last executing test programs: 7.26451652s ago: executing program 4 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000fdffffff00090000008ae71e08", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x40000000000}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000080d70d3100000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000043100000101000085000000b700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000000000000b70000000000000095000000000000002d362db97ebe1942ec6c3843263a205579dd9a374497d1f52f1d4cc1128a46941a3f7f3412b08e9ffd06464f8304b57a2da4a2ffc34d6e9869810000008a1088634b7284199421217ca1e4c48358aae8540141fd0a6184c0733498259f884565ee39a9c915b85ab9c66aba08e2189248d8b803231b699d90ec2a55bcfb350a382917e9d53906e1bea2d83cbc1f4af4734ff4120aa45bc43dbc8899e0831c53b4c70e08f657f8a0c14635b0ab84753611cd9ad0bcedf210e6820c60f835477dbbcaae74d8969dc769029030f24fa70b012a7321cb5d26f70cbb6cf42f88d31e2380"], &(0x7f00000004c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x81, 0x100}, 0x10, 0x0, r0, 0x1, &(0x7f0000000580)=[r1, r3], &(0x7f00000005c0)=[{0x2, 0x1, 0xa, 0xa}], 0x10, 0x94f, @void, @value}, 0x94) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 7.101242553s ago: executing program 4 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8004550f, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 7.077547866s ago: executing program 0 (id=838): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x80002, 0x88) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) shutdown(r0, 0x0) 6.924658358s ago: executing program 4 (id=840): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) 6.845904805s ago: executing program 0 (id=841): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000002140)={0x40000008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x308800, 0x800, 0x0, 0x1}, 0x20) 6.845548285s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0xb5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xc8, 0x9}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) recvfrom$rxrpc(r6, &(0x7f0000000240)=""/100, 0x64, 0x21, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000004c0)={[{@nobarrier}, {@inode_readahead_blks}, {@errors_remount}, {@noload}, {@orlov}]}, 0x2, 0x4e8, &(0x7f0000000dc0)="$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") 6.700982567s ago: executing program 0 (id=844): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 1) connect$inet6(r0, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r7 = dup2(r0, r0) write$tun(r7, 0x0, 0x46) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.576696558s ago: executing program 0 (id=846): lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 6.528353912s ago: executing program 0 (id=847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r2}, 0x38) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$getownex(r4, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r11, 0x0, 0x800}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r13}, &(0x7f0000000400), &(0x7f00000004c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.392569033s ago: executing program 0 (id=848): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c0002800500010000000000440005800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007f0f0000000000000002000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000266f6ab921b795d30f26c61100bf91000000000000b70200000200000085000000e229139aa2028af97185000000b7000e00000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x544, 0x36, &(0x7f00000005c0)=""/54, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0xfffff801}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000080)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="0000000000001743cf730000000000000000800000080000000000004fece53c3a238bee72550811805a6c3d67b72067d9aaa9f178c7a8f3c04def66bf22c749a845257a4653c19dfa7540ba36ff3ffd8be7a8"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chown(0x0, 0x0, 0xffffffffffffffff) sync() ptrace(0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000400)=@sg0, 0x0, &(0x7f00000025c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1e88f50fd812efd5c1214afb16a0299d3b539a481ffbc7854303779c0b590018de72dd89a4eac090dc75526786d2ac36bbfc4bab7d70dd6f86a50e07b02f036f000fa44f2c36b372a24480832c6b0d058071002018146d256da5d7e20adf3ce9134713f42e6d6ac40adbe1b343"], 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) recvmsg$kcm(r2, 0x0, 0x0) 6.223778817s ago: executing program 4 (id=853): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x8, 0x0, &(0x7f0000000080)="0000ffffffffa000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008520000062"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x800, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000600)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000000500)=""/102, 0x66}], 0x1, 0x60, 0x5}}], 0x48, 0x8004}, 0x0) 6.083667999s ago: executing program 4 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rss_stat\x00', r2, 0x0, 0x8001}, 0x4) clock_nanosleep(0x9, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000050000000200000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) splice(r4, 0x0, r6, 0x0, 0x7, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) dup2(r4, r5) 3.874787465s ago: executing program 3 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000a56a686d2f4cd984a9d7a46738420143307162b7f542109b7f0b24c4dc65c0bc3fc72579a096e5afe6bd71c8cff22edf9c82411213f4ff9a2eeff43838", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x1, 0x0, 0x6, 0x8001, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffc7289c6358ce00"/19], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) unshare(0x2c060000) 2.951801362s ago: executing program 3 (id=883): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 2.951203692s ago: executing program 3 (id=884): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000077d20004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000010"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.755962483s ago: executing program 3 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = gettid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100) 1.717933716s ago: executing program 1 (id=891): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x0, 0x0, 0x0, 0x100000040000}) 1.691381598s ago: executing program 1 (id=892): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast, 0x1}, {@broadcast}, {@private}, {@multicast1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x3}}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 1.67001169s ago: executing program 1 (id=893): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x0, 0x0, 0x0, 0x100000040000}) 1.647602472s ago: executing program 1 (id=894): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 1.628824923s ago: executing program 1 (id=895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = gettid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100) 884.975496ms ago: executing program 3 (id=899): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000077d20004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000010"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 870.216177ms ago: executing program 2 (id=900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000fdffffff00090000008ae71e08", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40000000000}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 850.157369ms ago: executing program 2 (id=901): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 826.268221ms ago: executing program 2 (id=902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000740)) io_submit(0x0, 0x1, &(0x7f0000001bc0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000001b40)="4de521612cd1556d28cfd91a6335e663a8590c0b051f913b2ab96751c5b2f98f17b69f668ac013cfa84197db75b1727ac0e037929b4988add8e1c7f53a8c7019faafc663337db129b7a5c7eb9ae015b5b541f459f43a947f", 0x58, 0x8, 0x0, 0x2}]) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000e4af9394a06c2918c800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000b5e6ce9a7c759108e1c5b100"/39], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r6, 0x2088002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r5, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") ioctl$FS_IOC_SETFLAGS(r7, 0x4c02, &(0x7f0000000140)) open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) 375.485849ms ago: executing program 1 (id=903): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4fe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffffffffffedd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000023000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000340), 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0xf, 0x1, {0xffffffffffffffff, 0x2, 0x6, 0x0, 0x8}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4}]}) 273.972327ms ago: executing program 2 (id=904): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) 155.403567ms ago: executing program 2 (id=905): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x800, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000600)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000000500)=""/102, 0x66}], 0x1, 0x60, 0x5}}], 0x48, 0x8004}, 0x0) 296.77µs ago: executing program 2 (id=906): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x449, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c646f74732c666c7573682c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c666c7573682c646f74732c646f74732c666c7573682c6769643dc2a6f7ec02f093c9f9a1360520b923c5ea79bd8ee246a9bd1df20960a770069a05a2993d3138d4558734bf037dc83cee314d983adce6fdf5ac00da0a2c6ca5a670d198714a50fccb4852e38ffc2b56648b8373c7e7952851e7b81c689fdf2c783d63c0859d1ef7cf65c8d21ababd5b69d58d095db6445577e752df1737f2eef3a2fc2d635f", @ANYRESHEX=0x0, @ANYBLOB=',nfs,dots,tz=UTC,dots,discard,errors=remount-ro,sys_immutable,dots,\x00'], 0xfd, 0x1bf, &(0x7f0000000680)="$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") r2 = socket$inet6(0xa, 0x6, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14, 0x800) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10b080, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x8) listen(r2, 0x5) dup(r2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=907): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') ftruncate(r1, 0x7fffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x55, 0x1, 0x100}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) kernel console output (not intermixed with test programs): 116.318414][ T7799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.331043][ T7799] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.356591][ T165] hsr_slave_0: left promiscuous mode [ 116.362574][ T165] hsr_slave_1: left promiscuous mode [ 116.370969][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.378506][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.386091][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.387636][ T7799] loop1: detected capacity change from 512 to 0 [ 116.393670][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.407355][ T7809] bio_check_eod: 219 callbacks suppressed [ 116.407368][ T7809] syz.1.683: attempt to access beyond end of device [ 116.407368][ T7809] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 116.428524][ T7809] EXT4-fs error (device loop1): __ext4_find_entry:1641: inode #2: comm syz.1.683: reading directory lblock 0 [ 116.440235][ T165] hsr_slave_0: left promiscuous mode [ 116.441248][ T7809] syz.1.683: attempt to access beyond end of device [ 116.441248][ T7809] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 116.461904][ T7809] EXT4-fs (loop1): I/O error while writing superblock [ 116.468920][ T165] hsr_slave_1: left promiscuous mode [ 116.480162][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.487747][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.495508][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.502990][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.513889][ T165] veth1_macvtap: left promiscuous mode [ 116.519487][ T165] veth0_macvtap: left promiscuous mode [ 116.525035][ T165] veth1_vlan: left promiscuous mode [ 116.530345][ T165] veth0_vlan: left promiscuous mode [ 116.536335][ T165] veth1_macvtap: left promiscuous mode [ 116.541854][ T165] veth0_macvtap: left promiscuous mode [ 116.547358][ T165] veth1_vlan: left promiscuous mode [ 116.552682][ T165] veth0_vlan: left promiscuous mode [ 116.704853][ T165] team0 (unregistering): Port device team_slave_1 removed [ 116.715619][ T165] team0 (unregistering): Port device team_slave_0 removed [ 116.795044][ T165] team0 (unregistering): Port device team_slave_1 removed [ 116.806477][ T165] team0 (unregistering): Port device team_slave_0 removed [ 116.851491][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.858665][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.865998][ T7723] bridge_slave_0: entered allmulticast mode [ 116.872881][ T7723] bridge_slave_0: entered promiscuous mode [ 116.879999][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.887074][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.894434][ T7723] bridge_slave_1: entered allmulticast mode [ 116.901026][ T7723] bridge_slave_1: entered promiscuous mode [ 116.907884][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 116.916754][ T7799] tipc: Enabling of bearer rejected, media not registered [ 116.939074][ T7165] syz-executor: attempt to access beyond end of device [ 116.939074][ T7165] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 116.957283][ T7165] syz-executor: attempt to access beyond end of device [ 116.957283][ T7165] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 116.981437][ T7165] syz-executor: attempt to access beyond end of device [ 116.981437][ T7165] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 116.981623][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.995416][ T7165] syz-executor: attempt to access beyond end of device [ 116.995416][ T7165] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 117.016260][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.029205][ T7165] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #2: block 34: comm syz-executor: unable to read itable block [ 117.054513][ T7165] syz-executor: attempt to access beyond end of device [ 117.054513][ T7165] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 117.067868][ T7165] buffer_io_error: 49 callbacks suppressed [ 117.067879][ T7165] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.092728][ T7165] EXT4-fs (loop1): I/O error while writing superblock [ 117.099614][ T7165] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 117.108468][ T7165] syz-executor: attempt to access beyond end of device [ 117.108468][ T7165] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 117.121850][ T7165] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.130728][ T7165] EXT4-fs (loop1): I/O error while writing superblock [ 117.137563][ T7165] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 117.145466][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.149123][ T7165] syz-executor: attempt to access beyond end of device [ 117.149123][ T7165] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 117.159738][ T7723] team0: Port device team_slave_0 added [ 117.168966][ T7165] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.181142][ T7165] EXT4-fs (loop1): I/O error while writing superblock [ 117.189845][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.204960][ T1898] kworker/u8:6: attempt to access beyond end of device [ 117.204960][ T1898] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 117.212137][ T7723] team0: Port device team_slave_1 added [ 117.218607][ T1898] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #4: block 34: comm kworker/u8:6: unable to read itable block [ 117.237925][ T1898] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.246186][ T1898] EXT4-fs (loop1): I/O error while writing superblock [ 117.252010][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.253045][ T1898] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:6: unable to read itable block [ 117.273606][ T1898] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.274976][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.281879][ T1898] EXT4-fs (loop1): I/O error while writing superblock [ 117.288887][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.302951][ T1898] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #2: block 34: comm kworker/u8:6: unable to read itable block [ 117.316892][ T1898] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.325250][ T1898] EXT4-fs (loop1): I/O error while writing superblock [ 117.327242][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.339131][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.365092][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.377723][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.384799][ T4818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.385885][ T7165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.413264][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.420399][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.446559][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.457358][ T7165] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 117.468112][ T7165] EXT4-fs (loop1): I/O error while writing superblock [ 117.477530][ T7801] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 117.506312][ T7723] hsr_slave_0: entered promiscuous mode [ 117.515643][ T7723] hsr_slave_1: entered promiscuous mode [ 117.524494][ T7723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.532522][ T7723] Cannot create hsr debugfs directory [ 117.654087][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.714857][ T7645] veth0_vlan: entered promiscuous mode [ 117.741799][ T7645] veth1_vlan: entered promiscuous mode [ 117.793102][ T7645] veth0_macvtap: entered promiscuous mode [ 117.809465][ T7645] veth1_macvtap: entered promiscuous mode [ 117.869076][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.879577][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.889419][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.899971][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.909819][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.920334][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.930170][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.940627][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.950527][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.960984][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.973030][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.002266][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.012828][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.022701][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.033145][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.042978][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.053685][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.063862][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.074335][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.084198][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.094723][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.105693][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.116439][ T7645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.125347][ T7645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.134239][ T7645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.143000][ T7645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.173301][ T7657] veth0_vlan: entered promiscuous mode [ 118.182531][ T7657] veth1_vlan: entered promiscuous mode [ 118.205254][ T4818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.225505][ T7723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.234640][ T7723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.246936][ T7723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.256576][ T7657] veth0_macvtap: entered promiscuous mode [ 118.276893][ T4818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.298349][ T7723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.314861][ T7657] veth1_macvtap: entered promiscuous mode [ 118.334425][ T4818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.398048][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.408610][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.418567][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.429016][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.438882][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.449346][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.459193][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.469684][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.479612][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.490122][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.499973][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.510425][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.523876][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.534741][ T4818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.572025][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.612923][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.623549][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.633424][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.643894][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.653759][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.664219][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.674077][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.684532][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.694636][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.705134][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.715063][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.725618][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.746796][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.760507][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 118.775610][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.793304][ T7657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.802101][ T7657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.810931][ T7657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.819690][ T7657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.869874][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.876988][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.141496][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.148648][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.230126][ T4818] bridge_slave_1: left allmulticast mode [ 119.235831][ T4818] bridge_slave_1: left promiscuous mode [ 119.241603][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.253395][ T4818] bridge_slave_0: left allmulticast mode [ 119.259228][ T4818] bridge_slave_0: left promiscuous mode [ 119.264898][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.550352][ T4818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.564055][ T4818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.576819][ T4818] bond0 (unregistering): Released all slaves [ 119.585883][ T4818] bond1 (unregistering): Released all slaves [ 119.602958][ T7723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.630415][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.637542][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.644770][ T7885] bridge_slave_0: entered allmulticast mode [ 119.651924][ T7885] bridge_slave_0: entered promiscuous mode [ 119.659763][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.666871][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.675123][ T7885] bridge_slave_1: entered allmulticast mode [ 119.684576][ T7885] bridge_slave_1: entered promiscuous mode [ 119.711862][ T7992] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 119.720164][ T7992] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 119.738368][ T4818] hsr_slave_0: left promiscuous mode [ 119.749967][ T4818] hsr_slave_1: left promiscuous mode [ 119.772829][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.780411][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.806167][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.813705][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.862534][ T4818] veth1_macvtap: left promiscuous mode [ 119.868185][ T4818] veth0_macvtap: left promiscuous mode [ 119.873879][ T4818] veth1_vlan: left promiscuous mode [ 119.879179][ T4818] veth0_vlan: left promiscuous mode [ 120.029222][ T4818] team0 (unregistering): Port device team_slave_1 removed [ 120.040057][ T4818] team0 (unregistering): Port device team_slave_0 removed [ 120.104008][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.118587][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.165005][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.174697][ T7885] team0: Port device team_slave_0 added [ 120.188322][ T7885] team0: Port device team_slave_1 added [ 120.230714][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.237905][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.263931][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.275284][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.282356][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.308326][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.362816][ T7885] hsr_slave_0: entered promiscuous mode [ 120.383028][ T7885] hsr_slave_1: entered promiscuous mode [ 120.402158][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.420876][ T7885] Cannot create hsr debugfs directory [ 120.478946][ T29] audit: type=1326 audit(1728706290.630:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec2190dff9 code=0x0 [ 120.557883][ T29] audit: type=1326 audit(1728706290.690:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fec219400e5 code=0x0 [ 120.586616][ T7723] veth0_vlan: entered promiscuous mode [ 120.592867][ T8050] x_tables: unsorted entry at hook 2 [ 120.615634][ T7723] veth1_vlan: entered promiscuous mode [ 120.698374][ T7723] veth0_macvtap: entered promiscuous mode [ 120.733233][ T7723] veth1_macvtap: entered promiscuous mode [ 120.788427][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.799063][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.809027][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.819551][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.829422][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.839949][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.849856][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.860339][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.870187][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.880749][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.890629][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.901113][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.918116][ T8059] syz.0.695[8059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.918274][ T8059] syz.0.695[8059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.928180][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.987946][ T8059] syz.0.695[8059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.013252][ T8059] loop0: detected capacity change from 0 to 512 [ 121.070132][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.080697][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.090654][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.101221][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.111073][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.121576][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.131481][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.141934][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.151777][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.162212][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.172195][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.182661][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.240350][ T8059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.240853][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.253679][ T8059] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.286338][ T29] audit: type=1326 audit(1728706291.430:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.309803][ T29] audit: type=1326 audit(1728706291.430:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.333266][ T29] audit: type=1326 audit(1728706291.430:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.356660][ T29] audit: type=1326 audit(1728706291.430:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.379994][ T29] audit: type=1326 audit(1728706291.430:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.566332][ T29] audit: type=1326 audit(1728706291.710:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.589748][ T7723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.589793][ T7723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.598840][ T29] audit: type=1326 audit(1728706291.710:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.607390][ T7723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.639572][ T7723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.750451][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 121.776204][ T29] audit: type=1326 audit(1728706291.800:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 121.875713][ T7657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.998428][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.005541][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.075769][ T8037] bridge_slave_0: entered allmulticast mode [ 123.425908][ T8037] bridge_slave_0: entered promiscuous mode [ 123.433429][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.440575][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.447861][ T8037] bridge_slave_1: entered allmulticast mode [ 123.454244][ T8037] bridge_slave_1: entered promiscuous mode [ 123.490061][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.538305][ T7885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.548626][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.560904][ T7885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.572724][ T7885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.607166][ T7885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.625449][ T8123] loop0: detected capacity change from 0 to 512 [ 123.632344][ T8123] EXT4-fs: Ignoring removed i_version option [ 123.638438][ T8123] EXT4-fs: Ignoring removed nobh option [ 123.668106][ T8037] team0: Port device team_slave_0 added [ 123.686862][ T8037] team0: Port device team_slave_1 added [ 123.726495][ T8123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.750199][ T8123] EXT4-fs (loop0): 1 truncate cleaned up [ 123.763167][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.770266][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.796222][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.825423][ T8123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.854873][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.861883][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.887894][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.908871][ T7657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.933344][ T8141] x_tables: unsorted entry at hook 2 [ 123.952456][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.986442][ T8148] FAULT_INJECTION: forcing a failure. [ 123.986442][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 123.999179][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.4.706 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 124.009783][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.019863][ T8148] Call Trace: [ 124.023149][ T8148] [ 124.026091][ T8148] dump_stack_lvl+0xf2/0x150 [ 124.030714][ T8148] dump_stack+0x15/0x20 [ 124.034903][ T8148] should_fail_ex+0x223/0x230 [ 124.039658][ T8148] ? __alloc_skb+0x10b/0x310 [ 124.044281][ T8148] should_failslab+0x8f/0xb0 [ 124.048895][ T8148] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 124.054737][ T8148] __alloc_skb+0x10b/0x310 [ 124.059310][ T8148] netlink_alloc_large_skb+0xad/0xe0 [ 124.064633][ T8148] netlink_sendmsg+0x3b4/0x6e0 [ 124.069499][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.074819][ T8148] __sock_sendmsg+0x140/0x180 [ 124.079566][ T8148] ____sys_sendmsg+0x312/0x410 [ 124.084412][ T8148] __sys_sendmsg+0x1d9/0x270 [ 124.089042][ T8148] __x64_sys_sendmsg+0x46/0x50 [ 124.093832][ T8148] x64_sys_call+0x2689/0x2d60 [ 124.098579][ T8148] do_syscall_64+0xc9/0x1c0 [ 124.103268][ T8148] ? clear_bhb_loop+0x55/0xb0 [ 124.107974][ T8148] ? clear_bhb_loop+0x55/0xb0 [ 124.112790][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.118716][ T8148] RIP: 0033:0x7fec2190dff9 [ 124.123168][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.142793][ T8148] RSP: 002b:00007fec20581038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.151289][ T8148] RAX: ffffffffffffffda RBX: 00007fec21ac5f80 RCX: 00007fec2190dff9 [ 124.159298][ T8148] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 124.159317][ T8148] RBP: 00007fec20581090 R08: 0000000000000000 R09: 0000000000000000 [ 124.159329][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.159342][ T8148] R13: 0000000000000000 R14: 00007fec21ac5f80 R15: 00007ffe8d54e098 [ 124.159404][ T8148] [ 124.201132][ T8037] hsr_slave_0: entered promiscuous mode [ 124.202722][ T8037] hsr_slave_1: entered promiscuous mode [ 124.203075][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.203090][ T8037] Cannot create hsr debugfs directory [ 124.233367][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.236645][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.236677][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.264082][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.264112][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.359885][ T8165] syz.4.709[8165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.360067][ T8165] syz.4.709[8165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.360149][ T8165] syz.4.709[8165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.406910][ T8037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.453030][ T8037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.491367][ T8037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.563633][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.578284][ T8185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 124.584862][ T8185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.592411][ T8185] vhci_hcd vhci_hcd.0: Device attached [ 124.613249][ T8187] vhci_hcd: connection closed [ 124.624181][ T1898] vhci_hcd: stop threads [ 124.633193][ T1898] vhci_hcd: release socket [ 124.637720][ T1898] vhci_hcd: disconnect device [ 124.647039][ T8037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.677574][ T8197] loop4: detected capacity change from 0 to 512 [ 124.684132][ T8197] EXT4-fs: Ignoring removed i_version option [ 124.690304][ T8197] EXT4-fs: Ignoring removed nobh option [ 124.699020][ T8197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.731449][ T8197] EXT4-fs (loop4): 1 truncate cleaned up [ 124.737605][ T8197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.752080][ T8037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.757017][ T8197] EXT4-fs (loop4): shut down requested (0) [ 124.780838][ T8197] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 124.789935][ T8037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.818891][ T7885] veth0_vlan: entered promiscuous mode [ 124.831259][ T7885] veth1_vlan: entered promiscuous mode [ 124.837334][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.846274][ T7885] veth0_macvtap: entered promiscuous mode [ 124.848954][ T7885] veth1_macvtap: entered promiscuous mode [ 124.861152][ T8037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.877374][ T8216] netlink: 'syz.2.715': attribute type 4 has an invalid length. [ 124.885104][ T8216] netlink: 17 bytes leftover after parsing attributes in process `syz.2.715'. [ 124.896260][ T8037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.919030][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.929586][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.939421][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.949891][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.959751][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.970195][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.980078][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.990659][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.000478][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.011140][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.021175][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.031638][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.041472][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.051910][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.067790][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.076385][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.087067][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.096995][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.107568][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.117414][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.127958][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.137803][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.148321][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.158183][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.168721][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.178561][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.189018][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.192740][ T8224] syz.2.718[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.198984][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.220844][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.230877][ T8224] syz.2.718[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.230944][ T8224] syz.2.718[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.233440][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.346515][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.555596][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.601993][ T8230] rdma_op ffff8881144c3580 conn xmit_rdma 0000000000000000 [ 125.644775][ T7885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.654101][ T7885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.662847][ T7885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.671650][ T7885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.681946][ T8232] syz.0.720[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.747245][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.765609][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.781954][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.789164][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.808752][ T8237] loop4: detected capacity change from 0 to 512 [ 125.815406][ T8237] EXT4-fs: Ignoring removed i_version option [ 125.821490][ T8237] EXT4-fs: Ignoring removed nobh option [ 125.828070][ T8237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.843516][ T8037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.853911][ T8037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.867706][ T8237] EXT4-fs (loop4): 1 truncate cleaned up [ 125.876617][ T8237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.893770][ T8237] EXT4-fs (loop4): shut down requested (0) [ 125.924803][ T8237] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 125.962035][ T8243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.978223][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.993034][ T8243] loop1: detected capacity change from 0 to 512 [ 126.015735][ T8247] loop0: detected capacity change from 0 to 1024 [ 126.033994][ T8250] netlink: 830 bytes leftover after parsing attributes in process `syz.4.724'. [ 126.058239][ T8250] xt_recent: Unsupported userspace flags (00000042) [ 126.068940][ T8247] EXT4-fs: Ignoring removed oldalloc option [ 126.093647][ T8254] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 126.102022][ T8254] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 126.130078][ T8247] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 126.181681][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.196545][ T8243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.222881][ T8243] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.323489][ T8247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.439493][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 126.439506][ T29] audit: type=1400 audit(1728706296.590:3004): avc: denied { write } for pid=8246 comm="syz.0.725" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.509869][ T29] audit: type=1400 audit(1728706296.620:3005): avc: denied { execute } for pid=8246 comm="syz.0.725" path="/13/file1/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.551786][ T29] audit: type=1400 audit(1728706296.690:3006): avc: denied { create } for pid=8242 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 126.572391][ T29] audit: type=1400 audit(1728706296.690:3007): avc: denied { bind } for pid=8242 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 126.602436][ T8037] veth0_vlan: entered promiscuous mode [ 126.623185][ T8037] veth1_vlan: entered promiscuous mode [ 126.637217][ T8273] bpf_get_probe_write_proto: 2 callbacks suppressed [ 126.637306][ T8273] syz.4.730[8273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.638399][ T7885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.647547][ T8273] syz.4.730[8273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.671288][ T8037] veth0_macvtap: entered promiscuous mode [ 126.687827][ T8273] syz.4.730[8273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.692337][ T8037] veth1_macvtap: entered promiscuous mode [ 126.725995][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.736459][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.746323][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.756784][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.766706][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.777154][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.787084][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.797593][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.807504][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.817960][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.827796][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.838295][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.848148][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.858638][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.867521][ T29] audit: type=1326 audit(1728706296.990:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 126.868510][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.891802][ T29] audit: type=1326 audit(1728706296.990:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 126.902237][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.925614][ T29] audit: type=1326 audit(1728706296.990:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 126.941247][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.958780][ T29] audit: type=1326 audit(1728706296.990:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 126.967237][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.996918][ T8277] rdma_op ffff8881143bd980 conn xmit_rdma 0000000000000000 [ 126.999759][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.016904][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.027432][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.037339][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.047791][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.057622][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.068136][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.077967][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.088418][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.098263][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.108694][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.118522][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.128974][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.138876][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.149342][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.160444][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.183915][ T8037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.192724][ T8037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.196857][ T8282] loop2: detected capacity change from 0 to 1024 [ 127.201503][ T8037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.216645][ T8037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.243516][ T8284] netlink: 830 bytes leftover after parsing attributes in process `syz.1.733'. [ 127.265580][ T8284] xt_recent: Unsupported userspace flags (00000042) [ 127.287240][ T8282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.331063][ T8289] syz.1.734[8289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.331207][ T8289] syz.1.734[8289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.343041][ T8289] syz.1.734[8289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.539725][ T8295] syz.1.736[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.554533][ T7723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.567766][ T8295] syz.1.736[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.574863][ T8295] syz.1.736[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.650790][ T8299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.751684][ T8313] netlink: 830 bytes leftover after parsing attributes in process `syz.3.743'. [ 127.766292][ T8313] xt_recent: Unsupported userspace flags (00000042) [ 127.894257][ T8323] loop4: detected capacity change from 0 to 2048 [ 127.913818][ T8323] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.927196][ T8330] loop3: detected capacity change from 0 to 1024 [ 127.941322][ T7657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.951814][ T8323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.971657][ T8330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.009752][ T8345] syz.0.750[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.072279][ T8354] rdma_op ffff88811402e980 conn xmit_rdma 0000000000000000 [ 128.107627][ T8323] loop4: detected capacity change from 2048 to 0 [ 128.118814][ T8350] EXT4-fs (loop4): shut down requested (0) [ 128.138297][ T8350] bio_check_eod: 13 callbacks suppressed [ 128.138313][ T8350] syz.4.747: attempt to access beyond end of device [ 128.138313][ T8350] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 128.157205][ T8350] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.174462][ T8350] EXT4-fs (loop4): I/O error while writing superblock [ 128.181303][ T8350] VFS:Filesystem freeze failed [ 128.186202][ T8330] loop3: detected capacity change from 1024 to 0 [ 128.192940][ T8349] syz.3.748: attempt to access beyond end of device [ 128.192940][ T8349] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 128.221329][ T8349] syz.3.748: attempt to access beyond end of device [ 128.221329][ T8349] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 128.237900][ T8349] syz.3.748: attempt to access beyond end of device [ 128.237900][ T8349] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 128.261744][ T7645] syz-executor: attempt to access beyond end of device [ 128.261744][ T7645] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 128.275534][ T8349] syz.3.748: attempt to access beyond end of device [ 128.275534][ T8349] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 128.297218][ T8349] syz.3.748: attempt to access beyond end of device [ 128.297218][ T8349] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 128.310874][ T7645] syz-executor: attempt to access beyond end of device [ 128.310874][ T7645] loop4: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 128.319926][ T8349] syz.3.748: attempt to access beyond end of device [ 128.319926][ T8349] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 128.335882][ T7645] syz-executor: attempt to access beyond end of device [ 128.335882][ T7645] loop4: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 128.345836][ T8349] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.3.748: unable to read itable block [ 128.363490][ T7645] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 4: comm syz-executor: unable to read itable block [ 128.371111][ T8349] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 128.396954][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.399608][ T7645] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.403876][ T8349] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 128.421373][ T8349] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 128.429752][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.432590][ T7645] EXT4-fs (loop4): I/O error while writing superblock [ 128.436800][ T8349] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.748: mark_inode_dirty error [ 128.443653][ T7645] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 128.455050][ T8349] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 128.468702][ T7645] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.481936][ T7645] EXT4-fs (loop4): I/O error while writing superblock [ 128.488778][ T7645] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 128.502389][ T7645] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.510674][ T7645] EXT4-fs (loop4): I/O error while writing superblock [ 128.514011][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.517747][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 128.540395][ T11] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.545506][ T8349] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.3.748: unable to read itable block [ 128.548735][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 128.570132][ T7645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.580504][ T8349] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 128.585141][ T7645] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.596433][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.597207][ T7645] EXT4-fs (loop4): I/O error while writing superblock [ 128.611482][ T8349] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.3.748: unable to read itable block [ 128.624324][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.631260][ T8349] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 128.671242][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.678118][ T8349] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.748: mark_inode_dirty error [ 128.697723][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.707323][ T8349] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.3.748: unable to read itable block [ 128.735074][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.741938][ T8349] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 128.756194][ T8349] EXT4-fs (loop3): I/O error while writing superblock [ 128.763076][ T8349] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #18: comm syz.3.748: mark_inode_dirty error [ 128.869777][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.892467][ T8372] netlink: 830 bytes leftover after parsing attributes in process `syz.2.757'. [ 128.904214][ T8372] xt_recent: Unsupported userspace flags (00000042) [ 128.951307][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.962044][ T8378] loop2: detected capacity change from 0 to 512 [ 128.969301][ T8378] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.978482][ T8378] EXT4-fs (loop2): #clusters per group too big: 2130739200 [ 129.016903][ T8378] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 129.061692][ T29] audit: type=1326 audit(1728706299.210:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 129.091175][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.094270][ T29] audit: type=1326 audit(1728706299.230:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66fe99dff9 code=0x7ffc0000 [ 129.137745][ T8399] netlink: 3 bytes leftover after parsing attributes in process `syz.2.760'. [ 129.150170][ T8399] 0ªX¹¦À: renamed from caif0 [ 129.156755][ T8399] 0ªX¹¦À: entered allmulticast mode [ 129.162109][ T8399] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 129.194566][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.226693][ T8378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.233103][ T8378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.258083][ T8378] hsr_slave_0: left promiscuous mode [ 129.263962][ T8378] hsr_slave_1: left promiscuous mode [ 129.331170][ T11] bridge_slave_1: left allmulticast mode [ 129.336885][ T11] bridge_slave_1: left promiscuous mode [ 129.342771][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.350721][ T11] bridge_slave_0: left allmulticast mode [ 129.356408][ T11] bridge_slave_0: left promiscuous mode [ 129.362228][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.460933][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.472358][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.482961][ T11] bond0 (unregistering): Released all slaves [ 129.493531][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 129.541234][ T11] hsr_slave_0: left promiscuous mode [ 129.552218][ T11] hsr_slave_1: left promiscuous mode [ 129.562755][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.574050][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.587622][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.595053][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.608221][ T11] veth1_macvtap: left promiscuous mode [ 129.613859][ T11] veth0_macvtap: left promiscuous mode [ 129.619485][ T11] veth1_vlan: left promiscuous mode [ 129.624707][ T11] veth0_vlan: left promiscuous mode [ 129.795231][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.806717][ T11] team0 (unregistering): Port device team_slave_0 removed [ 129.890240][ T8459] netlink: 830 bytes leftover after parsing attributes in process `syz.2.769'. [ 129.901381][ T8459] xt_recent: Unsupported userspace flags (00000042) [ 129.920037][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.927117][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.929871][ T8462] loop0: detected capacity change from 0 to 1024 [ 129.941578][ T8377] bridge_slave_0: entered allmulticast mode [ 129.948821][ T8377] bridge_slave_0: entered promiscuous mode [ 129.955734][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.962843][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.966056][ T8462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.970357][ T8377] bridge_slave_1: entered allmulticast mode [ 129.989470][ T8377] bridge_slave_1: entered promiscuous mode [ 130.059995][ T8299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.095991][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.144862][ T8299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.181346][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.232680][ T8299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.263686][ T8377] team0: Port device team_slave_0 added [ 130.274239][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 130.283457][ T7657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.296148][ T8377] team0: Port device team_slave_1 added [ 130.358866][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.365913][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.392066][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.425198][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.432216][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.458189][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.479048][ T8299] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.517717][ T8299] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.534515][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.572075][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.579169][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.726501][ T8426] bridge_slave_0: entered allmulticast mode [ 130.735685][ T8426] bridge_slave_0: entered promiscuous mode [ 130.762909][ T8507] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 130.770617][ T8507] netlink: 17 bytes leftover after parsing attributes in process `syz.2.779'. [ 130.822014][ T8299] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.909149][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.046230][ T8377] hsr_slave_0: entered promiscuous mode [ 131.157779][ T8377] hsr_slave_1: entered promiscuous mode [ 131.169027][ T8377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.176729][ T8377] Cannot create hsr debugfs directory [ 131.182277][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.189466][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.197494][ T8426] bridge_slave_1: entered allmulticast mode [ 131.203991][ T8426] bridge_slave_1: entered promiscuous mode [ 131.244491][ T8299] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.273294][ T8532] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 131.279870][ T8532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.287412][ T8532] vhci_hcd vhci_hcd.0: Device attached [ 131.293762][ T8533] vhci_hcd: connection closed [ 131.293940][ T3368] vhci_hcd: stop threads [ 131.303035][ T3368] vhci_hcd: release socket [ 131.307470][ T3368] vhci_hcd: disconnect device [ 131.320213][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.357384][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.369353][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.400497][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.426221][ T8426] team0: Port device team_slave_0 added [ 131.442402][ T8426] team0: Port device team_slave_1 added [ 131.471104][ T8550] FAULT_INJECTION: forcing a failure. [ 131.471104][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 131.483860][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.2.784 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 131.494479][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.504542][ T8550] Call Trace: [ 131.507906][ T8550] [ 131.510930][ T8550] dump_stack_lvl+0xf2/0x150 [ 131.515544][ T8550] dump_stack+0x15/0x20 [ 131.519757][ T8550] should_fail_ex+0x223/0x230 [ 131.524510][ T8550] ? __alloc_skb+0x10b/0x310 [ 131.529192][ T8550] should_failslab+0x8f/0xb0 [ 131.533809][ T8550] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 131.539643][ T8550] __alloc_skb+0x10b/0x310 [ 131.544101][ T8550] alloc_skb_with_frags+0x80/0x450 [ 131.549310][ T8550] sock_alloc_send_pskb+0x435/0x4f0 [ 131.554531][ T8550] ? unwind_next_frame+0xa19/0xc80 [ 131.559726][ T8550] ? arch_stack_walk+0xe5/0x150 [ 131.564627][ T8550] __ip6_append_data+0x178a/0x2170 [ 131.569811][ T8550] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.575430][ T8550] ? __rcu_read_unlock+0x4e/0x70 [ 131.580441][ T8550] ? ip6_mtu+0xfb/0x120 [ 131.584640][ T8550] ? __pfx_ip6_mtu+0x10/0x10 [ 131.589430][ T8550] ip6_make_skb+0x28f/0x510 [ 131.593950][ T8550] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.599539][ T8550] udpv6_sendmsg+0x14ac/0x1590 [ 131.604361][ T8550] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.610010][ T8550] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 131.615232][ T8550] inet6_sendmsg+0xaf/0xd0 [ 131.619673][ T8550] __sock_sendmsg+0x8b/0x180 [ 131.624277][ T8550] ____sys_sendmsg+0x312/0x410 [ 131.629080][ T8550] __sys_sendmmsg+0x259/0x500 [ 131.633845][ T8550] __x64_sys_sendmmsg+0x57/0x70 [ 131.638804][ T8550] x64_sys_call+0xa49/0x2d60 [ 131.643411][ T8550] do_syscall_64+0xc9/0x1c0 [ 131.647913][ T8550] ? clear_bhb_loop+0x55/0xb0 [ 131.652615][ T8550] ? clear_bhb_loop+0x55/0xb0 [ 131.657404][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.663336][ T8550] RIP: 0033:0x7f734f47dff9 [ 131.667786][ T8550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.687561][ T8550] RSP: 002b:00007f734e0b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.696063][ T8550] RAX: ffffffffffffffda RBX: 00007f734f636130 RCX: 00007f734f47dff9 [ 131.704079][ T8550] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000009 [ 131.712060][ T8550] RBP: 00007f734e0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 131.720047][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.728026][ T8550] R13: 0000000000000000 R14: 00007f734f636130 R15: 00007ffcbf9afb98 [ 131.736025][ T8550] [ 131.795019][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.802056][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.828116][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.857875][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.865019][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.890939][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.917428][ T11] bridge_slave_1: left allmulticast mode [ 131.923158][ T11] bridge_slave_1: left promiscuous mode [ 131.928871][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.938841][ T11] bridge_slave_0: left allmulticast mode [ 131.944493][ T11] bridge_slave_0: left promiscuous mode [ 131.950294][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.053991][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.072952][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.085310][ T11] bond0 (unregistering): Released all slaves [ 132.096382][ T8557] loop0: detected capacity change from 0 to 1024 [ 132.132425][ T8557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.163383][ T11] hsr_slave_0: left promiscuous mode [ 132.172847][ T11] hsr_slave_1: left promiscuous mode [ 132.181201][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.188654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.196318][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.203877][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.213749][ T11] veth1_macvtap: left promiscuous mode [ 132.219345][ T11] veth0_macvtap: left promiscuous mode [ 132.219382][ T8557] loop0: detected capacity change from 1024 to 0 [ 132.219436][ T11] veth1_vlan: left promiscuous mode [ 132.228996][ T8557] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.788: unable to read itable block [ 132.231337][ T11] veth0_vlan: left promiscuous mode [ 132.237706][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.251067][ T8568] xt_recent: Unsupported userspace flags (00000042) [ 132.254472][ T8557] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 132.257434][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.283703][ T8557] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.788: mark_inode_dirty error [ 132.297355][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.304307][ T8557] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.788: unable to read itable block [ 132.317351][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.324351][ T8557] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.788: unable to read itable block [ 132.337105][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.343910][ T8557] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 132.352737][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.359551][ T8557] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.788: mark_inode_dirty error [ 132.374761][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.382668][ T8557] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.788: unable to read itable block [ 132.395476][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.402416][ T8557] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #18: comm syz.0.788: can't get inode location 18 [ 132.415342][ T8557] EXT4-fs (loop0): I/O error while writing superblock [ 132.422902][ T8557] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.788: unable to read itable block [ 132.466361][ T11] team0 (unregistering): Port device team_slave_1 removed [ 132.476810][ T11] team0 (unregistering): Port device team_slave_0 removed [ 132.524225][ T8426] hsr_slave_0: entered promiscuous mode [ 132.530713][ T8426] hsr_slave_1: entered promiscuous mode [ 132.536823][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.544801][ T8426] Cannot create hsr debugfs directory [ 132.552614][ T8566] netlink: 830 bytes leftover after parsing attributes in process `syz.1.790'. [ 132.774808][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 132.774825][ T29] audit: type=1326 audit(1728706302.920:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.838181][ T29] audit: type=1326 audit(1728706302.980:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.861635][ T29] audit: type=1326 audit(1728706302.980:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.885006][ T29] audit: type=1326 audit(1728706302.980:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.908367][ T29] audit: type=1326 audit(1728706302.980:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.931805][ T29] audit: type=1326 audit(1728706302.980:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.955123][ T29] audit: type=1326 audit(1728706302.980:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 132.978447][ T29] audit: type=1326 audit(1728706302.980:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 133.001805][ T29] audit: type=1326 audit(1728706302.990:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 133.025177][ T29] audit: type=1326 audit(1728706302.990:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 133.129482][ T8377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.147048][ T8377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.169762][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.189662][ T8377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.220236][ T8377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.242510][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.294485][ T8642] loop2: detected capacity change from 0 to 1024 [ 133.313219][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.325030][ T8642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.362354][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 133.377225][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.387838][ T8642] loop2: detected capacity change from 1024 to 0 [ 133.395141][ T8642] bio_check_eod: 269 callbacks suppressed [ 133.395159][ T8642] syz.2.799: attempt to access beyond end of device [ 133.395159][ T8642] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 133.415031][ T8642] syz.2.799: attempt to access beyond end of device [ 133.415031][ T8642] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 133.428688][ T8642] syz.2.799: attempt to access beyond end of device [ 133.428688][ T8642] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 133.442161][ T8642] syz.2.799: attempt to access beyond end of device [ 133.442161][ T8642] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 133.459729][ T8642] syz.2.799: attempt to access beyond end of device [ 133.459729][ T8642] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 133.477255][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.490826][ T8642] syz.2.799: attempt to access beyond end of device [ 133.490826][ T8642] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 133.504215][ T8642] syz.2.799: attempt to access beyond end of device [ 133.504215][ T8642] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 133.520130][ T8642] syz.2.799: attempt to access beyond end of device [ 133.520130][ T8642] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 133.535184][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.544044][ T8642] syz.2.799: attempt to access beyond end of device [ 133.544044][ T8642] loop2: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 133.560893][ T8642] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.2.799: unable to read itable block [ 133.573654][ T8642] syz.2.799: attempt to access beyond end of device [ 133.573654][ T8642] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 133.586953][ T8642] buffer_io_error: 58 callbacks suppressed [ 133.587025][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.590127][ T8667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 133.592996][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.601054][ T8667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.601146][ T8667] vhci_hcd vhci_hcd.0: Device attached [ 133.626377][ T8668] vhci_hcd: connection closed [ 133.627411][ T8642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: IO failure [ 133.627824][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.635013][ T3368] vhci_hcd: stop threads [ 133.640915][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.649145][ T3368] vhci_hcd: release socket [ 133.649156][ T3368] vhci_hcd: disconnect device [ 133.669422][ T8642] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #18: comm syz.2.799: mark_inode_dirty error [ 133.681893][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.690213][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.697108][ T8642] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.2.799: unable to read itable block [ 133.698040][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.709872][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.716935][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.725128][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.725202][ T8642] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.2.799: unable to read itable block [ 133.752308][ T8614] bridge_slave_0: entered allmulticast mode [ 133.758804][ T8614] bridge_slave_0: entered promiscuous mode [ 133.765110][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.774495][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.781586][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.788947][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.795733][ T8642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: IO failure [ 133.804585][ T8614] bridge_slave_1: entered allmulticast mode [ 133.811271][ T8614] bridge_slave_1: entered promiscuous mode [ 133.828413][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.835595][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.837517][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.846671][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.858153][ T4818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.868783][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.875621][ T8642] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #18: comm syz.2.799: mark_inode_dirty error [ 133.890996][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.900327][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.907712][ T8642] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.2.799: unable to read itable block [ 133.922998][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.931537][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.938404][ T8642] EXT4-fs error (device loop2): ext4_get_max_inline_size:116: inode #18: comm syz.2.799: can't get inode location 18 [ 133.951101][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 133.954767][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.983304][ T8642] EXT4-fs (loop2): I/O error while writing superblock [ 133.995808][ T8642] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.2.799: unable to read itable block [ 133.996078][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.009161][ T8642] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 134.068667][ T8614] team0: Port device team_slave_0 added [ 134.083165][ T11] bridge_slave_1: left allmulticast mode [ 134.088919][ T11] bridge_slave_1: left promiscuous mode [ 134.094615][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.102502][ T11] bridge_slave_0: left allmulticast mode [ 134.108219][ T11] bridge_slave_0: left promiscuous mode [ 134.113880][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.250717][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.286245][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.300800][ T11] bond0 (unregistering): Released all slaves [ 134.308769][ T8426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.317729][ T8426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.329368][ T8614] team0: Port device team_slave_1 added [ 134.353790][ T8426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.377316][ T8426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.427335][ T11] hsr_slave_0: left promiscuous mode [ 134.582276][ T11] hsr_slave_1: left promiscuous mode [ 134.588327][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.595759][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.606466][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.614023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.683995][ T11] veth1_macvtap: left promiscuous mode [ 134.690152][ T11] veth0_macvtap: left promiscuous mode [ 134.695757][ T11] veth1_vlan: left promiscuous mode [ 134.701100][ T11] veth0_vlan: left promiscuous mode [ 134.827594][ T11] team0 (unregistering): Port device team_slave_1 removed [ 134.840229][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.903712][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.910767][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.936756][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.951449][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.958470][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.984446][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.012500][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.050339][ T8614] hsr_slave_0: entered promiscuous mode [ 135.056521][ T8614] hsr_slave_1: entered promiscuous mode [ 135.064781][ T8614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.072524][ T8614] Cannot create hsr debugfs directory [ 135.188926][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.279292][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.328160][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.335230][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.357327][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.364456][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.403984][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.424049][ T8716] chnl_net:caif_netlink_parms(): no params data found [ 135.453288][ T8797] loop1: detected capacity change from 0 to 512 [ 135.475695][ T8797] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.495400][ T8797] EXT4-fs (loop1): mount failed [ 135.505421][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.535382][ T8377] veth0_vlan: entered promiscuous mode [ 135.569898][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.576985][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.591439][ T8716] bridge_slave_0: entered allmulticast mode [ 135.598810][ T8716] bridge_slave_0: entered promiscuous mode [ 135.613123][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.624855][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.632097][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.641881][ T8716] bridge_slave_1: entered allmulticast mode [ 135.648628][ T8716] bridge_slave_1: entered promiscuous mode [ 135.656291][ T8377] veth1_vlan: entered promiscuous mode [ 135.676941][ T8716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.687745][ T8716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.705918][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.725774][ T8716] team0: Port device team_slave_0 added [ 135.732802][ T8716] team0: Port device team_slave_1 added [ 135.741618][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.770359][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.777385][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.803446][ T8716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.822333][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.829425][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.855468][ T8716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.878394][ T8377] veth0_macvtap: entered promiscuous mode [ 135.898342][ T8716] hsr_slave_0: entered promiscuous mode [ 135.904375][ T8716] hsr_slave_1: entered promiscuous mode [ 135.910378][ T8716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.918008][ T8716] Cannot create hsr debugfs directory [ 135.925006][ T8614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.940783][ T8377] veth1_macvtap: entered promiscuous mode [ 135.952886][ T8614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.964493][ T11] bridge_slave_1: left allmulticast mode [ 135.970680][ T11] bridge_slave_1: left promiscuous mode [ 135.976381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.984338][ T11] bridge_slave_0: left allmulticast mode [ 135.990069][ T11] bridge_slave_0: left promiscuous mode [ 135.995761][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.079991][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.090677][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.101168][ T11] bond0 (unregistering): Released all slaves [ 136.118135][ T8614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.135613][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.146093][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.155961][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.166438][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.176292][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.186783][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.196651][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.207078][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.217029][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.227502][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.237328][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.241088][ T8835] xt_recent: Unsupported userspace flags (00000042) [ 136.247975][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.266112][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.274838][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.285300][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.295128][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.305618][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.315518][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.325961][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.335789][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.346231][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.356057][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.366550][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.376445][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.386951][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.397960][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.405345][ T8614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.423413][ T8834] netlink: 830 bytes leftover after parsing attributes in process `syz.1.811'. [ 136.436859][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.444437][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.457627][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.465029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.474523][ T11] veth1_macvtap: left promiscuous mode [ 136.480082][ T11] veth0_macvtap: left promiscuous mode [ 136.485604][ T11] veth1_vlan: left promiscuous mode [ 136.490940][ T11] veth0_vlan: left promiscuous mode [ 136.579983][ T11] team0 (unregistering): Port device team_slave_1 removed [ 136.591517][ T11] team0 (unregistering): Port device team_slave_0 removed [ 136.634879][ T8377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.643652][ T8377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.652497][ T8377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.661291][ T8377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.787520][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.823084][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.861095][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.868248][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.910922][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.918026][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.990391][ T8426] veth0_vlan: entered promiscuous mode [ 137.069482][ T8426] veth1_vlan: entered promiscuous mode [ 137.118912][ T8426] veth0_macvtap: entered promiscuous mode [ 137.131536][ T8426] veth1_macvtap: entered promiscuous mode [ 137.148354][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.158993][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.168895][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.179439][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.189306][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.199750][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.209645][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.220114][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.229936][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.240370][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.250535][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.261226][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.465408][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.473975][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.484461][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.494315][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.504763][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.514634][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.525070][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.534968][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.545442][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.555282][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.565732][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.575615][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.586061][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.600214][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.630583][ T8426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.639508][ T8426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.648312][ T8426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.657019][ T8426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.702909][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.744058][ T8716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.771747][ T8716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.771865][ T8900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 137.813933][ T8716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.878515][ T8716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.894312][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 137.894324][ T29] audit: type=1326 audit(1728706308.040:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 137.929075][ T8914] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 137.935642][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.940948][ T29] audit: type=1326 audit(1728706308.040:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 137.943241][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 137.966399][ T29] audit: type=1326 audit(1728706308.040:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc52eb2ff4a code=0x7ffc0000 [ 137.966426][ T29] audit: type=1326 audit(1728706308.040:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc52eb2c990 code=0x7ffc0000 [ 137.966451][ T29] audit: type=1326 audit(1728706308.040:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc52eb2cadf code=0x7ffc0000 [ 137.985485][ T8918] vhci_hcd: connection closed [ 138.053247][ T29] audit: type=1326 audit(1728706308.120:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc52eb2cc8a code=0x7ffc0000 [ 138.056927][ T8921] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 138.058024][ T29] audit: type=1326 audit(1728706308.120:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 138.081030][ T8921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.081227][ T8921] vhci_hcd vhci_hcd.0: Device attached [ 138.087646][ T29] audit: type=1326 audit(1728706308.120:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52eb2dff9 code=0x7ffc0000 [ 138.147310][ T29] audit: type=1326 audit(1728706308.190:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f9e8dff9 code=0x7ffc0000 [ 138.153002][ T8923] vhci_hcd: connection closed [ 138.170680][ T29] audit: type=1326 audit(1728706308.190:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f9e8dff9 code=0x7ffc0000 [ 138.206941][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.218298][ T165] vhci_hcd: stop threads [ 138.222574][ T165] vhci_hcd: release socket [ 138.227081][ T165] vhci_hcd: disconnect device [ 138.240845][ T165] vhci_hcd: stop threads [ 138.245120][ T165] vhci_hcd: release socket [ 138.249612][ T165] vhci_hcd: disconnect device [ 138.267713][ T3344] vhci_hcd: vhci_device speed not set [ 138.268361][ T8932] loop3: detected capacity change from 0 to 512 [ 138.277278][ T8614] veth0_vlan: entered promiscuous mode [ 138.284481][ T8932] EXT4-fs: Ignoring removed i_version option [ 138.290989][ T8932] EXT4-fs: Ignoring removed nobh option [ 138.296559][ T3617] vhci_hcd: vhci_device speed not set [ 138.298019][ T8614] veth1_vlan: entered promiscuous mode [ 138.308074][ T8932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.320395][ T8932] EXT4-fs (loop3): 1 truncate cleaned up [ 138.323481][ T8716] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.328212][ T8932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.342475][ T8614] veth0_macvtap: entered promiscuous mode [ 138.352960][ T8932] EXT4-fs (loop3): shut down requested (0) [ 138.358868][ T8614] veth1_macvtap: entered promiscuous mode [ 138.366845][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.373914][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.382734][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.389824][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.401552][ T8932] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 138.410457][ T8716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.420857][ T8716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.440393][ T8426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.447002][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.460058][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.469886][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.480419][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.490274][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.500711][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.510532][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.520971][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.531321][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.542097][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.552084][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.562634][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.572519][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.583022][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.594145][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.606670][ T8936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.607002][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.626658][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.636541][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.647033][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.656906][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.667351][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.677185][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.687651][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.697481][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.707912][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.717795][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.728227][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.738112][ T8614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.748620][ T8614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.759657][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.789179][ T8614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.798094][ T8614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.806821][ T8614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.815608][ T8614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.840444][ T8947] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 138.848299][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.827'. [ 138.859804][ T8947] team0: entered promiscuous mode [ 138.864903][ T8947] team_slave_0: entered promiscuous mode [ 138.870727][ T8947] team_slave_1: entered promiscuous mode [ 138.876667][ T8947] team0: entered allmulticast mode [ 138.881853][ T8947] team_slave_0: entered allmulticast mode [ 138.887673][ T8947] team_slave_1: entered allmulticast mode [ 138.897805][ T8947] bridge0: port 3(team0) entered blocking state [ 138.904122][ T8947] bridge0: port 3(team0) entered disabled state [ 138.911655][ T8947] bridge0: port 3(team0) entered blocking state [ 138.918018][ T8947] bridge0: port 3(team0) entered forwarding state [ 138.935097][ T8716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.942115][ T8953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.011487][ T8961] loop3: detected capacity change from 0 to 512 [ 139.018603][ T8961] EXT4-fs: Ignoring removed i_version option [ 139.024624][ T8961] EXT4-fs: Ignoring removed nobh option [ 139.039198][ T8961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.049310][ T8963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.065009][ T8961] EXT4-fs (loop3): 1 truncate cleaned up [ 139.117718][ T8961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.159434][ T8961] EXT4-fs (loop3): shut down requested (0) [ 139.162566][ T8716] veth0_vlan: entered promiscuous mode [ 139.174393][ T8978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.836'. [ 139.189725][ T8716] veth1_vlan: entered promiscuous mode [ 139.191015][ T8961] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 139.196182][ T8978] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 139.214893][ T8426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.219761][ T8978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.271486][ T8716] veth0_macvtap: entered promiscuous mode [ 139.282371][ T8716] veth1_macvtap: entered promiscuous mode [ 139.292748][ T8982] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 139.297336][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.299265][ T8982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.299337][ T8982] vhci_hcd vhci_hcd.0: Device attached [ 139.309895][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.332599][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.343117][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.352958][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.361512][ T8985] vhci_hcd: connection closed [ 139.363427][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.377976][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.388520][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.398474][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.409140][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.419391][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.429997][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.434028][ T3368] vhci_hcd: stop threads [ 139.439912][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.439926][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.439941][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.439976][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.444189][ T3368] vhci_hcd: release socket [ 139.444240][ T3368] vhci_hcd: disconnect device [ 139.457324][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.502472][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.512958][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.522868][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.533542][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.543433][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.554212][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.560217][ T8999] loop4: detected capacity change from 0 to 512 [ 139.564202][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.580813][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.590638][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.601128][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.610964][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.621751][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.631646][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.639494][ T8999] EXT4-fs: Ignoring removed orlov option [ 139.643495][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.657856][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.668314][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.671601][ T8999] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 139.682447][ T9003] loop1: detected capacity change from 0 to 512 [ 139.694211][ T9003] EXT4-fs: Ignoring removed i_version option [ 139.700275][ T9003] EXT4-fs: Ignoring removed nobh option [ 139.706885][ T9003] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.717868][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.719853][ T9003] EXT4-fs (loop1): 1 truncate cleaned up [ 139.737866][ T8999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e12c, mo2=0002] [ 139.745880][ T8999] System zones: 1-12 [ 139.750338][ T9003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.767844][ T8999] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.774232][ T8999] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.842: Inode bitmap for bg 0 marked uninitialized [ 139.787958][ T8716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.796732][ T8716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.804155][ T8999] EXT4-fs (loop4): Remounting filesystem read-only [ 139.805543][ T8716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.818770][ T8999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.821141][ T8716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.833226][ T8999] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 139.847857][ T9003] EXT4-fs (loop1): shut down requested (0) [ 139.848844][ T8999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.866881][ T9003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 139.867486][ T9011] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.848'. [ 139.927930][ T7885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.021717][ T9023] bpf_get_probe_write_proto: 2 callbacks suppressed [ 140.021736][ T9023] syz.4.853[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.029832][ T9023] syz.4.853[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.043364][ T9023] syz.4.853[9023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.098692][ T9023] rdma_op ffff88811ff14580 conn xmit_rdma 0000000000000000 [ 140.236726][ T9040] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 140.244997][ T9040] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 140.266228][ T9041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9041 comm=syz.4.858 [ 140.926319][ T9046] loop3: detected capacity change from 0 to 512 [ 140.926739][ T9045] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 140.939229][ T9045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.947069][ T9045] vhci_hcd vhci_hcd.0: Device attached [ 140.956419][ T9046] EXT4-fs: Ignoring removed i_version option [ 140.962463][ T9046] EXT4-fs: Ignoring removed nobh option [ 140.970062][ T9047] vhci_hcd: connection closed [ 140.970270][ T4818] vhci_hcd: stop threads [ 140.970776][ T9046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.974962][ T4818] vhci_hcd: release socket [ 140.993475][ T4818] vhci_hcd: disconnect device [ 141.000594][ T9046] EXT4-fs (loop3): 1 truncate cleaned up [ 141.006621][ T9046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.024103][ T9046] EXT4-fs (loop3): shut down requested (0) [ 141.031984][ T9046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 141.051047][ T8426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.774552][ T9072] FAULT_INJECTION: forcing a failure. [ 141.774552][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.787685][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.1.870 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 141.798304][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.808401][ T9072] Call Trace: [ 141.811689][ T9072] [ 141.814638][ T9072] dump_stack_lvl+0xf2/0x150 [ 141.819301][ T9072] dump_stack+0x15/0x20 [ 141.823517][ T9072] should_fail_ex+0x223/0x230 [ 141.828309][ T9072] should_fail+0xb/0x10 [ 141.832485][ T9072] should_fail_usercopy+0x1a/0x20 [ 141.837616][ T9072] _copy_from_user+0x1e/0xd0 [ 141.842221][ T9072] get_user_ifreq+0x8c/0x160 [ 141.846835][ T9072] sock_do_ioctl+0xc6/0x260 [ 141.851361][ T9072] sock_ioctl+0x46a/0x640 [ 141.855709][ T9072] ? __pfx_sock_ioctl+0x10/0x10 [ 141.860618][ T9072] __se_sys_ioctl+0xcd/0x140 [ 141.865327][ T9072] __x64_sys_ioctl+0x43/0x50 [ 141.870029][ T9072] x64_sys_call+0x15cc/0x2d60 [ 141.874727][ T9072] do_syscall_64+0xc9/0x1c0 [ 141.879312][ T9072] ? clear_bhb_loop+0x55/0xb0 [ 141.884039][ T9072] ? clear_bhb_loop+0x55/0xb0 [ 141.888801][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.894776][ T9072] RIP: 0033:0x7fc52eb2dff9 [ 141.899257][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.918872][ T9072] RSP: 002b:00007fc52d7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.927300][ T9072] RAX: ffffffffffffffda RBX: 00007fc52ece5f80 RCX: 00007fc52eb2dff9 [ 141.932775][ T9074] loop2: detected capacity change from 0 to 512 [ 141.935323][ T9072] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000006 [ 141.935341][ T9072] RBP: 00007fc52d7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.957513][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.965600][ T9072] R13: 0000000000000000 R14: 00007fc52ece5f80 R15: 00007ffdf296a8d8 [ 141.973665][ T9072] [ 141.984947][ T9074] EXT4-fs: Ignoring removed i_version option [ 141.991114][ T9074] EXT4-fs: Ignoring removed nobh option [ 142.061885][ T9074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.117368][ T9074] EXT4-fs (loop2): 1 truncate cleaned up [ 142.134064][ T9074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.180332][ T9074] EXT4-fs (loop2): shut down requested (0) [ 142.206408][ T9074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 142.224334][ T9086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.876'. [ 142.241009][ T9086] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.876'. [ 142.250699][ T9086] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.876'. [ 142.259795][ T9086] netlink: 640 bytes leftover after parsing attributes in process `syz.3.876'. [ 142.273782][ T9088] loop1: detected capacity change from 0 to 1024 [ 142.286185][ T8716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.297817][ T9086] netlink: 'syz.3.876': attribute type 11 has an invalid length. [ 142.342545][ T9091] syz.2.878[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.342646][ T9091] syz.2.878[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.460246][ T9091] syz.2.878[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.474296][ T9091] rdma_op ffff888114e54d80 conn xmit_rdma 0000000000000000 [ 142.522639][ T9088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.562716][ T9097] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 142.570978][ T9097] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 142.911845][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 142.911862][ T29] audit: type=1326 audit(1728706312.920:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 142.941407][ T29] audit: type=1326 audit(1728706312.920:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 142.964713][ T29] audit: type=1326 audit(1728706312.920:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 142.988150][ T29] audit: type=1326 audit(1728706312.920:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.011794][ T29] audit: type=1326 audit(1728706312.920:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.035362][ T29] audit: type=1326 audit(1728706312.920:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.058678][ T29] audit: type=1326 audit(1728706312.920:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.082016][ T29] audit: type=1326 audit(1728706312.920:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.105307][ T29] audit: type=1326 audit(1728706312.920:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.128610][ T29] audit: type=1326 audit(1728706312.920:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a9b7dff9 code=0x7ffc0000 [ 143.173623][ T7885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.201494][ T9101] usb usb8: check_ctrlrecip: process 9101 (syz.2.882) requesting ep 01 but needs 81 [ 143.211724][ T9101] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 144.706878][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.716091][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.250888][ T9141] Illegal XDP return value 4294967274 on prog (id 822) dev N/A, expect packet loss! [ 145.448986][ T9153] loop2: detected capacity change from 0 to 1024 [ 145.480909][ T9153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.000563][ T8716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.099707][ T9165] syz.2.905[9165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.099810][ T9165] syz.2.905[9165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.129435][ T9165] syz.2.905[9165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.160320][ T9165] rdma_op ffff888110d48d80 conn xmit_rdma 0000000000000000 [ 146.251535][ T9169] loop2: detected capacity change from 0 to 256 [ 146.287833][ T3335] ================================================================== [ 146.288226][ T9169] msdos: Bad value for 'gid' [ 146.295943][ T3335] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 146.300579][ T9169] msdos: Bad value for 'gid' [ 146.309155][ T3335] [ 146.309162][ T3335] read-write to 0xffff8881004c1830 of 8 bytes by task 9169 on cpu 0: [ 146.309183][ T3335] delete_from_page_cache_batch+0x4f3/0x700 [ 146.330075][ T3335] truncate_inode_pages_range+0x1c5/0x6b0 [ 146.335819][ T3335] truncate_inode_pages+0x24/0x30 [ 146.340867][ T3335] blkdev_flush_mapping+0xa5/0x1a0 [ 146.346017][ T3335] bdev_release+0x2f9/0x420 [ 146.350559][ T3335] blkdev_release+0x15/0x20 [ 146.355083][ T3335] __fput+0x17a/0x6d0 [ 146.359175][ T3335] __fput_sync+0x43/0x60 [ 146.363444][ T3335] __se_sys_close+0xf9/0x1a0 [ 146.368062][ T3335] __x64_sys_close+0x1f/0x30 [ 146.372679][ T3335] x64_sys_call+0x25cb/0x2d60 [ 146.377390][ T3335] do_syscall_64+0xc9/0x1c0 [ 146.381919][ T3335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.387847][ T3335] [ 146.390183][ T3335] read to 0xffff8881004c1830 of 8 bytes by task 3335 on cpu 1: [ 146.397740][ T3335] nr_blockdev_pages+0x7c/0xd0 [ 146.402524][ T3335] si_meminfo+0x87/0xd0 [ 146.406701][ T3335] update_defense_level+0x49/0x5b0 [ 146.411819][ T3335] defense_work_handler+0x1f/0x80 [ 146.416860][ T3335] process_scheduled_works+0x483/0x9a0 [ 146.422339][ T3335] worker_thread+0x51d/0x6f0 [ 146.426931][ T3335] kthread+0x1d1/0x210 [ 146.430996][ T3335] ret_from_fork+0x4b/0x60 [ 146.435408][ T3335] ret_from_fork_asm+0x1a/0x30 [ 146.440202][ T3335] [ 146.442530][ T3335] value changed: 0x0000000000000009 -> 0x0000000000000000 [ 146.449629][ T3335] [ 146.451944][ T3335] Reported by Kernel Concurrency Sanitizer on: [ 146.458100][ T3335] CPU: 1 UID: 0 PID: 3335 Comm: kworker/1:2 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 146.468868][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.478945][ T3335] Workqueue: events_long defense_work_handler [ 146.485030][ T3335] ==================================================================