last executing test programs: 32.275073322s ago: executing program 4 (id=6991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x57a}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xff}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 32.161988222s ago: executing program 4 (id=6993): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) 31.49318716s ago: executing program 4 (id=6998): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f00000019c0)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r4 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x0, 0x10000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) sendmsg$tipc(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "be1d0000ae9ef30bea2a004000010000000000008000"}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) 30.278542977s ago: executing program 4 (id=7004): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xf5c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x840, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_SEL={0x7f4, 0x5, {0x2, 0x87, 0x7, 0x5, 0x1, 0x7, 0xb936, 0x5, [{0x10001, 0x6, 0x8, 0x8}, {0x1, 0x800, 0x9, 0x2}, {0xe, 0xff, 0x5, 0x3}, {0xd, 0x3, 0xa, 0x1}, {0x5, 0x4, 0x3, 0x3ff}, {0x5, 0x655, 0x800, 0x7ff}, {0x3, 0xc, 0xfffffffd, 0x200}, {0x6, 0x4, 0x6, 0x1e4ef314}, {0xfdc3, 0x3, 0x6, 0x2}, {0x6, 0x3, 0x3ff, 0x6}, {0xa, 0x3527, 0x9, 0xd}, {0x3, 0x4, 0x4, 0x5}, {0x7, 0x8, 0x0, 0xa}, {0xffffffff, 0x7, 0x7, 0x3ff}, {0x7, 0x7, 0x3b0, 0x41}, {0x1, 0x7, 0x0, 0x300000}, {0x4, 0x2, 0x3ff, 0x4}, {0xad, 0x1, 0x1, 0x81}, {0x5, 0x1, 0x1, 0x7}, {0x8001, 0x9, 0xffff, 0x101}, {0x6, 0x7ff, 0x9, 0x178}, {0x98b9fec, 0xa4ee, 0x1, 0x7}, {0xb, 0x1, 0xd, 0xa5}, {0xb, 0x0, 0x5, 0x754}, {0xd, 0x80, 0x4, 0x29c}, {0x0, 0x9, 0x1000000, 0x4}, {0xc, 0x4, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x2}, {0x3, 0x81, 0x9, 0x45a2}, {0x6, 0x42, 0x1, 0x7fff}, {0x9, 0x5eaa, 0x7, 0x62}, {0xffffffff, 0x7, 0x6, 0x4}, {0x10001, 0x6, 0x0, 0x3e0}, {0x280, 0x819, 0x10000, 0x10001}, {0xfffffffb, 0x4, 0x7, 0x8}, {0x8cff, 0x3, 0x10001, 0x30000}, {0x6, 0xcdf, 0x1, 0x6}, {0x10000, 0x9c6, 0x11, 0x10000}, {0x5, 0x9, 0x83, 0xf}, {0x66, 0x1ff, 0x2, 0x9}, {0x101, 0xd, 0x1, 0x1}, {0xaa0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x8}, {0x1ff, 0xc5, 0x7bdfab2d, 0x1b9}, {0x12c000, 0x4, 0x3, 0xd82a}, {0x10001, 0x5, 0x8, 0xeae}, {0x1, 0x9, 0x2, 0x5}, {0x7, 0x8, 0x6, 0x6}, {0x80, 0x241a, 0x77c44c89, 0x3}, {0x100, 0x1, 0x3, 0x8}, {0x3b4, 0xd, 0xc, 0x4}, {0x10000, 0xffffff5e, 0x9, 0xf}, {0x3, 0x4, 0x9, 0x3}, {0x81, 0x0, 0xe, 0x10000}, {0xff, 0x8, 0x146, 0x6}, {0x10, 0x3, 0xa3d, 0x8a39}, {0x1, 0x3, 0x6, 0x10000}, {0x8, 0x8cbc, 0x8, 0x5}, {0x28, 0x100, 0x8, 0xeb}, {0x7, 0x7fffffff, 0x753, 0x3}, {0x8, 0x1, 0x6}, {0x380000, 0x8000, 0x0, 0x4}, {0x69900, 0x2, 0x7, 0x8}, {0x5, 0x2, 0x1, 0x7}, {0xfffff800, 0x3, 0x6, 0x8}, {0x6, 0x0, 0xf7b, 0x7fffffff}, {0xe, 0x4, 0x1ff, 0x12}, {0x5, 0x80000000, 0x800, 0x8}, {0x4, 0x9, 0x0, 0xfffffffa}, {0x2, 0x5, 0x9, 0x7}, {0xffffffff, 0x40, 0x7, 0x2}, {0x0, 0x10000000, 0x7}, {0x9, 0x6, 0x7, 0x3}, {0x80000001, 0x6, 0x8, 0x81}, {0x0, 0x0, 0x4, 0x1ff}, {0xff, 0x81, 0x7, 0x1}, {0x80, 0xe, 0x1, 0x7}, {0xb7, 0x5, 0xdf, 0x6}, {0xfffffffb, 0x2b, 0xffff, 0x5}, {0xfffffffd, 0x8, 0x401000, 0x2}, {0x5, 0x2, 0x8, 0x100}, {0xff, 0x80, 0x2, 0x5}, {0x0, 0xff, 0x2}, {0x101, 0x173, 0x2, 0x4}, {0x2, 0x5, 0x2, 0x2}, {0x6, 0x0, 0x4, 0xffff38f1}, {0x9, 0x2, 0x5, 0x8}, {0x1, 0xfffffffc, 0xa80, 0x101}, {0x27, 0x180, 0x1000, 0x40}, {0x9, 0x9, 0x1, 0x7}, {0x4, 0x7, 0x9, 0x7}, {0x3ef, 0x7, 0x7, 0x10}, {0x0, 0x9, 0x1ff, 0x279}, {0x9, 0x10000, 0xe3d4, 0x4}, {0x42bd, 0x4be66fa6, 0x10001, 0xca}, {0x0, 0x9, 0x5e, 0x4}, {0x1, 0x7, 0xd6, 0x7fffffff}, {0x7, 0xd582eecd, 0xa, 0x76f}, {0xfffffff5, 0x5, 0x0, 0x4}, {0x1, 0x1, 0x3}, {0x7, 0x5, 0x80000001}, {0xe74, 0x101, 0x64, 0x2}, {0x9, 0xaf, 0x400, 0x6}, {0x6, 0x7ff, 0xdc, 0x800}, {0x6, 0x2, 0x8, 0x3}, {0x8f, 0x101, 0x10001, 0x5}, {0x7, 0x7, 0x9, 0xfffffffb}, {0x1, 0x80, 0x9785, 0x6}, {0x8, 0x10000, 0x2, 0x4}, {0x7, 0xc, 0x5, 0x9}, {0x9, 0x8, 0x9, 0x80}, {0x2, 0xc, 0x100, 0x1}, {0x6, 0x3ff, 0x6, 0x788d}, {0xffff, 0x80000000, 0x4, 0x1}, {0x6, 0x4, 0xf213, 0x10000}, {0x8, 0x2, 0x355c16c3, 0x1}, {0x0, 0x0, 0x5, 0x4}, {0x8, 0x1, 0x7fff, 0x7}, {0x2, 0x4cb, 0x4, 0x4}, {0xfffffffd, 0x0, 0xfc4a, 0xfffffff9}, {0x1, 0x8, 0x9, 0x29}, {0xfffffff4, 0x0, 0x6, 0x5}, {0xbf, 0x6, 0xffff, 0xdae}, {0x7, 0x81, 0x5, 0xd8c}, {0x2, 0x9, 0x6, 0x2}, {0x4, 0x50, 0x7fff, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x1}}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x6cc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x268, 0x6, [@m_nat={0x90, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}]}, {0x15, 0x6, "17a3a496e0b06ed4b17c112d919b00b396"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x188, 0x1c, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8001, 0x0, 0x7f, 0xffffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x8, 0x10000000, 0x2, 0xff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x6, 0x6, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x0, 0x0, 0x8bd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x91ec, 0x20000000, 0xdf, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x94, 0x8, 0x1, 0xfffffffc}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8000, 0x8, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x10000000, 0x6, 0x1}, 0x3}}]}, {0x39, 0x6, "3de58d95f75c07bc7f03a8e9500508a6fac8a07b2a0626893e7d2b4d5a9f9e578e344992f2e654ed7f8d7602e7c8281c13643d9e89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x46a4df08, 0xa000, 0x7, 0x10000}, 0x51}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0x44c, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x3, 0x5, 0x100, {0x4, 0x2, 0x0, 0x7, 0x10}, {0x2, 0x1, 0x5, 0x6, 0x7f, 0x9}, 0x80, 0x3, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x2, 0xff, 0x6, 0x81, 0x92b1, 0x548, 0x67, 0x963, 0x6, 0x3ff, 0x7, 0x1, 0x7, 0x3, 0x9, 0x1, 0x1, 0x0, 0x6, 0x9, 0xf05, 0x401, 0xffff, 0x6, 0x0, 0x101, 0x4, 0xffffffa7, 0xe, 0x6, 0x8, 0x2, 0xfffffffa, 0x10000, 0x3, 0x2, 0x6, 0x4, 0x498ad2cb, 0x9, 0x400, 0xff, 0xfffffffd, 0x1, 0x7, 0x40000000, 0x2, 0x1, 0x8, 0x9, 0x0, 0x10, 0x4, 0x7ff, 0x5, 0xc, 0x200000, 0x9, 0x6, 0x1, 0x4f, 0x0, 0x5, 0x7, 0xfff, 0x1, 0x401, 0x6, 0x200, 0x5c, 0x9, 0x10000, 0x70, 0x3, 0x9, 0x3be, 0x6, 0xb676, 0x589f9c70, 0x7, 0xf, 0x5, 0x6, 0x9, 0x2, 0x229ee0a3, 0x4, 0x7, 0x401, 0x1, 0xa9f8, 0x5, 0x8, 0x7, 0x6, 0x4, 0x4, 0x55, 0x6, 0x7fff, 0x63b, 0x6, 0x80000000, 0xc, 0x400, 0x9, 0x0, 0xfffffff7, 0x5, 0x8001, 0x3, 0x401, 0x30, 0x8, 0x40000000, 0x2, 0x40, 0x8, 0x40, 0x400, 0x494, 0x4000000, 0x10001, 0x5, 0x5, 0x8, 0x1c0000, 0x253801be, 0x8e, 0x5, 0x9, 0xe196, 0x0, 0x5, 0x3, 0x77e7, 0xd, 0x1, 0xffffffff, 0x80000000, 0x0, 0x9bd, 0x7b3, 0x9, 0x81, 0xe, 0xf, 0xeaa, 0x5, 0x1800, 0x4, 0x5, 0x8000, 0x92, 0x1, 0x1ff, 0x9ca, 0x6, 0xe, 0x5a4, 0x8001, 0x1, 0x6, 0x2, 0x8001, 0x12000000, 0x3, 0x5, 0x10000, 0x1, 0x0, 0x6, 0x1, 0x2, 0x4, 0x3, 0xfffff79e, 0x9, 0x1e30b589, 0x0, 0x5, 0x80, 0x7, 0x6, 0x8, 0x9, 0x2, 0x3, 0x6, 0xb4, 0x40, 0xc, 0x3, 0x2, 0x5, 0x4e77, 0x6, 0xfffffffb, 0x7fffffff, 0xb, 0x8, 0xce, 0x1000, 0x8, 0x40, 0xffff, 0x7ff, 0x6, 0x359c, 0x4, 0x100, 0x3, 0x2c3, 0x2, 0xfffffff7, 0xfea7, 0x1, 0x9, 0x7, 0x2, 0xc9, 0x9c, 0x7, 0x337, 0x9, 0xffff220f, 0x3, 0x8, 0x4, 0x2, 0x9, 0x9, 0x5, 0x10, 0x1, 0x100, 0x5, 0x2, 0x5, 0x5, 0x3, 0x9b, 0x40, 0x8bc1, 0x9, 0x7, 0x5, 0x2dc, 0x2, 0x3, 0x40, 0x7372, 0x9ced, 0x6, 0x8]}]}]}}]}, 0xf5c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004007971ac9a0535a2ee388ed05c0000060daa658cafc42be7ad5100", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000200)=r4}, 0x20) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) r5 = socket(0x1e, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup2(r7, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) r9 = dup3(r6, r5, 0x0) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/6, 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}}], 0x30, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 20.482647579s ago: executing program 0 (id=7043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) read$char_usb(r2, &(0x7f0000000140)=""/189, 0xfffffecd) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/61, 0x3d) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0xfffffe24, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000540)='#[\x00', 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0xfe8e, 0x12) membarrier(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) 19.78063773s ago: executing program 0 (id=7046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) alarm(0x8000000000000001) 19.612537206s ago: executing program 0 (id=7047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x134, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x7c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x1cc}}, 0x0) 19.530804483s ago: executing program 1 (id=7048): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 19.474823718s ago: executing program 0 (id=7050): socket$inet6(0xa, 0x806, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12000000000009000000000000008000"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) 16.971888537s ago: executing program 0 (id=7057): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 16.513224268s ago: executing program 0 (id=7060): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) 15.423370314s ago: executing program 3 (id=7063): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15.163222907s ago: executing program 3 (id=7064): socket$inet6(0xa, 0x806, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12000000000009000000000000008000"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) 12.683374465s ago: executing program 3 (id=7065): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xf5c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x840, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_SEL={0x7f4, 0x5, {0x2, 0x87, 0x7, 0x5, 0x1, 0x7, 0xb936, 0x5, [{0x10001, 0x6, 0x8, 0x8}, {0x1, 0x800, 0x9, 0x2}, {0xe, 0xff, 0x5, 0x3}, {0xd, 0x3, 0xa, 0x1}, {0x5, 0x4, 0x3, 0x3ff}, {0x5, 0x655, 0x800, 0x7ff}, {0x3, 0xc, 0xfffffffd, 0x200}, {0x6, 0x4, 0x6, 0x1e4ef314}, {0xfdc3, 0x3, 0x6, 0x2}, {0x6, 0x3, 0x3ff, 0x6}, {0xa, 0x3527, 0x9, 0xd}, {0x3, 0x4, 0x4, 0x5}, {0x7, 0x8, 0x0, 0xa}, {0xffffffff, 0x7, 0x7, 0x3ff}, {0x7, 0x7, 0x3b0, 0x41}, {0x1, 0x7, 0x0, 0x300000}, {0x4, 0x2, 0x3ff, 0x4}, {0xad, 0x1, 0x1, 0x81}, {0x5, 0x1, 0x1, 0x7}, {0x8001, 0x9, 0xffff, 0x101}, {0x6, 0x7ff, 0x9, 0x178}, {0x98b9fec, 0xa4ee, 0x1, 0x7}, {0xb, 0x1, 0xd, 0xa5}, {0xb, 0x0, 0x5, 0x754}, {0xd, 0x80, 0x4, 0x29c}, {0x0, 0x9, 0x1000000, 0x4}, {0xc, 0x4, 0x4, 0x3}, {0x0, 0x1, 0x0, 0x2}, {0x3, 0x81, 0x9, 0x45a2}, {0x6, 0x42, 0x1, 0x7fff}, {0x9, 0x5eaa, 0x7, 0x62}, {0xffffffff, 0x7, 0x6, 0x4}, {0x10001, 0x6, 0x0, 0x3e0}, {0x280, 0x819, 0x10000, 0x10001}, {0xfffffffb, 0x4, 0x7, 0x8}, {0x8cff, 0x3, 0x10001, 0x30000}, {0x6, 0xcdf, 0x1, 0x6}, {0x10000, 0x9c6, 0x11, 0x10000}, {0x5, 0x9, 0x83, 0xf}, {0x66, 0x1ff, 0x2, 0x9}, {0x101, 0xd, 0x1, 0x1}, {0xaa0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x8}, {0x1ff, 0xc5, 0x7bdfab2d, 0x1b9}, {0x12c000, 0x4, 0x3, 0xd82a}, {0x10001, 0x5, 0x8, 0xeae}, {0x1, 0x9, 0x2, 0x5}, {0x7, 0x8, 0x6, 0x6}, {0x80, 0x241a, 0x77c44c89, 0x3}, {0x100, 0x1, 0x3, 0x8}, {0x3b4, 0xd, 0xc, 0x4}, {0x10000, 0xffffff5e, 0x9, 0xf}, {0x3, 0x4, 0x9, 0x3}, {0x81, 0x0, 0xe, 0x10000}, {0xff, 0x8, 0x146, 0x6}, {0x10, 0x3, 0xa3d, 0x8a39}, {0x1, 0x3, 0x6, 0x10000}, {0x8, 0x8cbc, 0x8, 0x5}, {0x28, 0x100, 0x8, 0xeb}, {0x7, 0x7fffffff, 0x753, 0x3}, {0x8, 0x1, 0x6}, {0x380000, 0x8000, 0x0, 0x4}, {0x69900, 0x2, 0x7, 0x8}, {0x5, 0x2, 0x1, 0x7}, {0xfffff800, 0x3, 0x6, 0x8}, {0x6, 0x0, 0xf7b, 0x7fffffff}, {0xe, 0x4, 0x1ff, 0x12}, {0x5, 0x80000000, 0x800, 0x8}, {0x4, 0x9, 0x0, 0xfffffffa}, {0x2, 0x5, 0x9, 0x7}, {0xffffffff, 0x40, 0x7, 0x2}, {0x0, 0x10000000, 0x7}, {0x9, 0x6, 0x7, 0x3}, {0x80000001, 0x6, 0x8, 0x81}, {0x0, 0x0, 0x4, 0x1ff}, {0xff, 0x81, 0x7, 0x1}, {0x80, 0xe, 0x1, 0x7}, {0xb7, 0x5, 0xdf, 0x6}, {0xfffffffb, 0x2b, 0xffff, 0x5}, {0xfffffffd, 0x8, 0x401000, 0x2}, {0x5, 0x2, 0x8, 0x100}, {0xff, 0x80, 0x2, 0x5}, {0x0, 0xff, 0x2}, {0x101, 0x173, 0x2, 0x4}, {0x2, 0x5, 0x2, 0x2}, {0x6, 0x0, 0x4, 0xffff38f1}, {0x9, 0x2, 0x5, 0x8}, {0x1, 0xfffffffc, 0xa80, 0x101}, {0x27, 0x180, 0x1000, 0x40}, {0x9, 0x9, 0x1, 0x7}, {0x4, 0x7, 0x9, 0x7}, {0x3ef, 0x7, 0x7, 0x10}, {0x0, 0x9, 0x1ff, 0x279}, {0x9, 0x10000, 0xe3d4, 0x4}, {0x42bd, 0x4be66fa6, 0x10001, 0xca}, {0x0, 0x9, 0x5e, 0x4}, {0x1, 0x7, 0xd6, 0x7fffffff}, {0x7, 0xd582eecd, 0xa, 0x76f}, {0xfffffff5, 0x5, 0x0, 0x4}, {0x1, 0x1, 0x3}, {0x7, 0x5, 0x80000001}, {0xe74, 0x101, 0x64, 0x2}, {0x9, 0xaf, 0x400, 0x6}, {0x6, 0x7ff, 0xdc, 0x800}, {0x6, 0x2, 0x8, 0x3}, {0x8f, 0x101, 0x10001, 0x5}, {0x7, 0x7, 0x9, 0xfffffffb}, {0x1, 0x80, 0x9785, 0x6}, {0x8, 0x10000, 0x2, 0x4}, {0x7, 0xc, 0x5, 0x9}, {0x9, 0x8, 0x9, 0x80}, {0x2, 0xc, 0x100, 0x1}, {0x6, 0x3ff, 0x6, 0x788d}, {0xffff, 0x80000000, 0x4, 0x1}, {0x6, 0x4, 0xf213, 0x10000}, {0x8, 0x2, 0x355c16c3, 0x1}, {0x0, 0x0, 0x5, 0x4}, {0x8, 0x1, 0x7fff, 0x7}, {0x2, 0x4cb, 0x4, 0x4}, {0xfffffffd, 0x0, 0xfc4a, 0xfffffff9}, {0x1, 0x8, 0x9, 0x29}, {0xfffffff4, 0x0, 0x6, 0x5}, {0xbf, 0x6, 0xffff, 0xdae}, {0x7, 0x81, 0x5, 0xd8c}, {0x2, 0x9, 0x6, 0x2}, {0x4, 0x50, 0x7fff, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x1}}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x6cc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x268, 0x6, [@m_nat={0x90, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}]}, {0x15, 0x6, "17a3a496e0b06ed4b17c112d919b00b396"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x188, 0x1c, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8001, 0x0, 0x7f, 0xffffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x8, 0x10000000, 0x2, 0xff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x6, 0x6, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x0, 0x0, 0x8bd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x91ec, 0x20000000, 0xdf, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x94, 0x8, 0x1, 0xfffffffc}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8000, 0x8, 0xb}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x10000000, 0x6, 0x1}, 0x3}}]}, {0x39, 0x6, "3de58d95f75c07bc7f03a8e9500508a6fac8a07b2a0626893e7d2b4d5a9f9e578e344992f2e654ed7f8d7602e7c8281c13643d9e89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x46a4df08, 0xa000, 0x7, 0x10000}, 0x51}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0x44c, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x3, 0x5, 0x100, {0x4, 0x2, 0x0, 0x7, 0x10}, {0x2, 0x1, 0x5, 0x6, 0x7f, 0x9}, 0x80, 0x3, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x2, 0xff, 0x6, 0x81, 0x92b1, 0x548, 0x67, 0x963, 0x6, 0x3ff, 0x7, 0x1, 0x7, 0x3, 0x9, 0x1, 0x1, 0x0, 0x6, 0x9, 0xf05, 0x401, 0xffff, 0x6, 0x0, 0x101, 0x4, 0xffffffa7, 0xe, 0x6, 0x8, 0x2, 0xfffffffa, 0x10000, 0x3, 0x2, 0x6, 0x4, 0x498ad2cb, 0x9, 0x400, 0xff, 0xfffffffd, 0x1, 0x7, 0x40000000, 0x2, 0x1, 0x8, 0x9, 0x0, 0x10, 0x4, 0x7ff, 0x5, 0xc, 0x200000, 0x9, 0x6, 0x1, 0x4f, 0x0, 0x5, 0x7, 0xfff, 0x1, 0x401, 0x6, 0x200, 0x5c, 0x9, 0x10000, 0x70, 0x3, 0x9, 0x3be, 0x6, 0xb676, 0x589f9c70, 0x7, 0xf, 0x5, 0x6, 0x9, 0x2, 0x229ee0a3, 0x4, 0x7, 0x401, 0x1, 0xa9f8, 0x5, 0x8, 0x7, 0x6, 0x4, 0x4, 0x55, 0x6, 0x7fff, 0x63b, 0x6, 0x80000000, 0xc, 0x400, 0x9, 0x0, 0xfffffff7, 0x5, 0x8001, 0x3, 0x401, 0x30, 0x8, 0x40000000, 0x2, 0x40, 0x8, 0x40, 0x400, 0x494, 0x4000000, 0x10001, 0x5, 0x5, 0x8, 0x1c0000, 0x253801be, 0x8e, 0x5, 0x9, 0xe196, 0x0, 0x5, 0x3, 0x77e7, 0xd, 0x1, 0xffffffff, 0x80000000, 0x0, 0x9bd, 0x7b3, 0x9, 0x81, 0xe, 0xf, 0xeaa, 0x5, 0x1800, 0x4, 0x5, 0x8000, 0x92, 0x1, 0x1ff, 0x9ca, 0x6, 0xe, 0x5a4, 0x8001, 0x1, 0x6, 0x2, 0x8001, 0x12000000, 0x3, 0x5, 0x10000, 0x1, 0x0, 0x6, 0x1, 0x2, 0x4, 0x3, 0xfffff79e, 0x9, 0x1e30b589, 0x0, 0x5, 0x80, 0x7, 0x6, 0x8, 0x9, 0x2, 0x3, 0x6, 0xb4, 0x40, 0xc, 0x3, 0x2, 0x5, 0x4e77, 0x6, 0xfffffffb, 0x7fffffff, 0xb, 0x8, 0xce, 0x1000, 0x8, 0x40, 0xffff, 0x7ff, 0x6, 0x359c, 0x4, 0x100, 0x3, 0x2c3, 0x2, 0xfffffff7, 0xfea7, 0x1, 0x9, 0x7, 0x2, 0xc9, 0x9c, 0x7, 0x337, 0x9, 0xffff220f, 0x3, 0x8, 0x4, 0x2, 0x9, 0x9, 0x5, 0x10, 0x1, 0x100, 0x5, 0x2, 0x5, 0x5, 0x3, 0x9b, 0x40, 0x8bc1, 0x9, 0x7, 0x5, 0x2dc, 0x2, 0x3, 0x40, 0x7372, 0x9ced, 0x6, 0x8]}]}]}}]}, 0xf5c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004007971ac9a0535a2ee388ed05c0000060daa65", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000200)=r4}, 0x20) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) r5 = socket(0x1e, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup2(r7, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r6, r5, 0x0) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/6, 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}}], 0x30, 0x0, 0x0) 5.986451674s ago: executing program 3 (id=7071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x75) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x91}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x705b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062000a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, r6) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.733441014s ago: executing program 3 (id=7072): socket$inet6(0xa, 0x806, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12000000000009000000000000008000"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) 3.608158052s ago: executing program 1 (id=7049): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) 3.402204871s ago: executing program 1 (id=7075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c00, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x1, @multicast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 2.120918603s ago: executing program 4 (id=7045): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f00000019c0)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x0, 0x10000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x4b48, &(0x7f0000003d40)=""/175) 2.009556083s ago: executing program 1 (id=7077): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 1.850806537s ago: executing program 1 (id=7079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) close(r0) 1.803716111s ago: executing program 1 (id=7080): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, &(0x7f0000000380)={@val, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @dev, @mcast2={0xff, 0x3}}}}}}, 0x82) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) add_key(0x0, 0x0, &(0x7f0000000300)="303e3002a0001f140000", 0xa, 0xfffffffffffffffc) 1.150813819s ago: executing program 2 (id=7083): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) 1.077494705s ago: executing program 3 (id=7084): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000045b1eb8749cedddf924bf4436a5dd826d68cce0765d45e4ecdbf841ff47c863645dddad7e7329bd72070c8310ac335f256eae2277713f83f4f07290fcf2f7c76a9236a3f358a755b7cf30fe1a0681ff062cc79fb1e769425614054ca81080f5d54299bcde312d6ce5fb7f74999ab8fcded57b98a2f43aef8ca84a2f58275a47c0f7e7cf90ff1a463e768b406527c50c4c4cd00689cf67802d5aa54786e934d48fdfbecb6648dc0ced26738df25c2940d72fb1d3e688e4272e59aa1862e37cdc4f18c47d6f1bfb4b51310e61719c85c7805f4cb2c3d7f1e8ec5e5f0b340e15853bb7bc0359af05a6c2c28965b6152318001fc28df6d0fc26db0c5bf180a57a50d0e3e1472b46158f0532f5d99d3a981b9c00a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f00000019c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "be1d0000ae9ef30bea2a004000010000000000008000"}) 668.734691ms ago: executing program 2 (id=7085): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b48, &(0x7f0000003d40)=""/175) 540.637812ms ago: executing program 2 (id=7086): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x80000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000780)={[], [{@smackfsroot}, {@seclabel}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'team0\x00'}}, {@flag='dirsync'}, {@uid_gt}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 434.775342ms ago: executing program 2 (id=7087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x1a8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x138, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x74, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x1d0}}, 0x0) 26.708567ms ago: executing program 2 (id=7088): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 0s ago: executing program 2 (id=7089): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@grpquota}, {@dioread_nolock}]}, 0xff, 0x55c, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) kernel console output (not intermixed with test programs): 02] [ 522.573799][T30881] System zones: 1-12 [ 522.578502][T30881] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.6513: corrupted in-inode xattr: e_value size too large [ 522.594297][T30881] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6513: couldn't read orphan inode 15 (err -117) [ 522.676813][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.702331][T30894] FAULT_INJECTION: forcing a failure. [ 522.702331][T30894] name failslab, interval 1, probability 0, space 0, times 0 [ 522.715102][T30894] CPU: 0 UID: 0 PID: 30894 Comm: syz.0.6520 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 522.725534][T30894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.735601][T30894] Call Trace: [ 522.738883][T30894] [ 522.741835][T30894] dump_stack_lvl+0xf2/0x150 [ 522.746468][T30894] dump_stack+0x15/0x20 [ 522.750687][T30894] should_fail_ex+0x223/0x230 [ 522.755386][T30894] ? skb_clone+0x154/0x1f0 [ 522.759844][T30894] should_failslab+0x8f/0xb0 [ 522.764441][T30894] kmem_cache_alloc_noprof+0x4c/0x290 [ 522.769829][T30894] ? mod_objcg_state+0x3b1/0x4f0 [ 522.774781][T30894] skb_clone+0x154/0x1f0 [ 522.779087][T30894] dev_queue_xmit_nit+0x149/0x620 [ 522.784181][T30894] dev_hard_start_xmit+0xcc/0x3f0 [ 522.789221][T30894] ? validate_xmit_skb+0x658/0x8d0 [ 522.794396][T30894] __dev_queue_xmit+0xfe6/0x1fe0 [ 522.799353][T30894] ? __dev_queue_xmit+0x161/0x1fe0 [ 522.804485][T30894] ? __skb_clone+0x2d0/0x2f0 [ 522.809116][T30894] __netlink_deliver_tap+0x39f/0x4c0 [ 522.814484][T30894] netlink_unicast+0x64a/0x670 [ 522.819337][T30894] netlink_sendmsg+0x5cc/0x6e0 [ 522.824138][T30894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.829429][T30894] __sock_sendmsg+0x140/0x180 [ 522.834120][T30894] ____sys_sendmsg+0x312/0x410 [ 522.839002][T30894] __sys_sendmsg+0x1d9/0x270 [ 522.843666][T30894] __x64_sys_sendmsg+0x46/0x50 [ 522.848455][T30894] x64_sys_call+0x2689/0x2d60 [ 522.853221][T30894] do_syscall_64+0xc9/0x1c0 [ 522.857774][T30894] ? clear_bhb_loop+0x55/0xb0 [ 522.862521][T30894] ? clear_bhb_loop+0x55/0xb0 [ 522.867269][T30894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.873233][T30894] RIP: 0033:0x7fb4da45dff9 [ 522.877653][T30894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.897294][T30894] RSP: 002b:00007fb4d90d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.905745][T30894] RAX: ffffffffffffffda RBX: 00007fb4da615f80 RCX: 00007fb4da45dff9 [ 522.913733][T30894] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 522.921724][T30894] RBP: 00007fb4d90d7090 R08: 0000000000000000 R09: 0000000000000000 [ 522.929705][T30894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.937836][T30894] R13: 0000000000000000 R14: 00007fb4da615f80 R15: 00007fff2b102fa8 [ 522.945867][T30894] [ 522.994744][T30902] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 523.014043][T30904] vlan2: entered allmulticast mode [ 523.061809][T30904] vlan2: entered allmulticast mode [ 523.350511][T30920] serio: Serial port pts0 [ 523.666954][T30931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30931 comm=syz.4.6532 [ 523.680725][T30931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6532'. [ 523.712321][T30935] FAULT_INJECTION: forcing a failure. [ 523.712321][T30935] name failslab, interval 1, probability 0, space 0, times 0 [ 523.725170][T30935] CPU: 0 UID: 0 PID: 30935 Comm: syz.4.6533 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 523.735622][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.745785][T30935] Call Trace: [ 523.749103][T30935] [ 523.752058][T30935] dump_stack_lvl+0xf2/0x150 [ 523.756689][T30935] dump_stack+0x15/0x20 [ 523.760988][T30935] should_fail_ex+0x223/0x230 [ 523.765713][T30935] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 523.772049][T30935] should_failslab+0x8f/0xb0 [ 523.776726][T30935] __kmalloc_noprof+0xa5/0x370 [ 523.781550][T30935] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 523.787640][T30935] ? __kfree_skb+0x102/0x150 [ 523.792288][T30935] ? __rcu_read_unlock+0x34/0x70 [ 523.797322][T30935] genl_start+0xe7/0x390 [ 523.801666][T30935] __netlink_dump_start+0x32a/0x520 [ 523.807075][T30935] genl_rcv_msg+0x4e5/0x6c0 [ 523.811693][T30935] ? __pfx_ethnl_default_start+0x10/0x10 [ 523.817384][T30935] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 523.823241][T30935] ? __pfx_ethnl_default_done+0x10/0x10 [ 523.828896][T30935] ? __pfx_genl_start+0x10/0x10 [ 523.833826][T30935] ? __pfx_genl_dumpit+0x10/0x10 [ 523.838877][T30935] ? __pfx_genl_done+0x10/0x10 [ 523.843755][T30935] netlink_rcv_skb+0x12c/0x230 [ 523.848641][T30935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.853757][T30935] genl_rcv+0x28/0x40 [ 523.857786][T30935] netlink_unicast+0x599/0x670 [ 523.862609][T30935] netlink_sendmsg+0x5cc/0x6e0 [ 523.867396][T30935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.872768][T30935] __sock_sendmsg+0x140/0x180 [ 523.877498][T30935] ____sys_sendmsg+0x312/0x410 [ 523.882348][T30935] __sys_sendmsg+0x1d9/0x270 [ 523.887088][T30935] __x64_sys_sendmsg+0x46/0x50 [ 523.892326][T30935] x64_sys_call+0x2689/0x2d60 [ 523.897039][T30935] do_syscall_64+0xc9/0x1c0 [ 523.901635][T30935] ? clear_bhb_loop+0x55/0xb0 [ 523.906355][T30935] ? clear_bhb_loop+0x55/0xb0 [ 523.911069][T30935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.917078][T30935] RIP: 0033:0x7fc41503dff9 [ 523.921542][T30935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.941176][T30935] RSP: 002b:00007fc413cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.949670][T30935] RAX: ffffffffffffffda RBX: 00007fc4151f5f80 RCX: 00007fc41503dff9 [ 523.957749][T30935] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 523.965742][T30935] RBP: 00007fc413cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 523.973796][T30935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.981800][T30935] R13: 0000000000000000 R14: 00007fc4151f5f80 R15: 00007ffdbd60d658 [ 523.989891][T30935] [ 524.059226][T30941] vlan2: entered allmulticast mode [ 524.110448][T30947] vlan2: entered allmulticast mode [ 524.122418][T30946] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 524.130790][T30946] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 524.173567][T30952] FAULT_INJECTION: forcing a failure. [ 524.173567][T30952] name failslab, interval 1, probability 0, space 0, times 0 [ 524.182780][T30954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6540'. [ 524.186403][T30952] CPU: 0 UID: 0 PID: 30952 Comm: syz.4.6541 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 524.205800][T30952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.215973][T30952] Call Trace: [ 524.219366][T30952] [ 524.222307][T30952] dump_stack_lvl+0xf2/0x150 [ 524.226926][T30952] dump_stack+0x15/0x20 [ 524.231105][T30952] should_fail_ex+0x223/0x230 [ 524.235796][T30952] ? skb_clone+0x154/0x1f0 [ 524.240248][T30952] should_failslab+0x8f/0xb0 [ 524.244924][T30952] kmem_cache_alloc_noprof+0x4c/0x290 [ 524.250318][T30952] ? mod_objcg_state+0x3b1/0x4f0 [ 524.255315][T30952] skb_clone+0x154/0x1f0 [ 524.259560][T30952] dev_queue_xmit_nit+0x149/0x620 [ 524.264675][T30952] dev_hard_start_xmit+0xcc/0x3f0 [ 524.269791][T30952] ? validate_xmit_skb+0x658/0x8d0 [ 524.274950][T30952] __dev_queue_xmit+0xfe6/0x1fe0 [ 524.280002][T30952] ? __dev_queue_xmit+0x161/0x1fe0 [ 524.285212][T30952] ? should_fail_ex+0xd7/0x230 [ 524.290030][T30952] ? __skb_clone+0x2d0/0x2f0 [ 524.295206][T30952] __netlink_deliver_tap+0x39f/0x4c0 [ 524.300541][T30952] netlink_unicast+0x64a/0x670 [ 524.305507][T30952] netlink_sendmsg+0x5cc/0x6e0 [ 524.310281][T30952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.315641][T30952] __sock_sendmsg+0x140/0x180 [ 524.320327][T30952] ____sys_sendmsg+0x312/0x410 [ 524.325110][T30952] __sys_sendmsg+0x1d9/0x270 [ 524.329769][T30952] __x64_sys_sendmsg+0x46/0x50 [ 524.334585][T30952] x64_sys_call+0x2689/0x2d60 [ 524.339589][T30952] do_syscall_64+0xc9/0x1c0 [ 524.344112][T30952] ? clear_bhb_loop+0x55/0xb0 [ 524.348898][T30952] ? clear_bhb_loop+0x55/0xb0 [ 524.353678][T30952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.359621][T30952] RIP: 0033:0x7fc41503dff9 [ 524.364124][T30952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.383817][T30952] RSP: 002b:00007fc413cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.392327][T30952] RAX: ffffffffffffffda RBX: 00007fc4151f5f80 RCX: 00007fc41503dff9 [ 524.400339][T30952] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 524.408320][T30952] RBP: 00007fc413cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.416390][T30952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.424436][T30952] R13: 0000000000000000 R14: 00007fc4151f5f80 R15: 00007ffdbd60d658 [ 524.432440][T30952] [ 524.442559][T30954] loop1: detected capacity change from 0 to 512 [ 524.478566][T30954] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.6540: iget: bad extended attribute block 1 [ 524.498097][T30961] loop2: detected capacity change from 0 to 512 [ 524.512217][T30954] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6540: couldn't read orphan inode 15 (err -117) [ 524.522109][T30964] vlan2: entered allmulticast mode [ 524.538428][T30961] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.569007][T30969] vlan2: entered allmulticast mode [ 524.664634][T22282] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /455/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 524.762344][T30982] loop3: detected capacity change from 0 to 2048 [ 524.846222][T30982] EXT4-fs mount: 31 callbacks suppressed [ 524.846242][T30982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.875979][T30987] loop1: detected capacity change from 0 to 2048 [ 524.912611][T30987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.926680][T29287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.134883][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.774891][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6558'. [ 525.853252][T31001] loop1: detected capacity change from 0 to 512 [ 525.890823][T31001] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.6558: iget: bad extended attribute block 1 [ 525.944494][T31001] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6558: couldn't read orphan inode 15 (err -117) [ 526.008377][T31011] FAULT_INJECTION: forcing a failure. [ 526.008377][T31011] name failslab, interval 1, probability 0, space 0, times 0 [ 526.021078][T31011] CPU: 1 UID: 0 PID: 31011 Comm: syz.3.6560 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 526.031566][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 526.041744][T31011] Call Trace: [ 526.045080][T31011] [ 526.048028][T31011] dump_stack_lvl+0xf2/0x150 [ 526.052656][T31011] dump_stack+0x15/0x20 [ 526.056874][T31011] should_fail_ex+0x223/0x230 [ 526.061586][T31011] ? sidtab_sid2str_get+0xb8/0x140 [ 526.066746][T31011] should_failslab+0x8f/0xb0 [ 526.071383][T31011] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 526.077801][T31011] ? vsnprintf+0xdd8/0xe30 [ 526.082426][T31011] kmemdup_noprof+0x2a/0x60 [ 526.086954][T31011] sidtab_sid2str_get+0xb8/0x140 [ 526.092016][T31011] security_sid_to_context_core+0x1eb/0x2f0 [ 526.097942][T31011] security_sid_to_context+0x27/0x30 [ 526.103287][T31011] selinux_secid_to_secctx+0x22/0x30 [ 526.108617][T31011] security_secid_to_secctx+0x48/0x90 [ 526.114125][T31011] audit_log_task_context+0x8c/0x1b0 [ 526.115570][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 526.115587][ T29] audit: type=1326 audit(1727659064.786:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 526.119424][T31011] audit_log_task+0xfb/0x180 [ 526.119452][T31011] audit_seccomp+0x68/0x130 [ 526.119472][T31011] __seccomp_filter+0x6fa/0x1180 [ 526.125662][ T29] audit: type=1326 audit(1727659064.786:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f280f64c990 code=0x7ffc0000 [ 526.149517][T31011] ? proc_fail_nth_write+0x12a/0x150 [ 526.149556][T31011] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 526.154175][ T29] audit: type=1326 audit(1727659064.786:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f280f64cadf code=0x7ffc0000 [ 526.158651][T31011] ? vfs_write+0x580/0x910 [ 526.166452][T31001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.187114][T31011] ? __fget_files+0x1d4/0x210 [ 526.242998][T31011] __secure_computing+0x9f/0x1c0 [ 526.247986][T31011] syscall_trace_enter+0xd1/0x1f0 [ 526.253094][T31011] ? fpregs_assert_state_consistent+0x83/0xa0 [ 526.259201][T31011] do_syscall_64+0xaa/0x1c0 [ 526.262822][T31010] loop4: detected capacity change from 0 to 1024 [ 526.263717][T31011] ? clear_bhb_loop+0x55/0xb0 [ 526.274749][T31011] ? clear_bhb_loop+0x55/0xb0 [ 526.279520][T31011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.285540][T31011] RIP: 0033:0x7f280f64dff9 [ 526.289992][T31011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.309676][T31011] RSP: 002b:00007f280e2a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 526.318181][T31011] RAX: ffffffffffffffda RBX: 00007f280f806058 RCX: 00007f280f64dff9 [ 526.326164][T31011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000019 [ 526.334186][T31011] RBP: 00007f280e2a6090 R08: 0000000020000440 R09: 0000000000000000 [ 526.342274][T31011] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 526.350266][T31011] R13: 0000000000000000 R14: 00007f280f806058 R15: 00007ffd90ea7398 [ 526.358305][T31011] [ 526.361515][T31011] audit: error in audit_log_task_context [ 526.373686][ T29] audit: type=1326 audit(1727659064.786:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 526.404871][ T29] audit: type=1326 audit(1727659065.176:14134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f280f64ca3c code=0x7ffc0000 [ 526.449232][ T29] audit: type=1326 audit(1727659065.216:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f280f64cadf code=0x7ffc0000 [ 526.472865][ T29] audit: type=1326 audit(1727659065.216:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f280f64cc8a code=0x7ffc0000 [ 526.477656][T31010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.496629][ T29] audit: type=1326 audit(1727659065.216:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 526.533174][ T29] audit: type=1326 audit(1727659065.216:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.3.6560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 526.560154][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.704586][T31034] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 526.840877][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.501334][T31056] loop1: detected capacity change from 0 to 2048 [ 527.518256][T31056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.546241][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.621221][T31064] syz.1.6580[31064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.621284][T31064] syz.1.6580[31064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.633266][T31064] syz.1.6580[31064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.651179][T31064] loop1: detected capacity change from 0 to 512 [ 527.681176][T31064] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6580: bg 0: block 393: padding at end of block bitmap is not set [ 527.697223][T31064] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 527.736078][T31064] EXT4-fs (loop1): 2 truncates cleaned up [ 527.742239][T31064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.825497][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.963288][T31081] vlan2: entered allmulticast mode [ 527.972727][T31083] Cannot find add_set index 0 as target [ 528.007294][T31081] vlan2: entered allmulticast mode [ 528.019972][T31083] 9pnet_fd: p9_fd_create_tcp (31083): problem connecting socket to 127.0.0.1 [ 528.185431][T31090] loop1: detected capacity change from 0 to 2048 [ 528.207719][T31090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.313473][T31095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6593'. [ 528.634693][T31107] loop0: detected capacity change from 0 to 1024 [ 528.648946][T31107] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 528.678491][T31107] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6597: Invalid block bitmap block 0 in block_group 0 [ 528.707246][T31107] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.6597: Failed to acquire dquot type 0 [ 528.738211][T31107] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.6597: Freeing blocks not in datazone - block = 0, count = 4096 [ 528.774542][T31107] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.6597: Invalid inode bitmap blk 0 in block_group 0 [ 528.796892][ T3284] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 0 [ 528.813127][T31107] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 528.822216][T31107] EXT4-fs (loop0): 1 orphan inode deleted [ 528.836060][T31107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.865822][T31107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.026111][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.060606][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6601'. [ 529.089407][T31118] loop4: detected capacity change from 0 to 512 [ 529.170694][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.195296][T31118] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.6601: iget: bad extended attribute block 1 [ 529.209681][T31118] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6601: couldn't read orphan inode 15 (err -117) [ 529.222815][T31118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.252060][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.406562][T31130] loop1: detected capacity change from 0 to 2048 [ 529.448023][T31130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.521674][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.583604][T31140] loop1: detected capacity change from 0 to 512 [ 529.613929][T31140] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.6609: corrupted in-inode xattr: invalid ea_ino [ 529.643141][T31140] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6609: couldn't read orphan inode 15 (err -117) [ 529.670826][T31140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.690083][T31143] vlan2: entered promiscuous mode [ 529.695201][T31143] vlan2: entered allmulticast mode [ 529.703757][T31140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6609'. [ 529.712993][T31143] vlan0: entered allmulticast mode [ 529.718171][T31143] veth0_vlan: entered allmulticast mode [ 529.723757][T31143] vlan0: entered promiscuous mode [ 529.837388][T31143] team0: Port device vlan2 added [ 529.869439][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.987659][T31152] FAULT_INJECTION: forcing a failure. [ 529.987659][T31152] name failslab, interval 1, probability 0, space 0, times 0 [ 530.000322][T31152] CPU: 1 UID: 0 PID: 31152 Comm: syz.3.6615 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 530.010827][T31152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.020957][T31152] Call Trace: [ 530.024255][T31152] [ 530.027203][T31152] dump_stack_lvl+0xf2/0x150 [ 530.031832][T31152] dump_stack+0x15/0x20 [ 530.036081][T31152] should_fail_ex+0x223/0x230 [ 530.040866][T31152] ? skb_clone+0x154/0x1f0 [ 530.045366][T31152] should_failslab+0x8f/0xb0 [ 530.050001][T31152] kmem_cache_alloc_noprof+0x4c/0x290 [ 530.055544][T31152] ? mod_objcg_state+0x3a7/0x4f0 [ 530.060518][T31152] skb_clone+0x154/0x1f0 [ 530.064862][T31152] dev_queue_xmit_nit+0x149/0x620 [ 530.069986][T31152] dev_hard_start_xmit+0xcc/0x3f0 [ 530.075050][T31152] ? validate_xmit_skb+0x658/0x8d0 [ 530.080197][T31152] __dev_queue_xmit+0xfe6/0x1fe0 [ 530.085326][T31152] ? __dev_queue_xmit+0x161/0x1fe0 [ 530.090518][T31152] ? should_fail_ex+0xd7/0x230 [ 530.095336][T31152] ? __skb_clone+0x2d0/0x2f0 [ 530.100078][T31152] __netlink_deliver_tap+0x39f/0x4c0 [ 530.105423][T31152] netlink_unicast+0x64a/0x670 [ 530.110326][T31152] netlink_sendmsg+0x5cc/0x6e0 [ 530.115138][T31152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.120441][T31152] __sock_sendmsg+0x140/0x180 [ 530.125158][T31152] ____sys_sendmsg+0x312/0x410 [ 530.130032][T31152] __sys_sendmsg+0x1d9/0x270 [ 530.134660][T31152] __x64_sys_sendmsg+0x46/0x50 [ 530.139491][T31152] x64_sys_call+0x2689/0x2d60 [ 530.144218][T31152] do_syscall_64+0xc9/0x1c0 [ 530.148736][T31152] ? clear_bhb_loop+0x55/0xb0 [ 530.153443][T31152] ? clear_bhb_loop+0x55/0xb0 [ 530.158538][T31152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.164528][T31152] RIP: 0033:0x7f280f64dff9 [ 530.168964][T31152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.188597][T31152] RSP: 002b:00007f280e2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.197148][T31152] RAX: ffffffffffffffda RBX: 00007f280f805f80 RCX: 00007f280f64dff9 [ 530.205303][T31152] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000006 [ 530.213380][T31152] RBP: 00007f280e2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 530.221366][T31152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.229351][T31152] R13: 0000000000000000 R14: 00007f280f805f80 R15: 00007ffd90ea7398 [ 530.237348][T31152] [ 530.351336][T31169] loop0: detected capacity change from 0 to 1024 [ 530.364663][T31169] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 530.378776][T31169] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 530.395680][T31169] EXT4-fs (loop0): orphan cleanup on readonly fs [ 530.404763][T31169] EXT4-fs error (device loop0): ext4_map_blocks:705: inode #3: block 3: comm syz.0.6620: lblock 3 mapped to illegal pblock 3 (length 1) [ 530.419420][T31169] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.6620: Failed to acquire dquot type 0 [ 530.438916][T31169] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 3: comm syz.0.6620: lblock 3 mapped to illegal pblock 3 (length 1) [ 530.453231][T31169] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.6620: Failed to acquire dquot type 0 [ 530.467287][T31169] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.6620: Freeing blocks not in datazone - block = 0, count = 4096 [ 530.478731][T31171] loop1: detected capacity change from 0 to 8192 [ 530.480889][T31169] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 3: comm syz.0.6620: lblock 3 mapped to illegal pblock 3 (length 1) [ 530.501136][T31169] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.6620: Failed to acquire dquot type 0 [ 530.518072][T31169] EXT4-fs (loop0): 1 orphan inode deleted [ 530.534482][T31169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.714778][T31177] FAULT_INJECTION: forcing a failure. [ 530.714778][T31177] name failslab, interval 1, probability 0, space 0, times 0 [ 530.727497][T31177] CPU: 0 UID: 0 PID: 31177 Comm: syz.1.6623 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 530.737983][T31177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.748183][T31177] Call Trace: [ 530.751477][T31177] [ 530.754464][T31177] dump_stack_lvl+0xf2/0x150 [ 530.759080][T31177] dump_stack+0x15/0x20 [ 530.763242][T31177] should_fail_ex+0x223/0x230 [ 530.767971][T31177] ? alloc_tty_struct+0x4d/0x400 [ 530.772957][T31177] should_failslab+0x8f/0xb0 [ 530.777563][T31177] __kmalloc_cache_noprof+0x4b/0x2a0 [ 530.782972][T31177] ? finish_task_switch+0xb5/0x2b0 [ 530.788236][T31177] alloc_tty_struct+0x4d/0x400 [ 530.793137][T31177] ? __schedule+0x732/0x940 [ 530.797858][T31177] tty_init_dev+0x3d/0x320 [ 530.802304][T31177] ptmx_open+0xd0/0x230 [ 530.806539][T31177] chrdev_open+0x2f9/0x370 [ 530.810977][T31177] ? __pfx_chrdev_open+0x10/0x10 [ 530.815939][T31177] do_dentry_open+0x621/0xa20 [ 530.820642][T31177] vfs_open+0x38/0x1f0 [ 530.824806][T31177] path_openat+0x1ac2/0x1fa0 [ 530.829523][T31177] ? _parse_integer+0x27/0x30 [ 530.834229][T31177] do_filp_open+0xf7/0x200 [ 530.838799][T31177] do_sys_openat2+0xab/0x120 [ 530.843452][T31177] __x64_sys_openat+0xf3/0x120 [ 530.848241][T31177] x64_sys_call+0x1025/0x2d60 [ 530.853010][T31177] do_syscall_64+0xc9/0x1c0 [ 530.857606][T31177] ? clear_bhb_loop+0x55/0xb0 [ 530.862310][T31177] ? clear_bhb_loop+0x55/0xb0 [ 530.867162][T31177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.873098][T31177] RIP: 0033:0x7f7dc31adff9 [ 530.877529][T31177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.897159][T31177] RSP: 002b:00007f7dc1de5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.905591][T31177] RAX: ffffffffffffffda RBX: 00007f7dc3366130 RCX: 00007f7dc31adff9 [ 530.913638][T31177] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 530.921645][T31177] RBP: 00007f7dc1de5090 R08: 0000000000000000 R09: 0000000000000000 [ 530.929639][T31177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.937633][T31177] R13: 0000000000000000 R14: 00007f7dc3366130 R15: 00007ffd99a06668 [ 530.945653][T31177] [ 530.984593][T31169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6620'. [ 530.996173][T31169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 531.020625][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.139655][T31188] loop0: detected capacity change from 0 to 2048 [ 531.169167][T31188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.286176][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.384812][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 531.384843][ T29] audit: type=1400 audit(1727659070.156:14233): avc: denied { ioctl } for pid=31203 comm="syz.3.6636" path="socket:[91032]" dev="sockfs" ino=91032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.624151][T31214] loop3: detected capacity change from 0 to 2048 [ 531.649556][T31214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.678705][ T29] audit: type=1326 audit(1727659070.456:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.702591][ T29] audit: type=1326 audit(1727659070.456:14235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.716821][T31222] loop1: detected capacity change from 0 to 2048 [ 531.726201][ T29] audit: type=1326 audit(1727659070.456:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.726237][ T29] audit: type=1326 audit(1727659070.456:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.778498][T31222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.779912][ T29] audit: type=1326 audit(1727659070.456:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.815534][ T29] audit: type=1326 audit(1727659070.456:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.839186][ T29] audit: type=1326 audit(1727659070.456:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.862973][ T29] audit: type=1326 audit(1727659070.456:14241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.886591][ T29] audit: type=1326 audit(1727659070.456:14242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.3.6639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 531.927847][T29287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.938016][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.034421][T31238] syz.0.6650[31238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.034508][T31238] syz.0.6650[31238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.073263][T31238] syz.0.6650[31238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.198991][T31248] loop0: detected capacity change from 0 to 512 [ 532.225820][T31248] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6650: bg 0: block 393: padding at end of block bitmap is not set [ 532.327308][T31248] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 532.336649][T31248] EXT4-fs (loop0): 2 truncates cleaned up [ 532.353664][T31248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.627945][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.686464][T31255] loop0: detected capacity change from 0 to 2048 [ 532.796820][T31255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.832467][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.980034][T31262] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6657'. [ 533.061714][T31266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6658'. [ 533.323124][T31276] syz.4.6663[31276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.323276][T31276] syz.4.6663[31276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.349344][T31276] syz.4.6663[31276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.514501][T31276] loop4: detected capacity change from 0 to 512 [ 533.657284][T31276] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6663: bg 0: block 393: padding at end of block bitmap is not set [ 533.688438][T31276] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 533.699864][T31284] netlink: 472 bytes leftover after parsing attributes in process `syz.3.6666'. [ 533.709609][T31276] EXT4-fs (loop4): 2 truncates cleaned up [ 533.724591][T31276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.852619][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.090109][T31307] loop1: detected capacity change from 0 to 512 [ 534.119091][T31307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.133006][T31307] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.183213][T31311] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6668'. [ 534.227850][T31313] syz.4.6679[31313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.227958][T31313] syz.4.6679[31313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.241312][T31313] syz.4.6679[31313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.258053][T31313] loop4: detected capacity change from 0 to 512 [ 534.278498][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.298457][T31313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6679: bg 0: block 393: padding at end of block bitmap is not set [ 534.314475][T31313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 534.329033][T31313] EXT4-fs (loop4): 2 truncates cleaned up [ 534.335262][T31313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.421741][T31318] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 534.454990][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.548029][T31324] loop4: detected capacity change from 0 to 2048 [ 534.578647][T31326] FAULT_INJECTION: forcing a failure. [ 534.578647][T31326] name failslab, interval 1, probability 0, space 0, times 0 [ 534.591377][T31326] CPU: 0 UID: 0 PID: 31326 Comm: +}[@ Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 534.593041][T31324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.601278][T31326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.601296][T31326] Call Trace: [ 534.601305][T31326] [ 534.601315][T31326] dump_stack_lvl+0xf2/0x150 [ 534.601386][T31326] dump_stack+0x15/0x20 [ 534.638484][T31326] should_fail_ex+0x223/0x230 [ 534.643229][T31326] ? audit_log_start+0x34c/0x6b0 [ 534.648200][T31326] should_failslab+0x8f/0xb0 [ 534.652919][T31326] kmem_cache_alloc_noprof+0x4c/0x290 [ 534.658620][T31326] audit_log_start+0x34c/0x6b0 [ 534.663461][T31326] audit_seccomp+0x4b/0x130 [ 534.667995][T31326] __seccomp_filter+0x6fa/0x1180 [ 534.672954][T31326] ? proc_fail_nth_write+0x12a/0x150 [ 534.678304][T31326] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 534.683969][T31326] ? vfs_write+0x580/0x910 [ 534.688441][T31326] ? __fget_files+0x1d4/0x210 [ 534.693143][T31326] __secure_computing+0x9f/0x1c0 [ 534.698125][T31326] syscall_trace_enter+0xd1/0x1f0 [ 534.703275][T31326] ? fpregs_assert_state_consistent+0x83/0xa0 [ 534.709462][T31326] do_syscall_64+0xaa/0x1c0 [ 534.713976][T31326] ? clear_bhb_loop+0x55/0xb0 [ 534.718786][T31326] ? clear_bhb_loop+0x55/0xb0 [ 534.723484][T31326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.729427][T31326] RIP: 0033:0x7f7dc31adff9 [ 534.733958][T31326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.753653][T31326] RSP: 002b:00007f7dc1e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.762174][T31326] RAX: ffffffffffffffda RBX: 00007f7dc3365f80 RCX: 00007f7dc31adff9 [ 534.770376][T31326] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000009 [ 534.778510][T31326] RBP: 00007f7dc1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 534.786533][T31326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.794511][T31326] R13: 0000000000000000 R14: 00007f7dc3365f80 R15: 00007ffd99a06668 [ 534.802505][T31326] [ 534.891418][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.909167][T31337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6689'. [ 534.929963][T31337] loop3: detected capacity change from 0 to 512 [ 534.943779][T31343] vlan3: entered allmulticast mode [ 534.968824][T31337] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.6689: iget: bad extended attribute block 1 [ 534.982779][T31337] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.6689: couldn't read orphan inode 15 (err -117) [ 535.002345][T31343] vlan3: entered allmulticast mode [ 535.013584][T31337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.039254][T29287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.077839][T22282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.103160][T14303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.124397][T31359] Cannot find add_set index 0 as target [ 535.141702][T31334] chnl_net:caif_netlink_parms(): no params data found [ 535.173747][T14303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.216056][T14303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.239260][T31334] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.246436][T31334] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.253739][T31334] bridge_slave_0: entered allmulticast mode [ 535.260593][T31334] bridge_slave_0: entered promiscuous mode [ 535.267837][T31334] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.274982][T31334] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.282490][T31334] bridge_slave_1: entered allmulticast mode [ 535.289417][T31334] bridge_slave_1: entered promiscuous mode [ 535.298735][T14303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.322687][T31334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.333967][T31334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.355096][T31334] team0: Port device team_slave_0 added [ 535.363154][T31334] team0: Port device team_slave_1 added [ 535.384910][T31334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.392003][T31334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.418056][T31334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.432342][T31334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.439339][T31334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.465392][T31334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.500482][T14303] bridge_slave_1: left allmulticast mode [ 535.506227][T14303] bridge_slave_1: left promiscuous mode [ 535.511852][T14303] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.519908][T14303] bridge_slave_0: left allmulticast mode [ 535.525677][T14303] bridge_slave_0: left promiscuous mode [ 535.531447][T14303] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.688389][T14303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.699196][T14303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.710896][T14303] bond0 (unregistering): Released all slaves [ 535.721659][T31334] hsr_slave_0: entered promiscuous mode [ 535.727909][T31334] hsr_slave_1: entered promiscuous mode [ 535.734097][T31334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.741803][T31334] Cannot create hsr debugfs directory [ 535.782436][T14303] hsr_slave_0: left promiscuous mode [ 535.788449][T14303] hsr_slave_1: left promiscuous mode [ 535.794435][T14303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.801923][T14303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.810155][T14303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.817744][T14303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.830620][T14303] veth1_macvtap: left promiscuous mode [ 535.836442][T14303] veth0_macvtap: left promiscuous mode [ 535.842132][T14303] veth1_vlan: left promiscuous mode [ 535.847542][T14303] veth0_vlan: left promiscuous mode [ 535.957687][T31359] 9pnet_fd: p9_fd_create_tcp (31359): problem connecting socket to 127.0.0.1 [ 535.968874][T14303] team0 (unregistering): Port device team_slave_1 removed [ 535.983190][T14303] team0 (unregistering): Port device team_slave_0 removed [ 536.049691][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6698'. [ 536.078788][T31396] loop3: detected capacity change from 0 to 512 [ 536.078986][T31389] vlan2: entered allmulticast mode [ 536.098794][T31398] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 536.099254][T31392] IPVS: stopping master sync thread 31398 ... [ 536.114937][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6698'. [ 536.127211][T31396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.139827][T31396] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.232234][T31413] loop0: detected capacity change from 0 to 512 [ 536.275084][T31413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.290475][T29287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.299916][T31413] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.391456][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.433966][T31433] loop3: detected capacity change from 0 to 1024 [ 536.456673][T31334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.467307][T31334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.478349][T31433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.492889][T31334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.503549][T31334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.548187][T31334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.560065][T31334] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.579307][T31334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.589784][T31334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.606528][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.613669][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.623289][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.630469][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.799134][T31334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.877460][T29287] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.919050][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 536.919068][ T29] audit: type=1326 audit(1727659075.696:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31466 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 536.958627][T31334] veth0_vlan: entered promiscuous mode [ 536.962129][ T29] audit: type=1326 audit(1727659075.726:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31466 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 536.967874][T31334] veth1_vlan: entered promiscuous mode [ 536.987882][ T29] audit: type=1326 audit(1727659075.736:14403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31466 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 537.059415][T31334] veth0_macvtap: entered promiscuous mode [ 537.067036][T31334] veth1_macvtap: entered promiscuous mode [ 537.077741][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.088455][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.098327][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.109031][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.119289][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.129914][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.140044][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.150662][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.160551][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.171003][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.181763][T31334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.190922][T31495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6712'. [ 537.202590][T31495] vlan3: entered allmulticast mode [ 537.212430][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6712'. [ 537.222022][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.232597][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.242570][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.253041][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.262927][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.273466][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.283411][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.293971][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.303884][T31334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.314472][T31334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.327347][T31334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.337233][T31334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.346125][T31334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.354832][T31334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.363660][T31334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.376956][T31499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6713'. [ 537.400121][T31499] loop4: detected capacity change from 0 to 512 [ 537.417574][T31499] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.6713: iget: bad extended attribute block 1 [ 537.437656][T31499] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6713: couldn't read orphan inode 15 (err -117) [ 537.450986][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.462285][T31499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.469602][ T29] audit: type=1326 audit(1727659076.236:14404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.2.6714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2e87dff9 code=0x7ffc0000 [ 537.505387][ T29] audit: type=1326 audit(1727659076.276:14405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.2.6714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2e87dff9 code=0x7ffc0000 [ 537.529222][ T29] audit: type=1326 audit(1727659076.276:14406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.2.6714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7e2e87dff9 code=0x7ffc0000 [ 537.538309][T31507] loop2: detected capacity change from 0 to 2048 [ 537.553404][ T29] audit: type=1326 audit(1727659076.276:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31504 comm="syz.2.6714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2e87dff9 code=0x7ffc0000 [ 537.583833][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.597359][T31507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.616259][T31511] loop4: detected capacity change from 0 to 512 [ 537.633859][T31334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.654773][T31511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.676298][T31511] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.692500][T31517] loop2: detected capacity change from 0 to 512 [ 537.747159][T30284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.756905][T31517] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 537.765028][T31517] System zones: 0-2, 18-18, 34-34 [ 537.771343][T31517] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6718: bg 0: block 248: padding at end of block bitmap is not set [ 537.774862][ T29] audit: type=1326 audit(1727659076.546:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31520 comm="syz.3.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 537.786659][T31517] Quota error (device loop2): write_blk: dquota write failed [ 537.809747][ T29] audit: type=1326 audit(1727659076.546:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31520 comm="syz.3.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 537.817506][T31517] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.6718: Failed to acquire dquot type 1 [ 537.860556][T31517] EXT4-fs (loop2): 1 truncate cleaned up [ 537.866699][T31517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.879420][T31517] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.904653][T31334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.927801][T31529] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 537.937726][T31531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6722'. [ 537.939491][T31528] IPVS: stopping master sync thread 31529 ... [ 537.950019][T31531] vlan2: entered allmulticast mode [ 537.977818][T31531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6722'. [ 537.988243][T31533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 538.025068][T31537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6726'. [ 538.042028][T31537] loop2: detected capacity change from 0 to 512 [ 538.050238][T31537] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.6726: iget: bad extended attribute block 1 [ 538.063666][T31537] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6726: couldn't read orphan inode 15 (err -117) [ 538.076282][T31537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.107349][T31334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.176489][T31544] loop2: detected capacity change from 0 to 2048 [ 538.189950][T31544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.231150][T31334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.260930][T31549] loop2: detected capacity change from 0 to 512 [ 538.277595][T31549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.290324][T31549] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.987976][T31567] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 538.996313][T31567] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 539.043047][T31571] loop4: detected capacity change from 0 to 1024 [ 539.518523][T31595] loop0: detected capacity change from 0 to 2048 [ 539.666226][T31604] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 539.674477][T31604] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 539.688663][T31608] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6753'. [ 539.841228][T31613] loop2: detected capacity change from 0 to 2048 [ 539.944112][T31621] loop3: detected capacity change from 0 to 512 [ 539.971032][T31621] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 540.130458][T31628] vlan2: entered allmulticast mode [ 540.411853][T31640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 540.614468][T31645] vlan3: entered promiscuous mode [ 540.619574][T31645] vlan3: entered allmulticast mode [ 540.625255][T31645] vlan0: entered allmulticast mode [ 540.630441][T31645] veth0_vlan: entered allmulticast mode [ 540.636162][T31645] vlan0: entered promiscuous mode [ 540.643104][T31645] team0: Port device vlan3 added [ 540.683727][T31645] netlink: 'syz.0.6767': attribute type 39 has an invalid length. [ 540.692958][T31645] veth1_macvtap: left promiscuous mode [ 541.128909][T31663] loop1: detected capacity change from 0 to 512 [ 541.149111][T31663] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.270491][T31673] __nla_validate_parse: 1 callbacks suppressed [ 541.270584][T31673] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6779'. [ 541.286424][T31672] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6779'. [ 541.394270][T31682] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 541.404291][T31681] IPVS: stopping master sync thread 31682 ... [ 541.414869][T31684] syz.4.6782[31684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.414945][T31684] syz.4.6782[31684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.427936][T31684] syz.4.6782[31684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.676699][T31706] loop4: detected capacity change from 0 to 2048 [ 541.807838][T31724] Cannot find add_set index 0 as target [ 542.055927][T31732] loop3: detected capacity change from 0 to 2048 [ 542.078636][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 542.078655][ T29] audit: type=1326 audit(1727659080.856:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.108655][ T29] audit: type=1326 audit(1727659080.856:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.132375][ T29] audit: type=1326 audit(1727659080.856:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.156148][ T29] audit: type=1326 audit(1727659080.856:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.179881][ T29] audit: type=1326 audit(1727659080.856:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.203599][ T29] audit: type=1326 audit(1727659080.856:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.227409][ T29] audit: type=1326 audit(1727659080.856:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.251119][ T29] audit: type=1326 audit(1727659080.856:14639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.274830][ T29] audit: type=1326 audit(1727659080.856:14640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.298816][ T29] audit: type=1326 audit(1727659080.856:14641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31731 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f280f64dff9 code=0x7ffc0000 [ 542.640033][T31724] 9pnet_fd: p9_fd_create_tcp (31724): problem connecting socket to 127.0.0.1 [ 542.694688][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 542.717953][T31763] loop4: detected capacity change from 0 to 512 [ 542.825268][T31763] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.6816: iget: bad extended attribute block 1 [ 542.839855][T31763] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6816: couldn't read orphan inode 15 (err -117) [ 542.894220][T31769] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 542.952612][T31771] serio: Serial port pts0 [ 542.963235][T31773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 543.019030][T31773] loop2: detected capacity change from 0 to 512 [ 543.073139][T31773] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.6820: iget: bad extended attribute block 1 [ 543.146288][T31773] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6820: couldn't read orphan inode 15 (err -117) [ 543.355924][T31786] loop2: detected capacity change from 0 to 2048 [ 543.383946][T31787] loop4: detected capacity change from 0 to 512 [ 543.418776][T31789] Cannot find add_set index 0 as target [ 543.467211][T31787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 543.520315][T31787] System zones: 0-2, 18-18, 34-34 [ 543.535457][T31787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6826: bg 0: block 248: padding at end of block bitmap is not set [ 543.580242][T31787] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.6826: Failed to acquire dquot type 1 [ 543.604331][T31787] EXT4-fs (loop4): 1 truncate cleaned up [ 543.655654][T31787] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.754583][T31787] syz.4.6826 (31787) used greatest stack depth: 9088 bytes left [ 543.912151][T31813] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 544.255733][T31789] 9pnet_fd: p9_fd_create_tcp (31789): problem connecting socket to 127.0.0.1 [ 544.317976][T31830] FAULT_INJECTION: forcing a failure. [ 544.317976][T31830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.331107][T31830] CPU: 0 UID: 0 PID: 31830 Comm: syz.1.6842 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 544.341557][T31830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.351727][T31830] Call Trace: [ 544.355028][T31830] [ 544.358040][T31830] dump_stack_lvl+0xf2/0x150 [ 544.362652][T31830] dump_stack+0x15/0x20 [ 544.366941][T31830] should_fail_ex+0x223/0x230 [ 544.371735][T31830] should_fail+0xb/0x10 [ 544.375954][T31830] should_fail_usercopy+0x1a/0x20 [ 544.381012][T31830] _copy_from_user+0x1e/0xd0 [ 544.385619][T31830] usbdev_ioctl+0x1674/0x3e00 [ 544.390363][T31830] ? do_vfs_ioctl+0x96e/0x1530 [ 544.395213][T31830] ? selinux_file_ioctl+0x2f7/0x380 [ 544.400440][T31830] ? __fget_files+0x1d4/0x210 [ 544.405214][T31830] ? __pfx_usbdev_ioctl+0x10/0x10 [ 544.410359][T31830] __se_sys_ioctl+0xcd/0x140 [ 544.415084][T31830] __x64_sys_ioctl+0x43/0x50 [ 544.419813][T31830] x64_sys_call+0x15cc/0x2d60 [ 544.424523][T31830] do_syscall_64+0xc9/0x1c0 [ 544.429045][T31830] ? clear_bhb_loop+0x55/0xb0 [ 544.433890][T31830] ? clear_bhb_loop+0x55/0xb0 [ 544.438635][T31830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.444568][T31830] RIP: 0033:0x7f7dc31adff9 [ 544.448998][T31830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.468609][T31830] RSP: 002b:00007f7dc1e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.477052][T31830] RAX: ffffffffffffffda RBX: 00007f7dc3365f80 RCX: 00007f7dc31adff9 [ 544.485025][T31830] RDX: 0000000020000000 RSI: 00000000c0105500 RDI: 0000000000000006 [ 544.493039][T31830] RBP: 00007f7dc1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 544.501008][T31830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.509032][T31830] R13: 0000000000000000 R14: 00007f7dc3365f80 R15: 00007ffd99a06668 [ 544.517012][T31830] [ 544.694384][T31857] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6854'. [ 544.705383][T31857] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6854'. [ 544.745853][T31860] serio: Serial port pts0 [ 544.943737][T31870] loop4: detected capacity change from 0 to 2048 [ 544.957434][T31870] ext4: Unknown parameter 'noacl' [ 544.988968][T31872] FAULT_INJECTION: forcing a failure. [ 544.988968][T31872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.002638][T31872] CPU: 0 UID: 0 PID: 31872 Comm: syz.0.6860 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 545.013082][T31872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.023152][T31872] Call Trace: [ 545.026450][T31872] [ 545.029396][T31872] dump_stack_lvl+0xf2/0x150 [ 545.034040][T31872] dump_stack+0x15/0x20 [ 545.038277][T31872] should_fail_ex+0x223/0x230 [ 545.043137][T31872] should_fail+0xb/0x10 [ 545.047375][T31872] should_fail_usercopy+0x1a/0x20 [ 545.052520][T31872] strncpy_from_user+0x25/0x200 [ 545.057574][T31872] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 545.063402][T31872] getname_flags+0xb0/0x3b0 [ 545.067952][T31872] __se_sys_newstat+0x4f/0x280 [ 545.072837][T31872] ? fput+0x14e/0x190 [ 545.076848][T31872] ? ksys_write+0x17a/0x1b0 [ 545.081472][T31872] __x64_sys_newstat+0x31/0x40 [ 545.086439][T31872] x64_sys_call+0x5e2/0x2d60 [ 545.091269][T31872] do_syscall_64+0xc9/0x1c0 [ 545.095828][T31872] ? clear_bhb_loop+0x55/0xb0 [ 545.100603][T31872] ? clear_bhb_loop+0x55/0xb0 [ 545.105426][T31872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.111491][T31872] RIP: 0033:0x7fb4da45dff9 [ 545.115983][T31872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.135821][T31872] RSP: 002b:00007fb4d90d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 545.144263][T31872] RAX: ffffffffffffffda RBX: 00007fb4da615f80 RCX: 00007fb4da45dff9 [ 545.152249][T31872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001bc0 [ 545.160312][T31872] RBP: 00007fb4d90d7090 R08: 0000000000000000 R09: 0000000000000000 [ 545.168310][T31872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.176298][T31872] R13: 0000000000000000 R14: 00007fb4da615f80 R15: 00007fff2b102fa8 [ 545.184309][T31872] [ 545.240197][T31870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6859'. [ 545.400675][T31875] loop0: detected capacity change from 0 to 8192 [ 545.418794][T31875] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000008' [ 545.518655][T31882] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 545.562145][T31886] loop1: detected capacity change from 0 to 512 [ 545.594371][T31886] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.612448][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6866'. [ 545.638106][T31891] loop4: detected capacity change from 0 to 512 [ 545.675238][T31891] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.6866: iget: bad extended attribute block 1 [ 545.695395][T31891] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6866: couldn't read orphan inode 15 (err -117) [ 545.894104][T31906] loop3: detected capacity change from 0 to 2048 [ 545.909632][T31925] loop4: detected capacity change from 0 to 512 [ 545.928779][T31925] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.975671][T31906] loop3: detected capacity change from 2048 to 63 [ 546.027537][T31931] loop4: detected capacity change from 0 to 2048 [ 546.278896][T31953] loop4: detected capacity change from 0 to 512 [ 546.298307][T31953] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.637579][T31979] loop0: detected capacity change from 0 to 2048 [ 546.656678][T31983] Cannot find add_set index 0 as target [ 546.674099][T31988] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 546.674259][T31987] IPVS: stopping master sync thread 31988 ... [ 546.695762][T31989] IPVS: stopping master sync thread 31990 ... [ 546.697225][T31990] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 546.807988][T31999] loop0: detected capacity change from 0 to 512 [ 546.831202][T31999] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.977967][T32011] loop0: detected capacity change from 0 to 1024 [ 547.605948][T31983] 9pnet_fd: p9_fd_create_tcp (31983): problem connecting socket to 127.0.0.1 [ 547.632998][T32017] loop4: detected capacity change from 0 to 512 [ 547.640778][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 547.640796][ T29] audit: type=1326 audit(1727659086.406:14687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 547.670782][ T29] audit: type=1326 audit(1727659086.406:14688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 547.694495][ T29] audit: type=1326 audit(1727659086.406:14689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 547.718194][ T29] audit: type=1326 audit(1727659086.406:14690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 547.741970][ T29] audit: type=1326 audit(1727659086.406:14691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc41503dff9 code=0x7ffc0000 [ 547.765808][ T29] audit: type=1326 audit(1727659086.406:14692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc41503e033 code=0x7ffc0000 [ 547.789447][ T29] audit: type=1326 audit(1727659086.406:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc41503cadf code=0x7ffc0000 [ 547.812916][ T29] audit: type=1326 audit(1727659086.406:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc41503e087 code=0x7ffc0000 [ 547.818451][T32017] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 547.836744][ T29] audit: type=1326 audit(1727659086.406:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc41503c990 code=0x7ffc0000 [ 547.868302][ T29] audit: type=1326 audit(1727659086.406:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32016 comm="syz.4.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc41503dbfb code=0x7ffc0000 [ 548.185571][T32047] loop4: detected capacity change from 0 to 1024 [ 548.285176][T32045] IPVS: stopping master sync thread 32059 ... [ 549.189776][T32096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'. [ 549.224033][T32096] loop1: detected capacity change from 0 to 512 [ 549.239144][T32098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.267780][T32096] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.6949: iget: bad extended attribute block 1 [ 549.290083][T32101] loop0: detected capacity change from 0 to 512 [ 549.317291][T32096] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6949: couldn't read orphan inode 15 (err -117) [ 549.333601][T32101] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.678348][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6965'. [ 549.749819][T32133] loop4: detected capacity change from 0 to 512 [ 549.859451][T32146] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.869375][T32133] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.6965: iget: bad extended attribute block 1 [ 549.883769][T32133] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6965: couldn't read orphan inode 15 (err -117) [ 549.953195][T32150] loop0: detected capacity change from 0 to 2048 [ 550.066803][T32154] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 550.383066][T32176] loop4: detected capacity change from 0 to 2048 [ 550.510911][T32163] loop2: detected capacity change from 0 to 2048 [ 550.665145][T32186] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 550.674906][T32184] IPVS: stopping master sync thread 32186 ... [ 550.765541][T32163] loop2: detected capacity change from 2048 to 63 [ 550.995518][T31926] kmmpd-loop3: attempt to access beyond end of device [ 550.995518][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 551.009231][T31926] buffer_io_error: 6 callbacks suppressed [ 551.009305][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 551.052473][T31926] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 551.692323][T32207] serio: Serial port pts0 [ 551.927747][T32213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 552.790289][T32218] loop4: detected capacity change from 0 to 2048 [ 552.958503][T32226] loop0: detected capacity change from 0 to 512 [ 553.055557][T32218] loop4: detected capacity change from 2048 to 63 [ 553.087765][T32226] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.287962][T32231] loop0: detected capacity change from 0 to 2048 [ 553.329284][T32236] IPVS: stopping master sync thread 32237 ... [ 553.335534][T32237] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 553.524171][T32241] loop0: detected capacity change from 0 to 2048 [ 554.700491][T32261] serio: Serial port pts0 [ 555.236462][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 555.236480][ T29] audit: type=1326 audit(1727659094.006:14706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="syz.1.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.266342][ T29] audit: type=1326 audit(1727659094.006:14707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="syz.1.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.289973][ T29] audit: type=1326 audit(1727659094.006:14708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.555738][T32180] kmmpd-loop2: attempt to access beyond end of device [ 555.555738][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 555.569412][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 555.605504][ T29] audit: type=1326 audit(1727659094.106:14709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.628710][ T29] audit: type=1326 audit(1727659094.106:14710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.651941][ T29] audit: type=1326 audit(1727659094.106:14711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.675004][ T29] audit: type=1326 audit(1727659094.106:14712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.698160][ T29] audit: type=1326 audit(1727659094.106:14713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.721346][ T29] audit: type=1326 audit(1727659094.106:14714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32265 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc31adff9 code=0x7ffc0000 [ 555.792744][T32180] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 556.085875][T31926] kmmpd-loop3: attempt to access beyond end of device [ 556.085875][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 556.099546][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 556.307951][T32275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7019'. [ 556.544781][T32282] loop1: detected capacity change from 0 to 2048 [ 556.629847][T32282] EXT4-fs mount: 58 callbacks suppressed [ 556.629861][T32282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.058255][T32276] chnl_net:caif_netlink_parms(): no params data found [ 557.200371][T32276] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.207541][T32276] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.237012][T32276] bridge_slave_0: entered allmulticast mode [ 557.253905][T32276] bridge_slave_0: entered promiscuous mode [ 557.283786][T32276] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.290902][T32276] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.355642][T32276] bridge_slave_1: entered allmulticast mode [ 557.378601][T32276] bridge_slave_1: entered promiscuous mode [ 557.429678][T14303] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 102 with max blocks 114 with error 28 [ 557.442332][T14303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 557.442332][T14303] [ 557.452006][T14303] EXT4-fs (loop1): Total free blocks count 0 [ 557.458066][T14303] EXT4-fs (loop1): Free/Dirty block details [ 557.464059][T14303] EXT4-fs (loop1): free_blocks=0 [ 557.469131][T14303] EXT4-fs (loop1): dirty_blocks=0 [ 557.474174][T14303] EXT4-fs (loop1): Block reservation details [ 557.480267][T14303] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 557.537995][T32276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.568784][T32276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.637322][T32276] team0: Port device team_slave_0 added [ 557.644061][T32276] team0: Port device team_slave_1 added [ 557.669387][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.750381][T32276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.757499][T32276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.783560][T32276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.808058][T32305] loop1: detected capacity change from 0 to 1024 [ 557.877016][T32305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.029512][T32276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.036596][T32276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.062683][T32276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.073804][T32222] kmmpd-loop4: attempt to access beyond end of device [ 558.073804][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 558.087326][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 558.124528][T32222] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block [ 558.542937][T32276] hsr_slave_0: entered promiscuous mode [ 558.552353][T32276] hsr_slave_1: entered promiscuous mode [ 558.630739][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.647407][T32276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.683072][T32276] Cannot create hsr debugfs directory [ 558.701445][T32311] vlan3: entered promiscuous mode [ 558.706538][T32311] vlan3: entered allmulticast mode [ 558.726853][T32311] vlan0: entered allmulticast mode [ 558.731995][T32311] veth0_vlan: entered allmulticast mode [ 558.737678][T32311] vlan0: entered promiscuous mode [ 558.757349][T32311] team0: Port device vlan3 added [ 558.779105][T32312] netlink: 'syz.1.7026': attribute type 39 has an invalid length. [ 558.815899][T32312] veth1_macvtap: left promiscuous mode [ 558.977298][T32276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.039254][T32276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.102040][T32276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.161527][T32276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.262402][T32276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.282687][T32276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.301705][T32276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.320143][T32276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 559.404080][T32276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.437477][T32276] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.461053][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.468162][T14321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.501949][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.509067][T14321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.669073][T32276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.837140][T32276] veth0_vlan: entered promiscuous mode [ 559.857390][T32276] veth1_vlan: entered promiscuous mode [ 559.885819][T32331] netlink: 'syz.1.7029': attribute type 39 has an invalid length. [ 559.908766][T32276] veth0_macvtap: entered promiscuous mode [ 559.929982][T32276] veth1_macvtap: entered promiscuous mode [ 559.955948][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.966495][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.976355][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.986954][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.996877][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.007397][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.017236][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.027706][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.037704][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.048189][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.058090][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.068626][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.153831][T32336] loop0: detected capacity change from 0 to 2048 [ 560.237860][T32336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.271296][T32276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.347796][T32339] serio: Serial port pts0 [ 560.358501][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.368980][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.378883][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.389375][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.399384][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.409950][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.419814][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.430335][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.440197][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.450720][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.460578][T32276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.471113][T32276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.485895][T32276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.502383][T32276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.511353][T32276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.520178][T32276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.529105][T32276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.595534][T32180] kmmpd-loop2: attempt to access beyond end of device [ 560.595534][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 560.609063][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 560.951441][T32350] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 560.986000][T32350] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 560.986000][T32350] program syz.3.7035 not setting count and/or reply_len properly [ 561.075769][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.155557][T31926] kmmpd-loop3: attempt to access beyond end of device [ 561.155557][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 561.169192][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 561.330341][T32368] loop0: detected capacity change from 0 to 512 [ 561.368891][T32368] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 561.448488][T32351] chnl_net:caif_netlink_parms(): no params data found [ 561.565077][T32373] loop0: detected capacity change from 0 to 2048 [ 561.896522][T32373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.119976][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.161658][T32351] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.168783][T32351] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.176531][T32351] bridge_slave_0: entered allmulticast mode [ 562.183153][T32351] bridge_slave_0: entered promiscuous mode [ 562.190652][T32351] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.197758][T32351] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.205108][T32351] bridge_slave_1: entered allmulticast mode [ 562.211904][T32351] bridge_slave_1: entered promiscuous mode [ 562.240773][T32351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.258624][T32351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.331362][T32351] team0: Port device team_slave_0 added [ 562.369471][T32351] team0: Port device team_slave_1 added [ 562.441834][T32351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.448909][T32351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.474939][T32351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.636235][T32351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.643318][T32351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.669362][T32351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.704397][T32378] loop1: detected capacity change from 0 to 2048 [ 562.768320][T32378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.939547][T32386] loop0: detected capacity change from 0 to 2048 [ 562.998810][T32386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.058683][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.109580][T32390] syz.0.7043[32390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.109647][T32390] syz.0.7043[32390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.125820][T32222] kmmpd-loop4: attempt to access beyond end of device [ 563.125820][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 563.150994][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 563.205623][T32390] syz.0.7043[32390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.226807][ T29] audit: type=1326 audit(1727659101.996:14715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.262091][ T29] audit: type=1326 audit(1727659101.996:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.285744][ T29] audit: type=1326 audit(1727659101.996:14717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.309373][ T29] audit: type=1326 audit(1727659101.996:14718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4da45c990 code=0x7ffc0000 [ 563.332971][ T29] audit: type=1326 audit(1727659101.996:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.356627][ T29] audit: type=1326 audit(1727659101.996:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.380245][ T29] audit: type=1326 audit(1727659101.996:14721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.404053][ T29] audit: type=1326 audit(1727659101.996:14722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.427665][ T29] audit: type=1326 audit(1727659101.996:14723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.451589][ T29] audit: type=1326 audit(1727659101.996:14724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4da45dff9 code=0x7ffc0000 [ 563.829743][T32351] hsr_slave_0: entered promiscuous mode [ 563.837332][T32351] hsr_slave_1: entered promiscuous mode [ 563.843438][T32351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.851352][T32351] Cannot create hsr debugfs directory [ 563.989353][T30286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.052292][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.265447][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.362261][T32351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.411411][T32409] serio: Serial port pts0 [ 564.474931][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.573552][T32351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.646896][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.744378][T32351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.969268][T32351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.086952][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7054'. [ 565.143877][ T28] bridge_slave_1: left allmulticast mode [ 565.149863][ T28] bridge_slave_1: left promiscuous mode [ 565.155665][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.212184][ T28] bridge_slave_0: left promiscuous mode [ 565.217985][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.573498][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.621737][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.664629][T32180] kmmpd-loop2: attempt to access beyond end of device [ 565.664629][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 565.678194][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 565.709424][ T28] bond0 (unregistering): Released all slaves [ 565.759595][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7054'. [ 565.829048][ T28] hsr_slave_0: left promiscuous mode [ 565.857565][ T28] hsr_slave_1: left promiscuous mode [ 565.897304][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.904808][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.982484][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.990067][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.060368][ T28] vlan0: left allmulticast mode [ 566.065265][ T28] veth0_vlan: left allmulticast mode [ 566.070798][ T28] vlan0: left promiscuous mode [ 566.075801][ T28] bridge_slave_0: left allmulticast mode [ 566.081464][ T28] veth0_macvtap: left promiscuous mode [ 566.087123][ T28] veth1_vlan: left promiscuous mode [ 566.092579][ T28] veth0_vlan: left promiscuous mode [ 566.195962][T31926] kmmpd-loop3: attempt to access beyond end of device [ 566.195962][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 566.209543][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 566.440260][ T28] team0 (unregistering): Port device vlan3 removed [ 566.630870][ T28] team0 (unregistering): Port device team_slave_1 removed [ 566.672933][ T28] team0 (unregistering): Port device team_slave_0 removed [ 566.773914][T32455] loop0: detected capacity change from 0 to 512 [ 566.818515][T32455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.892603][T32455] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.038045][T32351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.149816][T25614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.182853][T32351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.233795][T32351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.371225][T32351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.537720][T32408] chnl_net:caif_netlink_parms(): no params data found [ 567.580586][T32397] chnl_net:caif_netlink_parms(): no params data found [ 567.808621][T32351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.949816][T32351] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.066386][T32397] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.073518][T32397] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.149215][T32397] bridge_slave_0: entered allmulticast mode [ 568.187622][T32397] bridge_slave_0: entered promiscuous mode [ 568.196463][T32222] kmmpd-loop4: attempt to access beyond end of device [ 568.196463][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 568.209979][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 568.255848][T32408] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.263226][T32408] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.313453][T32408] bridge_slave_0: entered allmulticast mode [ 568.346367][T32408] bridge_slave_0: entered promiscuous mode [ 568.377227][T32397] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.384317][T32397] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.557168][T32397] bridge_slave_1: entered allmulticast mode [ 568.585354][T32397] bridge_slave_1: entered promiscuous mode [ 568.639451][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.646589][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.687733][T32509] serio: Serial port pts0 [ 568.716332][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.723407][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.802281][T32408] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.809619][T32408] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.884803][T32408] bridge_slave_1: entered allmulticast mode [ 568.919734][T32408] bridge_slave_1: entered promiscuous mode [ 569.013302][T32397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.031662][T32351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.042145][T32351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.275908][T32408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.286740][T32397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.359098][T32408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.525902][T32397] team0: Port device team_slave_0 added [ 569.539541][T32408] team0: Port device team_slave_0 added [ 569.560977][T32351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.616200][T32397] team0: Port device team_slave_1 added [ 569.622691][T32408] team0: Port device team_slave_1 added [ 569.779826][T32408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.786866][T32408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.812929][T32408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.019797][T32397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.026806][T32397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.053009][T32397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.236289][T32397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.243272][T32397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.269266][T32397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.427891][T32408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.434867][T32408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.460962][T32408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.693810][T32180] kmmpd-loop2: attempt to access beyond end of device [ 570.693810][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 570.707395][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 570.734076][T32397] hsr_slave_0: entered promiscuous mode [ 570.778378][T32397] hsr_slave_1: entered promiscuous mode [ 570.815578][T32397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.823165][T32397] Cannot create hsr debugfs directory [ 570.848668][T32408] hsr_slave_0: entered promiscuous mode [ 570.888241][T32408] hsr_slave_1: entered promiscuous mode [ 570.897369][T32408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.904945][T32408] Cannot create hsr debugfs directory [ 570.918951][T32351] veth0_vlan: entered promiscuous mode [ 571.012739][T32351] veth1_vlan: entered promiscuous mode [ 571.168830][T32351] veth0_macvtap: entered promiscuous mode [ 571.228790][T32351] veth1_macvtap: entered promiscuous mode [ 571.246879][T31926] kmmpd-loop3: attempt to access beyond end of device [ 571.246879][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 571.260457][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 571.313227][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.323743][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.333579][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.344070][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.353976][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.364493][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.374374][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.384838][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.394679][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.405115][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.415078][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.425527][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.748605][T32351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.763279][T32397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.806742][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 571.806759][ T29] audit: type=1400 audit(1727659110.576:14773): avc: denied { sys_chroot } for pid=32556 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 571.834606][ T29] audit: type=1400 audit(1727659110.576:14774): avc: denied { setgid } for pid=32556 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 571.855691][ T29] audit: type=1400 audit(1727659110.576:14775): avc: denied { setuid } for pid=32556 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 571.876853][ T29] audit: type=1400 audit(1727659110.576:14776): avc: denied { setrlimit } for pid=32556 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 571.976674][T32397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.026307][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.036844][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.046718][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.057162][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.067018][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.077510][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.087341][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.097846][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.107687][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.118259][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.128171][T32351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.138602][T32351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.426253][T32351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.448473][T32397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.509036][T32397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.557703][T32351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.566584][T32351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.575495][T32351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.584216][T32351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.751974][T32397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.776430][T32397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.833478][T32397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.878602][T32397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.173161][T32397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.238446][T32222] kmmpd-loop4: attempt to access beyond end of device [ 573.238446][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 573.252031][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 573.279366][T32408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.338117][T32408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 573.379995][T32397] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.508057][T32408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.575724][T32408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.627162][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.634407][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.746520][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.753732][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.932385][T32397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.942907][T32397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.184424][T32408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.280666][T32408] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.367760][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.374883][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.451847][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.458938][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.571066][T32397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.638418][T32408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.003738][T32408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.218073][T32397] veth0_vlan: entered promiscuous mode [ 575.296898][T32397] veth1_vlan: entered promiscuous mode [ 575.350471][T32397] veth0_macvtap: entered promiscuous mode [ 575.426283][T32397] veth1_macvtap: entered promiscuous mode [ 575.504367][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.514860][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.524895][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.535512][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.545326][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.555800][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.565635][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.576205][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.586034][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.596555][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.606478][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.617060][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.626967][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.637608][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.765785][T32180] kmmpd-loop2: attempt to access beyond end of device [ 575.765785][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 575.779474][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 576.275932][T31926] kmmpd-loop3: attempt to access beyond end of device [ 576.275932][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 576.289624][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 576.358765][T32397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.376464][T32408] veth0_vlan: entered promiscuous mode [ 576.384918][T32408] veth1_vlan: entered promiscuous mode [ 576.454900][T32408] veth0_macvtap: entered promiscuous mode [ 576.514494][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.525201][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.535221][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.545756][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.555634][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.566099][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.575987][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.586501][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.596518][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.607314][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.617235][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.628037][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.637878][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.648418][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.936201][T32397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.944604][T32408] veth1_macvtap: entered promiscuous mode [ 577.313206][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.323920][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.333787][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.344418][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.354278][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.364789][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.374633][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.385149][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.395081][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.405741][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.415604][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.426225][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.436082][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.446523][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.456444][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.466900][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.735925][T32408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.746997][T32397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.755782][T32397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.764602][T32397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.773364][T32397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.926417][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.937025][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.946938][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.957533][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.967465][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.978045][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.987923][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.998442][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.008402][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.018925][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.028971][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.039487][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.049378][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.059877][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.069759][T32408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.080242][T32408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.315512][T32222] kmmpd-loop4: attempt to access beyond end of device [ 578.315512][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 578.329133][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 578.719906][T32408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.802844][T32408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.811611][T32408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.820338][T32408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.829083][T32408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.106895][T32711] serio: Serial port pts0 [ 579.439552][T14313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.449907][T14313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.700101][T14313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.710436][T14313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.818097][T32722] vlan2: entered allmulticast mode [ 579.910095][T32723] vlan2: entered allmulticast mode [ 580.033474][T14313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.043977][T14313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.275318][T14313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.285941][T14313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.275524][T32180] kmmpd-loop2: attempt to access beyond end of device [ 581.275524][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 581.289809][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 581.317812][T31926] kmmpd-loop3: attempt to access beyond end of device [ 581.317812][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 581.331639][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 582.031581][T32752] netlink: 'syz.2.7078': attribute type 39 has an invalid length. [ 582.052703][T32752] veth1_macvtap: left promiscuous mode [ 582.112241][T14313] bridge_slave_1: left allmulticast mode [ 582.118253][T14313] bridge_slave_1: left promiscuous mode [ 582.123943][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.246307][T14313] bridge_slave_0: left promiscuous mode [ 582.252066][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.611775][T14313] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 582.735644][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.803007][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.858047][T14313] bond0 (unregistering): Released all slaves [ 582.959095][T32680] chnl_net:caif_netlink_parms(): no params data found [ 583.024111][T14313] hsr_slave_0: left promiscuous mode [ 583.038900][T14313] hsr_slave_1: left promiscuous mode [ 583.065798][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.073339][T14313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.156210][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.163679][T14313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.231855][T14313] vlan0: left allmulticast mode [ 583.237001][T14313] veth0_vlan: left allmulticast mode [ 583.242464][T14313] vlan0: left promiscuous mode [ 583.247369][T14313] bridge_slave_0: left allmulticast mode [ 583.301815][T14313] veth0_macvtap: left promiscuous mode [ 583.307433][T14313] veth1_vlan: left promiscuous mode [ 583.312679][T14313] veth0_vlan: left promiscuous mode [ 583.411763][T32222] kmmpd-loop4: attempt to access beyond end of device [ 583.411763][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 583.425355][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 583.540973][T14313] team0 (unregistering): Port device vlan3 removed [ 584.283079][T14313] team0 (unregistering): Port device team_slave_1 removed [ 587.015493][T31926] kmmpd-loop3: attempt to access beyond end of device [ 587.015493][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 587.029106][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 587.037890][T32180] kmmpd-loop2: attempt to access beyond end of device [ 587.037890][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 587.051531][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 589.525503][T32222] kmmpd-loop4: attempt to access beyond end of device [ 589.525503][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 589.539300][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 592.995473][T31926] kmmpd-loop3: attempt to access beyond end of device [ 592.995473][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 593.009265][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 593.045475][T32180] kmmpd-loop2: attempt to access beyond end of device [ 593.045475][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 593.059058][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 595.045522][ C1] ================================================================== [ 595.053646][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 595.060860][ C1] [ 595.063195][ C1] read-write to 0xffff888100e536b8 of 8 bytes by interrupt on cpu 0: [ 595.071268][ C1] wq_worker_tick+0x63/0x240 [ 595.075941][ C1] sched_tick+0xd2/0x110 [ 595.080218][ C1] update_process_times+0x15a/0x180 [ 595.085541][ C1] tick_nohz_handler+0x250/0x2d0 [ 595.090509][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 595.095725][ C1] hrtimer_interrupt+0x210/0x7b0 [ 595.100683][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 595.106689][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 595.112353][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 595.118364][ C1] kcsan_setup_watchpoint+0x404/0x410 [ 595.123763][ C1] xas_find_marked+0x53a/0x660 [ 595.128540][ C1] find_get_entry+0x54/0x390 [ 595.133167][ C1] filemap_get_folios_tag+0x9e/0x210 [ 595.138491][ C1] mpage_prepare_extent_to_map+0x329/0xb80 [ 595.144332][ C1] ext4_do_writepages+0x6ea/0x2130 [ 595.149473][ C1] ext4_writepages+0x159/0x2e0 [ 595.154270][ C1] do_writepages+0x1d8/0x480 [ 595.158871][ C1] __writeback_single_inode+0x89/0x850 [ 595.164352][ C1] writeback_sb_inodes+0x461/0xa30 [ 595.169477][ C1] wb_writeback+0x262/0x640 [ 595.173996][ C1] wb_workfn+0x1a8/0x940 [ 595.178297][ C1] process_scheduled_works+0x483/0x9a0 [ 595.183791][ C1] worker_thread+0x51d/0x6f0 [ 595.188393][ C1] kthread+0x1d1/0x210 [ 595.192573][ C1] ret_from_fork+0x4b/0x60 [ 595.197008][ C1] ret_from_fork_asm+0x1a/0x30 [ 595.201817][ C1] [ 595.204138][ C1] read-write to 0xffff888100e536b8 of 8 bytes by interrupt on cpu 1: [ 595.212302][ C1] wq_worker_tick+0x63/0x240 [ 595.216911][ C1] sched_tick+0xd2/0x110 [ 595.221170][ C1] update_process_times+0x15a/0x180 [ 595.226385][ C1] tick_nohz_handler+0x250/0x2d0 [ 595.231615][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 595.236838][ C1] hrtimer_interrupt+0x210/0x7b0 [ 595.241834][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 595.247785][ C1] sysvec_apic_timer_interrupt+0x6e/0x80 [ 595.253432][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 595.259438][ C1] __find_get_block+0x187/0x8a0 [ 595.264313][ C1] bdev_getblk+0x139/0x3b0 [ 595.268753][ C1] __read_extent_tree_block+0xb0/0x480 [ 595.274235][ C1] ext4_find_extent+0x501/0x7c0 [ 595.279126][ C1] ext4_ext_map_blocks+0x11f/0x35c0 [ 595.284346][ C1] ext4_map_blocks+0x592/0xcf0 [ 595.289161][ C1] ext4_do_writepages+0x14c3/0x2130 [ 595.294384][ C1] ext4_writepages+0x159/0x2e0 [ 595.299164][ C1] do_writepages+0x1d8/0x480 [ 595.303773][ C1] __writeback_single_inode+0x89/0x850 [ 595.309252][ C1] writeback_sb_inodes+0x461/0xa30 [ 595.314377][ C1] wb_writeback+0x262/0x640 [ 595.318905][ C1] wb_workfn+0x1a8/0x940 [ 595.323174][ C1] process_scheduled_works+0x483/0x9a0 [ 595.328655][ C1] worker_thread+0x51d/0x6f0 [ 595.333270][ C1] kthread+0x1d1/0x210 [ 595.337357][ C1] ret_from_fork+0x4b/0x60 [ 595.341878][ C1] ret_from_fork_asm+0x1a/0x30 [ 595.346667][ C1] [ 595.349000][ C1] value changed: 0x0000000001f03740 -> 0x0000000001f05e50 [ 595.356146][ C1] [ 595.358472][ C1] Reported by Kernel Concurrency Sanitizer on: [ 595.364636][ C1] CPU: 1 UID: 0 PID: 14327 Comm: kworker/u8:21 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 595.375406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.385479][ C1] Workqueue: writeback wb_workfn (flush-7:4) [ 595.391497][ C1] ================================================================== [ 595.955930][T14313] team0 (unregistering): Port device team_slave_0 removed [ 595.965681][T32222] kmmpd-loop4: attempt to access beyond end of device [ 595.965681][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 595.979265][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write SYZFAIL: failed to send rpc fd=3 want=336 sent=0 n=-1 (errno 32: Broken pipe) [ 596.452845][ T29] audit: type=1400 audit(1727659135.196:14777): avc: denied { write } for pid=3254 comm="syz-executor" path="pipe:[627]" dev="pipefs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 596.510207][T32680] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 597.409169][T14313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.549201][T14313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.668226][T14313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.760227][T14313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.926730][T14313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.039395][T14313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.065511][T31926] kmmpd-loop3: attempt to access beyond end of device [ 598.065511][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 598.079062][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 598.139210][T14313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.163721][T32180] kmmpd-loop2: attempt to access beyond end of device [ 598.163721][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 598.177408][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 598.269057][T14313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.421542][T14313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.518053][T14313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.635946][T14313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.758257][T14313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.005990][T14313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.090234][T14313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.198343][T14313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.290851][T14313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.468204][T14313] bridge_slave_1: left allmulticast mode [ 599.473945][T14313] bridge_slave_1: left promiscuous mode [ 599.479677][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.552681][T14313] bridge_slave_0: left allmulticast mode [ 599.558444][T14313] bridge_slave_0: left promiscuous mode [ 599.564094][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.636714][T14313] bridge_slave_1: left allmulticast mode [ 599.642400][T14313] bridge_slave_1: left promiscuous mode [ 599.648148][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.706154][T14313] bridge_slave_0: left allmulticast mode [ 599.711959][T14313] bridge_slave_0: left promiscuous mode [ 599.717677][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.748522][T14313] bridge_slave_1: left allmulticast mode [ 599.754231][T14313] bridge_slave_1: left promiscuous mode [ 599.760083][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.808137][T14313] bridge_slave_0: left allmulticast mode [ 599.813870][T14313] bridge_slave_0: left promiscuous mode [ 599.819569][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.866641][T14313] bridge_slave_1: left allmulticast mode [ 599.872396][T14313] bridge_slave_1: left promiscuous mode [ 599.878086][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.936107][T14313] bridge_slave_0: left allmulticast mode [ 599.941865][T14313] bridge_slave_0: left promiscuous mode [ 599.947540][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.966787][T14313] bond0 (unregistering): Released all slaves [ 600.986482][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.995517][T32222] kmmpd-loop4: attempt to access beyond end of device [ 600.995517][T32222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 601.009060][T32222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 601.067308][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.105742][T14313] bond0 (unregistering): Released all slaves [ 601.137820][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.217609][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.257600][T14313] bond0 (unregistering): Released all slaves [ 601.285838][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.319056][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.347767][T14313] bond0 (unregistering): Released all slaves [ 601.379256][T14313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.405961][T14313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.438926][T14313] bond0 (unregistering): Released all slaves [ 601.747329][T14313] hsr_slave_0: left promiscuous mode [ 601.768810][T14313] hsr_slave_1: left promiscuous mode [ 601.788787][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.796350][T14313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.879053][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.886574][T14313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.925358][T14313] hsr_slave_0: left promiscuous mode [ 601.946019][T14313] hsr_slave_1: left promiscuous mode [ 601.975739][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.983167][T14313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.027326][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.034742][T14313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.089671][T14313] hsr_slave_0: left promiscuous mode [ 602.107865][T14313] hsr_slave_1: left promiscuous mode [ 602.135703][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.143210][T14313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.175985][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.183404][T14313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.237401][T14313] hsr_slave_0: left promiscuous mode [ 602.243150][T14313] hsr_slave_1: left promiscuous mode [ 602.267905][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.275378][T14313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.317706][T14313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.325220][T14313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.395968][T14313] veth0_macvtap: left promiscuous mode [ 602.401502][T14313] veth1_vlan: left promiscuous mode [ 602.406843][T14313] veth0_vlan: left promiscuous mode [ 602.437635][T14313] veth1_macvtap: left promiscuous mode [ 602.443151][T14313] veth0_macvtap: left promiscuous mode [ 602.448737][T14313] veth1_vlan: left promiscuous mode [ 602.454056][T14313] veth0_vlan: left promiscuous mode [ 602.507539][T14313] veth1_macvtap: left promiscuous mode [ 602.513113][T14313] veth0_macvtap: left promiscuous mode [ 602.518783][T14313] veth1_vlan: left promiscuous mode [ 602.524028][T14313] veth0_vlan: left promiscuous mode [ 602.575761][T14313] veth1_macvtap: left promiscuous mode [ 602.581281][T14313] veth0_macvtap: left promiscuous mode [ 602.586827][T14313] veth1_vlan: left promiscuous mode [ 602.592052][T14313] veth0_vlan: left promiscuous mode [ 603.077557][T31926] kmmpd-loop3: attempt to access beyond end of device [ 603.077557][T31926] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 603.091155][T31926] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 603.238487][T32180] kmmpd-loop2: attempt to access beyond end of device [ 603.238487][T32180] loop2: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 603.252099][T32180] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 603.485861][T14313] team0 (unregistering): Port device team_slave_1 removed [ 603.516000][T14313] team0 (unregistering): Port device team_slave_0 removed [ 603.738000][T14313] team0 (unregistering): Port device team_slave_1 removed [ 603.766047][T14313] team0 (unregistering): Port device team_slave_0 removed [ 603.998281][T14313] team0 (unregistering): Port device team_slave_1 removed [ 604.028655][T14313] team0 (unregistering): Port device team_slave_0 removed [ 604.265910][T14313] team0 (unregistering): Port device team_slave_1 removed [ 604.298267][T14313] team0 (unregistering): Port device team_slave_0 removed