last executing test programs: 8.21380223s ago: executing program 1 (id=870): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="d8002a0084d2001000080211050000000000000000000802110000000000000000000008021100000000000000000000080211000000000000000600000802110000000000000000000008021100000000000000000000ffffffffffff000000000000000802110000000000000000000008021100000000000000000000080211000000000000000000000802110000000000000000000008021100000000000000000000080211000000000000000000000802110000000000000000000008021100000000000000000000080211000000000000000000"], 0xf4}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000100)=""/116, 0x74) syz_read_part_table(0x104f, &(0x7f0000001080)="$eJzsz7ENwjAABMAPsSCpIjEJHQUFBTMwCQMABcuwZJAhpKJFCOmu8Ev+d+HwW/vDIiXLoU1KWdWbph7bV3tOPy+v5RnjmF2bDOu56KY3H1yarsbm1E/D5Na+y7E53r/xJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N48AAAD//+w8CB8=") getdents(r7, &(0x7f0000000700)=""/101, 0x65) 8.09310478s ago: executing program 1 (id=871): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x177f, &(0x7f00000002c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a020480) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x56, 0x27, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x49}, 0x1200, 0x6, 0x1, 0x7, 0xff, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x2000, r3, 0x2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000043, 0x0, 0x0, 0x3}, 0xb09e2977203cb8be) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001f00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$tipc(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f0000000480)=@ret_unlink={{0x4, 0x8001, 0x0, 0x1, 0x8}}, 0x30) mknodat(r0, 0x0, 0x8000, 0x5) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000580)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x3}, {0x8, 0x3}, {0x8, 0x3}], {0x10, 0x6}, {0x20, 0x2}}, 0x54, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(&(0x7f00000006c0)='/\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4000, &(0x7f0000000800)={[{'system.posix_acl_access\x00'}, {'/'}, {'system.posix_acl_access\x00'}, {'$\x88!'}, {'*#%'}, {'&\'#{#'}], [{@subj_type={'subj_type', 0x3d, '%pI4 \x00'}}, {@fowner_lt={'fowner<', r6}}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1e000000ac060000feffffff0500000020300400", @ANYRES32, @ANYBLOB="f7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400000300"/23], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ac0)={&(0x7f0000000880)="9ea49d47a289481e43ba10aee0723ad46e444f6cc3e87da43f1e7b3ae5882927f0f44ed06aa64fd18943", &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)="18182e30e18e83d63141d757db0660a21d395097402ac7574cba275efaf93ab655f5f8e091e2ce383ab0a5a4e660184b97a3caa5d3db04c17b56a0b1373f29bca567d8d0e5651c5ae5cd5decfdf922942058ca438211628ab4714a4dacc4a1a4f5c401a1c72fe98e3319295b7c8d65e4ba6084dae36bf1b706fd5158b05cae16c90f5d31f7d37d28431c7f7cb7d2f19ac677d8f0fd33f3975145c7792bc1f7d73056b8b7f2f60d650b22d711d6650c090aca5e8f14a13300dd11", 0x0, 0xf, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='jbd2_shrink_checkpoint_list\x00', r4, 0x0, 0x7}, 0x18) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 7.429460251s ago: executing program 0 (id=873): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0xff, 0xff000000, 0xffffffff], 'geneve1\x00', 'pim6reg1\x00', {}, {0xff}, 0x4e, 0x1, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff, 0xffffffff, 0x0, 0xff000000], 'ip6gretap0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x2, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff, 0x4, 0x1, 0x24}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xfff, 0x4, 0x75a41fedc0860a79, [0x401, 0xe, 0xe13, 0x4, 0x1, 0x8, 0x5, 0x4, 0x100, 0x9, 0x0, 0x9, 0x6, 0x3, 0x2, 0x2], 0x8}}, @common=@ipv6header={{0x28}, {0xc7, 0x14, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x2f, 0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pause() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) 7.387883965s ago: executing program 1 (id=874): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000002a7132360000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.207734371s ago: executing program 1 (id=875): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xfd) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@abs, 0x6e, 0x0}}], 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000001300)={&(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/160, 0xa0}], 0x1}}], 0x48}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x2, 0x0, 0x0, 0x0) accept(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000, &(0x7f0000000680)=ANY=[], 0x1, 0x354, &(0x7f0000000180)="$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") 7.136975928s ago: executing program 1 (id=876): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000780)=""/127, 0x0, 0x7f, 0x0, 0xfffffff8, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000085a2e34f850000000400000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x15, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x5, 0x1000, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.448420911s ago: executing program 0 (id=877): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x208800, 0x1) readlinkat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/105, 0x69) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60140}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x4040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) write$tcp_mem(r5, &(0x7f00000003c0)={0x40, 0x20, 0x4, 0x20, 0x6}, 0x48) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}, 0x2}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c"], 0xcc}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 6.251479719s ago: executing program 1 (id=878): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32, @ANYBLOB="0000000000000000180034"], 0x38}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x20da, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00930800000900000001000029f684098d2cd0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000df99fcbf86873a6cb90670a9f43720", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000030900010073797a3000000000c4000000020a01"], 0x13c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000600)=""/88) mprotect(&(0x7f00007d0000/0x4000)=nil, 0x4000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x258, 0x1c0, 0x258, 0x258, 0x340, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x90f, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14130000", @ANYRES16=r7, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) 6.2419979s ago: executing program 0 (id=879): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000400)={[{@prjquota}, {@usrjquota}]}, 0xfe, 0x257, &(0x7f0000000940)="$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") setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r1) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.813713348s ago: executing program 0 (id=881): ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000050000001d3b9566a2a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) modify_ldt$read(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 4.650599635s ago: executing program 0 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0cdeb67c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000002c0), &(0x7f0000000600)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x1, 0x4, 0xafc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=r9, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESHEX=r1, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 4.541407435s ago: executing program 0 (id=888): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32, @ANYBLOB="0000000000000000180034"], 0x38}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x20da, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00930800000900000001000029f684098d2cd0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000df99fcbf86873a6cb90670a9f43720", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000030900010073797a3000000000c4000000020a01"], 0x13c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000600)=""/88) mprotect(&(0x7f00007d0000/0x4000)=nil, 0x4000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x258, 0x1c0, 0x258, 0x258, 0x340, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x90f, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14130000", @ANYRES16=r8, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) 1.895731747s ago: executing program 4 (id=914): add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x205, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) open$dir(&(0x7f0000000340)='./file1\x00', 0x300, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000280)=0x8c10, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) request_key(&(0x7f0000000e00)='keyring\x00', &(0x7f0000000e40)={'syz', 0x2}, 0x0, 0x0) 1.649033339s ago: executing program 4 (id=915): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000400)={[{@prjquota}, {@usrjquota}]}, 0xfe, 0x257, &(0x7f0000000940)="$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") setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r1) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.563065617s ago: executing program 3 (id=917): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) (fail_nth: 4) 1.289353702s ago: executing program 3 (id=918): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000002a7132360000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.288873302s ago: executing program 3 (id=919): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x401, 0x8fe, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="f497b6c30e86ad1f00a9", 0xa, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) 1.264005564s ago: executing program 4 (id=920): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}}}, @TCA_TBF_PTAB={0x404, 0x3, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7677]}]}}]}, 0x45c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="cf1b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000200"/20, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000072d24ad59c06831b6110b4924caec7c6ee4dc12be1d2da4c32b25c79b5ad12a04f4fbfc82be88a6b86bc299a447bd88a8003a9d2d51f51e0342893c4ab34cc909c0ad75f8fd15b77cc01344cb7235c2f3bb5a94b213ad0597e7ac4227a4caf028b8c90", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.228456098s ago: executing program 4 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r1, 0xe985e4df3848afb5}, 0x14}}, 0x0) 1.188768941s ago: executing program 4 (id=922): ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000050000001d3b9566a2a7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) modify_ldt$read(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 350.888517ms ago: executing program 3 (id=923): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000400)={[{@prjquota}, {@usrjquota}]}, 0xfe, 0x257, &(0x7f0000000940)="$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") setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r2) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) fdatasync(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 270.634945ms ago: executing program 4 (id=925): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000004a11280000000000180000000000000000000100"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8b411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000001700), 0x5}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000006304000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008d2878d57ac4536d01393d91dfb079e5ce7e4d932214342c52d04b4cbd18aed5593d01c043a7fe7562d4c8fc308f87a51c35620c402b40573da6fe911dc17881cdd58ac3784b0e4752edfa8cab2af10af50d5c4512058469498d3485059a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) futex_waitv(&(0x7f0000000400)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 202.341751ms ago: executing program 2 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 187.453033ms ago: executing program 2 (id=927): creat(0x0, 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") 168.179434ms ago: executing program 3 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) 164.381875ms ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0cdeb67c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000002c0), &(0x7f0000000600)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x1, 0x4, 0xafc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESHEX=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 106.78224ms ago: executing program 3 (id=930): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000, 0xff], [0x0, 0xff, 0xff000000, 0xffffffff], 'geneve1\x00', 'pim6reg1\x00', {}, {0xff}, 0x4e, 0x1, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff, 0xffffffff, 0x0, 0xff000000], 'ip6gretap0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x2, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff, 0x4, 0x1, 0x24}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xfff, 0x4, 0x75a41fedc0860a79, [0x401, 0xe, 0xe13, 0x4, 0x1, 0x8, 0x5, 0x4, 0x100, 0x9, 0x0, 0x9, 0x6, 0x3, 0x2, 0x2], 0x8}}, @common=@ipv6header={{0x28}, {0xc7, 0x14, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x2f, 0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pause() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) 50.146055ms ago: executing program 2 (id=931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x0, 0xe985e4df3848afb5}, 0x14}}, 0x0) 23.419548ms ago: executing program 2 (id=932): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") fremovexattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 0s ago: executing program 2 (id=933): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x41c00) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r5, &(0x7f0000000000)={'syz0'}, 0x4) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) write$P9_RUNLINKAT(r5, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) kernel console output (not intermixed with test programs): 9] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.665461][ T5933] bond_slave_1: mtu greater than device maximum [ 78.673914][ T5933] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.876914][ T5940] ipt_ECN: cannot use operation on non-tcp rule [ 79.168440][ T5942] loop2: detected capacity change from 0 to 512 [ 79.183695][ T5942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 79.191807][ T5942] System zones: 0-2, 18-18, 34-34 [ 79.197973][ T5942] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.640: bg 0: block 248: padding at end of block bitmap is not set [ 79.212689][ T5942] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.640: Failed to acquire dquot type 1 [ 79.224575][ T5942] EXT4-fs (loop2): 1 truncate cleaned up [ 79.230605][ T5942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.241958][ T5948] x_tables: duplicate underflow at hook 2 [ 79.244680][ T5942] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.260005][ T5942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.300657][ T5948] loop4: detected capacity change from 0 to 8192 [ 79.310607][ T5948] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.324880][ T5948] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 79.329726][ T5952] loop2: detected capacity change from 0 to 512 [ 79.333064][ T5948] FAT-fs (loop4): Filesystem has been set read-only [ 79.349678][ T5948] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 79.361280][ T5948] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 79.372134][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.389387][ T5952] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.400065][ T5164] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 79.426327][ T5956] loop4: detected capacity change from 0 to 512 [ 79.435881][ T5952] loop2: detected capacity change from 512 to 511 [ 79.447520][ T5956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.461912][ T5961] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.643: bg 0: block 16032: padding at end of block bitmap is not set [ 79.484035][ T5956] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.494826][ T5961] EXT4-fs error (device loop2): ext4_discard_preallocations:5604: comm syz.2.643: Error -117 reading block bitmap for 0 [ 79.513789][ T5952] EXT4-fs error (device loop2): ext4_mb_discard_group_preallocations:5429: comm syz.2.643: Error -117 reading block bitmap for 0 [ 79.527355][ T5952] EXT4-fs error (device loop2): ext4_mb_discard_group_preallocations:5429: comm syz.2.643: Error -117 reading block bitmap for 0 [ 79.563154][ T5956] loop4: detected capacity change from 512 to 511 [ 79.570448][ T5962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.644: bg 0: block 16032: padding at end of block bitmap is not set [ 79.596507][ T5962] EXT4-fs error (device loop4): ext4_discard_preallocations:5604: comm syz.4.644: Error -117 reading block bitmap for 0 [ 79.603879][ T5952] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.643: deleted inode referenced: 12 [ 79.635247][ T5956] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.644: Error -117 reading block bitmap for 0 [ 79.637897][ T4279] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /83/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 79.650165][ T5956] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.644: Error -117 reading block bitmap for 0 [ 79.669298][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 79.691341][ T4279] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.696831][ T5965] loop0: detected capacity change from 0 to 128 [ 79.703575][ T4279] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.716966][ T5965] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 79.796726][ T5956] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.644: deleted inode referenced: 12 [ 79.817171][ T5164] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /39/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 79.840832][ T5164] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.853851][ T5164] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.872428][ T5164] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.883808][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.956775][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.968960][ T4279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.969199][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 80.027419][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 80.042931][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.064900][ T5986] bond_slave_1: mtu greater than device maximum [ 80.083388][ T5986] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.098509][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.195040][ T28] bridge_slave_1: left allmulticast mode [ 80.200799][ T28] bridge_slave_1: left promiscuous mode [ 80.206856][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.216711][ T28] bridge_slave_0: left allmulticast mode [ 80.222355][ T28] bridge_slave_0: left promiscuous mode [ 80.228032][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.297340][ T6011] ipt_ECN: cannot use operation on non-tcp rule [ 80.335229][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.349468][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.359957][ T28] bond0 (unregistering): Released all slaves [ 80.381927][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 80.399185][ T28] hsr_slave_0: left promiscuous mode [ 80.405897][ T28] hsr_slave_1: left promiscuous mode [ 80.413358][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.421043][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.429480][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.436952][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.447021][ T28] veth1_macvtap: left promiscuous mode [ 80.452643][ T28] veth0_macvtap: left promiscuous mode [ 80.458368][ T28] veth1_vlan: left promiscuous mode [ 80.463664][ T28] veth0_vlan: left promiscuous mode [ 80.507286][ T6025] loop3: detected capacity change from 0 to 128 [ 80.526547][ T6025] ext4: Unknown parameter 'subj_user' [ 80.546605][ T6025] loop3: detected capacity change from 0 to 1024 [ 80.553535][ T6025] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 80.571875][ T28] team0 (unregistering): Port device team_slave_1 removed [ 80.584799][ T28] team0 (unregistering): Port device team_slave_0 removed [ 80.607217][ T6027] FAULT_INJECTION: forcing a failure. [ 80.607217][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 80.619986][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.663 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 80.630302][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.640410][ T6027] Call Trace: [ 80.643747][ T6027] [ 80.646658][ T6027] dump_stack_lvl+0xf2/0x150 [ 80.651236][ T6027] dump_stack+0x15/0x20 [ 80.655445][ T6027] should_fail_ex+0x223/0x230 [ 80.660250][ T6027] ? getname_flags+0x81/0x3b0 [ 80.665076][ T6027] should_failslab+0x8f/0xb0 [ 80.670108][ T6027] kmem_cache_alloc_noprof+0x4c/0x290 [ 80.675557][ T6027] getname_flags+0x81/0x3b0 [ 80.680083][ T6027] __x64_sys_symlinkat+0x50/0x70 [ 80.685017][ T6027] x64_sys_call+0x1dda/0x2d60 [ 80.689680][ T6027] do_syscall_64+0xc9/0x1c0 [ 80.694186][ T6027] ? clear_bhb_loop+0x55/0xb0 [ 80.698854][ T6027] ? clear_bhb_loop+0x55/0xb0 [ 80.703552][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.709443][ T6027] RIP: 0033:0x7fdd614ddf39 [ 80.713838][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.733430][ T6027] RSP: 002b:00007fdd60151038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 80.741862][ T6027] RAX: ffffffffffffffda RBX: 00007fdd61695f80 RCX: 00007fdd614ddf39 [ 80.749856][ T6027] RDX: 0000000000000000 RSI: ffffffffffffff9c RDI: 0000000000000000 [ 80.757819][ T6027] RBP: 00007fdd60151090 R08: 0000000000000000 R09: 0000000000000000 [ 80.765874][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.773839][ T6027] R13: 0000000000000001 R14: 00007fdd61695f80 R15: 00007ffc13b24ab8 [ 80.781819][ T6027] [ 80.831772][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.838911][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.846329][ T5973] bridge_slave_0: entered allmulticast mode [ 80.853053][ T5973] bridge_slave_0: entered promiscuous mode [ 80.866512][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.873691][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.880991][ T5973] bridge_slave_1: entered allmulticast mode [ 80.887903][ T5973] bridge_slave_1: entered promiscuous mode [ 80.906321][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.917746][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 80.928783][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.968987][ T5973] team0: Port device team_slave_0 added [ 80.986918][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.994149][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.002924][ T5987] bridge_slave_0: entered allmulticast mode [ 81.009594][ T5987] bridge_slave_0: entered promiscuous mode [ 81.020498][ T5973] team0: Port device team_slave_1 added [ 81.053756][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.060829][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.068198][ T5987] bridge_slave_1: entered allmulticast mode [ 81.074756][ T5987] bridge_slave_1: entered promiscuous mode [ 81.092665][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.100076][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.126540][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.143090][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.150503][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.183692][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.200293][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.211254][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.247508][ T5973] hsr_slave_0: entered promiscuous mode [ 81.253718][ T5973] hsr_slave_1: entered promiscuous mode [ 81.260070][ T5973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.268885][ T5973] Cannot create hsr debugfs directory [ 81.275417][ T5987] team0: Port device team_slave_0 added [ 81.281873][ T5987] team0: Port device team_slave_1 added [ 81.291981][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.327482][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.341658][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.348677][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.374713][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.404660][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.411670][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.437712][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.456621][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 81.465257][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.482347][ T6075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.525852][ T5987] hsr_slave_0: entered promiscuous mode [ 81.531877][ T5987] hsr_slave_1: entered promiscuous mode [ 81.538085][ T5987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.546456][ T5987] Cannot create hsr debugfs directory [ 81.555078][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.576736][ T6075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.663398][ T6075] bond0: (slave netdevsim1): Releasing backup interface [ 81.680454][ T6075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.713085][ T28] bridge_slave_1: left allmulticast mode [ 81.718769][ T28] bridge_slave_1: left promiscuous mode [ 81.724640][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.733076][ T28] bridge_slave_0: left allmulticast mode [ 81.738791][ T28] bridge_slave_0: left promiscuous mode [ 81.744450][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.776061][ T6100] x_tables: duplicate underflow at hook 2 [ 81.824086][ T6100] loop1: detected capacity change from 0 to 8192 [ 81.831419][ T6100] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.843278][ T6100] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 81.851433][ T6100] FAT-fs (loop1): Filesystem has been set read-only [ 81.864976][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.874970][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.884871][ T28] bond0 (unregistering): Released all slaves [ 81.895576][ T6075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.920583][ T6100] netlink: 'syz.1.671': attribute type 10 has an invalid length. [ 81.936283][ T28] hsr_slave_0: left promiscuous mode [ 81.942849][ T28] hsr_slave_1: left promiscuous mode [ 81.951047][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.960037][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.969313][ T5609] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 81.969522][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.989081][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.001614][ T28] veth1_macvtap: left promiscuous mode [ 82.008172][ T28] veth0_macvtap: left promiscuous mode [ 82.013755][ T28] veth1_vlan: left promiscuous mode [ 82.017155][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 82.017167][ T29] audit: type=1400 audit(1727317213.614:2533): avc: denied { create } for pid=6105 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.019032][ T28] veth0_vlan: left promiscuous mode [ 82.026805][ T29] audit: type=1400 audit(1727317213.624:2534): avc: denied { setopt } for pid=6105 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.070986][ T29] audit: type=1400 audit(1727317213.664:2535): avc: denied { write } for pid=6105 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.090501][ T29] audit: type=1400 audit(1727317213.664:2536): avc: denied { create } for pid=6105 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.109874][ T29] audit: type=1400 audit(1727317213.664:2537): avc: denied { write } for pid=6105 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.130568][ T29] audit: type=1400 audit(1727317213.724:2538): avc: denied { ioctl } for pid=6105 comm="syz.1.673" path="socket:[14722]" dev="sockfs" ino=14722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.198822][ T28] team0 (unregistering): Port device team_slave_1 removed [ 82.215767][ T28] team0 (unregistering): Port device team_slave_0 removed [ 82.271840][ T6075] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.284482][ T6113] 9pnet_fd: Insufficient options for proto=fd [ 82.284636][ T6075] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.299669][ T29] audit: type=1400 audit(1727317213.894:2539): avc: denied { listen } for pid=6112 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.305991][ T6075] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.328312][ T6114] ipt_ECN: cannot use operation on non-tcp rule [ 82.337532][ T6075] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.379089][ T5973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.388339][ T5973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.401626][ T5973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.418595][ T6121] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.425867][ T5973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.479324][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.495915][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.512454][ T1651] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.519610][ T1651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.543403][ T6137] x_tables: duplicate underflow at hook 2 [ 82.553413][ T29] audit: type=1326 audit(1727317214.154:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd614ddf39 code=0x7ffc0000 [ 82.569310][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.583791][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.593926][ T29] audit: type=1326 audit(1727317214.154:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd614ddf39 code=0x7ffc0000 [ 82.681719][ T5987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.694362][ T5987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.705123][ T5987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.717530][ T5987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.730719][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.780124][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.798577][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.819317][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.826499][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.847530][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.854722][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.962736][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.970583][ T5973] veth0_vlan: entered promiscuous mode [ 82.987727][ T5973] veth1_vlan: entered promiscuous mode [ 83.006152][ T5973] veth0_macvtap: entered promiscuous mode [ 83.015806][ T5973] veth1_macvtap: entered promiscuous mode [ 83.026461][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.037017][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.046872][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.057368][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.074171][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.093718][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.104247][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.114181][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.124624][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.139681][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.153827][ T5973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162601][ T5973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.171394][ T5973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.180194][ T5973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199696][ T5987] veth0_vlan: entered promiscuous mode [ 83.213023][ T5987] veth1_vlan: entered promiscuous mode [ 83.240091][ T5987] veth0_macvtap: entered promiscuous mode [ 83.260237][ T5987] veth1_macvtap: entered promiscuous mode [ 83.275194][ T6224] FAULT_INJECTION: forcing a failure. [ 83.275194][ T6224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.283466][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.288353][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.4.651 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 83.298714][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.298724][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.298735][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.298744][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.298755][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.308952][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.308965][ T6224] Call Trace: [ 83.308971][ T6224] [ 83.308978][ T6224] dump_stack_lvl+0xf2/0x150 [ 83.309009][ T6224] dump_stack+0x15/0x20 [ 83.354762][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.359105][ T6224] should_fail_ex+0x223/0x230 [ 83.383754][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.384113][ T6224] should_fail+0xb/0x10 [ 83.391320][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.395951][ T6224] should_fail_usercopy+0x1a/0x20 [ 83.406383][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.410487][ T6224] strncpy_from_user+0x25/0x200 [ 83.420305][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.425257][ T6224] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 83.425287][ T6224] getname_flags+0xb0/0x3b0 [ 83.435693][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.440547][ T6224] user_path_at+0x26/0x110 [ 83.440569][ T6224] user_statfs+0x7a/0x2a0 [ 83.450372][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.455959][ T6224] __x64_sys_statfs+0x64/0xf0 [ 83.455983][ T6224] ? fput+0x14e/0x190 [ 83.498140][ T6224] ? ksys_write+0x17a/0x1b0 [ 83.502715][ T6224] ? fpregs_assert_state_consistent+0x83/0xa0 [ 83.508842][ T6224] x64_sys_call+0x2553/0x2d60 [ 83.513545][ T6224] do_syscall_64+0xc9/0x1c0 [ 83.518090][ T6224] ? clear_bhb_loop+0x55/0xb0 [ 83.522762][ T6224] ? clear_bhb_loop+0x55/0xb0 [ 83.527491][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.533376][ T6224] RIP: 0033:0x7f926d69df39 [ 83.537805][ T6224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.557419][ T6224] RSP: 002b:00007f926c317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 83.565856][ T6224] RAX: ffffffffffffffda RBX: 00007f926d855f80 RCX: 00007f926d69df39 [ 83.573815][ T6224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 83.581847][ T6224] RBP: 00007f926c317090 R08: 0000000000000000 R09: 0000000000000000 [ 83.589804][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.597858][ T6224] R13: 0000000000000000 R14: 00007f926d855f80 R15: 00007ffc2233e418 [ 83.605823][ T6224] [ 83.615116][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.642521][ T5987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651464][ T5987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660367][ T5987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.669389][ T5987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.702652][ T29] audit: type=1400 audit(1727317215.294:2542): avc: denied { setopt } for pid=6234 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.723189][ T6245] x_tables: duplicate underflow at hook 2 [ 83.767862][ T6245] loop1: detected capacity change from 0 to 8192 [ 83.775930][ T6245] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.787181][ T6245] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 83.789408][ T6249] loop2: detected capacity change from 0 to 512 [ 83.795400][ T6245] FAT-fs (loop1): Filesystem has been set read-only [ 83.797667][ T6245] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 83.826787][ T5609] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 83.895345][ T6249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.933738][ T6249] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.991032][ T6272] syz.0.691 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.038761][ T6286] loop0: detected capacity change from 0 to 128 [ 84.046421][ T6286] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 84.070076][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.096986][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 84.109473][ T6296] loop1: detected capacity change from 0 to 128 [ 84.139652][ T6292] loop2: detected capacity change from 0 to 128 [ 84.176535][ T6307] x_tables: duplicate underflow at hook 2 [ 84.212437][ T6307] loop2: detected capacity change from 0 to 8192 [ 84.220117][ T6307] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.234280][ T6307] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 84.242540][ T6307] FAT-fs (loop2): Filesystem has been set read-only [ 84.249847][ T6307] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 84.262238][ T6307] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 84.279132][ T5987] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 84.434593][ T6348] loop2: detected capacity change from 0 to 512 [ 84.445037][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.457942][ T6348] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.475800][ T6348] Illegal XDP return value 4294966772 on prog (id 569) dev syz_tun, expect packet loss! [ 84.497417][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.571008][ T6360] loop2: detected capacity change from 0 to 128 [ 84.736280][ T6362] serio: Serial port ptm1 [ 84.769927][ T6364] loop4: detected capacity change from 0 to 764 [ 84.874212][ T6383] loop4: detected capacity change from 0 to 512 [ 84.892018][ T6385] loop3: detected capacity change from 0 to 1024 [ 84.898884][ T6385] EXT4-fs: Ignoring removed orlov option [ 84.904608][ T6385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.915722][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.931322][ T6383] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.964619][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.978610][ T6385] netlink: 176 bytes leftover after parsing attributes in process `syz.3.716'. [ 84.982605][ T6383] loop4: detected capacity change from 512 to 511 [ 84.995565][ T6385] bpf_get_probe_write_proto: 2 callbacks suppressed [ 84.995669][ T6385] syz.3.716[6385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.004962][ T6385] syz.3.716[6385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.012910][ T6383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.715: bg 0: block 16032: padding at end of block bitmap is not set [ 85.018025][ T6385] syz.3.716[6385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.044273][ T6383] EXT4-fs error (device loop4): ext4_discard_preallocations:5604: comm syz.4.715: Error -117 reading block bitmap for 0 [ 85.070272][ T6390] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.715: Error -117 reading block bitmap for 0 [ 85.084106][ T6390] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.715: Error -117 reading block bitmap for 0 [ 85.143057][ T6383] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.715: deleted inode referenced: 12 [ 85.160964][ T5973] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 85.181716][ T5973] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 85.193588][ T5973] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 85.226061][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.256044][ T6393] loop0: detected capacity change from 0 to 512 [ 85.283967][ T6393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 85.291997][ T6393] System zones: 0-2, 18-18, 34-34 [ 85.299404][ T6393] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.718: bg 0: block 248: padding at end of block bitmap is not set [ 85.306401][ T6402] loop3: detected capacity change from 0 to 764 [ 85.314485][ T6393] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.718: Failed to acquire dquot type 1 [ 85.333248][ T6393] EXT4-fs (loop0): 1 truncate cleaned up [ 85.339228][ T6393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.353477][ T6393] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.360936][ T6393] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.407331][ T6406] loop2: detected capacity change from 0 to 128 [ 85.416559][ T6406] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 85.476732][ T6415] loop0: detected capacity change from 0 to 512 [ 85.495273][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 85.509695][ T6415] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.560090][ T6420] ipt_ECN: cannot use operation on non-tcp rule [ 85.568728][ T6415] loop0: detected capacity change from 512 to 511 [ 85.596979][ T6423] loop1: detected capacity change from 0 to 256 [ 85.610583][ T6421] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.727: bg 0: block 16032: padding at end of block bitmap is not set [ 85.632229][ T6423] syz.1.728[6423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.632288][ T6423] syz.1.728[6423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.644412][ T6421] EXT4-fs error (device loop0): ext4_discard_preallocations:5604: comm syz.0.727: Error -117 reading block bitmap for 0 [ 85.653511][ T6423] syz.1.728[6423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.659929][ T6415] EXT4-fs error (device loop0): ext4_mb_discard_group_preallocations:5429: comm syz.0.727: Error -117 reading block bitmap for 0 [ 85.698759][ T6415] EXT4-fs error (device loop0): ext4_mb_discard_group_preallocations:5429: comm syz.0.727: Error -117 reading block bitmap for 0 [ 85.776057][ T6415] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.727: deleted inode referenced: 12 [ 85.794449][ T5020] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /65/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 85.815733][ T5020] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 85.827921][ T5020] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 86.023846][ T5020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.035963][ T3388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.079182][ T3388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.125896][ T3388] bond0: (slave netdevsim1): Releasing backup interface [ 86.136145][ T3388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.190368][ T3388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.204029][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 86.234867][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.241970][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.249222][ T6434] bridge_slave_0: entered allmulticast mode [ 86.255959][ T6434] bridge_slave_0: entered promiscuous mode [ 86.265845][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.272987][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.280899][ T6434] bridge_slave_1: entered allmulticast mode [ 86.287662][ T6434] bridge_slave_1: entered promiscuous mode [ 86.312892][ T6450] loop3: detected capacity change from 0 to 764 [ 86.329580][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.338938][ T3388] bridge_slave_1: left allmulticast mode [ 86.344824][ T3388] bridge_slave_1: left promiscuous mode [ 86.350651][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.362438][ T3388] bridge_slave_0: left allmulticast mode [ 86.368254][ T3388] bridge_slave_0: left promiscuous mode [ 86.369517][ T6452] loop3: detected capacity change from 0 to 1024 [ 86.373990][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.381508][ T6452] EXT4-fs: Ignoring removed orlov option [ 86.392986][ T6452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.415764][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.444563][ T6452] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 86.475499][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.546205][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.556341][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.566291][ T3388] bond0 (unregistering): Released all slaves [ 86.576789][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.585944][ T6456] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.738'. [ 86.638734][ T3388] hsr_slave_0: left promiscuous mode [ 86.646049][ T3388] hsr_slave_1: left promiscuous mode [ 86.666124][ T3388] veth1_macvtap: left promiscuous mode [ 86.671694][ T3388] veth0_macvtap: left promiscuous mode [ 86.677284][ T3388] veth1_vlan: left promiscuous mode [ 86.682535][ T3388] veth0_vlan: left promiscuous mode [ 86.714256][ T6480] FAULT_INJECTION: forcing a failure. [ 86.714256][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 86.727236][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.2.743 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 86.737500][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.747559][ T6480] Call Trace: [ 86.750840][ T6480] [ 86.753773][ T6480] dump_stack_lvl+0xf2/0x150 [ 86.758413][ T6480] dump_stack+0x15/0x20 [ 86.762559][ T6480] should_fail_ex+0x223/0x230 [ 86.767343][ T6480] ? getname_flags+0x81/0x3b0 [ 86.772006][ T6480] should_failslab+0x8f/0xb0 [ 86.776651][ T6480] kmem_cache_alloc_noprof+0x4c/0x290 [ 86.782082][ T6480] getname_flags+0x81/0x3b0 [ 86.786617][ T6480] getname+0x17/0x20 [ 86.790512][ T6480] io_renameat_prep+0x12a/0x1a0 [ 86.795415][ T6480] io_submit_sqes+0x64c/0x1090 [ 86.800283][ T6480] ? __rcu_read_unlock+0x4e/0x70 [ 86.805225][ T6480] ? xa_load+0xb9/0xe0 [ 86.809351][ T6480] __se_sys_io_uring_enter+0x1ce/0x17b0 [ 86.814921][ T6480] ? get_pid_task+0x8e/0xc0 [ 86.819466][ T6480] ? proc_fail_nth_write+0x12a/0x150 [ 86.824776][ T6480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.830397][ T6480] ? vfs_write+0x580/0x910 [ 86.834827][ T6480] ? kmem_cache_free+0xdc/0x2d0 [ 86.839680][ T6480] ? putname+0xc5/0xe0 [ 86.843810][ T6480] ? ksys_write+0x16b/0x1b0 [ 86.848316][ T6480] __x64_sys_io_uring_enter+0x78/0x90 [ 86.853675][ T6480] x64_sys_call+0x2567/0x2d60 [ 86.858344][ T6480] do_syscall_64+0xc9/0x1c0 [ 86.862869][ T6480] ? clear_bhb_loop+0x55/0xb0 [ 86.867535][ T6480] ? clear_bhb_loop+0x55/0xb0 [ 86.872219][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.878209][ T6480] RIP: 0033:0x7f50d3e7df39 [ 86.882706][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.902390][ T6480] RSP: 002b:00007f50d2af7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.910796][ T6480] RAX: ffffffffffffffda RBX: 00007f50d4035f80 RCX: 00007f50d3e7df39 [ 86.918756][ T6480] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 86.926712][ T6480] RBP: 00007f50d2af7090 R08: 0000000000000000 R09: 0000000001000000 [ 86.934673][ T6480] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 86.942630][ T6480] R13: 0000000000000000 R14: 00007f50d4035f80 R15: 00007ffd988b2ce8 [ 86.950668][ T6480] [ 86.980302][ T5973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.996763][ T6490] loop2: detected capacity change from 0 to 128 [ 87.025254][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 87.033271][ T6490] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 87.043370][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 87.070039][ T6493] loop1: detected capacity change from 0 to 128 [ 87.107145][ T6434] team0: Port device team_slave_0 added [ 87.114252][ T6461] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.153455][ T6434] team0: Port device team_slave_1 added [ 87.190209][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.197227][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.214572][ T6511] x_tables: duplicate underflow at hook 2 [ 87.223130][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.244594][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.251556][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.277476][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.322442][ T6511] loop3: detected capacity change from 0 to 8192 [ 87.334359][ T6511] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.346681][ T6434] hsr_slave_0: entered promiscuous mode [ 87.353947][ T6434] hsr_slave_1: entered promiscuous mode [ 87.359887][ T6511] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 87.368131][ T6511] FAT-fs (loop3): Filesystem has been set read-only [ 87.376608][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.384204][ T6434] Cannot create hsr debugfs directory [ 87.396623][ T6511] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 87.420077][ T3270] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 87.485712][ T6527] loop2: detected capacity change from 0 to 764 [ 87.609856][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 87.645081][ T6548] loop1: detected capacity change from 0 to 512 [ 87.659324][ T6551] loop2: detected capacity change from 0 to 128 [ 87.671346][ T6548] EXT4-fs: Ignoring removed oldalloc option [ 87.688763][ T6551] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.690686][ T6548] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.753: Parent and EA inode have the same ino 15 [ 87.732684][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 87.732695][ T29] audit: type=1400 audit(1727317219.314:2616): avc: denied { create } for pid=6550 comm="syz.2.754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.760527][ T6548] EXT4-fs (loop1): Remounting filesystem read-only [ 87.767092][ T6548] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 87.777241][ T6548] EXT4-fs (loop1): 1 orphan inode deleted [ 87.783398][ T6548] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 87.824582][ T6551] ªªªªªª: renamed from vlan0 (while UP) [ 87.846789][ T1651] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.855048][ T6551] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 87.857276][ T29] audit: type=1400 audit(1727317219.454:2617): avc: denied { mac_admin } for pid=6550 comm="syz.2.754" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.890343][ T29] audit: type=1400 audit(1727317219.464:2618): avc: denied { relabelto } for pid=6550 comm="syz.2.754" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 87.939370][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.946476][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.947188][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 87.958962][ T6494] bridge_slave_0: entered allmulticast mode [ 87.968970][ T6494] bridge_slave_0: entered promiscuous mode [ 87.976711][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.983904][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.991082][ T6494] bridge_slave_1: entered allmulticast mode [ 87.997652][ T6494] bridge_slave_1: entered promiscuous mode [ 88.015024][ T1651] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.047130][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.057616][ T6565] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.068021][ T6434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.076769][ T6434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.085811][ T6434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.115886][ T1651] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.141913][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.151231][ T6434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.189894][ T1651] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.223061][ T6584] loop2: detected capacity change from 0 to 1024 [ 88.229776][ T6584] EXT4-fs: Ignoring removed orlov option [ 88.235488][ T6584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.243301][ T6494] team0: Port device team_slave_0 added [ 88.249769][ T6494] team0: Port device team_slave_1 added [ 88.270699][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.277688][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.303664][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.322028][ T6584] netlink: 176 bytes leftover after parsing attributes in process `syz.2.758'. [ 88.346747][ T6584] syz.2.758[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.346863][ T6584] syz.2.758[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.365309][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.380624][ T6584] syz.2.758[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.384736][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.403050][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.404481][ T29] audit: type=1326 audit(1727317219.994:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.429041][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.452255][ T29] audit: type=1326 audit(1727317219.994:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.452279][ T29] audit: type=1326 audit(1727317219.994:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.452335][ T29] audit: type=1326 audit(1727317219.994:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.452388][ T29] audit: type=1326 audit(1727317219.994:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.452411][ T29] audit: type=1326 audit(1727317219.994:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.452434][ T29] audit: type=1326 audit(1727317219.994:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 88.623746][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.651446][ T6596] loop3: detected capacity change from 0 to 764 [ 88.676991][ T1651] bridge_slave_1: left allmulticast mode [ 88.682784][ T1651] bridge_slave_1: left promiscuous mode [ 88.688485][ T1651] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.697216][ T1651] bridge_slave_0: left allmulticast mode [ 88.703018][ T1651] bridge_slave_0: left promiscuous mode [ 88.708711][ T1651] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.723985][ T6600] loop1: detected capacity change from 0 to 128 [ 88.785461][ T1651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.795771][ T1651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.806250][ T1651] bond0 (unregistering): Released all slaves [ 88.814215][ T6599] netlink: 'syz.2.763': attribute type 29 has an invalid length. [ 88.824544][ T6494] hsr_slave_0: entered promiscuous mode [ 88.830772][ T6494] hsr_slave_1: entered promiscuous mode [ 88.838632][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.848272][ T6494] Cannot create hsr debugfs directory [ 88.858864][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.866265][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.874656][ T6601] netlink: 'syz.2.763': attribute type 29 has an invalid length. [ 88.890703][ T1651] hsr_slave_0: left promiscuous mode [ 88.903548][ T1651] hsr_slave_1: left promiscuous mode [ 88.911031][ T1651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.918607][ T1651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.929035][ T1651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.936731][ T1651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.945802][ T1651] veth1_macvtap: left promiscuous mode [ 88.951398][ T1651] veth0_macvtap: left promiscuous mode [ 88.956970][ T1651] veth1_vlan: left promiscuous mode [ 88.962260][ T1651] veth0_vlan: left promiscuous mode [ 89.060722][ T1651] team0 (unregistering): Port device team_slave_1 removed [ 89.075311][ T1651] team0 (unregistering): Port device team_slave_0 removed [ 89.116087][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.123265][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.272006][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.364677][ T6656] syz.1.765 uses obsolete (PF_INET,SOCK_PACKET) [ 89.421696][ T6434] veth0_vlan: entered promiscuous mode [ 89.430478][ T6434] veth1_vlan: entered promiscuous mode [ 89.478366][ T6434] veth0_macvtap: entered promiscuous mode [ 89.483845][ T6671] FAULT_INJECTION: forcing a failure. [ 89.483845][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.491782][ T6434] veth1_macvtap: entered promiscuous mode [ 89.497138][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.1.767 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 89.508519][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.514360][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.514372][ T6671] Call Trace: [ 89.514378][ T6671] [ 89.514419][ T6671] dump_stack_lvl+0xf2/0x150 [ 89.526267][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.536259][ T6671] dump_stack+0x15/0x20 [ 89.539543][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.542447][ T6671] should_fail_ex+0x223/0x230 [ 89.542494][ T6671] should_fail+0xb/0x10 [ 89.542518][ T6671] should_fail_usercopy+0x1a/0x20 [ 89.547273][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.547290][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.559015][ T6671] _copy_from_iter+0xd3/0xd20 [ 89.563727][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.578163][ T6671] ? kmalloc_reserve+0x16e/0x190 [ 89.585012][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.587552][ T6671] ? __build_skb_around+0x196/0x1f0 [ 89.593505][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.602395][ T6671] ? __alloc_skb+0x21f/0x310 [ 89.602422][ T6671] ? __virt_addr_valid+0x1ed/0x250 [ 89.612830][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.617452][ T6671] ? __check_object_size+0x364/0x520 [ 89.627294][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.632142][ T6671] netlink_sendmsg+0x460/0x6e0 [ 89.639362][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.644606][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.655153][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.659665][ T6671] __sock_sendmsg+0x140/0x180 [ 89.664760][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.674628][ T6671] ____sys_sendmsg+0x312/0x410 [ 89.674665][ T6671] __sys_sendmsg+0x1d9/0x270 [ 89.692158][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.693497][ T6671] __x64_sys_sendmsg+0x46/0x50 [ 89.700867][ T6434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.709554][ T6671] x64_sys_call+0x2689/0x2d60 [ 89.709587][ T6671] do_syscall_64+0xc9/0x1c0 [ 89.715350][ T6434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726507][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 89.726542][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 89.731200][ T6434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.741044][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.745809][ T6434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.750348][ T6671] RIP: 0033:0x7fdd614ddf39 [ 89.750363][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.847432][ T6671] RSP: 002b:00007fdd60151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.855889][ T6671] RAX: ffffffffffffffda RBX: 00007fdd61695f80 RCX: 00007fdd614ddf39 [ 89.863856][ T6671] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 89.871821][ T6671] RBP: 00007fdd60151090 R08: 0000000000000000 R09: 0000000000000000 [ 89.880312][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.888293][ T6671] R13: 0000000000000000 R14: 00007fdd61695f80 R15: 00007ffc13b24ab8 [ 89.896347][ T6671] [ 89.957174][ T6494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.975746][ T6494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.012260][ T6494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.034845][ T6494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.055467][ T6683] loop0: detected capacity change from 0 to 512 [ 90.095827][ T6683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 90.130658][ T6683] System zones: 0-2, 18-18, 34-34 [ 90.148459][ T6689] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.158474][ T6683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.735: bg 0: block 248: padding at end of block bitmap is not set [ 90.178663][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.205272][ T6683] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.735: Failed to acquire dquot type 1 [ 90.221996][ T6704] siw: device registration error -23 [ 90.236648][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.253971][ T6683] EXT4-fs (loop0): 1 truncate cleaned up [ 90.260167][ T6683] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.288204][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.295433][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.331449][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.338555][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.356360][ T6720] loop1: detected capacity change from 0 to 512 [ 90.368015][ T6718] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.386208][ T6720] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.407949][ T6494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.418461][ T6494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.455542][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.776'. [ 90.464448][ T6726] netlink: 'syz.0.776': attribute type 7 has an invalid length. [ 90.472074][ T6726] netlink: 'syz.0.776': attribute type 8 has an invalid length. [ 90.479734][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 90.503628][ T6729] loop3: detected capacity change from 0 to 764 [ 90.516005][ T6726] syz_tun: entered promiscuous mode [ 90.524051][ T6726] batadv_slave_1: entered promiscuous mode [ 90.530530][ T6726] gretap0: entered promiscuous mode [ 90.567299][ T6636] coredump: 61(syz.2.763): written to core: VMAs: 33, size 91385856; core: 62124942 bytes, pos 91394048 [ 90.586279][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.660688][ T6747] loop1: detected capacity change from 0 to 128 [ 90.668367][ T6747] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 90.709605][ T6752] loop0: detected capacity change from 0 to 512 [ 90.745283][ T6752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 90.755168][ T6752] System zones: 0-2, 18-18, 34-34 [ 90.760911][ T6752] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.784: bg 0: block 248: padding at end of block bitmap is not set [ 90.780464][ T6494] veth0_vlan: entered promiscuous mode [ 90.790508][ T6494] veth1_vlan: entered promiscuous mode [ 90.792693][ T6752] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.784: Failed to acquire dquot type 1 [ 90.802455][ T6494] veth0_macvtap: entered promiscuous mode [ 90.817969][ T6494] veth1_macvtap: entered promiscuous mode [ 90.829167][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.843301][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.855767][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.869526][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.882421][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.894687][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.906953][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.918351][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.919056][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.936150][ T6752] EXT4-fs (loop0): 1 truncate cleaned up [ 90.942360][ T6752] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.958349][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.968926][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.978970][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.989575][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.999396][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.009933][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.019841][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.030268][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.041745][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.057670][ T6494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066524][ T6494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075333][ T6494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084078][ T6494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.134305][ T6766] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.183388][ T6772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6772 comm=syz.0.788 [ 91.268981][ T6783] ipt_ECN: cannot use operation on non-tcp rule [ 92.057659][ T6925] loop1: detected capacity change from 0 to 128 [ 92.068365][ T6925] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 92.253995][ T6961] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.265098][ T6959] loop3: detected capacity change from 0 to 512 [ 92.286352][ T6959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 92.304006][ T6959] System zones: 0-2, 18-18, 34-34 [ 92.324368][ T6959] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.797: bg 0: block 248: padding at end of block bitmap is not set [ 92.362001][ T6959] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.797: Failed to acquire dquot type 1 [ 92.407951][ T6959] EXT4-fs (loop3): 1 truncate cleaned up [ 92.420826][ T6959] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.507988][ T7001] x_tables: duplicate underflow at hook 2 [ 92.540934][ T7001] loop3: detected capacity change from 0 to 8192 [ 92.547783][ T7002] ipt_ECN: cannot use operation on non-tcp rule [ 92.556120][ T7001] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.568659][ T7001] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 92.576889][ T7001] FAT-fs (loop3): Filesystem has been set read-only [ 92.584384][ T7001] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 92.599697][ T3270] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 92.628384][ T7004] loop3: detected capacity change from 0 to 512 [ 92.645298][ T7004] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.692560][ T7004] loop3: detected capacity change from 512 to 11 [ 92.699510][ T7004] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 92.709333][ T7004] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4545: inode #19: comm syz.3.807: mark_inode_dirty error [ 92.727235][ T3270] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 92.736545][ T3270] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 92.754331][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 92.763512][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 92.775609][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 92.784981][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 92.796783][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 92.805873][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 92.939430][ T7008] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.967401][ T7010] loop4: detected capacity change from 0 to 764 [ 93.042051][ T7019] loop4: detected capacity change from 0 to 1024 [ 93.045931][ T7021] syz.0.813[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.048698][ T7021] syz.0.813[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.060566][ T7021] syz.0.813[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.072039][ T7019] EXT4-fs: Ignoring removed orlov option [ 93.089021][ T7019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.131539][ T7019] netlink: 176 bytes leftover after parsing attributes in process `syz.4.814'. [ 93.142458][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 93.142469][ T29] audit: type=1326 audit(1727317224.734:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.172024][ T29] audit: type=1326 audit(1727317224.734:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.225586][ T7030] loop0: detected capacity change from 0 to 512 [ 93.234230][ T29] audit: type=1326 audit(1727317224.774:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.257670][ T29] audit: type=1326 audit(1727317224.774:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.281039][ T29] audit: type=1326 audit(1727317224.774:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.304447][ T29] audit: type=1326 audit(1727317224.774:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.327780][ T29] audit: type=1326 audit(1727317224.774:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.351174][ T29] audit: type=1326 audit(1727317224.774:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.374630][ T29] audit: type=1326 audit(1727317224.774:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.397999][ T29] audit: type=1326 audit(1727317224.774:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4237c6df39 code=0x7ffc0000 [ 93.434764][ T7030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 93.446789][ T7030] System zones: 0-2, 18-18, 34-34 [ 93.451135][ T7037] serio: Serial port ptm0 [ 93.452449][ T7030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.817: bg 0: block 248: padding at end of block bitmap is not set [ 93.483705][ T7030] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.817: Failed to acquire dquot type 1 [ 93.495829][ T7030] EXT4-fs (loop0): 1 truncate cleaned up [ 93.502200][ T7030] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.538308][ T7040] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.565096][ T7042] loop0: detected capacity change from 0 to 764 [ 93.635299][ T7047] loop0: detected capacity change from 0 to 128 [ 93.645352][ T7047] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 94.672096][ T7068] ipt_ECN: cannot use operation on non-tcp rule [ 95.162619][ T7072] loop1: detected capacity change from 0 to 512 [ 95.176559][ T7072] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.222553][ T7072] loop1: detected capacity change from 512 to 511 [ 95.231928][ T7072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.830: bg 0: block 16032: padding at end of block bitmap is not set [ 95.247336][ T7072] EXT4-fs error (device loop1): ext4_discard_preallocations:5604: comm syz.1.830: Error -117 reading block bitmap for 0 [ 95.263462][ T7072] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.830: deleted inode referenced: 12 [ 95.283115][ T5609] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /65/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 95.304252][ T5609] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 95.316300][ T5609] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 95.422301][ T7078] can0: slcan on ttyS3. [ 95.477773][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.497441][ T7078] can0 (unregistered): slcan off ttyS3. [ 95.540280][ T7078] Falling back ldisc for ttyS3. [ 95.565596][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.651815][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 95.679296][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.766546][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.932740][ T28] bridge_slave_1: left allmulticast mode [ 95.938410][ T28] bridge_slave_1: left promiscuous mode [ 95.944146][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.961243][ T28] bridge_slave_0: left allmulticast mode [ 95.966980][ T28] bridge_slave_0: left promiscuous mode [ 95.972767][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.100243][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.111120][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.121922][ T28] bond0 (unregistering): Released all slaves [ 96.178925][ T7124] serio: Serial port ptm0 [ 96.189187][ T28] hsr_slave_0: left promiscuous mode [ 96.199500][ T28] hsr_slave_1: left promiscuous mode [ 96.213498][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.220923][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.244090][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.251722][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.265067][ T28] veth1_macvtap: left promiscuous mode [ 96.270577][ T28] veth0_macvtap: left promiscuous mode [ 96.276150][ T28] veth1_vlan: left promiscuous mode [ 96.281383][ T28] veth0_vlan: left promiscuous mode [ 96.379989][ T7128] loop0: detected capacity change from 0 to 2048 [ 96.396994][ T28] team0 (unregistering): Port device team_slave_1 removed [ 96.405004][ T7128] EXT4-fs mount: 20 callbacks suppressed [ 96.405013][ T7128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.425752][ T28] team0 (unregistering): Port device team_slave_0 removed [ 96.484900][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.488928][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 96.582178][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.589343][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.620690][ T7091] bridge_slave_0: entered allmulticast mode [ 96.627049][ T7154] loop0: detected capacity change from 0 to 256 [ 96.627212][ T7091] bridge_slave_0: entered promiscuous mode [ 96.640241][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.647324][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.654744][ T7091] bridge_slave_1: entered allmulticast mode [ 96.664211][ T7091] bridge_slave_1: entered promiscuous mode [ 96.689258][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.710617][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.736010][ T7091] team0: Port device team_slave_0 added [ 96.743229][ T7091] team0: Port device team_slave_1 added [ 96.776012][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.783033][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.809043][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.927435][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.935002][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.961186][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.219878][ T7091] hsr_slave_0: entered promiscuous mode [ 97.227875][ T7091] hsr_slave_1: entered promiscuous mode [ 97.254734][ T7091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.262298][ T7091] Cannot create hsr debugfs directory [ 97.517278][ T7200] loop0: detected capacity change from 0 to 512 [ 97.565720][ T7200] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 97.586035][ T7200] System zones: 0-2, 18-18, 34-34 [ 97.623208][ T7200] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.843: bg 0: block 248: padding at end of block bitmap is not set [ 97.653324][ T7005] kmmpd-loop3: attempt to access beyond end of device [ 97.653324][ T7005] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 97.653380][ T7200] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.843: Failed to acquire dquot type 1 [ 97.666742][ T7005] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 97.687053][ T7200] EXT4-fs (loop0): 1 truncate cleaned up [ 97.695634][ T7091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.702948][ T7200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.717369][ T7091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.722671][ T50] EXT4-fs error: 20403 callbacks suppressed [ 97.722684][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 97.726493][ T7200] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.735367][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 97.764075][ T7091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.778809][ T7091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.779217][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.804489][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 97.814618][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 97.850315][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 97.866778][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.878618][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 97.909319][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 97.917259][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.936547][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 97.960276][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.967524][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.993884][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 98.009580][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.016702][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.032890][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 98.066669][ T7091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.077057][ T7091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.167837][ T7246] loop0: detected capacity change from 0 to 512 [ 98.183872][ T7246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 98.186516][ T7247] loop2: detected capacity change from 0 to 512 [ 98.191950][ T7246] System zones: 0-2, 18-18, 34-34 [ 98.211410][ T7246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.847: bg 0: block 248: padding at end of block bitmap is not set [ 98.242904][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.254220][ T7246] __quota_error: 37 callbacks suppressed [ 98.254232][ T7246] Quota error (device loop0): write_blk: dquota write failed [ 98.263736][ T7247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.267269][ T7246] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.289847][ T7247] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.296179][ T7246] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.847: Failed to acquire dquot type 1 [ 98.312586][ T7246] EXT4-fs (loop0): 1 truncate cleaned up [ 98.320155][ T7246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.338285][ T7246] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.351225][ T7246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.393981][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.441274][ T7091] veth0_vlan: entered promiscuous mode [ 98.454398][ T7091] veth1_vlan: entered promiscuous mode [ 98.463281][ T7276] loop2: detected capacity change from 0 to 1024 [ 98.475539][ T7282] loop0: detected capacity change from 0 to 512 [ 98.486170][ T7276] EXT4-fs: Ignoring removed orlov option [ 98.486611][ T7091] veth0_macvtap: entered promiscuous mode [ 98.491845][ T7276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.508408][ T7091] veth1_macvtap: entered promiscuous mode [ 98.525528][ T7282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.540058][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.554775][ T7282] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.554911][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.575613][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.585461][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.596254][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.606138][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.616597][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.626612][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.637331][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.664838][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.687295][ T7276] netlink: 176 bytes leftover after parsing attributes in process `syz.2.849'. [ 98.687773][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.706766][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.716683][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.727195][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.737044][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.747527][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.757418][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.767892][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.778890][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.779865][ T7276] syz.2.849[7276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.787843][ T7276] syz.2.849[7276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.800120][ T7276] syz.2.849[7276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.816640][ T7091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.836829][ T7091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845620][ T7091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.846731][ T29] audit: type=1326 audit(1727317230.444:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 98.854329][ T7091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.889352][ T29] audit: type=1326 audit(1727317230.454:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 98.919535][ T29] audit: type=1326 audit(1727317230.454:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 98.945747][ T29] audit: type=1326 audit(1727317230.454:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 98.969415][ T29] audit: type=1326 audit(1727317230.454:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 98.992926][ T29] audit: type=1326 audit(1727317230.454:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 99.016384][ T29] audit: type=1326 audit(1727317230.454:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 99.039715][ T29] audit: type=1326 audit(1727317230.454:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f50d3e7df39 code=0x7ffc0000 [ 99.085123][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.138105][ T7306] x_tables: duplicate underflow at hook 2 [ 99.238044][ T7309] ipt_ECN: cannot use operation on non-tcp rule [ 99.988127][ T7311] loop0: detected capacity change from 0 to 256 [ 99.991820][ T7313] loop1: detected capacity change from 0 to 764 [ 100.049870][ T7315] loop1: detected capacity change from 0 to 512 [ 100.076328][ T7315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.119109][ T7315] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.190624][ T7091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.957550][ T7329] loop0: detected capacity change from 0 to 512 [ 101.014795][ T7329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 101.028233][ T7329] System zones: 0-2, 18-18, 34-34 [ 101.043149][ T7329] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.859: bg 0: block 248: padding at end of block bitmap is not set [ 101.078839][ T7329] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.859: Failed to acquire dquot type 1 [ 101.090492][ T7329] EXT4-fs (loop0): 1 truncate cleaned up [ 101.098179][ T7329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.110989][ T7329] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.133296][ T7329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.203459][ T7334] x_tables: duplicate underflow at hook 2 [ 102.045036][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 102.061560][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 102.070773][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 102.279942][ T7349] ipt_ECN: cannot use operation on non-tcp rule [ 102.692920][ T7005] kmmpd-loop3: attempt to access beyond end of device [ 102.692920][ T7005] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 102.706448][ T7005] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 102.732587][ T50] EXT4-fs error: 21851 callbacks suppressed [ 102.732602][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 102.751096][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 102.761215][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 102.774604][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 102.784018][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 102.796517][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 102.805797][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 102.817626][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 102.827024][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 102.839458][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 102.911973][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 102.958046][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.965114][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.973045][ T7351] bridge_slave_0: entered allmulticast mode [ 102.979578][ T7351] bridge_slave_0: entered promiscuous mode [ 102.986637][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.993724][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.001006][ T7351] bridge_slave_1: entered allmulticast mode [ 103.008052][ T7351] bridge_slave_1: entered promiscuous mode [ 103.038657][ T7366] loop0: detected capacity change from 0 to 512 [ 103.054697][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.096004][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.114239][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.127822][ T7366] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.173660][ T7351] team0: Port device team_slave_0 added [ 103.180149][ T7351] team0: Port device team_slave_1 added [ 103.232731][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.239690][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.265693][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.266904][ T7366] 9pnet_fd: Insufficient options for proto=fd [ 103.276495][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 103.276506][ T29] audit: type=1400 audit(1727317234.834:2917): avc: denied { ioctl } for pid=7381 comm="syz.1.871" path="socket:[18979]" dev="sockfs" ino=18979 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.313223][ T29] audit: type=1400 audit(1727317234.864:2918): avc: denied { mounton } for pid=7365 comm="syz.0.867" path="/41/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.340511][ T7382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 103.347045][ T7382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.348479][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.354652][ T7382] vhci_hcd vhci_hcd.0: Device attached [ 103.361494][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.392895][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.404861][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.455541][ T7351] hsr_slave_0: entered promiscuous mode [ 103.469819][ T7351] hsr_slave_1: entered promiscuous mode [ 103.480187][ T7351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.487865][ T7351] Cannot create hsr debugfs directory [ 103.502228][ T7392] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 103.514785][ T7392] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 103.565588][ T7394] loop0: detected capacity change from 0 to 512 [ 103.583982][ T7394] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.0.872: corrupted xattr block 95: invalid header [ 103.598935][ T7394] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.872: bg 0: block 7: invalid block bitmap [ 103.611590][ T4195] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 103.634613][ T7351] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.645439][ T7394] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 103.666762][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 103.674187][ T7394] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2976: inode #11: comm syz.0.872: corrupted xattr block 95: invalid header [ 103.696047][ T7351] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.705969][ T7394] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 103.715180][ T7394] EXT4-fs (loop0): 1 orphan inode deleted [ 103.721255][ T7394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.756167][ T7351] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.797098][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.804220][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.827480][ T7376] bridge_slave_0: entered allmulticast mode [ 103.834981][ T7376] bridge_slave_0: entered promiscuous mode [ 103.843526][ T7351] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.854230][ T7394] netdevsim netdevsim0 : renamed from netdevsim1 (while UP) [ 103.866963][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.874139][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.891588][ T7376] bridge_slave_1: entered allmulticast mode [ 103.898669][ T6434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.908386][ T7376] bridge_slave_1: entered promiscuous mode [ 103.931812][ T7383] vhci_hcd: connection reset by peer [ 103.939144][ T325] vhci_hcd: stop threads [ 103.943424][ T325] vhci_hcd: release socket [ 103.947846][ T325] vhci_hcd: disconnect device [ 103.962431][ T7404] x_tables: duplicate underflow at hook 2 [ 103.969914][ T29] audit: type=1326 audit(1727317235.564:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680147df39 code=0x7ffc0000 [ 103.996267][ T29] audit: type=1326 audit(1727317235.594:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.0.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f680147df39 code=0x7ffc0000 [ 104.031492][ T7351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.041368][ T7351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.057637][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.067219][ T7351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.076286][ T7351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.092224][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.128354][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 104.139614][ T7376] team0: Port device team_slave_0 added [ 104.155411][ T7408] loop1: detected capacity change from 0 to 128 [ 104.155956][ T7376] team0: Port device team_slave_1 added [ 104.177007][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.199001][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.205973][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.232069][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.245477][ T29] audit: type=1400 audit(1727317235.844:2921): avc: denied { create } for pid=7409 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.266247][ T29] audit: type=1400 audit(1727317235.854:2922): avc: denied { setopt } for pid=7409 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.285621][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.285636][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.285674][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.292619][ T29] audit: type=1400 audit(1727317235.854:2923): avc: denied { bind } for pid=7409 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.292640][ T29] audit: type=1400 audit(1727317235.854:2924): avc: denied { name_bind } for pid=7409 comm="syz.1.876" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 104.292661][ T29] audit: type=1400 audit(1727317235.854:2925): avc: denied { node_bind } for pid=7409 comm="syz.1.876" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 104.400942][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.410602][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.417660][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.426786][ T7411] IPVS: Error joining to the multicast group [ 104.447064][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.454204][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.510888][ T7376] hsr_slave_0: entered promiscuous mode [ 104.530254][ T7376] hsr_slave_1: entered promiscuous mode [ 104.544381][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.552068][ T7376] Cannot create hsr debugfs directory [ 104.567731][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.662250][ T7376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.695646][ T7376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.711259][ T7351] veth0_vlan: entered promiscuous mode [ 104.719834][ T7351] veth1_vlan: entered promiscuous mode [ 104.729694][ T7376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.751775][ T7351] veth0_macvtap: entered promiscuous mode [ 104.761140][ T7351] veth1_macvtap: entered promiscuous mode [ 104.770854][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.781342][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.791300][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.801867][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.811897][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.822356][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.832190][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.842685][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.852518][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.863046][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.904259][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.914601][ T7376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.931229][ T29] audit: type=1400 audit(1727317236.524:2926): avc: denied { write } for pid=7424 comm="syz.0.877" path="socket:[19188]" dev="sockfs" ino=19188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.955773][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.966260][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.976131][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.986571][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.996382][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.006780][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.016594][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.027025][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.036886][ T7351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.047344][ T7351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.072092][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.085415][ T7428] loop1: detected capacity change from 0 to 1024 [ 105.097545][ T7428] EXT4-fs: Ignoring removed orlov option [ 105.103261][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.112233][ T7351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.121082][ T7351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.129886][ T7351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.138384][ T7430] loop0: detected capacity change from 0 to 128 [ 105.138603][ T7351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.149142][ T7430] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 105.165647][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.175920][ T7376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.191990][ T7376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.204852][ T7428] netlink: 176 bytes leftover after parsing attributes in process `syz.1.878'. [ 105.214688][ T7376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.236819][ T7376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.278350][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.291032][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.301478][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.308535][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.334292][ T7376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.344718][ T7376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.359281][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.366349][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.455867][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.667430][ T7376] veth0_vlan: entered promiscuous mode [ 105.700680][ T7376] veth1_vlan: entered promiscuous mode [ 105.733273][ T7376] veth0_macvtap: entered promiscuous mode [ 105.758577][ T7376] veth1_macvtap: entered promiscuous mode [ 105.780860][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.791401][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.801250][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.811735][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.821581][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.832025][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.841877][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.852365][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.862184][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.872628][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.882463][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.892939][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.906465][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.914668][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.925209][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.935021][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.945938][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.955761][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.966242][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.976119][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.986598][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.996547][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.006992][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.016842][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.027369][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.040074][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.056457][ T7376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.065234][ T7376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.074019][ T7376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.082854][ T7376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.299464][ T7474] syz.4.885[7474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.299605][ T7474] syz.4.885[7474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.313960][ T7474] syz.4.885[7474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.681566][ T7477] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.792262][ T7483] loop0: detected capacity change from 0 to 1024 [ 106.809190][ T7483] EXT4-fs: Ignoring removed orlov option [ 106.814948][ T7483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.829690][ T7481] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 106.838592][ T7483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.840571][ T7481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.871897][ T7483] netlink: 176 bytes leftover after parsing attributes in process `syz.0.888'. [ 106.882027][ T7483] syz.0.888[7483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.882098][ T7483] syz.0.888[7483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.894022][ T7483] syz.0.888[7483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.732755][ T7005] kmmpd-loop3: attempt to access beyond end of device [ 107.732755][ T7005] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 107.744475][ T50] EXT4-fs error: 19617 callbacks suppressed [ 107.744487][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 107.757400][ T7005] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 107.781640][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 107.793337][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 107.802744][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 107.815265][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 107.825038][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 107.836810][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 107.846058][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 107.859283][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 107.868516][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 108.764243][ T4195] vhci_hcd: vhci_device speed not set [ 108.821003][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 108.821034][ T29] audit: type=1326 audit(1727317240.414:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed766adf39 code=0x7ffc0000 [ 108.866567][ T29] audit: type=1326 audit(1727317240.454:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fed766adf39 code=0x7ffc0000 [ 108.890018][ T29] audit: type=1326 audit(1727317240.454:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed766adf39 code=0x7ffc0000 [ 108.907514][ T7547] x_tables: duplicate underflow at hook 2 [ 108.948508][ T29] audit: type=1326 audit(1727317240.534:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed766adf39 code=0x7ffc0000 [ 108.972259][ T29] audit: type=1326 audit(1727317240.534:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7546 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed766adf39 code=0x7ffc0000 [ 109.078913][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 109.136839][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.143949][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.162667][ T7539] bridge_slave_0: entered allmulticast mode [ 109.169548][ T7539] bridge_slave_0: entered promiscuous mode [ 109.179307][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.186441][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.194034][ T7539] bridge_slave_1: entered allmulticast mode [ 109.200472][ T7539] bridge_slave_1: entered promiscuous mode [ 109.218297][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.229317][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.261260][ T7539] team0: Port device team_slave_0 added [ 109.270575][ T7539] team0: Port device team_slave_1 added [ 109.287138][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.295055][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.322160][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.340488][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.347525][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.379133][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.418725][ T7539] hsr_slave_0: entered promiscuous mode [ 109.432988][ T7539] hsr_slave_1: entered promiscuous mode [ 109.433859][ T29] audit: type=1326 audit(1727317241.034:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3f8bdf39 code=0x7ffc0000 [ 109.461944][ T7539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.469832][ T7539] Cannot create hsr debugfs directory [ 109.481133][ T29] audit: type=1326 audit(1727317241.064:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3f8bdf39 code=0x7ffc0000 [ 109.504721][ T29] audit: type=1326 audit(1727317241.064:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3f8bdf39 code=0x7ffc0000 [ 109.528152][ T29] audit: type=1326 audit(1727317241.064:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3f8bdf39 code=0x7ffc0000 [ 109.551475][ T29] audit: type=1326 audit(1727317241.064:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3f8bdf39 code=0x7ffc0000 [ 109.596871][ T7561] tipc: Started in network mode [ 109.601856][ T7561] tipc: Node identity ac14140f, cluster identity 4711 [ 109.610495][ T7561] tipc: New replicast peer: 255.255.255.255 [ 109.616815][ T7561] tipc: Enabled bearer , priority 10 [ 109.652005][ T7539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.697673][ T7539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.751344][ T7539] bond0: (slave netdevsim1): Releasing backup interface [ 109.762998][ T7572] FAULT_INJECTION: forcing a failure. [ 109.762998][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.775238][ T7539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.776116][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.3.917 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 109.796635][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 109.806695][ T7572] Call Trace: [ 109.809976][ T7572] [ 109.812908][ T7572] dump_stack_lvl+0xf2/0x150 [ 109.817657][ T7572] dump_stack+0x15/0x20 [ 109.821818][ T7572] should_fail_ex+0x223/0x230 [ 109.826574][ T7572] should_fail+0xb/0x10 [ 109.830776][ T7572] should_fail_usercopy+0x1a/0x20 [ 109.835813][ T7572] _copy_from_user+0x1e/0xd0 [ 109.840432][ T7572] __se_sys_mount+0x119/0x2d0 [ 109.845110][ T7572] ? ksys_write+0x17a/0x1b0 [ 109.849632][ T7572] __x64_sys_mount+0x67/0x80 [ 109.854377][ T7572] x64_sys_call+0x203e/0x2d60 [ 109.859067][ T7572] do_syscall_64+0xc9/0x1c0 [ 109.863585][ T7572] ? clear_bhb_loop+0x55/0xb0 [ 109.868272][ T7572] ? clear_bhb_loop+0x55/0xb0 [ 109.873021][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.878960][ T7572] RIP: 0033:0x7fed766adf39 [ 109.883433][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.903054][ T7572] RSP: 002b:00007fed75327038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.911471][ T7572] RAX: ffffffffffffffda RBX: 00007fed76865f80 RCX: 00007fed766adf39 [ 109.919445][ T7572] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 109.927429][ T7572] RBP: 00007fed75327090 R08: 0000000020001340 R09: 0000000000000000 [ 109.935401][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.943398][ T7572] R13: 0000000000000000 R14: 00007fed76865f80 R15: 00007ffe75ba51a8 [ 109.951379][ T7572] [ 109.966461][ T7539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.067463][ T7578] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.078152][ T7539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.095111][ T7539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.107353][ T7539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.116354][ T7539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.168971][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.191382][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.203890][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.211009][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.225131][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.232187][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.323079][ T7539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.435451][ T7539] veth0_vlan: entered promiscuous mode [ 110.443496][ T7539] veth1_vlan: entered promiscuous mode [ 110.458978][ T7539] veth0_macvtap: entered promiscuous mode [ 110.466788][ T7539] veth1_macvtap: entered promiscuous mode [ 110.476812][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.487383][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.497254][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.508095][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.517930][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.528510][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.538441][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.548941][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.558782][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.569280][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.579097][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.589590][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.599438][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.610002][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.661663][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.670876][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.683027][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.693118][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.705256][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.715109][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.727175][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.732583][ T8] tipc: Node number set to 2886997007 [ 110.740918][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.762919][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.774129][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.784651][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.794583][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.805129][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.815057][ T7539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.825498][ T7539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.848191][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.891961][ T7539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.900843][ T7539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.909610][ T7539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.918313][ T7539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.030988][ T7602] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.057987][ T7607] serio: Serial port ptm0 [ 111.190106][ T7619] x_tables: duplicate underflow at hook 2 [ 111.191296][ T7615] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.861627][ T46] ================================================================== [ 111.869709][ T46] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 111.876917][ T46] [ 111.879240][ T46] race at unknown origin, with assert no writes to 0xffff888101414268 of 4 bytes by task 46 on cpu 1: [ 111.890182][ T46] dequeue_entities+0x6df/0x760 [ 111.895034][ T46] pick_next_task_fair+0x7d/0x410 [ 111.900054][ T46] __schedule+0x284/0x940 [ 111.904395][ T46] schedule+0x55/0xc0 [ 111.908378][ T46] worker_thread+0x5f4/0x6f0 [ 111.912967][ T46] kthread+0x1d1/0x210 [ 111.917029][ T46] ret_from_fork+0x4b/0x60 [ 111.921443][ T46] ret_from_fork_asm+0x1a/0x30 [ 111.926288][ T46] [ 111.928598][ T46] value changed: 0x00000000 -> 0x00000001 [ 111.934297][ T46] [ 111.936632][ T46] Reported by Kernel Concurrency Sanitizer on: [ 111.942762][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1H Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 111.953074][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.963115][ T46] Workqueue: 0x0 (kblockd) [ 111.967613][ T46] ================================================================== [ 112.753169][ T50] EXT4-fs error: 24660 callbacks suppressed [ 112.753183][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 112.769182][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 112.780655][ T7005] kmmpd-loop3: attempt to access beyond end of device [ 112.780655][ T7005] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 112.780976][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 112.794153][ T7005] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 112.812597][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 112.824223][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 112.833335][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 112.845014][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 112.854345][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 112.865933][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 112.875056][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 117.762641][ T50] EXT4-fs error: 30864 callbacks suppressed [ 117.762658][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 117.780226][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 117.795418][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 117.806691][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 117.824415][ T7005] kmmpd-loop3: attempt to access beyond end of device [ 117.824415][ T7005] loop3: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 117.837976][ T7005] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 117.842822][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 117.855579][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 117.867260][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 117.876437][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error [ 117.888677][ T50] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 117.900608][ T50] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #19: comm kworker/u8:3: mark_inode_dirty error