last executing test programs: 2.421575337s ago: executing program 1 (id=4730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000f5ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000001a00)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usbip_server_init(0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x6) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000280)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x13, 0x0, '.\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x2c040000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) unshare(0x2a020400) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000000000000000000000000000096e1467efd263f2bf73782711b3cdf4939d2bbe59eb53d67c9318cea579e792d6ae29e8cd1c2f97c30d04bc427ae6c820e3ff6864b397dfdf07acf55030149da1ad91a9d5d3b064dfcbe3dc577225c6231c6c7adbb4a3d901feb8d322b35b5c103a13e63d62f0762d38239", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000a2f41ef01522de3e4418a715f6216b0748b47bb122d1bba400d78884af51834341f38d133a59800c327e67355793b4147cbef363dc1dd06fbbcd9467f98063e864f95ebb0ee6a4716bc1b02e9c8b9b946c78b80da72247bd7e9cc966eb2c6d8a3ec255d2b77b6e17d77d722761e7256bd9751229fae2110cb815d4b58c0f17941e74afe93ecdabb50e4e3a9b36de68a2a7a5"], 0x54}}, 0x0) 2.039489606s ago: executing program 0 (id=4741): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.926617437s ago: executing program 0 (id=4743): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 'veth1_to_batadv\x00'}}, 0x1e) close(r1) socket$inet6(0xa, 0x2, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x27, &(0x7f0000000180)=0x6, 0x5b) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6d3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000600)=0x0, &(0x7f0000000080)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000047c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) io_uring_enter(r7, 0x1849, 0x0, 0x8, 0x0, 0x0) 1.926010237s ago: executing program 3 (id=4744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pi6 \x00'}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x5, 0x7f5, &(0x7f0000001bc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000340)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) getdents64(r5, 0x0, 0xfffffffffffffd7a) r7 = socket$inet(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000fb036601aadea3084400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r9, &(0x7f00000031c0), 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRESOCT=r8, @ANYRES16=r4, @ANYBLOB="20109adf425fb141fa6066bfb4556096840ca0a82931855846c9cc24bef2a090bfb282eeb3401669fd234f87f3f2e4217fc4aae392b4ef7e4046b32626accc5d6b886fb6d080f404e36605e2e02b5e4091ab98434ef5ff9193752775fb25f987029a3383de5e1f"], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffec8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='kfree\x00', r11}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) 1.809287748s ago: executing program 3 (id=4745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f408, 0x0) 1.808655238s ago: executing program 4 (id=4746): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0xfd14) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="8c5f", 0x2}], 0x1, 0x4, 0x41001, 0x3) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="7c005962714f0c7097760dd7e1cf6be16258360ff760c46006000000f7f551551e4211003eee639cf4686c713234afded6a0507c4d10e90cb9716675c7aa1ad74152ce040000000f66eae7364921f588bcc45849b9118df6c4c541bbea3c0895bd50686ddee62be9e5b40e65f59ab596c7a592177f924a042a1314a1c6bcaf716663d080e33429553fdd197ff40b2636a17448479b5205b63d9d46c7b28f41285b8e7d457f1ca8f285314842145ddf93ca4eeb612133a090d5786818a8cfbbbb6cfe47a3d98ec6eb9a724161ff15f6b6006060edccf15a112cf798ab5cb9648a75d823bf959d04cad6d37ced600d00"/251, 0xfb}, {&(0x7f00000002c0)="932534955661c90aa22a0c28d133c09f388607a92b6ac45850fb4d7c38bded00e7cba8b187f97bfdc6280a37d112793fea95f1ad29f57a8761473d7530144144f30ce019129fcf785123044c8ea17ee475be77cf1697d1c6b5fe7403ce21529033125f0cf2edcde9f527e55c2bfb41f4a206b0dcc5c8afb53ba3af2829bb3173cc08566820cfbad68ae5472260ae5b66f183b94eb91c984c7ebbf3f2d6e2a681e7eec8996ee9fa2d1ae01f3ee8b0df7132249eecb3eca78ced5b8509dddd1d8fc5f6c71467ba54da0d3fc8c334391f7697da85124cf344c7f631c5cc68", 0xdd}, {&(0x7f00000001c0)="378fea083fb6ea49a1663edfdaa5f64a8f0bf5baaa6cb040cde0577f08251788fa127d61e4637e94a233132216cf1f4f3f608f50d435cd25af5fe42d2b5a493df7bef791f10a9d0ad9a3b375d175f98d517189f36769783e32c685338455f44bce7dae9437e5c25639fb6c771f34", 0x6e}, {&(0x7f0000000600)="b82251432d2ac51f1ea663a45f9ed8a69f0254b8d12c710751b4fd73added5d47d849375dd8cf66bed8105ea855afe1b2d21f386979814a156c81b394c1c6d9e03c8828de73451bb9769f9261432f3f2ad828bc1eac95286a1b931c2a65c7adecacc6b9b981491277d2624b8e1caad04b2ad81076a4f672351b17f9e923fcd0b4395365924d6c590", 0x88}], 0x4, 0x7, 0x1, 0x6) 1.657208114s ago: executing program 4 (id=4747): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xc0000484) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x6, 0x5a1, 0x883d}, 0x9c) 1.133929586s ago: executing program 2 (id=4749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x4f8, &(0x7f0000000700)="$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") r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)={0x18, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r4 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 1.054990664s ago: executing program 0 (id=4750): syz_open_dev$usbfs(0x0, 0x75, 0x109301) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='data_err=abort', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)='k', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r6, 0x1) (async, rerun: 64) getsockopt$bt_hci(r6, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffb}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) pwritev2(r7, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1, 0xa00, 0x80000001, 0x0) (async) unshare(0x64000600) 1.020754908s ago: executing program 1 (id=4751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000711d5c1785c2d06315108c99245e722d3383a776ae3a7c2b3ef34e848951a95f63a6450d7793797e0200ab9479b9abb3cc4f7201d3478548057793ae2a1941f809ab5e352231ed61ffa0043c536215ddef13ea83d0a5e12909c193fe649807cc0a923f130f9ae61665eb78d769e40dbb3c43de84beb9303784de6dbb5b50a55c910558cfe619898e5e023854", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000780)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003ff8f0171e9a2bc8"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000140)=0xf4240) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000000c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x307042, 0x30) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1808008, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x6, 0x58f, &(0x7f0000000e80)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x80, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x73db}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) 980.523332ms ago: executing program 3 (id=4752): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x30]}}, &(0x7f0000000400)=""/116, 0x1c, 0x74, 0x0, 0x800, 0x10000, @value}, 0x28) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xc, 0x8, 0xe, 0xf, 0x10, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000500), &(0x7f0000000200)}, 0x20) io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 887.025691ms ago: executing program 0 (id=4753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 886.600731ms ago: executing program 2 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="000000000000000000005c1c0700000000", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="0000000000000000fdffff0000000000000000000000090000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe2181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000e7ff000000000204000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970050000002e752c0017c0647d115e92f52084c920b60a47296ef89fe9b2beda8dbba144fc26d105880a8c342cf652bbb601001374a10b2d7e045bccd375b459a317060a8ced448141e93b7ce36604b0ff22c620ed95da9fa4d962186061ef803ca3f5d2e6e630ec03535234d29c9a0d0927b003fdec3d0c20052c71140ed5a438f0d24191cfcaef0b2127a3262e42ddd4aac3b5d43f77bb1166a6847a8be5f55b8281dc4d1a763446439e603736573787695f135bbe5bbb978abd5760990c448f7757649bf4aa22293abfb36047f479cbe9b2ebf339c06207488d272e42bc0204e685856142"]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 884.080241ms ago: executing program 0 (id=4755): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x17ff, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 870.737192ms ago: executing program 2 (id=4756): unshare(0x20400) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x5c, @rand_addr=0x64010102, 0x4e24, 0x3, 'sed\x00', 0x600, 0x8000, 0x6d}, 0x2c) 863.530993ms ago: executing program 0 (id=4757): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 836.085636ms ago: executing program 3 (id=4758): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000002a80)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0xff, 0x313, &(0x7f0000000580)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 808.723588ms ago: executing program 2 (id=4759): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nodelalloc}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000980)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCDKK2nSUnpAQiCQOICEBIdyDElalboNaoJEq4oWhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAvLZyM1t5NbMd2HnXsUP9+0jozu2PPfN6d9exONoC+NZq+JBE7I+KPiBiuZusLjFb/3L55afqfm5emkyiX3/47qZS7dfPSdF40f9+OPDMQUfgsif1N6p2/cPHMVKk0ez7Ljy+c/WB8/sLF506fnTo1e2r23OTx40ePTLxwbPL5jsSZxnVr38dzB/a+/u61N6dPXHvvl++SPP6GODpktN3GJ8rlDlfXW7tq0slADxvCmhSr3TQGK/1/OIqxtPOG47VPe9o4YEOVy+Xy/a03XykDd7Gkcg4ovxS9bgjQZfkPfXr9my9dGnpsCjderl4ApXHfzpbqloEoZGUGG65vO2k0Ik5c+ffrdImNuQ8BAFDnh3T882yz8V8hau8L3ZPNoYxExL0RsTsijkXEnoi4L6JS9oGIeHCN9TdOkiwf/xSuryuwVUrHfy9mc1v147989BcjxSy3qxL/YHLydGn2cPadHIrBLWl+ok0dP776+xetttWO/9IlrT8fC2btuD6wpf49M1MLU3cSc60bn0TsG2gWf7I4E5BExN6I2LfOOk4//e2BVttWjr+NDswzlb+JeLK6/69EQ/y5pP385PjWKM0eHs+PiuV+/e3qW63qv6P4OyDd/9ubHv+L8Y8ktfO182v59K+eSl+v/vl5y2ua9R7/Q8k7des+mlpYOD8RMZS8UW107frJhnKTS+XT+A8dbN7/d8fSN7E/ItKD+KGIeDgiHsna/mhEPBYRB9t8Cz+/8vj7649/Y6Xxz6xp/y8lhqJxTfNE8cxP39dVOrL04avb/0crqUPZmtWc/1bTrrUezQAAAPB/VYiInZEUxhbThcLYWPV/+PfE9kJpbn7hmZNzH56bqT4jMBKDhfxO13DN/dCJ7J5Lnp9syB/J7ht/WdxWyY9Nz5Vmeh089LkdLfp/6q9ir1sHbDjPa0H/0v+hf+n/0L/0f+hfTfr/tl60A+i+Zr//l1d+29aNaAvQXQ3937Qf9BHX/9C/1tP/nTPg7tC2Lw91rx1AV81vi5UfkpeQWJaIwqZoxiZKXN4czehQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//8cB+YG") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 808.300498ms ago: executing program 1 (id=4760): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000007c0)={0x11d, 0x12, &(0x7f0000000340)}) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500340600fe8000000000000000000000000000bbfe80000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000090780000fe06e2d4c3d903030004020402131227406263e43d59dbe1e81b5d6f966a54a764d9e204b34ce0bcd63bd1116edc00"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, &(0x7f00000008c0)=""/19, &(0x7f0000000980)="976fba81a3a6999d3b9201153bfab312b2044e2cf3e3a7eea08fc45d36ac35f3ba89d75f4a76e18064997fc13be1fc05b41462d70f5282774fef66873e55fd808457baea9eb2d9460426338c1aefcc8522383c1f3e675492c74b0a761f4b4e4fc3364a88e6461b8437833e59f4f0ec79c4ae", &(0x7f0000000a00)="ef4876298018bcef0ef06c46203c26724a4057216898165e6a7ce1288281a212374fe692b0ef6a5598867b824103d3a9d8b7d2e11dcbd6ce08b516ea20d49e51a5fa94a5200ec48a898cbe2a8f71d1bbaa7154e64da81420b2da30732cd1b8af8b9e2ce1c1bfffa82017c7a9d2afd36ed1", 0x68f, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r1, 0x0, 0x4040850) 807.723619ms ago: executing program 4 (id=4761): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0xfd14) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="7c005962714f0c7097760dd7e1cf6be16258360ff760c46006000000f7f551551e4211003eee639cf4686c713234afded6a0507c4d10e90cb9716675c7aa1ad74152ce040000000f66eae7364921f588bcc45849b9118df6c4c541bbea3c0895bd50686ddee62be9e5b40e65f59ab596c7a592177f924a042a1314a1c6bcaf716663d080e33429553fdd197ff40b2636a17448479b5205b63d9d46c7b28f41285b8e7d457f1ca8f285314842145ddf93ca4eeb612133a090d5786818a8cfbbbb6cfe47a3d98ec6eb9a724161ff15f6b6006060edccf15a112cf798ab5cb9648a75d823bf959d04cad6d37ced600d00"/251, 0xfb}, {&(0x7f00000002c0)="932534955661c90aa22a0c28d133c09f388607a92b6ac45850fb4d7c38bded00e7cba8b187f97bfdc6280a37d112793fea95f1ad29f57a8761473d7530144144f30ce019129fcf785123044c8ea17ee475be77cf1697d1c6b5fe7403ce21529033125f0cf2edcde9f527e55c2bfb41f4a206b0dcc5c8afb53ba3af2829bb3173cc08566820cfbad68ae5472260ae5b66f183b94eb91c984c7ebbf3f2d6e2a681e7eec8996ee9fa2d1ae01f3ee8b0df7132249eecb3eca78ced5b8509dddd1d8fc5f6c71467ba54da0d3fc8c334391f7697da85124cf344c7f631c5cc68", 0xdd}, {&(0x7f00000001c0)="378fea083fb6ea49a1663edfdaa5f64a8f0bf5baaa6cb040cde0577f08251788fa127d61e4637e94a233132216cf1f4f3f608f50d435cd25af5fe42d2b5a493df7bef791f10a9d0ad9a3b375d175f98d517189f36769783e32c685338455f44bce7dae9437e5c25639fb6c771f34", 0x6e}, {&(0x7f0000000600)="b82251432d2ac51f1ea663a45f9ed8a69f0254b8d12c710751b4fd73added5d47d849375dd8cf66bed8105ea855afe1b2d21f386979814a156c81b394c1c6d9e03c8828de73451bb9769f9261432f3f2ad828bc1eac95286a1b931c2a65c7adecacc6b9b981491277d2624b8e1caad04b2ad81076a4f672351b17f9e923fcd0b4395365924d6c590", 0x88}], 0x4, 0x7, 0x1, 0x6) 466.216363ms ago: executing program 4 (id=4762): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xee, 0x6, @random}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 64) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b0000a3c1505b7c11006575000000000000003e18fde7810b0e5bb4eaeb6543b1000000000000000000660e4c689dd3c86a1e84d8e8f144d8cbfd18bd573abf2577ebf7c190d50fde5be3479009b7323d"], 0x15) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}], [], 0x6b}}) (async) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) (async) chdir(&(0x7f0000000200)='./file0\x00') (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x2, 0x2d8}) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000300)={&(0x7f0000000180)=""/120, 0x78, 0xfffffffc, 0x9}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 355.041324ms ago: executing program 4 (id=4763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x3, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000400)}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000540)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') socketpair$unix(0x1, 0x2, 0x0, 0x0) statfs(&(0x7f0000000380)='./file2\x00', &(0x7f0000000440)=""/211) r4 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$P9_RREADDIR(r4, &(0x7f0000000100)={0x2a, 0x29, 0x0, {0x0, [{{0x0, 0x2, 0x4}, 0x9, 0x28, 0x7, './file0'}]}}, 0x2a) sendfile(r4, r4, &(0x7f0000000240), 0x7f03) 285.321651ms ago: executing program 3 (id=4764): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000002a80)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0xff, 0x313, &(0x7f0000000580)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 267.608353ms ago: executing program 2 (id=4765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 207.044149ms ago: executing program 1 (id=4766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x6d10, &(0x7f00000002c0)={0x0, 0x800, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x701a, &(0x7f00000003c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 110.664599ms ago: executing program 1 (id=4767): io_setup(0x2004, &(0x7f0000000680)) 107.604359ms ago: executing program 2 (id=4768): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x30]}}, &(0x7f0000000400)=""/116, 0x1c, 0x74, 0x0, 0x800, 0x10000, @value}, 0x28) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xc, 0x8, 0xe, 0xf, 0x10, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000500), &(0x7f0000000200)}, 0x20) io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 82.969402ms ago: executing program 4 (id=4769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f0000000040)='./file1\x00', 0x0, r4) syz_clone3(&(0x7f0000000b40)={0x8000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000380), {0x40}, &(0x7f0000000580)=""/255, 0xff, &(0x7f0000000480)=""/157, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@local, @in6=@local}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000840)=0xe8) openat$snapshot(0xffffff9c, &(0x7f0000000900), 0x606040, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getgid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000001, 0x0, 0x0) 24.783967ms ago: executing program 3 (id=4770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2, 0x0, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) syz_emit_ethernet(0xdc, &(0x7f0000000a40)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "17213b", 0xa6, 0x6, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, {[@hopopts={0x2c, 0xd, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x4, 0x43, "dfa36ddf5cc73abcafd7d61ee5b5c9e36fe2a2db6e80598c21218558c09ae6f299e08c0d5fd7c69b4e791910fa486ba22f7092b7d4d3e24e78aa299afa25290def8f1b"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x0, 0x1, 0xb, 0x3, 0x2, 0x8, 0x0, 0x1, 0x4, 0x2, 0x1, 0xa75, 0x0, 0x4, 0x4e20, 0x4e21}, 0x4, 0x2}, 0x4, 0x3}}}, [0x0, 0x0]}}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = gettid() r10 = timerfd_create(0x0, 0x0) read(r10, &(0x7f0000000240)=""/123, 0x7b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 1 (id=4771): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") (async) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r1, 0x7fff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") (async) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) (async) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) (async) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x4c02, &(0x7f0000000140)) (async) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r5, 0xc, &(0x7f0000000080)={0xa9, 0xffff}, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) (async) ftruncate(r1, 0x1f) write$P9_RLERROR(r1, &(0x7f00000000c0)=ANY=[], 0xa) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) kernel console output (not intermixed with test programs): ): 1 truncate cleaned up [ 355.257083][T17681] should_fail_ex+0x223/0x230 [ 355.257155][T17681] should_fail+0xb/0x10 [ 355.272295][T17678] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 355.276733][T17681] should_fail_usercopy+0x1a/0x20 [ 355.276769][T17681] _copy_from_user+0x1e/0xd0 [ 355.283125][T17678] netlink: 'syz.2.4435': attribute type 10 has an invalid length. [ 355.285551][T17681] memdup_user+0x64/0xc0 [ 355.298787][T17678] can0: slcan on ttyS3. [ 355.301033][T17681] strndup_user+0x68/0xa0 [ 355.301058][T17681] perf_uprobe_init+0x49/0x140 [ 355.301099][T17681] perf_uprobe_event_init+0xe2/0x140 [ 355.301122][T17681] perf_try_init_event+0xcb/0x4f0 [ 355.341437][T17681] ? perf_event_alloc+0xabf/0x1750 [ 355.346578][T17681] perf_event_alloc+0xaca/0x1750 [ 355.351525][T17681] __se_sys_perf_event_open+0x5e8/0x21f0 [ 355.357303][T17681] ? xfd_validate_state+0x46/0xf0 [ 355.362335][T17681] ? save_fpregs_to_fpstate+0x102/0x160 [ 355.368003][T17681] __x64_sys_perf_event_open+0x67/0x80 [ 355.373488][T17681] x64_sys_call+0x18d7/0x2d60 [ 355.378227][T17681] do_syscall_64+0xc9/0x1c0 [ 355.382756][T17681] ? clear_bhb_loop+0x55/0xb0 [ 355.387435][T17681] ? clear_bhb_loop+0x55/0xb0 [ 355.392111][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.398042][T17681] RIP: 0033:0x7f18da2adff9 [ 355.402532][T17681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.422139][T17681] RSP: 002b:00007f18d8f21038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 355.430617][T17681] RAX: ffffffffffffffda RBX: 00007f18da465f80 RCX: 00007f18da2adff9 [ 355.438584][T17681] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000140 [ 355.446563][T17681] RBP: 00007f18d8f21090 R08: 0000000000000000 R09: 0000000000000000 [ 355.454611][T17681] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 355.462651][T17681] R13: 0000000000000000 R14: 00007f18da465f80 R15: 00007ffcc4ba9178 [ 355.470621][T17681] [ 355.494687][T17686] loop3: detected capacity change from 0 to 512 [ 355.501533][T17686] EXT4-fs: Ignoring removed i_version option [ 355.507640][T17686] EXT4-fs: Ignoring removed nobh option [ 355.514761][T17686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 355.521826][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 355.521841][ T29] audit: type=1326 audit(1727667024.817:30108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.554681][ T29] audit: type=1326 audit(1727667024.817:30109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.575734][T17686] EXT4-fs (loop3): 1 truncate cleaned up [ 355.578421][ T29] audit: type=1326 audit(1727667024.817:30110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.665688][T17677] can0 (unregistered): slcan off ttyS3. [ 355.666724][ T29] audit: type=1326 audit(1727667024.827:30111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.694904][ T29] audit: type=1326 audit(1727667024.827:30112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.718531][ T29] audit: type=1326 audit(1727667024.827:30113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.742048][ T29] audit: type=1326 audit(1727667024.827:30114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.765708][ T29] audit: type=1326 audit(1727667024.827:30115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.789283][ T29] audit: type=1326 audit(1727667024.827:30116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.812852][ T29] audit: type=1326 audit(1727667024.827:30117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17685 comm="syz.0.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f18da2adff9 code=0x7ffc0000 [ 355.925550][T17712] loop1: detected capacity change from 0 to 512 [ 355.947355][T17712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 355.970412][T17712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 356.030660][T17717] loop2: detected capacity change from 0 to 512 [ 356.069109][T17717] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 356.081476][T17712] EXT4-fs (loop1): 1 truncate cleaned up [ 356.095916][T17717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 356.122576][T17717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 356.145193][T17717] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4449: bg 0: block 361: padding at end of block bitmap is not set [ 356.188465][T17717] EXT4-fs (loop2): Remounting filesystem read-only [ 356.214482][T17717] EXT4-fs (loop2): 1 truncate cleaned up [ 356.227537][T17717] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 356.280756][T17730] loop4: detected capacity change from 0 to 2048 [ 356.294714][T17733] loop0: detected capacity change from 0 to 512 [ 356.319546][T17730] loop4: p1 < > p4 [ 356.323989][T17730] loop4: p4 size 8388608 extends beyond EOD, truncated [ 356.324437][T17733] ext4: Unknown parameter 'fsname' [ 356.427184][T17740] loop0: detected capacity change from 0 to 128 [ 356.489143][T17740] bio_check_eod: 108 callbacks suppressed [ 356.489157][T17740] syz.0.4458: attempt to access beyond end of device [ 356.489157][T17740] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 356.558066][T17739] syz.0.4458: attempt to access beyond end of device [ 356.558066][T17739] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 356.592169][T17739] syz.0.4458: attempt to access beyond end of device [ 356.592169][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.627009][T17739] syz.0.4458: attempt to access beyond end of device [ 356.627009][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.645870][T17739] syz.0.4458: attempt to access beyond end of device [ 356.645870][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.669397][T17739] syz.0.4458: attempt to access beyond end of device [ 356.669397][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.712330][T17739] syz.0.4458: attempt to access beyond end of device [ 356.712330][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.729264][T17739] syz.0.4458: attempt to access beyond end of device [ 356.729264][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.759238][T17739] syz.0.4458: attempt to access beyond end of device [ 356.759238][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.778666][T17739] syz.0.4458: attempt to access beyond end of device [ 356.778666][T17739] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 356.814649][T17750] loop0: detected capacity change from 0 to 512 [ 356.879301][T17759] 9pnet_fd: Insufficient options for proto=fd [ 356.918251][T17765] bpf_get_probe_write_proto: 11 callbacks suppressed [ 356.918269][T17765] syz.3.4466[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.925092][T17765] syz.3.4466[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.925707][T17767] can0: slcan on ttyS3. [ 356.938592][T17765] syz.3.4466[17765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.971422][T17769] loop3: detected capacity change from 0 to 1024 [ 356.975794][T17767] can0 (unregistered): slcan off ttyS3. [ 356.994936][T17767] Falling back ldisc for ttyS3. [ 357.041756][T17769] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 357.058757][T17769] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 357.071152][T17769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 357.071152][T17769] [ 357.080942][T17769] EXT4-fs (loop3): Total free blocks count 0 [ 357.086944][T17769] EXT4-fs (loop3): Free/Dirty block details [ 357.092891][T17769] EXT4-fs (loop3): free_blocks=68451041280 [ 357.098778][T17769] EXT4-fs (loop3): dirty_blocks=16 [ 357.103930][T17769] EXT4-fs (loop3): Block reservation details [ 357.109917][T17769] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 357.138139][T17777] loop3: detected capacity change from 0 to 512 [ 357.144914][T17777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.156278][T17777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 357.171198][T17777] EXT4-fs (loop3): 1 truncate cleaned up [ 357.669067][T17811] loop0: detected capacity change from 0 to 512 [ 357.677101][T17811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 357.690817][T17811] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 357.708530][T17811] EXT4-fs (loop0): 1 truncate cleaned up [ 357.768340][T17815] loop0: detected capacity change from 0 to 1024 [ 357.912756][T17821] loop1: detected capacity change from 0 to 512 [ 357.935203][T17821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 357.969288][T17821] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 357.993872][T17821] EXT4-fs (loop1): 1 truncate cleaned up [ 358.152280][T17815] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 358.200842][T17815] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 358.213263][T17815] EXT4-fs (loop0): This should not happen!! Data will be lost [ 358.213263][T17815] [ 358.222910][T17815] EXT4-fs (loop0): Total free blocks count 0 [ 358.228915][T17815] EXT4-fs (loop0): Free/Dirty block details [ 358.234803][T17815] EXT4-fs (loop0): free_blocks=68451041280 [ 358.240648][T17815] EXT4-fs (loop0): dirty_blocks=16 [ 358.245805][T17815] EXT4-fs (loop0): Block reservation details [ 358.251962][T17815] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 358.282007][T17815] syz.0.4482 (17815) used greatest stack depth: 9080 bytes left [ 358.344027][T17839] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55379 sclass=netlink_audit_socket pid=17839 comm=syz.1.4490 [ 358.361306][T17839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 358.367118][T17831] loop2: detected capacity change from 0 to 512 [ 358.371139][T17839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.378640][T17831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.389673][T17839] dummy0: entered promiscuous mode [ 358.398818][T17831] EXT4-fs (loop2): 1 truncate cleaned up [ 358.403534][T17839] batman_adv: batadv0: Adding interface: macsec1 [ 358.411877][T17831] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 358.414492][T17839] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.467567][T17839] batman_adv: batadv0: Interface activated: macsec1 [ 358.532413][T17849] loop1: detected capacity change from 0 to 512 [ 358.541104][T17849] ext4: Unknown parameter 'fsname' [ 358.549575][T17851] loop4: detected capacity change from 0 to 2048 [ 358.616417][T17851] loop4: p1 < > p4 [ 358.620847][T17851] loop4: p4 size 8388608 extends beyond EOD, truncated [ 359.070093][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.079208][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.088177][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.104356][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.113441][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.122614][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.146873][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.156072][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.157366][T17865] loop0: detected capacity change from 0 to 1024 [ 359.165030][T17860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 359.240911][T17876] loop4: detected capacity change from 0 to 512 [ 359.247689][T17876] EXT4-fs: Ignoring removed i_version option [ 359.253752][T17876] EXT4-fs: Ignoring removed nobh option [ 359.259743][T17876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.282062][T17876] EXT4-fs (loop4): 1 truncate cleaned up [ 359.371129][T17865] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 359.381309][T17879] loop2: detected capacity change from 0 to 512 [ 359.388064][T17865] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 359.399212][T17881] loop1: detected capacity change from 0 to 128 [ 359.404921][T17865] EXT4-fs (loop0): This should not happen!! Data will be lost [ 359.404921][T17865] [ 359.420907][T17865] EXT4-fs (loop0): Total free blocks count 0 [ 359.427005][T17865] EXT4-fs (loop0): Free/Dirty block details [ 359.433118][T17865] EXT4-fs (loop0): free_blocks=68451041280 [ 359.439003][T17865] EXT4-fs (loop0): dirty_blocks=16 [ 359.444117][T17865] EXT4-fs (loop0): Block reservation details [ 359.450250][T17865] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 359.456660][T17879] EXT4-fs (loop2): too many log groups per flexible block group [ 359.464379][T17879] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 359.479581][T17879] EXT4-fs (loop2): mount failed [ 359.614518][T17890] loop2: detected capacity change from 0 to 512 [ 359.624016][T17890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 359.636751][T17890] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 359.639871][T17895] loop0: detected capacity change from 0 to 512 [ 359.757163][T17890] EXT4-fs (loop2): 1 truncate cleaned up [ 359.766422][T17895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 359.806697][T17895] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 359.856972][T17895] EXT4-fs (loop0): 1 truncate cleaned up [ 367.550940][T17909] loop2: detected capacity change from 0 to 512 [ 367.622589][T17913] can0: slcan on ttyS3. [ 367.624240][T17916] loop2: detected capacity change from 0 to 512 [ 367.684560][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 367.684576][ T29] audit: type=1326 audit(1727667036.987:30560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.714431][ T29] audit: type=1326 audit(1727667036.987:30561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.739071][ T29] audit: type=1326 audit(1727667037.047:30562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.762858][ T29] audit: type=1326 audit(1727667037.047:30563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.786551][ T29] audit: type=1326 audit(1727667037.047:30564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.810246][ T29] audit: type=1326 audit(1727667037.047:30565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.833998][ T29] audit: type=1326 audit(1727667037.047:30566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.855704][T17913] can0 (unregistered): slcan off ttyS3. [ 367.857481][ T29] audit: type=1326 audit(1727667037.047:30567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.872285][T17913] Falling back ldisc for ttyS3. [ 367.886663][ T29] audit: type=1326 audit(1727667037.047:30568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.915212][ T29] audit: type=1326 audit(1727667037.047:30569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524848dff9 code=0x7ffc0000 [ 367.968372][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.047133][T17921] chnl_net:caif_netlink_parms(): no params data found [ 368.065128][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.157346][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.194934][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.202178][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.244431][T17921] bridge_slave_0: entered allmulticast mode [ 368.269430][T17921] bridge_slave_0: entered promiscuous mode [ 368.293340][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.321434][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.328742][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.364516][T17921] bridge_slave_1: entered allmulticast mode [ 368.397692][T17921] bridge_slave_1: entered promiscuous mode [ 368.451814][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.476542][ T28] bridge_slave_1: left allmulticast mode [ 368.482228][ T28] bridge_slave_1: left promiscuous mode [ 368.488150][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.503655][ T28] bridge_slave_0: left allmulticast mode [ 368.509461][ T28] bridge_slave_0: left promiscuous mode [ 368.515427][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.541684][T17968] loop4: detected capacity change from 0 to 512 [ 368.623066][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.632625][T17974] 9pnet_fd: Insufficient options for proto=fd [ 368.641616][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.654588][ T28] bond0 (unregistering): Released all slaves [ 368.664427][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.694569][T17921] team0: Port device team_slave_0 added [ 368.701590][T17921] team0: Port device team_slave_1 added [ 368.719177][T17978] can0: slcan on ttyS3. [ 368.719406][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.730670][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.757210][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.768698][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.775970][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.802500][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.817802][ T28] hsr_slave_0: left promiscuous mode [ 368.823672][ T28] hsr_slave_1: left promiscuous mode [ 368.831105][ T28] batman_adv: batadv0: Removing interface: team0 [ 368.837944][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.843251][T17981] loop2: detected capacity change from 0 to 512 [ 368.852114][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.859694][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.861068][T17981] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.877518][T17978] can0 (unregistered): slcan off ttyS3. [ 368.883160][T17978] Falling back ldisc for ttyS3. [ 368.883327][ T28] veth1_macvtap: left promiscuous mode [ 368.893921][ T28] veth0_macvtap: left promiscuous mode [ 368.908143][T17981] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.4530: iget: bad i_size value: -6917529027641081756 [ 368.913380][T17988] loop1: detected capacity change from 0 to 512 [ 368.922918][T17981] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.4530: couldn't read orphan inode 17 (err -117) [ 368.942489][T17988] EXT4-fs: Ignoring removed i_version option [ 368.948816][T17988] EXT4-fs: Ignoring removed nobh option [ 368.958193][T17988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 368.980146][T17988] EXT4-fs (loop1): 1 truncate cleaned up [ 368.992635][ T28] team0 (unregistering): Port device team_slave_1 removed [ 368.998145][T17991] loop2: detected capacity change from 0 to 512 [ 369.007855][ T28] team0 (unregistering): Port device team_slave_0 removed [ 369.065321][T17991] EXT4-fs (loop2): too many log groups per flexible block group [ 369.073536][T17991] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 369.083362][T17991] EXT4-fs (loop2): mount failed [ 369.097130][T17921] hsr_slave_0: entered promiscuous mode [ 369.103429][T17921] hsr_slave_1: entered promiscuous mode [ 369.110762][T17921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.118372][T17921] Cannot create hsr debugfs directory [ 369.330713][T18000] loop0: detected capacity change from 0 to 512 [ 369.347392][T18000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 369.368684][T18000] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 369.395898][T18000] EXT4-fs (loop0): 1 truncate cleaned up [ 369.480157][T17921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.500244][T17921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.520008][T17921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.520854][T18010] FAULT_INJECTION: forcing a failure. [ 369.520854][T18010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.539941][T18010] CPU: 1 UID: 0 PID: 18010 Comm: syz.0.4538 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 369.551938][T18010] Tainted: [W]=WARN [ 369.555736][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.565788][T18010] Call Trace: [ 369.569156][T18010] [ 369.572347][T18010] dump_stack_lvl+0xf2/0x150 [ 369.577001][T18010] dump_stack+0x15/0x20 [ 369.581265][T18010] should_fail_ex+0x223/0x230 [ 369.586042][T18010] should_fail+0xb/0x10 [ 369.590207][T18010] should_fail_usercopy+0x1a/0x20 [ 369.595255][T18010] _copy_from_user+0x1e/0xd0 [ 369.599898][T18010] kstrtouint_from_user+0x76/0xe0 [ 369.604943][T18010] ? 0xffffffff81000000 [ 369.609149][T18010] proc_fail_nth_write+0x4f/0x150 [ 369.614226][T18010] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.619963][T18010] vfs_write+0x26c/0x910 [ 369.624236][T18010] ? __fget_files+0x1d4/0x210 [ 369.628930][T18010] ksys_write+0xeb/0x1b0 [ 369.633215][T18010] __x64_sys_write+0x42/0x50 [ 369.637910][T18010] x64_sys_call+0x27dd/0x2d60 [ 369.642715][T18010] do_syscall_64+0xc9/0x1c0 [ 369.647236][T18010] ? clear_bhb_loop+0x55/0xb0 [ 369.651945][T18010] ? clear_bhb_loop+0x55/0xb0 [ 369.656717][T18010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.662828][T18010] RIP: 0033:0x7f18da2acadf [ 369.667295][T18010] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 369.687000][T18010] RSP: 002b:00007f18d8f21030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.695520][T18010] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f18da2acadf [ 369.703503][T18010] RDX: 0000000000000001 RSI: 00007f18d8f210a0 RDI: 0000000000000005 [ 369.711603][T18010] RBP: 00007f18d8f21090 R08: 0000000000000000 R09: 0000000000000000 [ 369.719806][T18010] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 369.727814][T18010] R13: 0000000000000000 R14: 00007f18da465f80 R15: 00007ffcc4ba9178 [ 369.735884][T18010] [ 369.755372][T17921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.777679][T18012] netlink: 484 bytes leftover after parsing attributes in process `syz.0.4539'. [ 369.787225][T18012] netlink: 162 bytes leftover after parsing attributes in process `syz.0.4539'. [ 369.816380][T17921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.830183][T17921] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.844005][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.851097][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.851273][T18017] loop0: detected capacity change from 0 to 512 [ 369.866260][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.873396][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.881154][T18017] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.897508][T17921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.911300][T18017] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.4541: iget: bad i_size value: -6917529027641081756 [ 369.927423][T18017] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.4541: couldn't read orphan inode 17 (err -117) [ 369.967283][T17921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.004127][T18039] syz.0.4545[18039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.004180][T18039] syz.0.4545[18039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.017692][T18039] syz.0.4545[18039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.041805][T17921] veth0_vlan: entered promiscuous mode [ 370.062229][T17921] veth1_vlan: entered promiscuous mode [ 370.081121][T17921] veth0_macvtap: entered promiscuous mode [ 370.090724][T17921] veth1_macvtap: entered promiscuous mode [ 370.102605][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.113247][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.123172][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.133847][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.143849][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.154339][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.165195][T17921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.176388][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.187259][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.197078][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.207605][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.217480][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.228004][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.237941][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.248812][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.258801][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.269425][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.279744][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.290449][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.300508][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.311124][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.324421][T17921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.333789][T17921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.342915][T17921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.351883][T17921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.360780][T17921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.502188][T18069] loop0: detected capacity change from 0 to 512 [ 370.509511][T18069] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 370.531849][T18069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 370.531999][T18069] EXT4-fs (loop0): orphan cleanup on readonly fs [ 370.547483][T18069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4554: bg 0: block 361: padding at end of block bitmap is not set [ 370.547644][T18069] EXT4-fs (loop0): Remounting filesystem read-only [ 370.547852][T18069] EXT4-fs (loop0): 1 truncate cleaned up [ 370.548268][T18069] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 370.802635][T18079] FAULT_INJECTION: forcing a failure. [ 370.802635][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 370.815423][T18079] CPU: 1 UID: 0 PID: 18079 Comm: syz.1.4557 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 370.827492][T18079] Tainted: [W]=WARN [ 370.831301][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.838966][T18081] netlink: 'syz.2.4558': attribute type 10 has an invalid length. [ 370.841469][T18079] Call Trace: [ 370.841478][T18079] [ 370.841486][T18079] dump_stack_lvl+0xf2/0x150 [ 370.860196][T18079] dump_stack+0x15/0x20 [ 370.864396][T18079] should_fail_ex+0x223/0x230 [ 370.869380][T18079] ? alloc_fs_context+0x44/0x4e0 [ 370.874326][T18079] should_failslab+0x8f/0xb0 [ 370.878969][T18079] __kmalloc_cache_noprof+0x4b/0x2a0 [ 370.884432][T18079] alloc_fs_context+0x44/0x4e0 [ 370.889374][T18079] ? __traceiter_kfree+0x2b/0x50 [ 370.894458][T18079] ? kfree+0xd8/0x2f0 [ 370.898432][T18079] fs_context_for_mount+0x21/0x30 [ 370.903543][T18079] __se_sys_fsopen+0x96/0x1c0 [ 370.908374][T18079] __x64_sys_fsopen+0x31/0x40 [ 370.913100][T18079] x64_sys_call+0x2765/0x2d60 [ 370.917775][T18079] do_syscall_64+0xc9/0x1c0 [ 370.922648][T18079] ? clear_bhb_loop+0x55/0xb0 [ 370.927403][T18079] ? clear_bhb_loop+0x55/0xb0 [ 370.932142][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.938204][T18079] RIP: 0033:0x7fa2d529dff9 [ 370.942614][T18079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.962908][T18079] RSP: 002b:00007fa2d3f17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 370.971492][T18079] RAX: ffffffffffffffda RBX: 00007fa2d5455f80 RCX: 00007fa2d529dff9 [ 370.979495][T18079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 370.987480][T18079] RBP: 00007fa2d3f17090 R08: 0000000000000000 R09: 0000000000000000 [ 370.995639][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.003619][T18079] R13: 0000000000000000 R14: 00007fa2d5455f80 R15: 00007ffef603b868 [ 371.011829][T18079] [ 371.163259][T18096] loop0: detected capacity change from 0 to 1024 [ 371.239750][T18096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 371.241849][T18102] loop4: detected capacity change from 0 to 512 [ 371.262068][T18096] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 371.274782][T18096] EXT4-fs (loop0): This should not happen!! Data will be lost [ 371.274782][T18096] [ 371.284489][T18096] EXT4-fs (loop0): Total free blocks count 0 [ 371.290537][T18096] EXT4-fs (loop0): Free/Dirty block details [ 371.296575][T18096] EXT4-fs (loop0): free_blocks=68451041280 [ 371.302409][T18096] EXT4-fs (loop0): dirty_blocks=16 [ 371.307257][T18102] EXT4-fs (loop4): too many log groups per flexible block group [ 371.307563][T18096] EXT4-fs (loop0): Block reservation details [ 371.315235][T18102] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 371.321254][T18096] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 371.334317][T18102] EXT4-fs (loop4): mount failed [ 371.444014][T18116] loop4: detected capacity change from 0 to 512 [ 371.476686][T18116] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.504947][T18121] loop0: detected capacity change from 0 to 1024 [ 371.526624][T18121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.587063][T18115] FAULT_INJECTION: forcing a failure. [ 371.587063][T18115] name failslab, interval 1, probability 0, space 0, times 0 [ 371.599823][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.0.4570 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 371.611819][T18115] Tainted: [W]=WARN [ 371.615930][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.626273][T18115] Call Trace: [ 371.629573][T18115] [ 371.632578][T18115] dump_stack_lvl+0xf2/0x150 [ 371.637372][T18115] dump_stack+0x15/0x20 [ 371.639013][T18133] loop3: detected capacity change from 0 to 2048 [ 371.641532][T18115] should_fail_ex+0x223/0x230 [ 371.650110][T18133] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.652750][T18115] ? alloc_vmap_area+0x5ac/0x1830 [ 371.652777][T18115] should_failslab+0x8f/0xb0 [ 371.665368][T18142] netlink: 'syz.4.4579': attribute type 10 has an invalid length. [ 371.668882][T18115] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 371.668985][T18115] alloc_vmap_area+0x5ac/0x1830 [ 371.687654][T18115] ? __rcu_read_unlock+0x4e/0x70 [ 371.692718][T18115] ? should_fail_ex+0xd7/0x230 [ 371.697523][T18115] __get_vm_area_node+0x15e/0x1b0 [ 371.698313][T18133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4578: bg 0: block 234: padding at end of block bitmap is not set [ 371.702556][T18115] get_vm_area+0x46/0x60 [ 371.702582][T18115] ? arena_map_alloc+0x187/0x2e0 [ 371.702610][T18115] arena_map_alloc+0x187/0x2e0 [ 371.718403][T18133] EXT4-fs (loop3): Remounting filesystem read-only [ 371.721053][T18115] map_create+0x850/0xb70 [ 371.735558][T18133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 371.737234][T18115] __sys_bpf+0x667/0x7a0 [ 371.737331][T18115] __x64_sys_bpf+0x43/0x50 [ 371.759402][T18115] x64_sys_call+0x2625/0x2d60 [ 371.764269][T18115] do_syscall_64+0xc9/0x1c0 [ 371.768970][T18115] ? clear_bhb_loop+0x55/0xb0 [ 371.773782][T18115] ? clear_bhb_loop+0x55/0xb0 [ 371.778533][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.784558][T18115] RIP: 0033:0x7f18da2adff9 [ 371.789002][T18115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.808693][T18115] RSP: 002b:00007f18d8f21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.817121][T18115] RAX: ffffffffffffffda RBX: 00007f18da465f80 RCX: 00007f18da2adff9 [ 371.825531][T18115] RDX: 0000000000000048 RSI: 0000000020003940 RDI: 0000000000000000 [ 371.833577][T18115] RBP: 00007f18d8f21090 R08: 0000000000000000 R09: 0000000000000000 [ 371.841618][T18115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.849584][T18115] R13: 0000000000000000 R14: 00007f18da465f80 R15: 00007ffcc4ba9178 [ 371.857550][T18115] [ 371.880184][T18146] loop3: detected capacity change from 0 to 512 [ 372.505892][T18146] EXT4-fs (loop3): too many log groups per flexible block group [ 372.513664][T18146] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 372.725666][T18146] EXT4-fs (loop3): mount failed [ 372.876470][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4581'. [ 377.278242][ T155] bridge_slave_1: left allmulticast mode [ 377.283932][ T155] bridge_slave_1: left promiscuous mode [ 377.289804][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.426415][ T155] bridge_slave_0: left allmulticast mode [ 377.432088][ T155] bridge_slave_0: left promiscuous mode [ 377.437790][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.339232][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.407409][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.418913][ T155] bond0 (unregistering): Released all slaves [ 380.487488][ T155] hsr_slave_0: left promiscuous mode [ 380.493368][ T155] hsr_slave_1: left promiscuous mode [ 380.565770][ T155] batman_adv: batadv0: Removing interface: team0 [ 380.597298][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.646149][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.653559][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.687797][ T155] veth1_macvtap: left promiscuous mode [ 380.693282][ T155] veth0_macvtap: left promiscuous mode [ 380.698952][ T155] veth1_vlan: left promiscuous mode [ 380.704340][ T155] veth0_vlan: left promiscuous mode [ 381.277282][ T155] team0 (unregistering): Port device team_slave_1 removed [ 382.447249][ T155] bridge0: port 4(hsr0) entered disabled state [ 382.453952][ T155] macvlan0: left allmulticast mode [ 382.459123][ T155] macvlan0: left promiscuous mode [ 382.464289][ T155] bridge0: port 3(macvlan0) entered disabled state [ 382.517397][ T155] bridge_slave_1: left allmulticast mode [ 382.523059][ T155] bridge_slave_1: left promiscuous mode [ 382.528693][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.599212][ T155] bridge_slave_0: left allmulticast mode [ 382.604878][ T155] bridge_slave_0: left promiscuous mode [ 382.610642][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.951886][ T9496] EXT4-fs unmount: 49 callbacks suppressed [ 382.951903][ T9496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.013779][ T155] batman_adv: batadv0: Removing interface: ip6gretap1 [ 383.187972][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.198001][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.208195][ T155] bond0 (unregistering): Released all slaves [ 383.286758][ T155] hsr_slave_0: left promiscuous mode [ 383.294537][ T155] 0: left promiscuous mode [ 383.299566][ T155] batman_adv: batadv0: Removing interface: team0 [ 383.306383][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.314093][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.321625][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.330263][ T155] veth1_macvtap: left promiscuous mode [ 383.335803][ T155] veth0_macvtap: left promiscuous mode [ 383.341659][ T155] veth1_vlan: left promiscuous mode [ 383.346884][ T155] veth0_vlan: left promiscuous mode [ 383.418846][ T155] team0 (unregistering): Port device team_slave_1 removed [ 383.429114][ T155] team0 (unregistering): Port device team_slave_0 removed [ 383.696711][T18169] chnl_net:caif_netlink_parms(): no params data found [ 383.737513][T18162] chnl_net:caif_netlink_parms(): no params data found [ 383.752832][T18160] chnl_net:caif_netlink_parms(): no params data found [ 383.787484][T18154] chnl_net:caif_netlink_parms(): no params data found [ 383.853035][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.860204][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.867399][T18169] bridge_slave_0: entered allmulticast mode [ 383.873978][T18169] bridge_slave_0: entered promiscuous mode [ 383.882809][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.890032][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.897264][T18169] bridge_slave_1: entered allmulticast mode [ 383.903581][T18169] bridge_slave_1: entered promiscuous mode [ 383.921593][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.928854][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.937394][T18162] bridge_slave_0: entered allmulticast mode [ 383.943955][T18162] bridge_slave_0: entered promiscuous mode [ 383.966444][T18167] chnl_net:caif_netlink_parms(): no params data found [ 383.977767][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.984946][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.992269][T18162] bridge_slave_1: entered allmulticast mode [ 383.998910][T18162] bridge_slave_1: entered promiscuous mode [ 384.012726][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.021883][T18160] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.028996][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.036346][T18160] bridge_slave_0: entered allmulticast mode [ 384.042818][T18160] bridge_slave_0: entered promiscuous mode [ 384.052961][T18160] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.060099][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.067509][T18160] bridge_slave_1: entered allmulticast mode [ 384.073844][T18160] bridge_slave_1: entered promiscuous mode [ 384.088273][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.136093][T18162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.150829][T18169] team0: Port device team_slave_0 added [ 384.157431][T18169] team0: Port device team_slave_1 added [ 384.169382][T18160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.184400][T18162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.194210][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.201333][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.208841][T18154] bridge_slave_0: entered allmulticast mode [ 384.215421][T18154] bridge_slave_0: entered promiscuous mode [ 384.222961][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.230455][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.237657][T18154] bridge_slave_1: entered allmulticast mode [ 384.244194][T18154] bridge_slave_1: entered promiscuous mode [ 384.255799][T18160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.265182][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.272296][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.281073][T18167] bridge_slave_0: entered allmulticast mode [ 384.287533][T18167] bridge_slave_0: entered promiscuous mode [ 384.324309][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.331440][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.338750][T18167] bridge_slave_1: entered allmulticast mode [ 384.345199][T18167] bridge_slave_1: entered promiscuous mode [ 384.352512][T18162] team0: Port device team_slave_0 added [ 384.361515][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.386001][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.395336][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.402373][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.428531][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.448398][T18162] team0: Port device team_slave_1 added [ 384.459833][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.469514][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.476921][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.503001][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.515208][T18160] team0: Port device team_slave_0 added [ 384.527701][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.540291][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.555504][T18160] team0: Port device team_slave_1 added [ 384.569118][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.588966][T18154] team0: Port device team_slave_0 added [ 384.595962][T18154] team0: Port device team_slave_1 added [ 384.611546][T18162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.618693][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.644953][T18162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.656544][T18162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.663570][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.689609][T18162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.703193][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.728401][T18160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.735510][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.762032][T18160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.775815][T18160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.782775][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.809308][T18160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.820784][T18167] team0: Port device team_slave_0 added [ 384.827642][T18167] team0: Port device team_slave_1 added [ 384.843037][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.850172][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.876585][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.892357][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.909816][T18169] hsr_slave_0: entered promiscuous mode [ 384.915805][T18169] hsr_slave_1: entered promiscuous mode [ 384.928349][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.935331][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.961712][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.981841][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.988822][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.014737][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.032975][T18162] hsr_slave_0: entered promiscuous mode [ 385.039181][T18162] hsr_slave_1: entered promiscuous mode [ 385.044937][T18162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.052634][T18162] Cannot create hsr debugfs directory [ 385.068318][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.075263][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.101312][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.126997][T18154] hsr_slave_0: entered promiscuous mode [ 385.133172][T18154] hsr_slave_1: entered promiscuous mode [ 385.140029][T18154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.147677][T18154] Cannot create hsr debugfs directory [ 385.182112][T18167] hsr_slave_0: entered promiscuous mode [ 385.188155][T18167] hsr_slave_1: entered promiscuous mode [ 385.194195][T18167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.201807][T18167] Cannot create hsr debugfs directory [ 385.219837][T18160] hsr_slave_0: entered promiscuous mode [ 385.225911][T18160] hsr_slave_1: entered promiscuous mode [ 385.231774][T18160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.239437][T18160] Cannot create hsr debugfs directory [ 385.371465][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.418808][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.498657][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.578893][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.696413][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.710621][T18162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.718896][T18162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.727798][T18162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.738498][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.749609][T18162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.782185][T18162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.793824][T18162] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.803422][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.817907][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.824958][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.835767][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.842818][T18180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.855547][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.923023][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.939269][T18162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.969005][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.001136][T18162] veth0_vlan: entered promiscuous mode [ 386.009622][T18162] veth1_vlan: entered promiscuous mode [ 386.026056][T18162] veth0_macvtap: entered promiscuous mode [ 386.033168][T18162] veth1_macvtap: entered promiscuous mode [ 386.043374][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.053940][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.063908][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.074406][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.084291][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.094741][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.104871][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.116370][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.127999][T18162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.139001][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.152132][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.162688][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.172825][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.183252][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.193249][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.203847][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.213790][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.224618][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.234682][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.245143][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.254953][T18162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.265447][T18162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.276760][T18162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.288427][T18162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.297312][T18162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.306098][T18162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.314889][T18162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.332695][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.405392][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 386.405406][ T29] audit: type=1326 audit(1727667055.707:30914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.441384][ T29] audit: type=1326 audit(1727667055.707:30915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.465744][ T29] audit: type=1326 audit(1727667055.707:30916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.489731][ T29] audit: type=1326 audit(1727667055.707:30917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.513603][ T29] audit: type=1326 audit(1727667055.707:30918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.537238][ T29] audit: type=1326 audit(1727667055.707:30919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.561459][ T29] audit: type=1326 audit(1727667055.707:30920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.585458][ T29] audit: type=1326 audit(1727667055.707:30921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.609323][ T29] audit: type=1326 audit(1727667055.707:30922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.633620][ T29] audit: type=1326 audit(1727667055.707:30923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18250 comm="syz.1.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f33c669dff9 code=0x7ffc0000 [ 386.658568][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.688243][T18169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.697670][T18169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.711767][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.723955][T18169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.735836][T18169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.781565][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.803347][T18169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.818371][T18169] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.833092][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.840321][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.853233][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.860338][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.877266][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.924760][T18259] loop1: detected capacity change from 0 to 1024 [ 386.941026][T18259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.960050][ T155] bridge_slave_1: left allmulticast mode [ 386.965917][ T155] bridge_slave_1: left promiscuous mode [ 386.971740][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.979816][ T155] bridge_slave_0: left allmulticast mode [ 386.985565][ T155] bridge_slave_0: left promiscuous mode [ 386.991731][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.000087][ T155] bridge_slave_1: left allmulticast mode [ 387.005915][ T155] bridge_slave_1: left promiscuous mode [ 387.010909][T18259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 387.011558][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.029523][T18259] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 387.046277][T18259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 387.046277][T18259] [ 387.055967][T18259] EXT4-fs (loop1): Total free blocks count 0 [ 387.061992][T18259] EXT4-fs (loop1): Free/Dirty block details [ 387.068000][T18259] EXT4-fs (loop1): free_blocks=68451041280 [ 387.073801][T18259] EXT4-fs (loop1): dirty_blocks=16 [ 387.078954][T18259] EXT4-fs (loop1): Block reservation details [ 387.085092][T18259] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 387.091750][ T155] bridge_slave_0: left allmulticast mode [ 387.097438][ T155] bridge_slave_0: left promiscuous mode [ 387.103278][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.112594][ T155] bridge_slave_1: left allmulticast mode [ 387.112650][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.118397][ T155] bridge_slave_1: left promiscuous mode [ 387.133170][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.141622][ T155] bridge_slave_0: left allmulticast mode [ 387.147387][ T155] bridge_slave_0: left promiscuous mode [ 387.153194][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.162546][ T155] bridge_slave_1: left allmulticast mode [ 387.168279][ T155] bridge_slave_1: left promiscuous mode [ 387.174174][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.182312][ T155] bridge_slave_0: left allmulticast mode [ 387.188091][ T155] bridge_slave_0: left promiscuous mode [ 387.193870][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.202427][ T155] bridge_slave_1: left allmulticast mode [ 387.208407][ T155] bridge_slave_1: left promiscuous mode [ 387.214132][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.221972][ T155] bridge_slave_0: left allmulticast mode [ 387.227711][ T155] bridge_slave_0: left promiscuous mode [ 387.233481][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.717636][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.728597][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.738889][ T155] bond0 (unregistering): Released all slaves [ 387.748377][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.759187][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.769745][ T155] bond0 (unregistering): Released all slaves [ 387.779118][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.789549][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.799807][ T155] bond0 (unregistering): Released all slaves [ 387.808733][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.819262][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.829528][ T155] bond0 (unregistering): Released all slaves [ 387.838238][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.849030][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.859076][ T155] bond0 (unregistering): Released all slaves [ 387.878267][T18169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.931174][ T155] hsr_slave_0: left promiscuous mode [ 387.938316][ T155] hsr_slave_1: left promiscuous mode [ 387.944408][ T155] batman_adv: batadv0: Removing interface: team0 [ 387.951499][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.959343][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.967510][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.974966][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.982527][ T155] batman_adv: batadv0: Interface deactivated: macsec1 [ 387.989474][ T155] batman_adv: batadv0: Removing interface: macsec1 [ 387.997901][ T155] hsr_slave_0: left promiscuous mode [ 388.003549][ T155] hsr_slave_1: left promiscuous mode [ 388.009568][ T155] batman_adv: batadv0: Removing interface: team0 [ 388.016553][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.024124][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.033286][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.040785][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.051545][ T155] hsr_slave_0: left promiscuous mode [ 388.057050][T18283] loop1: detected capacity change from 0 to 512 [ 388.063437][ T155] hsr_slave_1: left promiscuous mode [ 388.064148][T18283] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 388.079029][ T155] batman_adv: batadv0: Removing interface: team0 [ 388.079220][T18283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 388.093536][T18283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.093845][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.107465][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.109057][T18283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4594: bg 0: block 361: padding at end of block bitmap is not set [ 388.129188][T18283] EXT4-fs (loop1): Remounting filesystem read-only [ 388.129568][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.135943][T18283] EXT4-fs (loop1): 1 truncate cleaned up [ 388.143398][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.149285][T18283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 388.168436][T18283] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 388.175567][T18283] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 388.184849][ T155] hsr_slave_0: left promiscuous mode [ 388.191950][ T155] hsr_slave_1: left promiscuous mode [ 388.197773][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.205296][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.212991][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.220568][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.229331][ T155] hsr_slave_0: left promiscuous mode [ 388.235003][ T155] hsr_slave_1: left promiscuous mode [ 388.240738][ T155] batman_adv: batadv0: Removing interface: team0 [ 388.249765][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.257434][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.264951][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.279433][ T155] dummy0: left promiscuous mode [ 388.284339][ T155] veth1_macvtap: left promiscuous mode [ 388.289930][ T155] veth0_macvtap: left promiscuous mode [ 388.295552][ T155] veth1_vlan: left promiscuous mode [ 388.300820][ T155] veth0_vlan: left promiscuous mode [ 388.306863][ T155] veth1_macvtap: left promiscuous mode [ 388.312371][ T155] veth0_macvtap: left promiscuous mode [ 388.317974][ T155] veth1_vlan: left promiscuous mode [ 388.323207][ T155] veth0_vlan: left promiscuous mode [ 388.328712][ T155] veth1_macvtap: left promiscuous mode [ 388.334158][ T155] veth0_macvtap: left promiscuous mode [ 388.339663][ T155] veth1_vlan: left promiscuous mode [ 388.344862][ T155] veth0_vlan: left promiscuous mode [ 388.350505][ T155] veth1_macvtap: left promiscuous mode [ 388.356174][ T155] veth0_macvtap: left promiscuous mode [ 388.361674][ T155] veth1_vlan: left promiscuous mode [ 388.367061][ T155] veth0_vlan: left promiscuous mode [ 388.372961][ T155] veth1_macvtap: left promiscuous mode [ 388.378499][ T155] veth0_macvtap: left promiscuous mode [ 388.384424][ T155] veth1_vlan: left promiscuous mode [ 388.389782][ T155] veth0_vlan: left promiscuous mode [ 388.620386][ T155] team0 (unregistering): Port device team_slave_1 removed [ 388.630433][ T155] team0 (unregistering): Port device team_slave_0 removed [ 388.690123][ T155] team0 (unregistering): Port device team_slave_1 removed [ 388.700005][ T155] team0 (unregistering): Port device team_slave_0 removed [ 388.758087][ T155] team0 (unregistering): Port device team_slave_1 removed [ 388.768449][ T155] team0 (unregistering): Port device team_slave_0 removed [ 388.828561][ T155] team0 (unregistering): Port device team_slave_1 removed [ 388.838457][ T155] team0 (unregistering): Port device team_slave_0 removed [ 388.901006][ T155] team0 (unregistering): Port device team_slave_1 removed [ 388.911553][ T155] team0 (unregistering): Port device team_slave_0 removed [ 389.009955][T18169] veth0_vlan: entered promiscuous mode [ 389.017834][T18169] veth1_vlan: entered promiscuous mode [ 389.031769][T18169] veth0_macvtap: entered promiscuous mode [ 389.039813][T18169] veth1_macvtap: entered promiscuous mode [ 389.049152][T18169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.053194][T18301] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.059809][T18169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.079041][T18169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.087176][T18169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.097799][T18169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.107734][T18169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.118303][T18169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.128919][T18169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.136371][T18301] netlink: 'syz.1.4597': attribute type 39 has an invalid length. [ 389.152185][T18169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.161026][T18169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.169841][T18169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.178583][T18169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.205949][T18154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.214880][T18154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.228047][T18154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.237633][T18154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.277811][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.291024][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.301138][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.308303][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.324948][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.332060][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.387765][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.450601][T18154] veth0_vlan: entered promiscuous mode [ 389.460263][T18154] veth1_vlan: entered promiscuous mode [ 389.472756][T18154] veth0_macvtap: entered promiscuous mode [ 389.496715][T18167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.505462][T18167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.515014][T18154] veth1_macvtap: entered promiscuous mode [ 389.523234][T18167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.532057][T18167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.548492][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.559019][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.569047][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.579613][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.590405][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.601766][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.612454][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.622375][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.632974][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.642967][T18154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.653443][T18154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.664288][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.676704][T18154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.685485][T18154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.694272][T18154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.703053][T18154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.747296][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.758582][T18327] loop0: detected capacity change from 0 to 1764 [ 389.759318][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.775016][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.782259][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.793959][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.801084][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.828570][T18167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.839128][T18167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.844302][T18329] loop0: detected capacity change from 0 to 1024 [ 389.879746][T18160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.888772][T18160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.888780][T18329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.913782][T18160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.923356][T18160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.938815][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.983149][T18160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.995972][T18160] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.003504][T18329] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 390.014108][T18160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.028899][T18160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.041297][T18329] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 390.044898][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.053644][T18329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 390.053644][T18329] [ 390.060630][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.062827][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.070534][T18329] EXT4-fs (loop0): Total free blocks count 0 [ 390.077760][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.084701][T18329] EXT4-fs (loop0): Free/Dirty block details [ 390.103944][T18329] EXT4-fs (loop0): free_blocks=68451041280 [ 390.110007][T18329] EXT4-fs (loop0): dirty_blocks=16 [ 390.115135][T18329] EXT4-fs (loop0): Block reservation details [ 390.121236][T18329] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 390.142447][T18154] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.166470][T18160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.187019][T18167] veth0_vlan: entered promiscuous mode [ 390.194742][T18167] veth1_vlan: entered promiscuous mode [ 390.207092][T18167] veth0_macvtap: entered promiscuous mode [ 390.214475][T18167] veth1_macvtap: entered promiscuous mode [ 390.224399][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.234909][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.244873][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.255316][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.265173][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.275612][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.286175][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.307010][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.317703][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.327772][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.338383][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.349141][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.359740][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.361641][T18356] loop4: detected capacity change from 0 to 1024 [ 390.369705][T18167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.386704][T18167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.387295][T18356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.398609][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.427162][T18167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.435974][T18167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.444941][T18167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.453727][T18167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.567442][T18160] veth0_vlan: entered promiscuous mode [ 390.635144][T18364] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 390.659902][T18160] veth1_vlan: entered promiscuous mode [ 390.704286][T18169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.729573][T18160] veth0_macvtap: entered promiscuous mode [ 390.734165][T18372] loop2: detected capacity change from 0 to 512 [ 390.736979][T18160] veth1_macvtap: entered promiscuous mode [ 390.752568][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.763424][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.767486][T18372] EXT4-fs (loop2): too many log groups per flexible block group [ 390.773722][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.781567][T18372] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 390.791956][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.800882][T18372] EXT4-fs (loop2): mount failed [ 390.808865][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.824255][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.834215][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.845426][T18380] FAULT_INJECTION: forcing a failure. [ 390.845426][T18380] name failslab, interval 1, probability 0, space 0, times 0 [ 390.845436][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.858415][T18380] CPU: 0 UID: 0 PID: 18380 Comm: syz.2.4607 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 390.858447][T18380] Tainted: [W]=WARN [ 390.858453][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.858520][T18380] Call Trace: [ 390.858527][T18380] [ 390.858535][T18380] dump_stack_lvl+0xf2/0x150 [ 390.858560][T18380] dump_stack+0x15/0x20 [ 390.858598][T18380] should_fail_ex+0x223/0x230 [ 390.858628][T18380] ? __kvmalloc_node_noprof+0x72/0x170 [ 390.858664][T18380] should_failslab+0x8f/0xb0 [ 390.858684][T18380] __kmalloc_node_noprof+0xa8/0x380 [ 390.930441][T18380] __kvmalloc_node_noprof+0x72/0x170 [ 390.935780][T18380] xt_alloc_table_info+0x3d/0x80 [ 390.940771][T18380] do_ipt_set_ctl+0x66f/0x8b0 [ 390.945566][T18380] nf_setsockopt+0x195/0x1b0 [ 390.950166][T18380] ip_setsockopt+0xea/0x100 [ 390.954675][T18380] udp_setsockopt+0x95/0xb0 [ 390.959224][T18380] sock_common_setsockopt+0x64/0x80 [ 390.964524][T18380] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 390.970661][T18380] __sys_setsockopt+0x1cc/0x240 [ 390.975525][T18380] __x64_sys_setsockopt+0x66/0x80 [ 390.980646][T18380] x64_sys_call+0x278d/0x2d60 [ 390.985437][T18380] do_syscall_64+0xc9/0x1c0 [ 390.990053][T18380] ? clear_bhb_loop+0x55/0xb0 [ 390.994762][T18380] ? clear_bhb_loop+0x55/0xb0 [ 390.999682][T18380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.005578][T18380] RIP: 0033:0x7ff8710adff9 [ 391.010153][T18380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.030924][T18380] RSP: 002b:00007ff86fd27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 391.039505][T18380] RAX: ffffffffffffffda RBX: 00007ff871265f80 RCX: 00007ff8710adff9 [ 391.047680][T18380] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 391.055695][T18380] RBP: 00007ff86fd27090 R08: 0000000000000538 R09: 0000000000000000 [ 391.063860][T18380] R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000001 [ 391.071995][T18380] R13: 0000000000000000 R14: 00007ff871265f80 R15: 00007ffc71510fc8 [ 391.080141][T18380] [ 391.087514][T18160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.096949][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.107462][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.117494][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.127927][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.138002][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.148451][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.158612][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.169038][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.178984][T18160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.189671][T18160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.200732][T18160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.219264][T18160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.226651][T18385] loop2: detected capacity change from 0 to 256 [ 391.228112][T18160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.234721][T18385] vfat: Unknown parameter '0000000000000000000000518446744073709551615' [ 391.243310][T18160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.255112][T18385] x_tables: unsorted underflow at hook 3 [ 391.260457][T18160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.413214][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 391.413288][ T29] audit: type=1326 audit(1727667060.717:31028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.450319][T18398] loop2: detected capacity change from 0 to 512 [ 391.457895][ T29] audit: type=1326 audit(1727667060.747:31029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.481526][ T29] audit: type=1326 audit(1727667060.757:31030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.505408][ T29] audit: type=1326 audit(1727667060.757:31031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.523931][T18404] loop0: detected capacity change from 0 to 128 [ 391.529684][ T29] audit: type=1326 audit(1727667060.757:31032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.559885][ T29] audit: type=1326 audit(1727667060.757:31033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.583863][ T29] audit: type=1326 audit(1727667060.757:31034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.605889][T18398] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.607547][ T29] audit: type=1326 audit(1727667060.757:31035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.640653][ T29] audit: type=1326 audit(1727667060.757:31036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.648280][T18398] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.4616: iget: bad i_size value: -6917529027641081756 [ 391.664685][ T29] audit: type=1326 audit(1727667060.757:31037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.2.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8710adff9 code=0x7ffc0000 [ 391.716378][T18398] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.4616: couldn't read orphan inode 17 (err -117) [ 391.723065][T18393] loop3: detected capacity change from 0 to 512 [ 391.746329][T18398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.775944][T18393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 391.801673][T18393] EXT4-fs (loop3): 1 truncate cleaned up [ 391.807889][T18393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.838041][T18393] netlink: 'syz.3.4585': attribute type 10 has an invalid length. [ 391.844068][T18410] loop1: detected capacity change from 0 to 512 [ 391.853545][T18410] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.855029][T18393] batman_adv: batadv0: Adding interface: team0 [ 391.863908][T18167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.869877][T18393] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.895229][T18410] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.4617: iget: bad i_size value: -6917529027641081756 [ 391.905185][T18393] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 391.924535][T18410] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.4617: couldn't read orphan inode 17 (err -117) [ 391.949456][T18410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.985844][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.018170][T18418] loop1: detected capacity change from 0 to 2048 [ 392.046923][T18418] loop1: p1 < > p4 [ 392.051290][T18418] loop1: p4 size 8388608 extends beyond EOD, truncated [ 392.160513][T18420] loop4: detected capacity change from 0 to 512 [ 392.168631][T18420] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 392.181989][T18420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 392.195836][T18420] EXT4-fs (loop4): orphan cleanup on readonly fs [ 392.217339][T18420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4620: bg 0: block 361: padding at end of block bitmap is not set [ 392.233304][T18160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.239222][T18420] EXT4-fs (loop4): Remounting filesystem read-only [ 392.256555][T18420] EXT4-fs (loop4): 1 truncate cleaned up [ 392.262778][T18420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 392.274965][T18420] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 392.281914][T18420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 392.295015][T18428] loop3: detected capacity change from 0 to 2048 [ 392.311500][T18428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.326253][T18428] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 392.341517][T18428] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 392.353870][T18428] EXT4-fs (loop3): This should not happen!! Data will be lost [ 392.353870][T18428] [ 392.363977][T18428] EXT4-fs (loop3): Total free blocks count 0 [ 392.370215][T18428] EXT4-fs (loop3): Free/Dirty block details [ 392.376557][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4626'. [ 392.376769][T18428] EXT4-fs (loop3): free_blocks=2415919104 [ 392.386009][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.391756][T18428] EXT4-fs (loop3): dirty_blocks=32 [ 392.399284][T18437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.404453][T18428] EXT4-fs (loop3): Block reservation details [ 392.417831][T18428] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 392.424300][T18437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.424548][T18428] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 392.431780][T18437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.489134][T18441] loop3: detected capacity change from 0 to 2048 [ 392.546323][T18441] loop3: p1 < > p4 [ 392.551138][T18441] loop3: p4 size 8388608 extends beyond EOD, truncated [ 392.579589][T18445] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.662948][T18452] loop4: detected capacity change from 0 to 164 [ 392.670082][T18452] Unable to read rock-ridge attributes [ 392.769640][T18454] loop3: detected capacity change from 0 to 512 [ 392.782644][T18456] loop2: detected capacity change from 0 to 512 [ 392.790184][T18454] EXT4-fs (loop3): too many log groups per flexible block group [ 392.798147][T18454] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 392.805531][T18454] EXT4-fs (loop3): mount failed [ 392.811744][T18456] EXT4-fs (loop2): too many log groups per flexible block group [ 392.819781][T18456] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 392.826944][T18456] EXT4-fs (loop2): mount failed [ 392.961043][T18481] netlink: 'syz.3.4641': attribute type 10 has an invalid length. [ 392.972703][T18481] team0: Port device netdevsim1 added [ 392.979033][T18481] netlink: 'syz.3.4641': attribute type 10 has an invalid length. [ 392.989131][T18481] team0: Port device netdevsim1 removed [ 392.997016][T18481] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 393.314103][T18489] loop0: detected capacity change from 0 to 8192 [ 393.321256][T18489] vfat: Unknown parameter '00000000000000000005XgDx8{yfyN'5&W]pP/5'Bn>D`>xOTTg>}1Wk&V}b+R|TK' [ 393.466875][T18492] loop1: detected capacity change from 0 to 512 [ 393.509979][T18494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18494 comm=syz.4.4646 [ 393.526706][T18498] 9pnet_fd: Insufficient options for proto=fd [ 393.758709][T18503] loop2: detected capacity change from 0 to 512 [ 393.786706][T18503] EXT4-fs (loop2): too many log groups per flexible block group [ 393.794586][T18503] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 393.801536][T18503] EXT4-fs (loop2): mount failed [ 393.912707][T18511] syzkaller0: entered promiscuous mode [ 393.918380][T18511] syzkaller0: entered allmulticast mode [ 393.976196][T18517] can0: slcan on ttyS3. [ 393.976721][T18519] loop3: detected capacity change from 0 to 512 [ 393.987288][T18519] EXT4-fs: Ignoring removed i_version option [ 393.993337][T18519] EXT4-fs: Ignoring removed nobh option [ 393.999636][T18519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 394.011193][T18519] EXT4-fs (loop3): 1 truncate cleaned up [ 394.017913][T18519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.103756][T18517] can0 (unregistered): slcan off ttyS3. [ 394.112215][T18517] Falling back ldisc for ttyS3. [ 394.123840][T18523] loop0: detected capacity change from 0 to 512 [ 394.133133][T18523] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 394.154852][T18523] EXT4-fs (loop0): 1 truncate cleaned up [ 394.160933][T18523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.174708][T18521] netlink: 'syz.0.4656': attribute type 10 has an invalid length. [ 394.186767][T18521] batman_adv: batadv0: Adding interface: team0 [ 394.192984][T18521] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.218377][T18521] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 394.237401][T18521] can0: slcan on ttyS3. [ 394.305851][T18520] can0 (unregistered): slcan off ttyS3. [ 394.380503][T18539] : renamed from vlan0 (while UP) [ 394.408814][T18154] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.417417][T18541] loop1: detected capacity change from 0 to 512 [ 394.425609][T18541] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 394.446460][T18541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 394.456966][T18541] EXT4-fs (loop1): orphan cleanup on readonly fs [ 394.465246][T18541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4661: bg 0: block 361: padding at end of block bitmap is not set [ 394.488112][T18541] EXT4-fs (loop1): Remounting filesystem read-only [ 394.495139][T18541] EXT4-fs (loop1): 1 truncate cleaned up [ 394.502424][T18541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 394.514972][T18541] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 394.523501][T18541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 394.568747][T18552] loop0: detected capacity change from 0 to 512 [ 394.579787][T18552] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 394.595407][T18552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 394.606342][T18552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 394.613228][T18552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4664: bg 0: block 361: padding at end of block bitmap is not set [ 394.629137][T18552] EXT4-fs (loop0): Remounting filesystem read-only [ 394.636908][T18552] EXT4-fs (loop0): 1 truncate cleaned up [ 394.643131][T18552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 394.655352][T18552] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 394.663853][T18552] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 394.687355][T18560] 9pnet: Unknown protocol version 9p [ 394.689728][T18561] can0: slcan on ttyS3. [ 394.721184][T18565] syz.1.4670[18565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.721306][T18565] syz.1.4670[18565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.732929][T18565] syz.1.4670[18565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.744836][T18561] can0 (unregistered): slcan off ttyS3. [ 394.762058][T18561] Falling back ldisc for ttyS3. [ 394.800355][T18573] loop0: detected capacity change from 0 to 512 [ 394.821148][T18569] : renamed from vlan0 (while UP) [ 394.837029][T18573] EXT4-fs (loop0): too many log groups per flexible block group [ 394.845729][T18573] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 394.858545][T18573] EXT4-fs (loop0): mount failed [ 394.886530][T18160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.919807][T18584] loop3: detected capacity change from 0 to 1024 [ 394.937577][T18575] loop4: detected capacity change from 0 to 512 [ 394.944994][T18584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.953528][T18575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 394.977210][T18575] EXT4-fs (loop4): 1 truncate cleaned up [ 394.982747][T18593] loop1: detected capacity change from 0 to 512 [ 394.983304][T18575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.003353][T18593] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 395.020086][T18575] can0: slcan on ttyS3. [ 395.024754][T18593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 395.034432][T18593] EXT4-fs (loop1): orphan cleanup on readonly fs [ 395.043360][T18593] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4678: bg 0: block 361: padding at end of block bitmap is not set [ 395.059920][T18593] EXT4-fs (loop1): Remounting filesystem read-only [ 395.066824][T18593] EXT4-fs (loop1): 1 truncate cleaned up [ 395.070108][T18601] loop0: detected capacity change from 0 to 2048 [ 395.072970][T18593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 395.091076][T18574] can0 (unregistered): slcan off ttyS3. [ 395.098301][T18593] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 395.105227][T18593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 395.124059][T18603] can0: slcan on ttyS3. [ 395.139904][T18601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.152708][T18584] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 395.156880][T18601] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.4681: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 395.169779][T18584] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 395.186576][T18169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.196400][T18584] EXT4-fs (loop3): This should not happen!! Data will be lost [ 395.196400][T18584] [ 395.215376][T18584] EXT4-fs (loop3): Total free blocks count 0 [ 395.219249][T18601] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4681'. [ 395.221459][T18584] EXT4-fs (loop3): Free/Dirty block details [ 395.236318][T18584] EXT4-fs (loop3): free_blocks=68451041280 [ 395.242152][T18584] EXT4-fs (loop3): dirty_blocks=16 [ 395.247269][T18584] EXT4-fs (loop3): Block reservation details [ 395.253298][T18584] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 395.271961][T18601] netlink: 'syz.0.4681': attribute type 4 has an invalid length. [ 395.279887][T18601] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4681'. [ 395.317563][T18160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.326994][T18603] can0 (unregistered): slcan off ttyS3. [ 395.332655][T18603] Falling back ldisc for ttyS3. [ 395.350661][T18615] loop3: detected capacity change from 0 to 512 [ 395.374620][T18615] EXT4-fs (loop3): too many log groups per flexible block group [ 395.382440][T18615] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 395.389347][T18615] EXT4-fs (loop3): mount failed [ 395.389809][T18154] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.429903][T18630] loop3: detected capacity change from 0 to 1024 [ 395.437915][T18630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.463893][T18630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 395.480316][T18635] loop1: detected capacity change from 0 to 512 [ 395.486702][T18630] System zones: 0-1, 3-36 [ 395.502118][T18630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.514689][T18635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.540444][T18635] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 395.555519][T18635] EXT4-fs (loop1): 1 truncate cleaned up [ 395.561430][T18641] loop0: detected capacity change from 0 to 1024 [ 395.562851][T18635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.569844][T18641] journal_path: Lookup failure for './file0' [ 395.585802][T18645] can0: slcan on ttyS3. [ 395.587266][T18641] EXT4-fs: error: could not find journal device path [ 395.601470][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.654855][T18653] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.664062][T18645] can0 (unregistered): slcan off ttyS3. [ 395.670012][T18645] Falling back ldisc for ttyS3. [ 395.675035][T18653] FAULT_INJECTION: forcing a failure. [ 395.675035][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 395.687865][T18653] CPU: 1 UID: 0 PID: 18653 Comm: syz.0.4701 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 395.699787][T18653] Tainted: [W]=WARN [ 395.703598][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.713780][T18653] Call Trace: [ 395.717119][T18653] [ 395.720062][T18653] dump_stack_lvl+0xf2/0x150 [ 395.724712][T18653] dump_stack+0x15/0x20 [ 395.729010][T18653] should_fail_ex+0x223/0x230 [ 395.733705][T18653] ? fib6_info_alloc+0x2c/0x90 [ 395.738688][T18653] should_failslab+0x8f/0xb0 [ 395.743442][T18653] __kmalloc_noprof+0xa5/0x370 [ 395.748588][T18653] fib6_info_alloc+0x2c/0x90 [ 395.753201][T18653] ip6_route_info_create+0x34c/0xba0 [ 395.758512][T18653] ? xas_load+0x3ae/0x3d0 [ 395.762916][T18653] inet6_rtm_newroute+0x3c1/0x11c0 [ 395.768111][T18653] ? xa_load+0xb9/0xe0 [ 395.772251][T18653] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 395.777744][T18653] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 395.783401][T18653] rtnetlink_rcv_msg+0x6aa/0x710 [ 395.789115][T18653] ? ref_tracker_free+0x3a5/0x410 [ 395.794239][T18653] ? __dev_queue_xmit+0x161/0x1fe0 [ 395.799417][T18653] netlink_rcv_skb+0x12c/0x230 [ 395.804221][T18653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.809990][T18653] rtnetlink_rcv+0x1c/0x30 [ 395.814411][T18653] netlink_unicast+0x599/0x670 [ 395.819183][T18653] netlink_sendmsg+0x5cc/0x6e0 [ 395.823939][T18653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.829303][T18653] __sock_sendmsg+0x140/0x180 [ 395.834093][T18653] ____sys_sendmsg+0x312/0x410 [ 395.839326][T18653] __sys_sendmsg+0x1d9/0x270 [ 395.844045][T18653] __x64_sys_sendmsg+0x46/0x50 [ 395.848847][T18653] x64_sys_call+0x2689/0x2d60 [ 395.853627][T18653] do_syscall_64+0xc9/0x1c0 [ 395.858235][T18653] ? clear_bhb_loop+0x55/0xb0 [ 395.862916][T18653] ? clear_bhb_loop+0x55/0xb0 [ 395.867675][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.873710][T18653] RIP: 0033:0x7f5d8af5dff9 [ 395.878302][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.898099][T18653] RSP: 002b:00007f5d89bd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.906748][T18653] RAX: ffffffffffffffda RBX: 00007f5d8b115f80 RCX: 00007f5d8af5dff9 [ 395.914865][T18653] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006 [ 395.923090][T18653] RBP: 00007f5d89bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 395.931178][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.939283][T18653] R13: 0000000000000000 R14: 00007f5d8b115f80 R15: 00007ffc1f1c8138 [ 395.947352][T18653] [ 396.019119][T18660] loop2: detected capacity change from 0 to 1024 [ 396.047438][T18660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.117277][T18660] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 396.137673][T18660] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 396.150119][T18660] EXT4-fs (loop2): This should not happen!! Data will be lost [ 396.150119][T18660] [ 396.159797][T18660] EXT4-fs (loop2): Total free blocks count 0 [ 396.165833][T18660] EXT4-fs (loop2): Free/Dirty block details [ 396.171816][T18660] EXT4-fs (loop2): free_blocks=68451041280 [ 396.177644][T18660] EXT4-fs (loop2): dirty_blocks=16 [ 396.182750][T18660] EXT4-fs (loop2): Block reservation details [ 396.188841][T18660] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 396.227338][T18167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.261132][T18681] loop2: detected capacity change from 0 to 512 [ 396.269970][T18681] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 396.287313][T18683] can0: slcan on ttyS3. [ 396.292807][T18681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 396.304475][T18681] EXT4-fs (loop2): orphan cleanup on readonly fs [ 396.321053][T18681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4712: bg 0: block 361: padding at end of block bitmap is not set [ 396.336083][T18160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.336700][T18681] EXT4-fs (loop2): Remounting filesystem read-only [ 396.352354][T18683] can0 (unregistered): slcan off ttyS3. [ 396.358023][T18683] Falling back ldisc for ttyS3. [ 396.359254][T18681] EXT4-fs (loop2): 1 truncate cleaned up [ 396.370598][T18681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 396.404749][T18681] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 396.412609][T18681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 396.854000][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 396.854076][ T29] audit: type=1326 audit(1727667066.157:31608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 396.884276][ T29] audit: type=1326 audit(1727667066.157:31609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 396.908058][ T29] audit: type=1326 audit(1727667066.157:31610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 396.932002][ T29] audit: type=1326 audit(1727667066.157:31611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 396.956010][ T29] audit: type=1326 audit(1727667066.157:31612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 396.979641][ T29] audit: type=1326 audit(1727667066.157:31613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 397.003363][ T29] audit: type=1326 audit(1727667066.157:31614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 397.027183][ T29] audit: type=1326 audit(1727667066.157:31615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 397.050948][ T29] audit: type=1326 audit(1727667066.157:31616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 397.074965][ T29] audit: type=1326 audit(1727667066.157:31617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.3.4721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd7c50dff9 code=0x7ffc0000 [ 397.180974][T18718] loop4: detected capacity change from 0 to 2048 [ 397.198294][T18718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.216508][T18718] SELinux: Context & O ˼b6mz߲}+d.XKONF~gW*E].s^+![3sA,^8YpOge.U(ɾȽvS is not valid (left unmapped). [ 397.232644][T18718] SELinux: Context gS is not valid (left unmapped). [ 397.241763][T18718] SELinux: Context f hDfutqKLw~DŐ is not valid (left unmapped). [ 397.255496][T18718] program syz.4.4726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.263758][T18731] 9pnet: Unknown protocol version 9p [ 397.270812][T18732] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 397.277357][T18732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.285312][T18732] vhci_hcd vhci_hcd.0: Device attached [ 397.294139][T18732] serio: Serial port ptm0 [ 397.309482][T18169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.386836][T18754] FAULT_INJECTION: forcing a failure. [ 397.386836][T18754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.400077][T18754] CPU: 1 UID: 0 PID: 18754 Comm: syz.2.4737 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 397.404649][T18757] loop4: detected capacity change from 0 to 2048 [ 397.412210][T18754] Tainted: [W]=WARN [ 397.412219][T18754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.412230][T18754] Call Trace: [ 397.412237][T18754] [ 397.412260][T18754] dump_stack_lvl+0xf2/0x150 [ 397.443373][T18754] dump_stack+0x15/0x20 [ 397.447558][T18754] should_fail_ex+0x223/0x230 [ 397.452310][T18754] should_fail+0xb/0x10 [ 397.456567][T18754] should_fail_usercopy+0x1a/0x20 [ 397.461756][T18754] _copy_from_user+0x1e/0xd0 [ 397.466485][T18754] copy_msghdr_from_user+0x54/0x2a0 [ 397.471703][T18754] do_recvmmsg+0x282/0x740 [ 397.476247][T18754] __x64_sys_recvmmsg+0xe2/0x170 [ 397.481387][T18754] x64_sys_call+0x26e3/0x2d60 [ 397.486061][T18754] do_syscall_64+0xc9/0x1c0 [ 397.490739][T18754] ? clear_bhb_loop+0x55/0xb0 [ 397.495579][T18754] ? clear_bhb_loop+0x55/0xb0 [ 397.500246][T18754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.506213][T18754] RIP: 0033:0x7ff8710adff9 [ 397.510617][T18754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.530257][T18754] RSP: 002b:00007ff86fd27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 397.538757][T18754] RAX: ffffffffffffffda RBX: 00007ff871265f80 RCX: 00007ff8710adff9 [ 397.546712][T18754] RDX: 0000000000000030 RSI: 0000000020008840 RDI: 0000000000000009 [ 397.555051][T18754] RBP: 00007ff86fd27090 R08: 0000000000000000 R09: 0000000000000000 [ 397.563075][T18754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.571181][T18754] R13: 0000000000000000 R14: 00007ff871265f80 R15: 00007ffc71510fc8 [ 397.579233][T18754] [ 397.606432][T18757] loop4: p1 < > p4 [ 397.619459][T18764] syz.0.4741[18764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.619606][T18764] syz.0.4741[18764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.619863][T18757] loop4: p4 size 8388608 extends beyond EOD, [ 397.631258][T18764] syz.0.4741[18764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.642413][T18757] truncated [ 397.696787][T18768] 9pnet: Unknown protocol version 9p [ 397.715710][ T35] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 397.733323][T18772] syz.3.4744[18772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.733461][T18772] syz.3.4744[18772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.747182][T18772] syz.3.4744[18772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.764290][T18772] loop3: detected capacity change from 0 to 764 [ 397.783724][T18772] rock: directory entry would overflow storage [ 397.790193][T18772] rock: sig=0x4654, size=5, remaining=4 [ 397.873537][T18778] loop4: detected capacity change from 0 to 2048 [ 397.888079][T18778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.903345][T18778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 397.919186][T18778] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 397.931391][T18778] EXT4-fs (loop4): This should not happen!! Data will be lost [ 397.931391][T18778] [ 397.941199][T18778] EXT4-fs (loop4): Total free blocks count 0 [ 397.947181][T18778] EXT4-fs (loop4): Free/Dirty block details [ 397.953184][T18778] EXT4-fs (loop4): free_blocks=2415919104 [ 397.958932][T18778] EXT4-fs (loop4): dirty_blocks=32 [ 397.964025][T18778] EXT4-fs (loop4): Block reservation details [ 397.970104][T18778] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 397.976471][T18778] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 398.096141][T18734] vhci_hcd: connection closed [ 398.096352][T18265] vhci_hcd: stop threads [ 398.105382][T18265] vhci_hcd: release socket [ 398.109947][T18265] vhci_hcd: disconnect device [ 398.457954][T18787] loop2: detected capacity change from 0 to 512 [ 398.464921][T18787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 398.477183][T18787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 398.492124][T18787] EXT4-fs (loop2): 1 truncate cleaned up [ 398.498222][T18787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.520947][T18167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.578096][T18790] loop2: detected capacity change from 0 to 512 [ 398.585077][T18790] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 398.596627][T18790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 398.604953][T18790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.611912][T18790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4749: bg 0: block 361: padding at end of block bitmap is not set [ 398.626783][T18790] EXT4-fs (loop2): Remounting filesystem read-only [ 398.633621][T18790] EXT4-fs (loop2): 1 truncate cleaned up [ 398.639956][T18790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 398.653222][T18790] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 398.660290][T18790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 398.686484][T18797] loop1: detected capacity change from 0 to 512 [ 398.693447][T18797] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 398.713529][T18797] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 398.721843][T18797] EXT4-fs (loop1): mount failed [ 398.730403][T18790] veth0_vlan: left promiscuous mode [ 398.737643][T18790] veth0_vlan: entered promiscuous mode [ 398.765681][T18809] 9pnet: Unknown protocol version 9p [ 398.791082][T18813] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20004 [ 398.810945][T18815] loop0: detected capacity change from 0 to 512 [ 398.818659][T18815] EXT4-fs: Ignoring removed i_version option [ 398.824775][T18815] EXT4-fs: Ignoring removed nobh option [ 398.851934][T18815] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 398.890173][T18823] loop4: detected capacity change from 0 to 2048 [ 398.901815][T18815] EXT4-fs (loop0): 1 truncate cleaned up [ 398.924400][T18815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.004787][T18823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.021515][T18823] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 399.030942][T18830] loop3: detected capacity change from 0 to 128 [ 399.036486][T18823] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 399.055603][T18823] EXT4-fs (loop4): This should not happen!! Data will be lost [ 399.055603][T18823] [ 399.058903][T18818] loop2: detected capacity change from 0 to 512 [ 399.065463][T18823] EXT4-fs (loop4): Total free blocks count 0 [ 399.078313][T18823] EXT4-fs (loop4): Free/Dirty block details [ 399.084342][T18823] EXT4-fs (loop4): free_blocks=2415919104 [ 399.090135][T18823] EXT4-fs (loop4): dirty_blocks=32 [ 399.090335][T18818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 399.095427][T18823] EXT4-fs (loop4): Block reservation details [ 399.095442][T18823] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 399.096901][T18823] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 399.147503][T18818] EXT4-fs (loop2): 1 truncate cleaned up [ 399.158324][T18818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.248830][T18818] can0: slcan on ttyS3. [ 399.275135][T18841] loop4: detected capacity change from 0 to 1024 [ 399.305872][T18817] can0 (unregistered): slcan off ttyS3. [ 399.316338][T18841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.393436][T18167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.434650][T18841] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 399.478997][T18841] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 399.491517][T18841] EXT4-fs (loop4): This should not happen!! Data will be lost [ 399.491517][T18841] [ 399.501249][T18841] EXT4-fs (loop4): Total free blocks count 0 [ 399.507670][T18841] EXT4-fs (loop4): Free/Dirty block details [ 399.513686][T18841] EXT4-fs (loop4): free_blocks=68451041280 [ 399.519551][T18841] EXT4-fs (loop4): dirty_blocks=16 [ 399.524844][T18841] EXT4-fs (loop4): Block reservation details [ 399.525894][T18855] loop3: detected capacity change from 0 to 128 [ 399.530899][T18841] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 399.574967][T18169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.675038][T18866] ================================================================== [ 399.683234][T18866] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 399.690998][T18866] [ 399.693308][T18866] write to 0xffff888104871860 of 8 bytes by task 18865 on cpu 0: [ 399.701009][T18866] mas_wr_store_entry+0x146b/0x2d00 [ 399.706206][T18866] mas_store_prealloc+0x6bf/0x960 [ 399.711227][T18866] commit_merge+0x441/0x740 [ 399.715722][T18866] vma_expand+0x211/0x360 [ 399.720054][T18866] vma_merge_new_range+0x2cf/0x3e0 [ 399.725158][T18866] mmap_region+0x887/0x16e0 [ 399.729652][T18866] do_mmap+0x718/0xb60 [ 399.734228][T18866] vm_mmap_pgoff+0x133/0x290 [ 399.738807][T18866] ksys_mmap_pgoff+0xd0/0x330 [ 399.743482][T18866] x64_sys_call+0x1884/0x2d60 [ 399.748152][T18866] do_syscall_64+0xc9/0x1c0 [ 399.752644][T18866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.758539][T18866] [ 399.760850][T18866] read to 0xffff888104871860 of 8 bytes by task 18866 on cpu 1: [ 399.768467][T18866] mtree_range_walk+0x1b4/0x460 [ 399.773309][T18866] mas_walk+0x16e/0x320 [ 399.777454][T18866] lock_vma_under_rcu+0x95/0x260 [ 399.782478][T18866] exc_page_fault+0x150/0x650 [ 399.787266][T18866] asm_exc_page_fault+0x26/0x30 [ 399.792206][T18866] [ 399.794513][T18866] value changed: 0x00007f33bceb4fff -> 0x00007f33bce93fff [ 399.801622][T18866] [ 399.803934][T18866] Reported by Kernel Concurrency Sanitizer on: [ 399.810155][T18866] CPU: 1 UID: 0 PID: 18866 Comm: syz.1.4771 Tainted: G W 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 399.822036][T18866] Tainted: [W]=WARN [ 399.825830][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.835881][T18866] ================================================================== [ 399.873104][T18863] loop3: detected capacity change from 0 to 2048 [ 399.892602][T18863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.938870][T18154] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.522003][T18160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.775953][ T35] usb 3-1: enqueue for inactive port 0 [ 402.781468][ T35] usb 3-1: enqueue for inactive port 0 [ 402.866829][ T35] vhci_hcd: vhci_device speed not set