699][T13678] loop4: detected capacity change from 0 to 1024 [ 249.770889][T13682] loop1: detected capacity change from 0 to 256 [ 249.794437][T13678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3406: bg 0: block 494: padding at end of block bitmap is not set [ 249.942319][T13678] EXT4-fs (loop4): Remounting filesystem read-only [ 250.072194][T13678] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 250.114548][T13695] SELinux: security_context_str_to_sid () failed with errno=-22 [ 250.209189][T13697] loop3: detected capacity change from 0 to 128 [ 250.425104][T13708] loop1: detected capacity change from 0 to 256 [ 250.554774][T13711] loop1: detected capacity change from 0 to 128 [ 250.572261][T13683] ================================================================== [ 250.580402][T13683] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 250.587022][T13683] [ 250.589351][T13683] write to 0xffff88811c0e40f8 of 144 bytes by task 12391 on cpu 0: [ 250.597252][T13683] __bpf_get_stackid+0x761/0x800 [ 250.602234][T13683] bpf_get_stackid+0xee/0x120 [ 250.606927][T13683] bpf_get_stackid_raw_tp+0xf6/0x120 [ 250.612227][T13683] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 250.617694][T13683] bpf_trace_run2+0x107/0x1c0 [ 250.622383][T13683] __traceiter_kfree+0x2b/0x50 [ 250.627157][T13683] kfree+0x27b/0x320 [ 250.631065][T13683] ext4_mb_release+0x59f/0x7f0 [ 250.635846][T13683] ext4_put_super+0x25c/0x7d0 [ 250.640658][T13683] generic_shutdown_super+0xe6/0x210 [ 250.645955][T13683] kill_block_super+0x2a/0x70 [ 250.650644][T13683] ext4_kill_sb+0x42/0x80 [ 250.655001][T13683] deactivate_locked_super+0x72/0x1c0 [ 250.660419][T13683] deactivate_super+0x97/0xa0 [ 250.665125][T13683] cleanup_mnt+0x269/0x2e0 [ 250.669566][T13683] __cleanup_mnt+0x19/0x20 [ 250.674110][T13683] task_work_run+0x12e/0x1a0 [ 250.678737][T13683] exit_to_user_mode_loop+0xe4/0x100 [ 250.684044][T13683] do_syscall_64+0x1d6/0x200 [ 250.688664][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.694575][T13683] [ 250.696905][T13683] read to 0xffff88811c0e4138 of 8 bytes by task 13683 on cpu 1: [ 250.704539][T13683] bcmp+0x23/0x90 [ 250.708180][T13683] __bpf_get_stackid+0x371/0x800 [ 250.713137][T13683] bpf_get_stackid+0xee/0x120 [ 250.717826][T13683] bpf_get_stackid_raw_tp+0xf6/0x120 [ 250.723126][T13683] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 250.728592][T13683] bpf_trace_run2+0x107/0x1c0 [ 250.733281][T13683] __traceiter_kfree+0x2b/0x50 [ 250.738052][T13683] kfree+0x27b/0x320 [ 250.741976][T13683] ___sys_recvmsg+0x135/0x370 [ 250.746675][T13683] do_recvmmsg+0x1ef/0x540 [ 250.751113][T13683] __x64_sys_recvmmsg+0xe5/0x170 [ 250.756085][T13683] x64_sys_call+0x27a6/0x2ff0 [ 250.760772][T13683] do_syscall_64+0xd2/0x200 [ 250.765299][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.771207][T13683] [ 250.773534][T13683] value changed: 0xffffffff81276aa6 -> 0xffffffff81938b1a [ 250.780642][T13683] [ 250.782968][T13683] Reported by Kernel Concurrency Sanitizer on: [ 250.789161][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.0.3401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.798980][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.809059][T13683] ==================================================================