last executing test programs: 9.386504203s ago: executing program 3 (id=6136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8002) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.370048954s ago: executing program 3 (id=6138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '(&:'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '+'}, {0x20, ',,,%{-'}, {0x20, '\x00'}]}, 0xff45) 8.509140644s ago: executing program 3 (id=6164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300), 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '(&:'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '+'}, {0x20, ',,,%{-'}, {0x20, '\x00'}]}, 0xff45) 7.592185068s ago: executing program 3 (id=6180): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10) r10 = io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0x0, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x1060000, &(0x7f0000000200)={[{@huge_never}], [], 0x39}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400081c0012f098636f6e64000000000c000780980007000100000007235b1f3fbf1d7b832af775ad842285b462fc73ced37354cf3d1ff26bfb262103b82fe8bbd75f0f1484410e74f17c743f4822c92a2e4b6445d737e0bbc1db1fabb148899e0d128be5e699207a9bdfd2463b34ae05b17821be94f4b24462cb6a9b9dd6bdad855589ea72d9ad313de7a0728c475b6c8174", @ANYRESOCT], 0x3c}}, 0x0) 6.60563542s ago: executing program 3 (id=6201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.546344515s ago: executing program 3 (id=6203): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000040)='./bus\x00', 0x141a42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0}) ptrace(0x10, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = gettid() open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x14d042, 0xa) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) close(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 2.695102691s ago: executing program 1 (id=6264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 2.599983419s ago: executing program 1 (id=6269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 2.504272218s ago: executing program 1 (id=6270): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1808008, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x6, 0x58f, &(0x7f0000000e80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x80, 0x80004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x73db}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4c5, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 1.978180177s ago: executing program 0 (id=6276): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) dup3(r1, r0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1}, 0x0) 1.123833886s ago: executing program 1 (id=6288): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) (fail_nth: 3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x20040880, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, 0x0, 0x0, 0x7000, 0x0, 0x3) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r5, 0x3, 0x1000, 0x10000) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000800)={0x0, 0x2000000000001, 0x4}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000001380)) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[], 0x0) 1.119158046s ago: executing program 0 (id=6289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 1.056122092s ago: executing program 0 (id=6290): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001200), 0x88000, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000013c0)={0x0, 0xfffffffffffffffd, 0x1000, 0x15, @buffer={0x0, 0xb8, &(0x7f0000001240)=""/184}, &(0x7f00000022c0)="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", &(0x7f0000001300)=""/125, 0xfff, 0x10031, 0x2, &(0x7f0000001380)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000004340)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a5a4c00000000bfa20000ca48000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES16=r3, @ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="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", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000011c0)) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xb}, @private, 0x0, "66c5aff8a7eb3af1f6cec2e7420000000800", 0x4, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x3f6, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 718.123313ms ago: executing program 1 (id=6295): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x7a680000) 676.607528ms ago: executing program 4 (id=6297): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0"]) (fail_nth: 3) write$cgroup_int(r0, &(0x7f0000000040)=0xfffffffffffffffb, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 674.821787ms ago: executing program 2 (id=6298): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/108) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000307"], 0x20) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000009060000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000200000d0000000000000000010000000000000002000000000000000000000200000000000000000000005f00"], 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000019780)={@val={0x2000, 0x4}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x76, 0x0, @opaque="c1af346bf2de7f86ff43749ad38c0785d5f70ed7bde22449278e71d6edbd4e1daf32097b2e5b77b64e6a3dd591c381a8a51dc205051b4931a35cb04d78ddbb62d5c228a5f7dae0a2397acac00e06c2d17d9b2a6d60383123dcdb9e658f513aad8ec2ff5aa76acb24c945da132f47"}}}}}}, 0x9c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r5 = openat$selinux_mls(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x2) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x1403, 0x100, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80000}, 0x4884) (rerun: 32) 405.452932ms ago: executing program 1 (id=6299): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) dup3(r1, r0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1}, 0x0) 272.370315ms ago: executing program 4 (id=6300): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x24}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 271.596525ms ago: executing program 4 (id=6301): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0"]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) times(0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xfffffffffffffffb, 0x12) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 269.153135ms ago: executing program 2 (id=6302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@dioread_lock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7a}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@user_xattr}, {@errors_remount}]}, 0xfe, 0x56b, &(0x7f00000003c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10e, &(0x7f0000000300)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@oldalloc}]}, 0x1, 0x452, &(0x7f0000000780)="$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") rename(&(0x7f0000000300)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), &(0x7f0000000c00)=@v2={0x5, 0x1, 0xd, 0x4, 0x23, "0fcfbe46c4e9d33c5ca28f276626ff0c6bb86dce544d2ec9f13ea7192368e6b4515def"}, 0x2c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_clone(0x4023480, 0x0, 0x8637, 0x0, 0x0, 0x0) 253.580196ms ago: executing program 0 (id=6303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000340)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x4, 0x8}, {0x6, 0x0, 0x0, 0x8}]}) 222.729129ms ago: executing program 2 (id=6304): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb15, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 199.073611ms ago: executing program 2 (id=6305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88004, &(0x7f0000000380)={[{@noload}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nogrpid}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xf804, 0x10100, 0x7ffd}, &(0x7f0000000040), &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) syz_io_uring_setup(0x7dde, &(0x7f0000000280)={0x0, 0x696e, 0x8, 0x3, 0x0, 0x0, r2}, 0x0, &(0x7f0000000480)) io_uring_enter(r2, 0x769b, 0x0, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10) lstat(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280000500030004"], 0x48}}, 0x40000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f0000000240)={0x4, 0x0, 0x5, 0x0, 0x3, 0x5}) 183.351333ms ago: executing program 0 (id=6306): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 86.050612ms ago: executing program 4 (id=6307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) recvmmsg(r3, &(0x7f0000000b40)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/97, 0x61}], 0x1, &(0x7f0000000280)=""/38, 0x26}, 0x7}, {{&(0x7f00000005c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c00)=""/199, 0xc7}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000008c0)=""/49, 0x31}], 0x3, &(0x7f0000000940)=""/93, 0x5d}, 0x100}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/16, 0x10}], 0x2, &(0x7f0000000b00)=""/48, 0x30}, 0xb7e}], 0x3, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x20000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xffffffffffffff19}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x20000) 85.638652ms ago: executing program 4 (id=6308): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x63) (fail_nth: 3) 3.607539ms ago: executing program 0 (id=6309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = memfd_create(&(0x7f0000000500)='+\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x90a\xac', 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)='1', 0x1}], 0x1, 0x0, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffffa, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r5}, 0x10) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.084209ms ago: executing program 4 (id=6310): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) socket$rxrpc(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000008, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x18, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000003200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000000100)=""/148, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x1, r4, 0xfffffdfd}) 2.267849ms ago: executing program 2 (id=6311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=6312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x20000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): ing state [ 380.958394][T29031] loop1: detected capacity change from 0 to 512 [ 380.965143][T24756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.975595][T27546] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.982678][T27546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.992187][T29031] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 381.014655][T29031] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 381.048107][T29031] EXT4-fs (loop1): mount failed [ 381.139398][T29053] loop3: detected capacity change from 0 to 512 [ 381.166187][T28858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.172291][T29059] loop0: detected capacity change from 0 to 1024 [ 381.184117][T29056] loop1: detected capacity change from 0 to 512 [ 381.213654][T29053] syzkaller0: entered allmulticast mode [ 381.236116][T29053] syzkaller0 (unregistering): left allmulticast mode [ 381.265245][T29070] futex_wake_op: syz.0.5730 tries to shift op by 32; fix this program [ 381.297691][T29056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.445835][T28858] veth0_vlan: entered promiscuous mode [ 381.458789][T28858] veth1_vlan: entered promiscuous mode [ 381.488886][T28858] veth0_macvtap: entered promiscuous mode [ 381.497022][T28858] veth1_macvtap: entered promiscuous mode [ 381.509762][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.520240][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.530128][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.540560][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.550400][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.561148][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.571193][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.581716][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.590567][T29112] loop3: detected capacity change from 0 to 1024 [ 381.591564][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.608246][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.608680][T29112] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 381.618147][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.618209][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.618223][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.627950][T29112] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 381.638726][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.638742][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.638757][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.698730][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.702550][T29112] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 381.709261][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.728824][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.739254][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.749197][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.759761][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.769646][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.774647][T29112] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.5735: unexpected bad inode w/o EXT4_IGET_BAD [ 381.780059][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.780076][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.780089][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.780103][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.833874][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.836725][T29112] EXT4-fs (loop3): no journal found [ 381.843678][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.843694][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.848965][T29112] EXT4-fs (loop3): can't get journal size [ 381.859317][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.885360][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.895198][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.905696][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.915577][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.916447][T29112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.926007][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.926023][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.958737][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.968629][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.976502][T29112] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5735: bg 0: block 32: padding at end of block bitmap is not set [ 381.979085][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.984382][T28858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.011857][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.022338][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.032218][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.042629][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.052440][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.062888][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.072720][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.083175][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.093224][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.104046][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.114002][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.124427][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.134235][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.144659][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.154583][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.165080][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.174905][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.185341][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.195204][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.205670][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.215500][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.225989][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.235942][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.246389][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.256209][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.266641][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.276476][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.286933][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.296764][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.307214][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.317044][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.327502][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.337328][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.347780][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.357597][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.368274][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.378202][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.392571][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.402761][T28858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.413232][T28858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.423502][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.424141][T28858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.450473][T28858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.459272][T28858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.468205][T28858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.468274][T28858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.504678][T29136] loop3: detected capacity change from 0 to 2048 [ 382.640841][T29136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.777613][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.843986][T29173] loop0: detected capacity change from 0 to 1024 [ 382.864069][T29175] loop4: detected capacity change from 0 to 512 [ 382.874924][T29175] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.899232][T29173] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 382.904790][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.909134][T29173] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 382.923166][T29175] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.5746: iget: bad i_size value: -6917529027641081756 [ 382.930800][T29177] loop3: detected capacity change from 0 to 512 [ 382.949417][T29175] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.5746: couldn't read orphan inode 17 (err -117) [ 382.951750][T29173] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 382.977185][T29173] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.5745: unexpected bad inode w/o EXT4_IGET_BAD [ 382.990670][T29173] EXT4-fs (loop0): no journal found [ 382.995885][T29173] EXT4-fs (loop0): can't get journal size [ 382.995957][T29177] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.009532][T29183] pim6reg1: entered promiscuous mode [ 383.016041][T29183] pim6reg1: entered allmulticast mode [ 383.025704][T29173] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5745: bg 0: block 32: padding at end of block bitmap is not set [ 383.057560][T29177] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.5748: iget: bad i_size value: -6917529027641081756 [ 383.085897][T29196] syz.4.5749[29196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.085976][T29196] syz.4.5749[29196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.087412][T29197] loop0: detected capacity change from 0 to 512 [ 383.098714][T29196] syz.4.5749[29196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.119085][T29177] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5748: couldn't read orphan inode 17 (err -117) [ 383.134531][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 383.134544][ T29] audit: type=1400 audit(383.171:26499): avc: denied { create } for pid=29193 comm="syz.0.5750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.173704][ T29] audit: type=1400 audit(383.201:26500): avc: denied { create } for pid=29193 comm="syz.0.5750" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.201841][ T29] audit: type=1400 audit(383.231:26501): avc: denied { read } for pid=29200 comm="syz.1.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.204836][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5751'. [ 383.225371][ T29] audit: type=1400 audit(383.231:26502): avc: denied { map } for pid=29193 comm="syz.0.5750" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.235949][T29197] syzkaller0: entered allmulticast mode [ 383.254468][ T29] audit: type=1400 audit(383.231:26503): avc: denied { read write } for pid=29193 comm="syz.0.5750" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.254497][ T29] audit: type=1400 audit(383.231:26504): avc: denied { ioctl } for pid=29200 comm="syz.1.5751" path="socket:[73766]" dev="sockfs" ino=73766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 383.316507][ T29] audit: type=1400 audit(383.311:26505): avc: denied { execute } for pid=29194 comm="syz.4.5749" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 383.338610][ T29] audit: type=1400 audit(383.311:26506): avc: denied { execute_no_trans } for pid=29194 comm="syz.4.5749" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 383.406552][T29197] syzkaller0 (unregistering): left allmulticast mode [ 383.421614][ T29] audit: type=1400 audit(383.451:26507): avc: denied { write } for pid=29215 comm="syz.1.5754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.466530][ T29] audit: type=1400 audit(383.471:26508): avc: denied { create } for pid=29219 comm="syz.2.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.505257][T29218] hub 9-0:1.0: USB hub found [ 383.512903][T29218] hub 9-0:1.0: 8 ports detected [ 383.532978][T29227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.544231][T29218] loop1: detected capacity change from 0 to 256 [ 383.551026][T29227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.556441][T29229] loop2: detected capacity change from 0 to 512 [ 383.561039][T29218] msdos: Unknown parameter 'sys_immutab„Ƹ⎩' [ 383.571694][T29229] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 383.572116][T29229] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 383.587293][T29229] EXT4-fs (loop2): mount failed [ 383.652273][T29232] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5759'. [ 383.790160][T29254] loop1: detected capacity change from 0 to 2048 [ 383.798498][T29256] loop0: detected capacity change from 0 to 2048 [ 383.805183][T29256] EXT4-fs: Ignoring removed orlov option [ 383.811639][T29256] EXT4-fs (loop0): unsupported descriptor size 50510 [ 383.826197][T29254] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 383.842653][T29254] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 383.855159][T29254] EXT4-fs (loop1): This should not happen!! Data will be lost [ 383.855159][T29254] [ 383.864822][T29254] EXT4-fs (loop1): Total free blocks count 0 [ 383.870828][T29254] EXT4-fs (loop1): Free/Dirty block details [ 383.876725][T29254] EXT4-fs (loop1): free_blocks=2415919104 [ 383.882480][T29254] EXT4-fs (loop1): dirty_blocks=16 [ 383.887594][T29254] EXT4-fs (loop1): Block reservation details [ 383.893613][T29254] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 383.900452][T29262] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 383.913045][T29262] EXT4-fs (loop1): This should not happen!! Data will be lost [ 383.913045][T29262] [ 384.019171][T29276] loop1: detected capacity change from 0 to 1024 [ 384.028993][T29276] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 384.038889][T29276] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 384.053326][T29276] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 384.064863][T29276] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.5769: unexpected bad inode w/o EXT4_IGET_BAD [ 384.082153][T29276] EXT4-fs (loop1): no journal found [ 384.087444][T29276] EXT4-fs (loop1): can't get journal size [ 384.096724][T29276] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5769: bg 0: block 32: padding at end of block bitmap is not set [ 384.132678][T29285] loop1: detected capacity change from 0 to 512 [ 384.174530][T29285] syzkaller0: entered allmulticast mode [ 384.196556][T29285] syzkaller0 (unregistering): left allmulticast mode [ 384.410124][T29313] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5773'. [ 384.514194][T29333] pim6reg1: entered promiscuous mode [ 384.519759][T29333] pim6reg1: entered allmulticast mode [ 385.401014][T29431] loop3: detected capacity change from 0 to 512 [ 385.407597][T29431] journal_path: Lookup failure for './file1' [ 385.413771][T29431] EXT4-fs: error: could not find journal device path [ 385.468873][T29436] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5785'. [ 385.507039][T29439] syzkaller0: entered promiscuous mode [ 385.513085][T29439] syzkaller0: entered allmulticast mode [ 385.562212][T29448] hub 9-0:1.0: USB hub found [ 385.566925][T29448] hub 9-0:1.0: 8 ports detected [ 385.591816][T29450] pim6reg1: entered promiscuous mode [ 385.597188][T29450] pim6reg1: entered allmulticast mode [ 385.636537][T29452] loop3: detected capacity change from 0 to 512 [ 385.643296][T29452] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.659335][T29452] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.5792: iget: bad i_size value: -6917529027641081756 [ 385.673599][T29452] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5792: couldn't read orphan inode 17 (err -117) [ 385.697543][T29459] loop1: detected capacity change from 0 to 512 [ 385.708683][T29461] loop3: detected capacity change from 0 to 1024 [ 385.716742][T29459] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 385.725942][T29461] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 385.727061][T29459] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 385.735768][T29461] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 385.743879][T29459] EXT4-fs (loop1): mount failed [ 385.766215][T29463] loop2: detected capacity change from 0 to 512 [ 385.773087][T29461] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 385.786705][T29463] journal_path: Lookup failure for './file1' [ 385.792778][T29463] EXT4-fs: error: could not find journal device path [ 385.803722][T29461] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.5795: unexpected bad inode w/o EXT4_IGET_BAD [ 385.819273][T29461] EXT4-fs (loop3): no journal found [ 385.824503][T29461] EXT4-fs (loop3): can't get journal size [ 385.847424][T29461] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5795: bg 0: block 32: padding at end of block bitmap is not set [ 385.928156][T29470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5798'. [ 386.086888][T29482] loop2: detected capacity change from 0 to 1024 [ 386.149967][T29490] loop2: detected capacity change from 0 to 512 [ 386.210131][T29490] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.5807: corrupted xattr block 255: invalid header [ 386.252768][T29492] loop0: detected capacity change from 0 to 512 [ 386.259424][T29492] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 386.267771][T29490] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 386.277528][T29490] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.5807: corrupted xattr block 255: invalid header [ 386.293400][T29490] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 386.368151][T29497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.376791][T29497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.916958][T29499] loop2: detected capacity change from 0 to 1024 [ 386.924092][T29499] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 386.933989][T29499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 386.984145][T29499] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 386.996355][T29499] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.5810: unexpected bad inode w/o EXT4_IGET_BAD [ 387.011662][T29499] EXT4-fs (loop2): no journal found [ 387.015484][T29502] loop0: detected capacity change from 0 to 512 [ 387.016864][T29499] EXT4-fs (loop2): can't get journal size [ 387.033643][T29499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5810: bg 0: block 32: padding at end of block bitmap is not set [ 387.040381][T29502] journal_path: Lookup failure for './file1' [ 387.054059][T29502] EXT4-fs: error: could not find journal device path [ 387.119787][T29512] pim6reg1: entered promiscuous mode [ 387.122447][T29508] loop3: detected capacity change from 0 to 2048 [ 387.125115][T29512] pim6reg1: entered allmulticast mode [ 387.160726][T29508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 387.186043][T29508] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 387.198683][T29508] EXT4-fs (loop3): This should not happen!! Data will be lost [ 387.198683][T29508] [ 387.208562][T29508] EXT4-fs (loop3): Total free blocks count 0 [ 387.214573][T29508] EXT4-fs (loop3): Free/Dirty block details [ 387.220524][T29508] EXT4-fs (loop3): free_blocks=2415919104 [ 387.226257][T29508] EXT4-fs (loop3): dirty_blocks=16 [ 387.231377][T29508] EXT4-fs (loop3): Block reservation details [ 387.237392][T29508] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 387.255134][T29515] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 387.267614][T29515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 387.267614][T29515] [ 387.343197][T29523] syz.3.5820[29523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.343258][T29523] syz.3.5820[29523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.355436][T29523] syz.3.5820[29523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.386874][T29528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.407143][T29528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.513584][T27481] bridge_slave_1: left allmulticast mode [ 387.519665][T27481] bridge_slave_1: left promiscuous mode [ 387.525446][T27481] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.533573][T27481] bridge_slave_0: left allmulticast mode [ 387.539365][T27481] bridge_slave_0: left promiscuous mode [ 387.545017][T27481] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.613111][T29536] loop1: detected capacity change from 0 to 1024 [ 387.620472][T29536] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 387.630313][T29536] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 387.640461][T29536] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 387.653357][T27481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.654264][T29536] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.5826: unexpected bad inode w/o EXT4_IGET_BAD [ 387.675502][T29536] EXT4-fs (loop1): no journal found [ 387.680754][T29536] EXT4-fs (loop1): can't get journal size [ 387.690574][T27481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.701610][T27481] bond0 (unregistering): Released all slaves [ 387.733874][T29539] pim6reg1: entered promiscuous mode [ 387.739373][T29539] pim6reg1: entered allmulticast mode [ 387.753118][T27481] hsr_slave_0: left promiscuous mode [ 387.758875][T27481] hsr_slave_1: left promiscuous mode [ 387.764505][T27481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.772133][T27481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.780006][T27481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.787623][T27481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.802373][T27481] veth1_macvtap: left promiscuous mode [ 387.807943][T27481] veth0_macvtap: left promiscuous mode [ 387.812494][T29541] loop1: detected capacity change from 0 to 512 [ 387.813433][T27481] veth1_vlan: left promiscuous mode [ 387.825003][T27481] veth0_vlan: left promiscuous mode [ 387.828935][T29541] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.860268][T29541] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.5828: iget: bad i_size value: -6917529027641081756 [ 387.873947][T29541] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.5828: couldn't read orphan inode 17 (err -117) [ 387.919203][T29545] loop1: detected capacity change from 0 to 1024 [ 387.926393][T29545] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 387.965122][T27481] team0 (unregistering): Port device team_slave_1 removed [ 387.977378][T27481] team0 (unregistering): Port device team_slave_0 removed [ 387.993811][T29553] loop3: detected capacity change from 0 to 512 [ 388.000960][T29553] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 388.009795][T29553] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 388.016333][T29553] EXT4-fs (loop3): mount failed [ 388.025071][T29545] netlink: 'syz.1.5829': attribute type 12 has an invalid length. [ 388.032984][T29545] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 388.040841][T29545] netlink: 'syz.1.5829': attribute type 2 has an invalid length. [ 388.048605][T29545] netlink: 'syz.1.5829': attribute type 2 has an invalid length. [ 388.056457][T29545] netlink: 'syz.1.5829': attribute type 1 has an invalid length. [ 388.064402][T29545] netlink: 'syz.1.5829': attribute type 37 has an invalid length. [ 388.072426][T29555] netlink: 'syz.1.5829': attribute type 5 has an invalid length. [ 388.092091][T29557] loop2: detected capacity change from 0 to 512 [ 388.108335][T29545] syz.1.5829[29545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.108660][T29545] syz.1.5829[29545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.136604][T29557] syzkaller0: entered allmulticast mode [ 388.171622][T29557] syzkaller0 (unregistering): left allmulticast mode [ 388.229751][T29564] syz.1.5835[29564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.229903][T29564] syz.1.5835[29564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.245143][T29564] syz.1.5835[29564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.327289][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 388.327304][ T29] audit: type=1326 audit(388.351:26993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.385254][ T29] audit: type=1326 audit(388.401:26994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.408301][ T29] audit: type=1326 audit(388.401:26995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.431346][ T29] audit: type=1326 audit(388.401:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.454351][ T29] audit: type=1326 audit(388.401:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.477619][ T29] audit: type=1326 audit(388.401:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.500706][ T29] audit: type=1326 audit(388.401:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29568 comm="syz.2.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.566716][T29574] loop2: detected capacity change from 0 to 1024 [ 388.596526][T29578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.640170][T29578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.648108][T29577] hub 9-0:1.0: USB hub found [ 388.660337][T29577] hub 9-0:1.0: 8 ports detected [ 388.681258][ T29] audit: type=1326 audit(388.711:27000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29579 comm="syz.2.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.704462][ T29] audit: type=1326 audit(388.711:27001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29579 comm="syz.2.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.727730][ T29] audit: type=1326 audit(388.711:27002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29579 comm="syz.2.5842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c35fdff9 code=0x7ffc0000 [ 388.761565][T29580] loop2: detected capacity change from 0 to 512 [ 388.805213][T29580] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 388.815919][T29580] EXT4-fs (loop2): orphan cleanup on readonly fs [ 388.837471][T29580] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 388.858773][T29580] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 388.866031][T29580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5842: bg 0: block 40: padding at end of block bitmap is not set [ 388.885414][T29580] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 388.894703][T29580] EXT4-fs (loop2): 1 truncate cleaned up [ 388.908065][T29580] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.5842: corrupted xattr block 31: invalid header [ 388.927945][T29580] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 388.936989][T29580] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.5842: corrupted xattr block 31: invalid header [ 388.963765][T29587] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.5842: corrupted xattr block 31: invalid header [ 388.977287][T29580] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 388.980084][T29589] loop0: detected capacity change from 0 to 512 [ 388.990752][T29587] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 389.003242][T29580] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.5842: bad symlink. [ 389.014174][T29589] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.015960][T29587] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.5842: bad symlink. [ 389.043299][T29589] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.5845: iget: bad i_size value: -6917529027641081756 [ 389.067368][T29589] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.5845: couldn't read orphan inode 17 (err -117) [ 389.129355][T29596] syz.0.5847[29596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.129414][T29596] syz.0.5847[29596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.147346][T29598] loop2: detected capacity change from 0 to 1024 [ 389.165209][T29596] syz.0.5847[29596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.233473][T29609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5853'. [ 389.261642][T29607] loop1: detected capacity change from 0 to 512 [ 389.275069][T29607] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 389.287504][T29611] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 389.332623][T29614] loop2: detected capacity change from 0 to 2048 [ 389.362922][T29607] loop1: detected capacity change from 0 to 1024 [ 389.374968][T29607] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 389.387569][T29607] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 389.402351][T29607] EXT4-fs (loop1): invalid journal inode [ 389.411163][T29607] EXT4-fs (loop1): can't get journal size [ 389.420065][T29614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 389.447080][T29626] loop0: detected capacity change from 0 to 2048 [ 389.453845][T29626] EXT4-fs: Ignoring removed orlov option [ 389.460347][T29626] EXT4-fs (loop0): unsupported descriptor size 50510 [ 389.467226][T29607] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.5852: blocks 48-48 from inode overlap system zone [ 389.486745][T29614] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 389.499271][T29614] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.499271][T29614] [ 389.504204][T29607] EXT4-fs (loop1): failed to initialize system zone (-117) [ 389.508953][T29614] EXT4-fs (loop2): Total free blocks count 0 [ 389.508967][T29614] EXT4-fs (loop2): Free/Dirty block details [ 389.528148][T29614] EXT4-fs (loop2): free_blocks=2415919104 [ 389.533959][T29633] loop3: detected capacity change from 0 to 1024 [ 389.533960][T29614] EXT4-fs (loop2): dirty_blocks=16 [ 389.545455][T29614] EXT4-fs (loop2): Block reservation details [ 389.551479][T29614] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 389.557218][T29607] EXT4-fs (loop1): mount failed [ 389.561365][T29630] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 389.574602][T29630] EXT4-fs (loop2): This should not happen!! Data will be lost [ 389.574602][T29630] [ 389.748595][T29655] hub 9-0:1.0: USB hub found [ 389.753598][T29655] hub 9-0:1.0: 8 ports detected [ 389.888730][T29668] syz.2.5861[29668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.892705][T29668] syz.2.5861[29668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.979358][T29671] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5862'. [ 390.069267][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.080044][ T3417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.174236][T29693] loop1: detected capacity change from 0 to 512 [ 390.188469][T29693] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.220372][T29693] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.5867: iget: bad i_size value: -6917529027641081756 [ 390.247972][T29693] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.5867: couldn't read orphan inode 17 (err -117) [ 390.260541][T29693] EXT4-fs mount: 33 callbacks suppressed [ 390.260553][T29693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.291871][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.403154][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.430846][T29738] pim6reg1: entered promiscuous mode [ 390.436196][T29738] pim6reg1: entered allmulticast mode [ 390.708533][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 391.183567][T29829] hub 9-0:1.0: USB hub found [ 391.188545][T29829] hub 9-0:1.0: 8 ports detected [ 391.275091][T29833] pim6reg1: entered promiscuous mode [ 391.280445][T29833] pim6reg1: entered allmulticast mode [ 391.378030][T29835] loop1: detected capacity change from 0 to 2048 [ 391.390179][T29835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.406012][T29835] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 391.420825][T29835] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 391.433329][T29835] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.433329][T29835] [ 391.443020][T29835] EXT4-fs (loop1): Total free blocks count 0 [ 391.449006][T29835] EXT4-fs (loop1): Free/Dirty block details [ 391.454925][T29835] EXT4-fs (loop1): free_blocks=2415919104 [ 391.460687][T29835] EXT4-fs (loop1): dirty_blocks=16 [ 391.465845][T29835] EXT4-fs (loop1): Block reservation details [ 391.471840][T29835] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 391.493889][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.499317][T29840] pim6reg1: entered promiscuous mode [ 391.508259][T29840] pim6reg1: entered allmulticast mode [ 391.542348][T29846] loop3: detected capacity change from 0 to 512 [ 391.553281][T29846] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.590952][T29846] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.5888: iget: bad i_size value: -6917529027641081756 [ 391.614180][T29846] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5888: couldn't read orphan inode 17 (err -117) [ 391.630615][T29846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.652084][T29857] loop1: detected capacity change from 0 to 512 [ 391.659305][T29857] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.660076][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.679585][T29857] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.5892: iget: bad i_size value: -6917529027641081756 [ 391.696023][T29857] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.5892: couldn't read orphan inode 17 (err -117) [ 391.709030][T29857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.730125][T29861] hub 9-0:1.0: USB hub found [ 391.730944][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.735073][T29861] hub 9-0:1.0: 8 ports detected [ 391.762719][T29863] loop1: detected capacity change from 0 to 512 [ 391.769322][T29863] journal_path: Lookup failure for './file1' [ 391.775335][T29863] EXT4-fs: error: could not find journal device path [ 391.846865][T29877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.859805][T29877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.865957][T29879] loop3: detected capacity change from 0 to 2048 [ 391.874547][T29879] EXT4-fs: Ignoring removed orlov option [ 391.881192][T29879] EXT4-fs (loop3): unsupported descriptor size 50510 [ 392.522560][T29983] loop0: detected capacity change from 0 to 2048 [ 392.561636][T29983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.584175][T24756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.614835][T30007] hub 9-0:1.0: USB hub found [ 392.620367][T30007] hub 9-0:1.0: 8 ports detected [ 392.694145][T30019] loop0: detected capacity change from 0 to 512 [ 392.718855][T30019] syzkaller0: entered allmulticast mode [ 392.726294][T30019] syzkaller0 (unregistering): left allmulticast mode [ 392.845815][T30045] loop0: detected capacity change from 0 to 512 [ 392.856417][T30045] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.872971][T30045] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.5911: iget: bad i_size value: -6917529027641081756 [ 392.886761][T30045] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.5911: couldn't read orphan inode 17 (err -117) [ 392.903282][T30045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.923632][T24756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.373263][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 393.373278][ T29] audit: type=1400 audit(393.401:27344): avc: denied { read write } for pid=28351 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.403383][ T29] audit: type=1400 audit(393.401:27345): avc: denied { open } for pid=28351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.427152][ T29] audit: type=1400 audit(393.401:27346): avc: denied { ioctl } for pid=28351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.452309][ T29] audit: type=1400 audit(393.441:27347): avc: denied { name_bind } for pid=30072 comm="syz.3.5921" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 393.473088][ T29] audit: type=1400 audit(393.441:27348): avc: denied { node_bind } for pid=30072 comm="syz.3.5921" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 393.493693][ T29] audit: type=1400 audit(393.531:27349): avc: denied { create } for pid=30072 comm="syz.3.5921" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 393.527081][ T29] audit: type=1400 audit(393.551:27350): avc: denied { mounton } for pid=30072 comm="syz.3.5921" path="/53" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 393.558940][ T29] audit: type=1400 audit(393.581:27351): avc: denied { execmem } for pid=30078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 393.586333][ T29] audit: type=1400 audit(393.611:27352): avc: denied { read } for pid=30079 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 393.617286][ T29] audit: type=1400 audit(393.611:27353): avc: denied { open } for pid=30079 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 393.676797][T30089] hub 9-0:1.0: USB hub found [ 393.683825][T30089] hub 9-0:1.0: 8 ports detected [ 393.746869][T27466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.768277][T30103] loop1: detected capacity change from 0 to 512 [ 393.774942][T30106] bpf_get_probe_write_proto: 4 callbacks suppressed [ 393.774956][T30106] syz.3.5933[30106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.775120][T30103] journal_path: Lookup failure for './file1' [ 393.785091][T30106] syz.3.5933[30106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.793090][T30103] EXT4-fs: error: could not find journal device path [ 393.802873][T30106] syz.3.5933[30106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.825530][T27466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.876510][T30079] chnl_net:caif_netlink_parms(): no params data found [ 393.887066][T30112] loop3: detected capacity change from 0 to 512 [ 393.887134][T30113] loop1: detected capacity change from 0 to 1024 [ 393.908334][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 393.924089][T27466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.994260][T30112] syzkaller0: entered allmulticast mode [ 394.002238][T30112] syzkaller0 (unregistering): left allmulticast mode [ 394.053063][T27466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.064569][T30079] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.071669][T30079] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.079108][T30079] bridge_slave_0: entered allmulticast mode [ 394.085906][T30079] bridge_slave_0: entered promiscuous mode [ 394.093358][T30079] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.100591][T30079] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.109401][T30079] bridge_slave_1: entered allmulticast mode [ 394.116121][T30079] bridge_slave_1: entered promiscuous mode [ 394.146431][T30079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.159968][T30138] syz.3.5945[30138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.160164][T30138] syz.3.5945[30138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.161125][T30079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.184038][T30138] syz.3.5945[30138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.208748][T30136] hub 9-0:1.0: USB hub found [ 394.225572][T30136] hub 9-0:1.0: 8 ports detected [ 394.227131][T30079] team0: Port device team_slave_0 added [ 394.245161][T30079] team0: Port device team_slave_1 added [ 394.256908][T27466] bridge_slave_1: left allmulticast mode [ 394.262734][T27466] bridge_slave_1: left promiscuous mode [ 394.268504][T27466] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.276554][T30143] loop1: detected capacity change from 0 to 2048 [ 394.283277][T27466] bridge_slave_0: left allmulticast mode [ 394.289014][T27466] bridge_slave_0: left promiscuous mode [ 394.294634][T27466] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.299400][T30143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.320029][T30143] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 394.334958][T30143] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 394.347410][T30143] EXT4-fs (loop1): This should not happen!! Data will be lost [ 394.347410][T30143] [ 394.357081][T30143] EXT4-fs (loop1): Total free blocks count 0 [ 394.363144][T30143] EXT4-fs (loop1): Free/Dirty block details [ 394.369049][T30143] EXT4-fs (loop1): free_blocks=2415919104 [ 394.374789][T30143] EXT4-fs (loop1): dirty_blocks=16 [ 394.379945][T30143] EXT4-fs (loop1): Block reservation details [ 394.385902][T30143] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 394.392432][T30147] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 394.521815][T27466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.531084][T30153] loop1: detected capacity change from 0 to 512 [ 394.539377][T30153] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 394.541788][T27466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.560750][T27466] bond0 (unregistering): Released all slaves [ 394.568501][T30153] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.5950: iget: bad i_size value: -6917529027641081756 [ 394.582223][T30153] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.5950: couldn't read orphan inode 17 (err -117) [ 394.594969][T30153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.609308][T30079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.616388][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.642492][T30079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.654449][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.657507][T30079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.670495][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.696422][T30079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.730198][T27466] hsr_slave_0: left promiscuous mode [ 394.736541][T27466] hsr_slave_1: left promiscuous mode [ 394.742568][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.751376][T27466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.759446][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.766935][T27466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.777230][T27466] veth1_macvtap: left promiscuous mode [ 394.782967][T27466] veth0_macvtap: left promiscuous mode [ 394.788600][T27466] veth1_vlan: left promiscuous mode [ 394.793901][T27466] veth0_vlan: left promiscuous mode [ 394.891073][T27466] team0 (unregistering): Port device team_slave_1 removed [ 394.902255][T27466] team0 (unregistering): Port device team_slave_0 removed [ 394.917420][T30169] syz.0.5956[30169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.917471][T30169] syz.0.5956[30169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.934946][T30169] syz.0.5956[30169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.965083][T30171] hub 9-0:1.0: USB hub found [ 394.980732][T30173] loop0: detected capacity change from 0 to 2048 [ 394.993128][T30171] hub 9-0:1.0: 8 ports detected [ 395.013730][T30173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.044528][T30179] loop2: detected capacity change from 0 to 2048 [ 395.047162][T30173] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 395.065984][T30173] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 395.068235][T30079] hsr_slave_0: entered promiscuous mode [ 395.078425][T30173] EXT4-fs (loop0): This should not happen!! Data will be lost [ 395.078425][T30173] [ 395.093741][T30173] EXT4-fs (loop0): Total free blocks count 0 [ 395.100202][T30173] EXT4-fs (loop0): Free/Dirty block details [ 395.106359][T30173] EXT4-fs (loop0): free_blocks=2415919104 [ 395.112179][T30173] EXT4-fs (loop0): dirty_blocks=16 [ 395.116912][T30179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.117263][T30173] EXT4-fs (loop0): Block reservation details [ 395.135268][T30173] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 395.141991][T30079] hsr_slave_1: entered promiscuous mode [ 395.142448][T30183] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 395.160631][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.160938][T30079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.177243][T30079] Cannot create hsr debugfs directory [ 395.219121][T30187] pim6reg1: entered promiscuous mode [ 395.220572][T30191] loop2: detected capacity change from 0 to 2048 [ 395.224446][T30187] pim6reg1: entered allmulticast mode [ 395.252418][T30191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.275715][T30191] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 395.288526][T30198] loop0: detected capacity change from 0 to 512 [ 395.294590][T30191] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 395.309132][T30191] EXT4-fs (loop2): This should not happen!! Data will be lost [ 395.309132][T30191] [ 395.318794][T30191] EXT4-fs (loop2): Total free blocks count 0 [ 395.324794][T30191] EXT4-fs (loop2): Free/Dirty block details [ 395.330728][T30191] EXT4-fs (loop2): free_blocks=2415919104 [ 395.336461][T30191] EXT4-fs (loop2): dirty_blocks=16 [ 395.341624][T30191] EXT4-fs (loop2): Block reservation details [ 395.347639][T30191] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 395.355255][T30199] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 395.385764][T30200] syzkaller0: entered allmulticast mode [ 395.405999][T30198] syzkaller0 (unregistering): left allmulticast mode [ 395.425516][T30204] syz.2.5967[30204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.434693][T30206] loop3: detected capacity change from 0 to 512 [ 395.467584][T30210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5970'. [ 395.515530][T30206] syzkaller0: entered allmulticast mode [ 395.529642][T30206] syzkaller0 (unregistering): left allmulticast mode [ 395.538259][T30217] loop2: detected capacity change from 0 to 512 [ 395.545083][T30217] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.559141][T30217] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.5973: iget: bad i_size value: -6917529027641081756 [ 395.572533][T30217] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.5973: couldn't read orphan inode 17 (err -117) [ 395.585351][T30217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.606589][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.629209][T30222] loop2: detected capacity change from 0 to 2048 [ 395.639156][T30222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.661581][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.714740][T30233] hub 9-0:1.0: USB hub found [ 395.720659][T30233] hub 9-0:1.0: 8 ports detected [ 395.746232][T30079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.759386][T30079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.768845][T30079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.777844][T30079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.855347][T30079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.868628][T30079] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.898279][T27516] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.905420][T27516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.926212][T27516] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.933339][T27516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.957492][T30250] loop1: detected capacity change from 0 to 2048 [ 395.975028][T30253] loop3: detected capacity change from 0 to 2048 [ 396.002984][T30250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.031592][T30253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.045210][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.088916][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.103785][T30079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.181830][T30281] hub 9-0:1.0: USB hub found [ 396.195404][T30281] hub 9-0:1.0: 8 ports detected [ 396.298360][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5999'. [ 396.337787][T30301] loop1: detected capacity change from 0 to 2048 [ 396.341452][T30079] veth0_vlan: entered promiscuous mode [ 396.373353][T30303] pim6reg1: entered promiscuous mode [ 396.378805][T30303] pim6reg1: entered allmulticast mode [ 396.383590][T30301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.406399][T30079] veth1_vlan: entered promiscuous mode [ 396.428358][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.428818][T30079] veth0_macvtap: entered promiscuous mode [ 396.445959][T30079] veth1_macvtap: entered promiscuous mode [ 396.484877][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.495403][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.495418][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.515926][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525841][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.525855][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525863][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.525873][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525882][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.525898][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525908][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.525981][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.525990][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526002][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526011][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526024][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526035][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526046][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526122][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526136][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526145][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526157][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526166][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526177][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526259][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526270][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526311][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526322][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526336][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526347][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526356][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526427][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526438][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526451][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.526461][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.526474][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.851558][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.851574][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.854609][T30079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.888722][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.899238][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.909065][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.919514][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.929353][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.939889][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.944185][T30326] loop3: detected capacity change from 0 to 512 [ 396.949810][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.965369][T30323] loop1: detected capacity change from 0 to 512 [ 396.966455][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.982542][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.982792][T30323] journal_path: Lookup failure for './file1' [ 396.992978][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.993001][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.993015][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.993029][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.999052][T30323] EXT4-fs: error: could not find journal device path [ 397.009004][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.024355][T30326] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.029404][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.029420][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.079182][T30331] loop1: detected capacity change from 0 to 512 [ 397.085704][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.096642][T30331] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 397.102363][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.120920][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.127618][T30326] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.6011: iget: bad i_size value: -6917529027641081756 [ 397.131332][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.131348][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.131362][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.131380][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.131392][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.147886][T30331] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 397.154304][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.164731][T30331] EXT4-fs (loop1): mount failed [ 397.174498][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.174512][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.174526][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.199169][T30326] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.6011: couldn't read orphan inode 17 (err -117) [ 397.201348][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.216091][T30326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.216613][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.216628][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.301919][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.311748][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.322236][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.332146][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.342609][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.352503][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.362956][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.366675][T30337] loop1: detected capacity change from 0 to 512 [ 397.376642][T30079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.403681][T30079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.412587][T30079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.421426][T30079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.430258][T30079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.448769][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.465335][T30341] hub 9-0:1.0: USB hub found [ 397.474880][T30341] hub 9-0:1.0: 8 ports detected [ 397.502956][T30337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.536275][T30347] pim6reg1: entered promiscuous mode [ 397.541763][T30347] pim6reg1: entered allmulticast mode [ 397.571245][T30349] loop2: detected capacity change from 0 to 2048 [ 397.603327][T30349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.629811][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.668445][T30358] loop2: detected capacity change from 0 to 1024 [ 397.672330][T30353] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5924'. [ 397.684853][T30358] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 397.694675][T30358] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 397.709095][T30358] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 397.723194][T30358] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.6018: unexpected bad inode w/o EXT4_IGET_BAD [ 397.736957][T30358] EXT4-fs (loop2): no journal found [ 397.742303][T30358] EXT4-fs (loop2): can't get journal size [ 397.767124][T30358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.828937][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.878351][T27516] Dead loop on virtual device ipvlan1, fix it urgently! [ 397.983246][T30383] pim6reg1: entered promiscuous mode [ 397.988746][T30383] pim6reg1: entered allmulticast mode [ 398.014592][T30385] loop2: detected capacity change from 0 to 2048 [ 398.029661][T30385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.054207][T30387] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6032'. [ 398.077945][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.134255][T30395] loop4: detected capacity change from 0 to 512 [ 398.163145][T30395] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.190544][T30395] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.6035: iget: bad i_size value: -6917529027641081756 [ 398.204009][T30395] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6035: couldn't read orphan inode 17 (err -117) [ 398.204515][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.217745][T30395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.263916][T30079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.300730][T30412] loop2: detected capacity change from 0 to 2048 [ 398.319615][T30414] hub 9-0:1.0: USB hub found [ 398.329291][T30412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.342214][T30419] loop0: detected capacity change from 0 to 2048 [ 398.349143][T30414] hub 9-0:1.0: 8 ports detected [ 398.369298][T28315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.379562][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 398.379576][ T29] audit: type=1400 audit(398.411:27801): avc: denied { map_create } for pid=30417 comm="syz.1.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.387689][T30424] loop4: detected capacity change from 0 to 2048 [ 398.418941][ T29] audit: type=1400 audit(398.441:27802): avc: denied { map_read map_write } for pid=30417 comm="syz.1.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.438524][ T29] audit: type=1400 audit(398.441:27803): avc: denied { create } for pid=30417 comm="syz.1.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.458575][ T29] audit: type=1400 audit(398.441:27804): avc: denied { ioctl } for pid=30417 comm="syz.1.6045" path="socket:[76286]" dev="sockfs" ino=76286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.459520][T30428] loop1: detected capacity change from 0 to 1024 [ 398.484024][ T29] audit: type=1400 audit(398.441:27805): avc: denied { ioctl } for pid=30417 comm="syz.1.6045" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 398.516019][T30424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.533471][ T29] audit: type=1400 audit(398.471:27806): avc: denied { write } for pid=30425 comm="syz.3.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 398.552683][ T29] audit: type=1400 audit(398.561:27807): avc: denied { write } for pid=30423 comm="syz.4.6048" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.560080][T30424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 398.573970][ T29] audit: type=1400 audit(398.561:27808): avc: denied { add_name } for pid=30423 comm="syz.4.6048" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.609051][ T29] audit: type=1400 audit(398.561:27809): avc: denied { create } for pid=30423 comm="syz.4.6048" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 398.628143][T30419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.634768][T30424] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 398.649990][ T29] audit: type=1400 audit(398.581:27810): avc: denied { read write } for pid=30423 comm="syz.4.6048" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 398.653272][T30424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 398.653272][T30424] [ 398.685160][T30424] EXT4-fs (loop4): Total free blocks count 0 [ 398.691298][T30424] EXT4-fs (loop4): Free/Dirty block details [ 398.694683][T30439] loop1: detected capacity change from 0 to 512 [ 398.697178][T30424] EXT4-fs (loop4): free_blocks=2415919104 [ 398.709356][T30424] EXT4-fs (loop4): dirty_blocks=16 [ 398.714535][T30424] EXT4-fs (loop4): Block reservation details [ 398.720600][T30424] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 398.738575][T30436] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 398.752861][T24756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.793397][T30439] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.874369][T30439] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.6051: iget: bad i_size value: -6917529027641081756 [ 398.889142][T30439] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6051: couldn't read orphan inode 17 (err -117) [ 398.907491][T30439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.012576][T26048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.028079][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 399.186730][T30457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6061'. [ 399.230792][T30461] pim6reg1: entered promiscuous mode [ 399.236270][T30461] pim6reg1: entered allmulticast mode [ 399.417373][T30487] loop3: detected capacity change from 0 to 2048 [ 399.452889][T30487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.455721][T30499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.481496][T30499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.551198][T28351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.605249][T30510] bpf_get_probe_write_proto: 8 callbacks suppressed [ 399.605267][T30510] syz.2.6083[30510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.627106][T30510] syz.2.6083[30510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.653510][T30510] syz.2.6083[30510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.668391][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.711408][T30520] FAULT_INJECTION: forcing a failure. [ 399.711408][T30520] name failslab, interval 1, probability 0, space 0, times 0 [ 399.724123][T30520] CPU: 0 UID: 0 PID: 30520 Comm: syz.1.6086 Not tainted 6.12.0-rc1-syzkaller #0 [ 399.733196][T30520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.739550][T30522] loop0: detected capacity change from 0 to 2048 [ 399.743297][T30520] Call Trace: [ 399.752975][T30520] [ 399.755906][T30520] dump_stack_lvl+0xf2/0x150 [ 399.760698][T30520] dump_stack+0x15/0x20 [ 399.764955][T30520] should_fail_ex+0x223/0x230 [ 399.769696][T30520] ? shmem_alloc_inode+0x34/0x50 [ 399.774710][T30520] should_failslab+0x8f/0xb0 [ 399.779383][T30520] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 399.785106][T30520] shmem_alloc_inode+0x34/0x50 [ 399.789941][T30520] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 399.795479][T30520] alloc_inode+0x3c/0x160 [ 399.799832][T30520] new_inode+0x1e/0x100 [ 399.803981][T30520] shmem_get_inode+0x24e/0x710 [ 399.808907][T30520] __shmem_file_setup+0x127/0x1f0 [ 399.813970][T30520] shmem_file_setup+0x3b/0x50 [ 399.818641][T30520] __se_sys_memfd_create+0x31d/0x5c0 [ 399.824009][T30520] __x64_sys_memfd_create+0x31/0x40 [ 399.829207][T30520] x64_sys_call+0x2891/0x2d60 [ 399.833882][T30520] do_syscall_64+0xc9/0x1c0 [ 399.838418][T30520] ? clear_bhb_loop+0x55/0xb0 [ 399.843254][T30520] ? clear_bhb_loop+0x55/0xb0 [ 399.847950][T30520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.853982][T30520] RIP: 0033:0x7f3d5306dff9 [ 399.858383][T30520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.877986][T30520] RSP: 002b:00007f3d51ce6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 399.886407][T30520] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007f3d5306dff9 [ 399.894371][T30520] RDX: 00007f3d51ce6ef0 RSI: 0000000000000000 RDI: 00007f3d530e0b02 [ 399.902398][T30520] RBP: 0000000020000200 R08: 00007f3d51ce6bb7 R09: 00007f3d51ce6e40 [ 399.910359][T30520] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 399.918448][T30520] R13: 00007f3d51ce6ef0 R14: 00007f3d51ce6eb0 R15: 0000000020000080 [ 399.926479][T30520] [ 399.958485][T30522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.968970][T30524] loop3: detected capacity change from 0 to 2048 [ 399.985497][T30534] syz.2.6092[30534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.985568][T30534] syz.2.6092[30534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.997347][T30534] syz.2.6092[30534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.005924][T30522] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.025397][T30524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.035252][T30522] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 400.058700][T30524] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.059590][T30522] EXT4-fs (loop0): This should not happen!! Data will be lost [ 400.059590][T30522] [ 400.078564][T30524] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 400.084019][T30522] EXT4-fs (loop0): Total free blocks count 0 [ 400.096391][T30524] EXT4-fs (loop3): This should not happen!! Data will be lost [ 400.096391][T30524] [ 400.102393][T30522] EXT4-fs (loop0): Free/Dirty block details [ 400.102407][T30522] EXT4-fs (loop0): free_blocks=2415919104 [ 400.112029][T30524] EXT4-fs (loop3): Total free blocks count 0 [ 400.117913][T30522] EXT4-fs (loop0): dirty_blocks=16 [ 400.123591][T30524] EXT4-fs (loop3): Free/Dirty block details [ 400.129566][T30522] EXT4-fs (loop0): Block reservation details [ 400.134656][T30524] EXT4-fs (loop3): free_blocks=2415919104 [ 400.140541][T30522] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 400.158416][T30524] EXT4-fs (loop3): dirty_blocks=16 [ 400.163532][T30524] EXT4-fs (loop3): Block reservation details [ 400.164817][T30538] 9pnet: p9_errstr2errno: server reported unknown error œæçæÎsÅ‚Ün02ÖÌüä§‘Ì [ 400.169607][T30524] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 400.188023][T30524] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 400.200091][T30522] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 400.225013][T30540] pim6reg1: entered promiscuous mode [ 400.230507][T30540] pim6reg1: entered allmulticast mode [ 400.249476][T30534] loop2: detected capacity change from 0 to 512 [ 400.270394][T30534] EXT4-fs (loop2): orphan cleanup on readonly fs [ 400.280387][T30551] netlink: 'syz.3.6097': attribute type 4 has an invalid length. [ 400.280408][T30534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6092: bg 0: block 248: padding at end of block bitmap is not set [ 400.306615][T30534] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.6092: Failed to acquire dquot type 1 [ 400.332035][T30534] EXT4-fs (loop2): 1 truncate cleaned up [ 400.340719][T30534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.355853][T30534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.363354][T30558] loop4: detected capacity change from 0 to 2048 [ 400.402043][T30534] loop2: detected capacity change from 0 to 512 [ 400.411001][T30534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.419902][T30534] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 400.431129][T30558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.449804][T30566] loop0: detected capacity change from 0 to 2048 [ 400.467015][T30079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.495341][T30566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.511828][T30573] syz.4.6105[30573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.512011][T30573] syz.4.6105[30573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.541935][T30573] syz.4.6105[30573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.711400][T30592] pim6reg1: entered promiscuous mode [ 400.714947][T30593] loop4: detected capacity change from 0 to 2048 [ 400.722983][T30592] pim6reg1: entered allmulticast mode [ 400.728402][T30593] EXT4-fs: Ignoring removed orlov option [ 400.746368][T30593] EXT4-fs (loop4): unsupported descriptor size 50510 [ 400.837804][T30602] loop2: detected capacity change from 0 to 512 [ 400.845222][T30602] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 400.882174][T30602] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.6112: iget: bad i_size value: -6917529027641081756 [ 400.906521][T30602] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6112: couldn't read orphan inode 17 (err -117) [ 401.180256][T30640] hub 9-0:1.0: USB hub found [ 401.197793][T30640] hub 9-0:1.0: 8 ports detected [ 401.254358][T30654] syz.2.6120[30654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.396898][T30665] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6122'. [ 401.556744][T30700] pim6reg1: entered promiscuous mode [ 401.562267][T30700] pim6reg1: entered allmulticast mode [ 401.695532][T30721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.704065][T30721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.054059][T30775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.054537][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.070084][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.077452][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.084948][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.092368][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.099778][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.107141][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.114658][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.122098][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.129576][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.136995][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.144547][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.152068][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.159507][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.167025][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.174509][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.181926][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.189397][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.196794][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.204311][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.211766][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.219224][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.226669][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.234471][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.242093][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.249110][T30781] loop0: detected capacity change from 0 to 1024 [ 402.249540][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.263248][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.267545][T30781] loop0: detected capacity change from 0 to 1024 [ 402.270848][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.281096][T30781] EXT4-fs: Ignoring removed orlov option [ 402.284610][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.294195][T30781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.297558][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.311651][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.319072][ T3340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 402.326564][T30775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.328701][ T3340] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 402.336253][T30781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 402.352973][T30781] System zones: 0-1, 3-12 [ 402.413032][T30786] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6134'. [ 402.479947][T30800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6141'. [ 402.569653][T30811] FAULT_INJECTION: forcing a failure. [ 402.569653][T30811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.582857][T30811] CPU: 1 UID: 0 PID: 30811 Comm: syz.4.6146 Not tainted 6.12.0-rc1-syzkaller #0 [ 402.591886][T30811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.601923][T30811] Call Trace: [ 402.605184][T30811] [ 402.608142][T30811] dump_stack_lvl+0xf2/0x150 [ 402.612727][T30811] dump_stack+0x15/0x20 [ 402.616890][T30811] should_fail_ex+0x223/0x230 [ 402.621570][T30811] should_fail+0xb/0x10 [ 402.625800][T30811] should_fail_usercopy+0x1a/0x20 [ 402.630917][T30811] _copy_from_user+0x1e/0xd0 [ 402.635555][T30811] uhid_dev_create+0x142/0x270 [ 402.640321][T30811] uhid_char_write+0x549/0x5b0 [ 402.645077][T30811] ? __pfx_uhid_char_write+0x10/0x10 [ 402.650349][T30811] vfs_write+0x26c/0x910 [ 402.654721][T30811] ? __rcu_read_unlock+0x4e/0x70 [ 402.659668][T30811] ? __fget_files+0x1d4/0x210 [ 402.664393][T30811] ksys_write+0xeb/0x1b0 [ 402.668630][T30811] __x64_sys_write+0x42/0x50 [ 402.673276][T30811] x64_sys_call+0x27dd/0x2d60 [ 402.678022][T30811] do_syscall_64+0xc9/0x1c0 [ 402.682523][T30811] ? clear_bhb_loop+0x55/0xb0 [ 402.687199][T30811] ? clear_bhb_loop+0x55/0xb0 [ 402.691965][T30811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.697939][T30811] RIP: 0033:0x7f6265c4dff9 [ 402.702352][T30811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.721957][T30811] RSP: 002b:00007f62648c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.730463][T30811] RAX: ffffffffffffffda RBX: 00007f6265e05f80 RCX: 00007f6265c4dff9 [ 402.738444][T30811] RDX: 0000000000000120 RSI: 0000000020002a00 RDI: 0000000000000006 [ 402.746426][T30811] RBP: 00007f62648c7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.754445][T30811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.762603][T30811] R13: 0000000000000000 R14: 00007f6265e05f80 R15: 00007ffc39a2fe28 [ 402.770566][T30811] [ 402.874690][T27466] bridge_slave_1: left allmulticast mode [ 402.880456][T27466] bridge_slave_1: left promiscuous mode [ 402.886083][T27466] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.895669][T27466] bridge_slave_0: left allmulticast mode [ 402.901542][T27466] bridge_slave_0: left promiscuous mode [ 402.907174][T27466] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.929948][T30822] loop4: detected capacity change from 0 to 2048 [ 403.000126][T27466] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 403.051032][T27466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.064108][T27466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.074994][T27466] bond0 (unregistering): Released all slaves [ 403.083913][T30825] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6150'. [ 403.142942][T27466] hsr_slave_0: left promiscuous mode [ 403.149708][T27466] hsr_slave_1: left promiscuous mode [ 403.155514][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.163042][T27466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.170788][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.178357][T27466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.189012][T27466] veth1_macvtap: left promiscuous mode [ 403.194513][T27466] veth0_macvtap: left promiscuous mode [ 403.200164][T27466] veth1_vlan: left promiscuous mode [ 403.205424][T27466] veth0_vlan: left promiscuous mode [ 403.265865][T30852] loop0: detected capacity change from 0 to 2048 [ 403.321815][T27466] team0 (unregistering): Port device team_slave_1 removed [ 403.334925][T27466] team0 (unregistering): Port device team_slave_0 removed [ 403.373015][T30865] loop2: detected capacity change from 0 to 512 [ 403.380855][T30865] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 403.391299][T30865] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 403.397905][T30865] EXT4-fs (loop2): mount failed [ 403.422901][T30868] pim6reg1: entered promiscuous mode [ 403.428326][T30868] pim6reg1: entered allmulticast mode [ 403.465290][T30869] loop2: detected capacity change from 0 to 512 [ 403.505153][ T29] kauditd_printk_skb: 1133 callbacks suppressed [ 403.505167][ T29] audit: type=1326 audit(403.531:28942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.534761][ T29] audit: type=1326 audit(403.531:28943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.557974][ T29] audit: type=1326 audit(403.531:28944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.581050][ T29] audit: type=1326 audit(403.531:28945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.604153][ T29] audit: type=1326 audit(403.531:28946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.609458][T30874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6170'. [ 403.627105][ T29] audit: type=1326 audit(403.531:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.627135][ T29] audit: type=1326 audit(403.531:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.627157][ T29] audit: type=1326 audit(403.531:28949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.705322][ T29] audit: type=1326 audit(403.531:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.728344][ T29] audit: type=1326 audit(403.531:28951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30873 comm="syz.1.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5306dff9 code=0x7ffc0000 [ 403.922404][T30887] loop1: detected capacity change from 0 to 512 [ 403.943825][T27466] IPVS: stop unused estimator thread 0... [ 403.960250][T30890] loop4: detected capacity change from 0 to 512 [ 403.971939][T30890] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.994342][T30887] 9pnet_fd: Insufficient options for proto=fd [ 404.010781][T30890] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.6176: iget: bad i_size value: -6917529027641081756 [ 404.054426][T30900] netlink: 'syz.1.6179': attribute type 4 has an invalid length. [ 404.074275][T30900] loop1: detected capacity change from 0 to 512 [ 404.086988][T30900] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.112585][T30900] EXT4-fs error (device loop1): ext4_quota_enable:7053: inode #4: comm syz.1.6179: iget: special inode unallocated [ 404.127207][T30900] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm syz.1.6179: Bad quota inode: 4, type: 1 [ 404.142921][T30900] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.180413][T30900] EXT4-fs (loop1): mount failed [ 404.186069][T30890] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6176: couldn't read orphan inode 17 (err -117) [ 404.322838][T30911] FAULT_INJECTION: forcing a failure. [ 404.322838][T30911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.336207][T30911] CPU: 0 UID: 0 PID: 30911 Comm: syz.4.6183 Not tainted 6.12.0-rc1-syzkaller #0 [ 404.345304][T30911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.355610][T30911] Call Trace: [ 404.358894][T30911] [ 404.361826][T30911] dump_stack_lvl+0xf2/0x150 [ 404.366500][T30911] dump_stack+0x15/0x20 [ 404.370659][T30911] should_fail_ex+0x223/0x230 [ 404.375468][T30911] should_fail_alloc_page+0xfd/0x110 [ 404.380749][T30911] __alloc_pages_noprof+0x109/0x360 [ 404.385957][T30911] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 404.391396][T30911] folio_alloc_mpol_noprof+0x36/0x70 [ 404.396858][T30911] shmem_get_folio_gfp+0x3d1/0xd90 [ 404.402050][T30911] shmem_write_begin+0xa2/0x180 [ 404.406957][T30911] generic_perform_write+0x1a8/0x4a0 [ 404.412252][T30911] shmem_file_write_iter+0xc2/0xe0 [ 404.417412][T30911] vfs_write+0x76a/0x910 [ 404.421811][T30911] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 404.427612][T30911] ksys_write+0xeb/0x1b0 [ 404.431919][T30911] __x64_sys_write+0x42/0x50 [ 404.436511][T30911] x64_sys_call+0x27dd/0x2d60 [ 404.441460][T30911] do_syscall_64+0xc9/0x1c0 [ 404.445955][T30911] ? clear_bhb_loop+0x55/0xb0 [ 404.450719][T30911] ? clear_bhb_loop+0x55/0xb0 [ 404.455477][T30911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.461466][T30911] RIP: 0033:0x7f6265c4dff9 [ 404.465893][T30911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.489399][T30911] RSP: 002b:00007f62648c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.497804][T30911] RAX: ffffffffffffffda RBX: 00007f6265e05f80 RCX: 00007f6265c4dff9 [ 404.505826][T30911] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000007 [ 404.513877][T30911] RBP: 00007f62648c7090 R08: 0000000000000000 R09: 0000000000000000 [ 404.521839][T30911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.529801][T30911] R13: 0000000000000000 R14: 00007f6265e05f80 R15: 00007ffc39a2fe28 [ 404.537786][T30911] [ 404.753881][T30924] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6189'. [ 404.840989][T30931] FAULT_INJECTION: forcing a failure. [ 404.840989][T30931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.854331][T30931] CPU: 0 UID: 0 PID: 30931 Comm: syz.2.6192 Not tainted 6.12.0-rc1-syzkaller #0 [ 404.861715][T30933] loop4: detected capacity change from 0 to 512 [ 404.863351][T30931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.879802][T30931] Call Trace: [ 404.883084][T30931] [ 404.886164][T30931] dump_stack_lvl+0xf2/0x150 [ 404.890895][T30931] dump_stack+0x15/0x20 [ 404.895564][T30931] should_fail_ex+0x223/0x230 [ 404.900276][T30931] should_fail_alloc_page+0xfd/0x110 [ 404.905557][T30931] __alloc_pages_noprof+0x109/0x360 [ 404.910754][T30931] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 404.916302][T30931] folio_alloc_mpol_noprof+0x36/0x70 [ 404.921621][T30931] shmem_get_folio_gfp+0x3d1/0xd90 [ 404.926738][T30931] shmem_write_begin+0xa2/0x180 [ 404.931672][T30931] generic_perform_write+0x1a8/0x4a0 [ 404.937124][T30931] shmem_file_write_iter+0xc2/0xe0 [ 404.942237][T30931] vfs_write+0x76a/0x910 [ 404.946483][T30931] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 404.952347][T30931] ksys_write+0xeb/0x1b0 [ 404.956647][T30931] __x64_sys_write+0x42/0x50 [ 404.961308][T30931] x64_sys_call+0x27dd/0x2d60 [ 404.965991][T30931] do_syscall_64+0xc9/0x1c0 [ 404.970520][T30931] ? clear_bhb_loop+0x55/0xb0 [ 404.975211][T30931] ? clear_bhb_loop+0x55/0xb0 [ 404.979972][T30931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.985866][T30931] RIP: 0033:0x7f43c35fdff9 [ 404.990289][T30931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.009893][T30931] RSP: 002b:00007f43c2271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.018300][T30931] RAX: ffffffffffffffda RBX: 00007f43c37b5f80 RCX: 00007f43c35fdff9 [ 405.026326][T30931] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000009 [ 405.034293][T30931] RBP: 00007f43c2271090 R08: 0000000000000000 R09: 0000000000000000 [ 405.042307][T30931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.050273][T30931] R13: 0000000000000000 R14: 00007f43c37b5f80 R15: 00007ffed9ae3008 [ 405.058296][T30931] [ 405.067577][T30933] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.091883][T30933] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.6193: iget: bad i_size value: -6917529027641081756 [ 405.105613][T30933] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6193: couldn't read orphan inode 17 (err -117) [ 405.127177][T30937] loop2: detected capacity change from 0 to 512 [ 405.135246][T30937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 405.156799][T30937] EXT4-fs (loop2): 1 truncate cleaned up [ 405.231310][T30952] loop4: detected capacity change from 0 to 512 [ 405.231310][T30954] loop2: detected capacity change from 0 to 512 [ 405.243894][T30956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.253321][T30954] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 405.265377][T30956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.276544][T30954] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 405.283093][T30954] EXT4-fs (loop2): mount failed [ 405.292163][T30963] pim6reg1: entered promiscuous mode [ 405.297490][T30963] pim6reg1: entered allmulticast mode [ 405.368404][T30968] loop2: detected capacity change from 0 to 512 [ 405.452949][T30974] loop4: detected capacity change from 0 to 2048 [ 405.542545][T30986] loop4: detected capacity change from 0 to 512 [ 405.569336][T30986] syzkaller0: entered allmulticast mode [ 405.582099][T30985] syzkaller0: left allmulticast mode [ 405.819492][T31001] pim6reg1: entered promiscuous mode [ 405.824816][T31001] pim6reg1: entered allmulticast mode [ 405.975613][T31007] loop4: detected capacity change from 0 to 164 [ 406.161052][T31022] loop1: detected capacity change from 0 to 512 [ 406.186317][T31022] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.206802][T31022] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.6228: iget: bad i_size value: -6917529027641081756 [ 406.240688][T31022] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.6228: couldn't read orphan inode 17 (err -117) [ 406.295423][T31032] bpf_get_probe_write_proto: 5 callbacks suppressed [ 406.295436][T31032] syz.0.6233[31032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.303793][T31030] pim6reg1: entered promiscuous mode [ 406.320876][T31030] pim6reg1: entered allmulticast mode [ 406.333936][T31032] syz.0.6233[31032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.333998][T31032] syz.0.6233[31032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.376770][T31031] process '/newroot/344/file0' started with executable stack [ 406.420374][T31037] loop1: detected capacity change from 0 to 256 [ 406.544827][T31054] loop1: detected capacity change from 0 to 2048 [ 406.552339][T31054] EXT4-fs: Ignoring removed orlov option [ 406.560035][T31054] EXT4-fs (loop1): unsupported descriptor size 50510 [ 406.621838][T31068] loop2: detected capacity change from 0 to 512 [ 406.629172][T31068] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.659224][T31068] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.6243: iget: bad i_size value: -6917529027641081756 [ 406.673169][T31068] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6243: couldn't read orphan inode 17 (err -117) [ 407.485261][T31209] loop4: detected capacity change from 0 to 512 [ 407.493026][T31209] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 407.503042][T31209] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 407.509836][T31209] EXT4-fs (loop4): mount failed [ 407.582273][T31221] loop4: detected capacity change from 0 to 512 [ 407.991609][T27546] bridge_slave_1: left allmulticast mode [ 407.997387][T27546] bridge_slave_1: left promiscuous mode [ 408.003151][T27546] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.011861][T27546] bridge_slave_0: left allmulticast mode [ 408.017588][T27546] bridge_slave_0: left promiscuous mode [ 408.023267][T27546] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.151886][T27546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.168073][T27546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.182542][T27546] bond0 (unregistering): Released all slaves [ 408.246737][T27546] hsr_slave_0: left promiscuous mode [ 408.257378][T27546] hsr_slave_1: left promiscuous mode [ 408.263441][T27546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.270943][T27546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.283672][T27546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.291343][T27546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.310550][T27546] veth1_macvtap: left promiscuous mode [ 408.316063][T27546] veth0_macvtap: left promiscuous mode [ 408.321595][T27546] veth1_vlan: left promiscuous mode [ 408.326974][T27546] veth0_vlan: left promiscuous mode [ 408.420152][T31238] loop0: detected capacity change from 0 to 128 [ 408.448868][T27546] team0 (unregistering): Port device team_slave_1 removed [ 408.473414][T27546] team0 (unregistering): Port device team_slave_0 removed [ 408.527070][T31237] netlink: 'syz.0.6256': attribute type 21 has an invalid length. [ 408.845512][T31251] loop4: detected capacity change from 0 to 512 [ 408.859950][ T29] kauditd_printk_skb: 841 callbacks suppressed [ 408.859964][ T29] audit: type=1400 audit(408.891:29793): avc: denied { setattr } for pid=31250 comm="syz.4.6261" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.891028][ T29] audit: type=1400 audit(408.891:29794): avc: denied { name_bind } for pid=31250 comm="syz.4.6261" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 408.920666][ T29] audit: type=1400 audit(408.951:29795): avc: denied { create } for pid=31254 comm="syz.4.6262" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 408.924032][T31255] block device autoloading is deprecated and will be removed. [ 408.942030][ T29] audit: type=1400 audit(408.951:29796): avc: denied { write } for pid=31254 comm="syz.4.6262" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 408.970594][ T29] audit: type=1400 audit(408.951:29797): avc: denied { open } for pid=31254 comm="syz.4.6262" path="/72/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.000051][ T29] audit: type=1400 audit(409.031:29798): avc: denied { ioctl } for pid=31254 comm="syz.4.6262" path="/72/file0" dev="tmpfs" ino=400 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.023915][ T29] audit: type=1400 audit(409.031:29799): avc: denied { read } for pid=2951 comm="acpid" name="mouse0" dev="devtmpfs" ino=565 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 409.045273][ T29] audit: type=1400 audit(409.031:29800): avc: denied { open } for pid=2951 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=565 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 409.067724][ T29] audit: type=1400 audit(409.031:29801): avc: denied { ioctl } for pid=2951 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=565 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 409.120920][ T29] audit: type=1400 audit(409.151:29802): avc: denied { read write } for pid=26048 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.138282][T31260] pim6reg1: entered promiscuous mode [ 409.150027][T31260] pim6reg1: entered allmulticast mode [ 409.205925][T31266] loop0: detected capacity change from 0 to 2048 [ 409.238373][T31266] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 409.257813][T31266] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 409.269269][T31276] loop1: detected capacity change from 0 to 512 [ 409.270899][T31266] EXT4-fs (loop0): This should not happen!! Data will be lost [ 409.270899][T31266] [ 409.286365][T31266] EXT4-fs (loop0): Total free blocks count 0 [ 409.289222][T31276] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 409.292424][T31266] EXT4-fs (loop0): Free/Dirty block details [ 409.306458][T31266] EXT4-fs (loop0): free_blocks=2415919104 [ 409.312251][T31266] EXT4-fs (loop0): dirty_blocks=16 [ 409.317341][T31266] EXT4-fs (loop0): Block reservation details [ 409.320506][T31276] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 409.323370][T31266] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 409.332763][T31276] EXT4-fs (loop1): mount failed [ 409.341584][T31277] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 409.354182][T31277] EXT4-fs (loop0): This should not happen!! Data will be lost [ 409.354182][T31277] [ 409.422417][T31281] loop1: detected capacity change from 0 to 512 [ 409.691441][T31292] loop0: detected capacity change from 0 to 512 [ 409.713277][T31292] syzkaller0: entered allmulticast mode [ 409.721530][T31292] syzkaller0 (unregistering): left allmulticast mode [ 410.110816][T31299] loop4: detected capacity change from 0 to 2048 [ 410.223166][T31310] loop4: detected capacity change from 0 to 1024 [ 410.231009][T31310] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.326491][T31318] syz.4.6284[31318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.326721][T31318] syz.4.6284[31318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.342021][T31318] syz.4.6284[31318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.355860][T31318] FAULT_INJECTION: forcing a failure. [ 410.355860][T31318] name failslab, interval 1, probability 0, space 0, times 0 [ 410.380226][T31318] CPU: 0 UID: 0 PID: 31318 Comm: syz.4.6284 Not tainted 6.12.0-rc1-syzkaller #0 [ 410.389257][T31318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.399326][T31318] Call Trace: [ 410.402597][T31318] [ 410.405517][T31318] dump_stack_lvl+0xf2/0x150 [ 410.410149][T31318] dump_stack+0x15/0x20 [ 410.414328][T31318] should_fail_ex+0x223/0x230 [ 410.419044][T31318] ? sidtab_sid2str_get+0xb8/0x140 [ 410.424145][T31318] should_failslab+0x8f/0xb0 [ 410.428771][T31318] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 410.435180][T31318] ? vsnprintf+0xdd8/0xe30 [ 410.439593][T31318] kmemdup_noprof+0x2a/0x60 [ 410.444096][T31318] sidtab_sid2str_get+0xb8/0x140 [ 410.449026][T31318] security_sid_to_context_core+0x1eb/0x2f0 [ 410.454973][T31318] security_sid_to_context+0x27/0x30 [ 410.460271][T31318] selinux_secid_to_secctx+0x22/0x30 [ 410.465557][T31318] security_secid_to_secctx+0x48/0x90 [ 410.470943][T31318] audit_log_task_context+0x8c/0x1b0 [ 410.476225][T31318] audit_log_task+0xfb/0x180 [ 410.480947][T31318] audit_seccomp+0x68/0x130 [ 410.485439][T31318] __seccomp_filter+0x6fa/0x1180 [ 410.490421][T31318] ? proc_fail_nth_write+0x12a/0x150 [ 410.495766][T31318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 410.501392][T31318] ? vfs_write+0x580/0x910 [ 410.505810][T31318] __secure_computing+0x9f/0x1c0 [ 410.510784][T31318] syscall_trace_enter+0xd1/0x1f0 [ 410.515851][T31318] do_syscall_64+0xaa/0x1c0 [ 410.520349][T31318] ? clear_bhb_loop+0x55/0xb0 [ 410.525041][T31318] ? clear_bhb_loop+0x55/0xb0 [ 410.529725][T31318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.535653][T31318] RIP: 0033:0x7f6265c4dff9 [ 410.540092][T31318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.559741][T31318] RSP: 002b:00007f62648c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 410.568227][T31318] RAX: ffffffffffffffda RBX: 00007f6265e05f80 RCX: 00007f6265c4dff9 [ 410.576228][T31318] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000006 [ 410.584270][T31318] RBP: 00007f62648c7090 R08: 0000000000000000 R09: 0000000000000000 [ 410.592238][T31318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.600267][T31318] R13: 0000000000000000 R14: 00007f6265e05f80 R15: 00007ffc39a2fe28 [ 410.608504][T31318] [ 410.644537][T31322] loop4: detected capacity change from 0 to 512 [ 410.661151][T31322] syzkaller0: entered allmulticast mode [ 410.671088][T31322] syzkaller0 (unregistering): left allmulticast mode [ 410.706114][T31328] loop1: detected capacity change from 0 to 512 [ 410.733708][T31328] FAULT_INJECTION: forcing a failure. [ 410.733708][T31328] name failslab, interval 1, probability 0, space 0, times 0 [ 410.746548][T31328] CPU: 0 UID: 0 PID: 31328 Comm: syz.1.6288 Not tainted 6.12.0-rc1-syzkaller #0 [ 410.755626][T31328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.765681][T31328] Call Trace: [ 410.768958][T31328] [ 410.771934][T31328] dump_stack_lvl+0xf2/0x150 [ 410.776520][T31328] dump_stack+0x15/0x20 [ 410.780669][T31328] should_fail_ex+0x223/0x230 [ 410.785345][T31328] ? ext4_find_extent+0x172/0x7c0 [ 410.790359][T31328] should_failslab+0x8f/0xb0 [ 410.795031][T31328] __kmalloc_noprof+0xa5/0x370 [ 410.799820][T31328] ext4_find_extent+0x172/0x7c0 [ 410.804661][T31328] ? __perf_event_overflow+0x495/0x630 [ 410.810163][T31328] ext4_ext_map_blocks+0x11f/0x35c0 [ 410.815382][T31328] ? perf_swevent_event+0x261/0x4a0 [ 410.820579][T31328] ? __rmqueue_pcplist+0xe8a/0x1030 [ 410.825770][T31328] ? down_read+0x171/0x4b0 [ 410.830212][T31328] ext4_map_query_blocks+0x71/0x180 [ 410.835402][T31328] ext4_map_blocks+0x238/0xcf0 [ 410.840164][T31328] _ext4_get_block+0x104/0x370 [ 410.844956][T31328] ? perf_trace_kmem_cache_alloc+0x107/0x140 [ 410.850929][T31328] ext4_get_block_unwritten+0x2c/0xb0 [ 410.856297][T31328] ext4_block_write_begin+0x34f/0x9c0 [ 410.861750][T31328] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 410.867816][T31328] ? folio_mapping+0xb8/0x120 [ 410.872615][T31328] ? ext4_inode_journal_mode+0xdf/0x1d0 [ 410.878177][T31328] ext4_write_begin+0x426/0xc30 [ 410.883061][T31328] ? fault_in_readable+0x97/0x1b0 [ 410.888090][T31328] ext4_da_write_begin+0x1b6/0x540 [ 410.893242][T31328] generic_perform_write+0x1a8/0x4a0 [ 410.898521][T31328] ext4_buffered_write_iter+0x1ea/0x370 [ 410.904068][T31328] ext4_file_write_iter+0x293/0xe10 [ 410.909261][T31328] ? kstrtouint+0x77/0xc0 [ 410.913697][T31328] ? kstrtouint_from_user+0xb0/0xe0 [ 410.918995][T31328] ? avc_policy_seqno+0x15/0x20 [ 410.923842][T31328] vfs_write+0x76a/0x910 [ 410.928082][T31328] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 410.933803][T31328] ksys_write+0xeb/0x1b0 [ 410.938047][T31328] __x64_sys_write+0x42/0x50 [ 410.942649][T31328] x64_sys_call+0x27dd/0x2d60 [ 410.947384][T31328] do_syscall_64+0xc9/0x1c0 [ 410.951878][T31328] ? clear_bhb_loop+0x55/0xb0 [ 410.956553][T31328] ? clear_bhb_loop+0x55/0xb0 [ 410.961227][T31328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.967119][T31328] RIP: 0033:0x7f3d5306dff9 [ 410.971524][T31328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.991215][T31328] RSP: 002b:00007f3d51ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.999651][T31328] RAX: ffffffffffffffda RBX: 00007f3d53225f80 RCX: 00007f3d5306dff9 [ 411.007897][T31328] RDX: 000000000208e24b RSI: 0000000020000380 RDI: 0000000000000007 [ 411.016059][T31328] RBP: 00007f3d51ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.024455][T31328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.032593][T31328] R13: 0000000000000000 R14: 00007f3d53225f80 R15: 00007ffdd36e7008 [ 411.040664][T31328] [ 411.113342][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 411.137393][T31348] loop1: detected capacity change from 0 to 2048 [ 411.153734][T31348] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 411.171757][T31348] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 411.183013][T31354] loop2: detected capacity change from 0 to 1024 [ 411.186819][T31348] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.186819][T31348] [ 411.196178][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 411.198519][T31358] FAULT_INJECTION: forcing a failure. [ 411.198519][T31358] name failslab, interval 1, probability 0, space 0, times 0 [ 411.207591][T31348] EXT4-fs (loop1): Total free blocks count 0 [ 411.214310][T31358] CPU: 0 UID: 0 PID: 31358 Comm: syz.4.6297 Not tainted 6.12.0-rc1-syzkaller #0 [ 411.226925][T31348] EXT4-fs (loop1): Free/Dirty block details [ 411.232811][T31358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.232824][T31358] Call Trace: [ 411.232831][T31358] [ 411.241935][T31348] EXT4-fs (loop1): free_blocks=2415919104 [ 411.247726][T31358] dump_stack_lvl+0xf2/0x150 [ 411.247752][T31358] dump_stack+0x15/0x20 [ 411.247770][T31358] should_fail_ex+0x223/0x230 [ 411.257937][T31348] EXT4-fs (loop1): dirty_blocks=16 [ 411.257952][T31348] EXT4-fs (loop1): Block reservation details [ 411.257962][T31348] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 411.261244][T31358] ? __se_sys_mount+0xf7/0x2d0 [ 411.261276][T31358] should_failslab+0x8f/0xb0 [ 411.286078][T31360] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 411.288400][T31358] __kmalloc_cache_noprof+0x4b/0x2a0 [ 411.288437][T31358] __se_sys_mount+0xf7/0x2d0 [ 411.294459][T31360] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.294459][T31360] [ 411.300307][T31358] ? fput+0x14e/0x190 [ 411.336210][T31352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6297'. [ 411.341701][T31358] ? ksys_write+0x17a/0x1b0 [ 411.341743][T31358] __x64_sys_mount+0x67/0x80 [ 411.341772][T31358] x64_sys_call+0x203e/0x2d60 [ 411.345732][T31352] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6297'. [ 411.354640][T31358] do_syscall_64+0xc9/0x1c0 [ 411.363127][T31352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6297'. [ 411.363752][T31358] ? clear_bhb_loop+0x55/0xb0 [ 411.395840][T31358] ? clear_bhb_loop+0x55/0xb0 [ 411.400545][T31358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.406526][T31358] RIP: 0033:0x7f6265c4dff9 [ 411.411142][T31358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.430775][T31358] RSP: 002b:00007f62648a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.439177][T31358] RAX: ffffffffffffffda RBX: 00007f6265e06058 RCX: 00007f6265c4dff9 [ 411.447203][T31358] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 411.455157][T31358] RBP: 00007f62648a6090 R08: 0000000020000b40 R09: 0000000000000000 [ 411.463114][T31358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.471147][T31358] R13: 0000000000000000 R14: 00007f6265e06058 R15: 00007ffc39a2fe28 [ 411.479123][T31358] [ 411.558586][T31368] loop2: detected capacity change from 0 to 1024 [ 411.623505][T31378] loop2: detected capacity change from 0 to 512 [ 411.641442][T31378] syzkaller0: entered allmulticast mode [ 411.648964][T31378] syzkaller0 (unregistering): left allmulticast mode [ 411.661085][T31366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6301'. [ 411.670344][T31366] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6301'. [ 411.679915][T31366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6301'. [ 411.703431][T31383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6307'. [ 411.745250][T31387] loop0: detected capacity change from 0 to 2048 [ 411.799992][T24756] ================================================================== [ 411.808134][T24756] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 411.815876][T24756] [ 411.818202][T24756] write to 0xffff888237d2ac68 of 1 bytes by task 31389 on cpu 1: [ 411.825946][T24756] folios_put_refs+0x26d/0x2b0 [ 411.830733][T24756] folio_batch_move_lru+0x202/0x230 [ 411.836036][T24756] folio_add_lru+0x145/0x1f0 [ 411.840639][T24756] shmem_get_folio_gfp+0x7d6/0xd90 [ 411.845779][T24756] shmem_fault+0xfa/0x250 [ 411.850123][T24756] __do_fault+0xb6/0x200 [ 411.854470][T24756] handle_mm_fault+0xe7f/0x2a80 [ 411.859335][T24756] __get_user_pages+0xf2c/0x2670 [ 411.864287][T24756] __mm_populate+0x25b/0x3b0 [ 411.868881][T24756] vm_mmap_pgoff+0x1d6/0x290 [ 411.873468][T24756] ksys_mmap_pgoff+0xd0/0x330 [ 411.878139][T24756] x64_sys_call+0x1884/0x2d60 [ 411.882811][T24756] do_syscall_64+0xc9/0x1c0 [ 411.887306][T24756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.893196][T24756] [ 411.895539][T24756] read to 0xffff888237d2ac68 of 1 bytes by task 24756 on cpu 0: [ 411.903155][T24756] __lru_add_drain_all+0x136/0x3f0 [ 411.908270][T24756] lru_add_drain_all+0x10/0x20 [ 411.913029][T24756] invalidate_bdev+0x47/0x70 [ 411.917619][T24756] ext4_put_super+0x571/0x840 [ 411.922295][T24756] generic_shutdown_super+0xe5/0x220 [ 411.927574][T24756] kill_block_super+0x2a/0x70 [ 411.932252][T24756] ext4_kill_sb+0x44/0x80 [ 411.936580][T24756] deactivate_locked_super+0x7d/0x1c0 [ 411.942101][T24756] deactivate_super+0x9f/0xb0 [ 411.946775][T24756] cleanup_mnt+0x268/0x2e0 [ 411.951182][T24756] __cleanup_mnt+0x19/0x20 [ 411.955701][T24756] task_work_run+0x13a/0x1a0 [ 411.960296][T24756] syscall_exit_to_user_mode+0xbe/0x130 [ 411.965851][T24756] do_syscall_64+0xd6/0x1c0 [ 411.970346][T24756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.976240][T24756] [ 411.978551][T24756] value changed: 0x1f -> 0x01 [ 411.983210][T24756] [ 411.985530][T24756] Reported by Kernel Concurrency Sanitizer on: [ 411.991675][T24756] CPU: 0 UID: 0 PID: 24756 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=51460 recv=23932 n=-1 (errno 104: Connection reset by peer) [ 412.000866][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.010911][T24756] ================================================================== [ 412.305712][T27516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.381025][T27516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.471270][T27516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.554914][T27516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.639791][T27516] bridge_slave_1: left allmulticast mode [ 412.645443][T27516] bridge_slave_1: left promiscuous mode [ 412.651232][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.659372][T27516] bridge_slave_0: left allmulticast mode [ 412.665000][T27516] bridge_slave_0: left promiscuous mode [ 412.670758][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.781183][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.792400][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.802576][T27516] bond0 (unregistering): Released all slaves [ 412.872676][T27516] hsr_slave_0: left promiscuous mode [ 412.878583][T27516] hsr_slave_1: left promiscuous mode [ 412.884456][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.891951][T27516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.899795][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.907202][T27516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.918311][T27516] veth1_macvtap: left promiscuous mode [ 412.923976][T27516] veth0_macvtap: left promiscuous mode [ 412.929655][T27516] veth1_vlan: left promiscuous mode [ 412.934884][T27516] veth0_vlan: left promiscuous mode [ 413.014022][T27516] team0 (unregistering): Port device team_slave_1 removed [ 413.024516][T27516] team0 (unregistering): Port device team_slave_0 removed [ 413.372264][T27516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.451742][T27516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.500914][T27516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.560931][T27516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.632277][T27516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.691054][T27516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.740737][T27516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.811342][T27516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.871890][T27516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.901077][T27516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.940453][T27516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.000297][T27516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.059996][T27516] bridge_slave_1: left allmulticast mode [ 414.065670][T27516] bridge_slave_1: left promiscuous mode [ 414.073720][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.081776][T27516] bridge_slave_0: left allmulticast mode [ 414.087454][T27516] bridge_slave_0: left promiscuous mode [ 414.093100][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.101384][T27516] bridge_slave_1: left allmulticast mode [ 414.107016][T27516] bridge_slave_1: left promiscuous mode [ 414.112793][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.120795][T27516] bridge_slave_0: left allmulticast mode [ 414.126441][T27516] bridge_slave_0: left promiscuous mode [ 414.132236][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.140452][T27516] bridge_slave_1: left allmulticast mode [ 414.146130][T27516] bridge_slave_1: left promiscuous mode [ 414.151939][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.160931][T27516] bridge_slave_0: left allmulticast mode [ 414.166643][T27516] bridge_slave_0: left promiscuous mode [ 414.172370][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.180410][T27516] bridge_slave_1: left allmulticast mode [ 414.186047][T27516] bridge_slave_1: left promiscuous mode [ 414.191817][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.199658][T27516] bridge_slave_0: left allmulticast mode [ 414.205310][T27516] bridge_slave_0: left promiscuous mode [ 414.210957][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.640434][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.650583][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.661065][T27516] bond0 (unregistering): Released all slaves [ 414.670124][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.680531][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.690526][T27516] bond0 (unregistering): Released all slaves [ 414.699611][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.710188][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.721056][T27516] bond0 (unregistering): Released all slaves [ 414.730456][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.741134][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.751307][T27516] bond0 (unregistering): Released all slaves [ 414.813071][T27516] IPVS: stopping backup sync thread 29611 ... [ 414.823108][T27516] hsr_slave_0: left promiscuous mode [ 414.828786][T27516] hsr_slave_1: left promiscuous mode [ 414.834428][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.842012][T27516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.850039][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.857537][T27516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.867325][T27516] hsr_slave_0: left promiscuous mode [ 414.873047][T27516] hsr_slave_1: left promiscuous mode [ 414.880522][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.887936][T27516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.895619][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.903067][T27516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.913528][T27516] hsr_slave_0: left promiscuous mode [ 414.919544][T27516] hsr_slave_1: left promiscuous mode [ 414.925388][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.932961][T27516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.940918][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.948406][T27516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.958304][T27516] hsr_slave_0: left promiscuous mode [ 414.964044][T27516] hsr_slave_1: left promiscuous mode [ 414.969791][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.977194][T27516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.984754][T27516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.992273][T27516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.009444][T27516] veth1_macvtap: left promiscuous mode [ 415.014937][T27516] veth0_macvtap: left promiscuous mode [ 415.020527][T27516] veth1_vlan: left promiscuous mode [ 415.025809][T27516] veth0_vlan: left promiscuous mode [ 415.032124][T27516] veth1_macvtap: left promiscuous mode [ 415.037629][T27516] veth0_macvtap: left promiscuous mode [ 415.043254][T27516] veth1_vlan: left promiscuous mode [ 415.048545][T27516] veth0_vlan: left promiscuous mode [ 415.054189][T27516] veth1_macvtap: left promiscuous mode [ 415.059707][T27516] veth0_macvtap: left promiscuous mode [ 415.065244][T27516] veth1_vlan: left promiscuous mode [ 415.070488][T27516] veth0_vlan: left promiscuous mode [ 415.076248][T27516] veth1_macvtap: left promiscuous mode [ 415.081753][T27516] veth0_macvtap: left promiscuous mode [ 415.087268][T27516] veth1_vlan: left promiscuous mode [ 415.092490][T27516] veth0_vlan: left promiscuous mode [ 415.294243][T27516] team0 (unregistering): Port device team_slave_1 removed [ 415.304194][T27516] team0 (unregistering): Port device team_slave_0 removed [ 415.363831][T27516] team0 (unregistering): Port device team_slave_1 removed [ 415.374204][T27516] team0 (unregistering): Port device team_slave_0 removed [ 415.434941][T27516] team0 (unregistering): Port device team_slave_1 removed [ 415.445338][T27516] team0 (unregistering): Port device team_slave_0 removed [ 415.504973][T27516] team0 (unregistering): Port device team_slave_1 removed [ 415.515712][T27516] team0 (unregistering): Port device team_slave_0 removed