last executing test programs: 7.351331222s ago: executing program 0 (id=613): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000580001800d0001"], 0x6c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) 7.216764243s ago: executing program 0 (id=617): socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.12756575s ago: executing program 0 (id=620): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.050888787s ago: executing program 0 (id=622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendfile(r0, r4, &(0x7f0000000080)=0x15bc, 0x948d) shmctl$IPC_RMID(0x0, 0x0) syslog(0x1, 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x6, 0x1010f3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6.88481212s ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fallocate(0xffffffffffffffff, 0x23, 0x80000000, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000007c0)={[{@shortname_winnt}, {@utf8no}, {@fat=@usefree}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}, {@rodir}, {@shortname_lower}]}, 0xfd, 0x299, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.194480278s ago: executing program 0 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="08000000b9911cf2b13c5c000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$kcm(0x2, 0x5, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, &(0x7f00000001c0)=""/162, 0xa2}, 0x2}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000013c0)=""/160, 0xa0}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/6, 0x6}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/16, 0x10}], 0x8, &(0x7f0000001700)=""/212, 0xd4}, 0x7fff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/144, 0x90}], 0x3, &(0x7f0000001a00)=""/218, 0xda}, 0x7}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/65, 0x41}], 0x1, &(0x7f0000001bc0)=""/200, 0xc8}, 0xc}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001cc0)=""/33, 0x21}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/41, 0x29}, {&(0x7f0000001f80)=""/22, 0x16}, {&(0x7f0000001fc0)=""/128, 0x80}], 0x8, &(0x7f00000020c0)=""/231, 0xe7}, 0x9}, {{&(0x7f00000021c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @remote, @rose, @null, @netrom]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/110, 0x6e}], 0x2, &(0x7f0000002440)=""/41, 0x29}, 0x9}], 0x6, 0x40000001, &(0x7f0000002640)={r6, r7+60000000}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="070000f8ff20d12044d2a200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 2.026577652s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') 2.010418373s ago: executing program 4 (id=679): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002540)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff57fb57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b185f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c760b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab7c3fa4d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926eb29bd482b1e0b6d61ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd800"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x5d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") r1 = open(&(0x7f0000000100)='./file2\x00', 0x145842, 0x0) r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) sendfile(r2, r1, 0x0, 0x800000007f06) 1.613582646s ago: executing program 1 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, 'GPL\x00'}}}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffa}, {0x31, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.272154494s ago: executing program 1 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="08000000b9911cf2b13c5c000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$kcm(0x2, 0x5, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, &(0x7f00000001c0)=""/162, 0xa2}, 0x2}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000013c0)=""/160, 0xa0}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/6, 0x6}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/16, 0x10}], 0x8, &(0x7f0000001700)=""/212, 0xd4}, 0x7fff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/144, 0x90}], 0x3, &(0x7f0000001a00)=""/218, 0xda}, 0x7}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/65, 0x41}], 0x1, &(0x7f0000001bc0)=""/200, 0xc8}, 0xc}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001cc0)=""/33, 0x21}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/41, 0x29}, {&(0x7f0000001f80)=""/22, 0x16}, {&(0x7f0000001fc0)=""/128, 0x80}], 0x8, &(0x7f00000020c0)=""/231, 0xe7}, 0x9}, {{&(0x7f00000021c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @remote, @rose, @null, @netrom]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/110, 0x6e}, {0x0}], 0x3, &(0x7f0000002440)=""/41, 0x29}, 0x9}], 0x6, 0x40000001, &(0x7f0000002640)={r6, r7+60000000}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="070000f8ff20d12044d2a200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 1.182043912s ago: executing program 1 (id=686): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 1.088962099s ago: executing program 1 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x400, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, 0x0, 0x0, 0xfecc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)='`', 0x1}], 0x1}}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1.066109391s ago: executing program 4 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x8, &(0x7f00000008c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000340)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@journal_async_commit}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) 808.909652ms ago: executing program 2 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100ff00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 714.28906ms ago: executing program 2 (id=694): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b67bcb1b997ce8b6325d151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000e40)="029993440c7a0c95d3bb8cf353fd63ca88ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c364fb7ac429e434ccb0320483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca001c470155ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f80)="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", 0x186}, {&(0x7f0000000680)="397d5f2edc82d0d67b12598491a939501079de6b93337ae5ab9ee47dc3e798cf69cfebf169fc7257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9dbfc4fe6db927cd4d03965f420326d5a4066c8726b9f2ca90f2158d3cc3f0ac8df7abf77e", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200", 0xd0}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c0472f0700000000", 0x12}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 664.301765ms ago: executing program 3 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, 'GPL\x00'}}}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffa}, {0x31, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 660.685814ms ago: executing program 3 (id=696): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008d3d61708925a3f736b110efd7f7f05604f5399cd809064ec09a971ca431595e4cfb55524d95e0431ea388b7dfb1b7d3f230f1fbac57a5dc2dabfdb703c5be8e572007a88a72c023d3f9ba0c9e87bf4344ed66c8eed25fce72e2b2a4f88fcd76c18f6f793e4f05b44a7095152b517514076d382c512266d7f6c65800b350b3b31f9fc7feae082c4146b66eb6cbc49ac1c5b99a46110b9b7014f63a64b1fdac3591cf74a992ae88a3c4b8b43bb52513b400dd672dbeed9868dd3ea2de443fb6922fd6be0fa2c47eacb7bb03eb0e0a8e625b1d665ad33d5523381a70edb7ec420186db9a1dd0fc6b1f"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="08000000b9911cf2b13c5c000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$kcm(0x2, 0x5, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, &(0x7f00000001c0)=""/162, 0xa2}, 0x2}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000013c0)=""/160, 0xa0}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/6, 0x6}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/16, 0x10}], 0x8, &(0x7f0000001700)=""/212, 0xd4}, 0x7fff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/144, 0x90}], 0x3, &(0x7f0000001a00)=""/218, 0xda}, 0x7}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/65, 0x41}], 0x1, &(0x7f0000001bc0)=""/200, 0xc8}, 0xc}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001cc0)=""/33, 0x21}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/41, 0x29}, {&(0x7f0000001f80)=""/22, 0x16}, {&(0x7f0000001fc0)=""/128, 0x80}], 0x8, &(0x7f00000020c0)=""/231, 0xe7}, 0x9}, {{&(0x7f00000021c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @remote, @rose, @null, @netrom]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/110, 0x6e}, {0x0}], 0x3, &(0x7f0000002440)=""/41, 0x29}, 0x9}], 0x6, 0x40000001, &(0x7f0000002640)={r6, r7+60000000}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="070000f8ff20d12044d2a200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 635.336477ms ago: executing program 1 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 594.41314ms ago: executing program 2 (id=698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d20680d7fdfe4b88942a31f48597e36e03b9d6579b1c599db6e466049c2d4c830345305135e65d3a895c50f80200f6c0aba61f6304000000ff"], 0xdd12}], 0x1}, 0x20048004) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 543.263974ms ago: executing program 3 (id=699): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 506.294268ms ago: executing program 4 (id=700): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0xffffffffffffe0eb}, 0x40, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)="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", 0x151, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000001e000000010000000cfbff000016d99a314ea499d975ce7812ffff110a610000000035000000d7ae91496c4db9c58ea50388cd12cfb397262d1c756d87f68f940028525547a5cb5fc2a400269e1a1da25c6b0733b5146fdb3ff34bd7269ea3db332f46eaaaa9fc19d2c377584d2065c5e155df009ba02114e9c7cc03f21c3225c8ec3617225d81e5f5417940a9f2c0cf8fe522215d0962dd73da958b0fd477d0a1a327324bc44b0a308c49c2e02ff181c95215d8e6eb41c3aacf4e85c491cc95792018b187caf83ca4b5968d1eda876fbf16415b2100d421d4f2c26d8bed26f84e91c15ca07c"], 0x5f}) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1100) 505.803967ms ago: executing program 2 (id=701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000300)='dd:cb\ve') 476.43112ms ago: executing program 1 (id=702): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0x5, 0xbf, {0xbf, 0x10, "19eb35ad209d8c9849f75f35071c9a5a438e11204f5298a9fdd72fc97d4e3b14539393a63bd1c77b13014104c9c541b03003a2e63bae00810096a131230005048825ae8f8e2b7f73d6ccf634b2248e35e6367303f6c9e26ce19e9c8bc1dccea4766cadb8a7a43a05a3e0a86f1a734b47c54b8e4e652f026ff3c8352dee0b40c612d6e9d8464506e733efa61b25b9a9dceca378f8ba306e4a7c2a1d7c3bbf692510b680153d4133dac62a82daf44dc47182429bcb16652719118034a9c1"}}, &(0x7f0000000100)={0x0, 0x3, 0xd, @string={0xd, 0x3, "63bac9ab7067575041273c"}}, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "98f68bfc"}, @local=@item_012={0x2, 0x2, 0xb, "0087"}, @global=@item_4={0x3, 0x1, 0x5, "fcd842a8"}, @global=@item_012={0x1, 0x1, 0x7, "a6"}, @global=@item_4={0x3, 0x1, 0x0, "710dfbb2"}, @main=@item_4={0x3, 0x0, 0xc, "13321f28"}, @global=@item_4={0x3, 0x1, 0x9, "f4ec9b6d"}, @global=@item_012={0x1, 0x1, 0x4, '['}, @global=@item_012={0x1, 0x1, 0x7, "0f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x80, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x30, 0xf0, "c81b90476130cb77fbbb736730b84ca4726e625726941b10d2101d3b7e46daa186f72721f55e4196ce83693b58a4951d5fa93eb97d509b100d199e5990bb3086a021ff12b3d2d34b7829b39870f6af15ec24f0a69a7d08b3ba2380fe166a6629a7e11b8985c4a523744c7b44771df734bef8245b5a897aa99fecf73c65e74899872c0fe490945d48cdf4867c6905724e5270aed35d7a29d866894e478de862b93991be48428592bdd27d619ae955aaa54806ca25bacedcfef4eb039a6be0985297ef1ffe71455bbf45f340f8bca22e3ac039749be65ebc1b4c6a4219c22babfba3ef6d9add4a0140d96b1ffc580be606"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2b}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x1, 0x7a, "e9f04baa38d875b215f6898b972eb761c58d1f90fa49c536cfc6fac45e887639ea76586798e5d614c04d3f202c164f867828b8968f6597d388f26107332448de1d148673854d349b4f848f03be2750828ee0b1505e952847cd2a041dae57ba262a938643ec2326066a464aa5b9cb58aa500e52bbf2942eb4128d"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b74d5557422c0cd1000400000000420000000000000002e2ec994846a2461efb7087f2214444bdb29a6385120f9abfb8542ebf19ab0f914ac8f6ce09c85a7ed9ad654d7189a8dfb5ae58bb22dee64a6c6f6eeaac0e093fa22130215d713a622ce992c1f76a6e448c66f9a77c750ba314fdb6b5746b8d08d9a65c52fa99fef39ad38f8b0699e4b3dd23af33512f60bbdb6e643ab3fd771697bf96b842d159db2cab952700"/179], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='f2fs_file_write_iter\x00', r2}, 0xfeea) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x3, 0x33) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b0000000500000002000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="a579bbcb1e8e00000000000008004503002c000000000004907800000000e0000001000000000018907804000000000000000000000020000000"], 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 476.22013ms ago: executing program 3 (id=703): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 442.894032ms ago: executing program 2 (id=704): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendfile(r0, r4, &(0x7f0000000080)=0x15bc, 0x948d) shmctl$IPC_RMID(0x0, 0x0) syslog(0x1, 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 352.25699ms ago: executing program 4 (id=705): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) 255.161028ms ago: executing program 3 (id=706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x400, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, 0x0, 0x0, 0xfecc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)='`', 0x1}], 0x1}}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 243.947199ms ago: executing program 2 (id=707): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x501300, 0x140) fchmodat(r8, &(0x7f00000001c0)='./file0\x00', 0xc) 104.483931ms ago: executing program 4 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="08000000b9911cf2b13c5c000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$kcm(0x2, 0x5, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000000)=""/43, 0x2b}], 0x2, &(0x7f00000001c0)=""/162, 0xa2}, 0x2}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000013c0)=""/160, 0xa0}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/219, 0xdb}, {&(0x7f00000015c0)=""/6, 0x6}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/16, 0x10}], 0x8, &(0x7f0000001700)=""/212, 0xd4}, 0x7fff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/144, 0x90}], 0x3, &(0x7f0000001a00)=""/218, 0xda}, 0x7}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/65, 0x41}], 0x1, &(0x7f0000001bc0)=""/200, 0xc8}, 0xc}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001cc0)=""/33, 0x21}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/147, 0x93}, {&(0x7f0000001f40)=""/41, 0x29}, {&(0x7f0000001f80)=""/22, 0x16}, {&(0x7f0000001fc0)=""/128, 0x80}], 0x8, &(0x7f00000020c0)=""/231, 0xe7}, 0x9}, {{&(0x7f00000021c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @remote, @rose, @null, @netrom]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/110, 0x6e}, {0x0}], 0x3, &(0x7f0000002440)=""/41, 0x29}, 0x9}], 0x6, 0x40000001, &(0x7f0000002640)={r6, r7+60000000}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="070000f8ff20d12044d2a200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 0s ago: executing program 3 (id=709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b67bcb1b997ce8b6325d151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000e40)="029993440c7a0c95d3bb8cf353fd63ca88ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c364fb7ac429e434ccb0320483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca001c470155ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f80)="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", 0x186}, {&(0x7f0000000680)="397d5f2edc82d0d67b12598491a939501079de6b93337ae5ab9ee47dc3e798cf69cfebf169fc7257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9dbfc4fe6db927cd4d03965f420326d5a4066c8726b9f2ca90f2158d3cc3f0ac8df7abf77e", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200", 0xd0}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c0472f0700000000", 0x12}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): dm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.699333][ T29] audit: type=1400 audit(1729363452.545:1573): avc: denied { read write } for pid=5184 comm="+}[@" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.721925][ T29] audit: type=1400 audit(1729363452.545:1574): avc: denied { open } for pid=5184 comm="+}[@" path="/101/file0/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.783314][ T5201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.838467][ T5201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.387779][ T5204] loop4: detected capacity change from 0 to 512 [ 94.428296][ T5204] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.450242][ T5204] EXT4-fs (loop4): mount failed [ 94.513527][ T5208] loop4: detected capacity change from 0 to 512 [ 94.540393][ T5208] EXT4-fs: Ignoring removed nobh option [ 94.546207][ T5208] EXT4-fs: Ignoring removed nobh option [ 94.574466][ T5208] EXT4-fs (loop4): failed to initialize system zone (-117) [ 94.603013][ T5208] EXT4-fs (loop4): mount failed [ 94.658441][ T5211] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.698354][ T5211] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.746383][ T5211] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.806729][ T5211] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.896873][ T5240] loop1: detected capacity change from 0 to 128 [ 94.913627][ T5240] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.947907][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 94.987025][ T5256] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 95.018458][ T5263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.116312][ T5263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.166635][ T5263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.217043][ T5263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.583111][ T5270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.617385][ T5270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.666572][ T5270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.727486][ T5270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.740939][ T5201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.756116][ T5263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.768132][ T5263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779489][ T5263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.791664][ T5263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803108][ T5270] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814336][ T5270] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.832378][ T5270] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.844091][ T5270] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.845014][ T5275] loop1: detected capacity change from 0 to 164 [ 95.867119][ T5275] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 95.904249][ T5279] loop4: detected capacity change from 0 to 512 [ 95.914974][ T5279] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.931377][ T5279] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.384: corrupted in-inode xattr: e_name out of bounds [ 95.946128][ T5279] EXT4-fs (loop4): 1 truncate cleaned up [ 95.979817][ T3874] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /67/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.002646][ T3874] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.024590][ T3874] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /67/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.047547][ T3874] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.068560][ T3874] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /67/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.091803][ T3874] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.113382][ T3874] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /67/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.136341][ T3874] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.157963][ T3874] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /67/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.180093][ T3874] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.353572][ T5289] 9pnet: Could not find request transport: 0xffffffffffffffff [ 96.376492][ T5293] loop1: detected capacity change from 0 to 128 [ 96.729401][ T5211] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.740515][ T5211] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751657][ T5211] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.762865][ T5211] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.811993][ T5298] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.856236][ T5298] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.936382][ T5298] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.996190][ T5298] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.347670][ T5301] loop1: detected capacity change from 0 to 512 [ 97.358419][ T5201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.370133][ T5301] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.385204][ T5301] EXT4-fs (loop1): mount failed [ 97.411980][ T5201] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.423505][ T5201] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.440126][ T131] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.441583][ T5307] loop1: detected capacity change from 0 to 512 [ 97.453220][ T4042] EXT4-fs unmount: 16 callbacks suppressed [ 97.453237][ T4042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.470953][ T5201] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482459][ T5307] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.498917][ T5201] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507576][ T5307] EXT4-fs (loop1): mount failed [ 97.522538][ T131] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.577324][ T131] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.639328][ T131] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.735509][ T131] bridge_slave_1: left allmulticast mode [ 97.741261][ T131] bridge_slave_1: left promiscuous mode [ 97.747046][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.756778][ T131] bridge_slave_0: left allmulticast mode [ 97.762469][ T131] bridge_slave_0: left promiscuous mode [ 97.768268][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.827408][ T5335] 9pnet: Could not find request transport: 0xffffffffffffffff [ 97.899658][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.910125][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.932056][ T131] bond0 (unregistering): Released all slaves [ 98.018419][ T5311] chnl_net:caif_netlink_parms(): no params data found [ 98.062591][ T131] hsr_slave_0: left promiscuous mode [ 98.077592][ T131] hsr_slave_1: left promiscuous mode [ 98.102626][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.105735][ T5359] loop2: detected capacity change from 0 to 512 [ 98.110318][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.143284][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.150803][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.161076][ T131] veth1_macvtap: left promiscuous mode [ 98.166626][ T131] veth0_macvtap: left promiscuous mode [ 98.172209][ T131] veth1_vlan: left promiscuous mode [ 98.176069][ T5359] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.177988][ T131] veth0_vlan: left promiscuous mode [ 98.194091][ T5359] EXT4-fs (loop2): mount failed [ 98.291398][ T131] team0 (unregistering): Port device team_slave_1 removed [ 98.302032][ T131] team0 (unregistering): Port device team_slave_0 removed [ 98.361309][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 98.371719][ T5373] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.417602][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.424837][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.432187][ T5311] bridge_slave_0: entered allmulticast mode [ 98.438781][ T5311] bridge_slave_0: entered promiscuous mode [ 98.447930][ T5373] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.458503][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.465748][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.473035][ T5311] bridge_slave_1: entered allmulticast mode [ 98.476924][ T5381] 9pnet: Could not find request transport: 0xffffffffffffffff [ 98.479945][ T5311] bridge_slave_1: entered promiscuous mode [ 98.516000][ T5311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.531884][ T5311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.546338][ T5373] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.576015][ T5311] team0: Port device team_slave_0 added [ 98.582792][ T5311] team0: Port device team_slave_1 added [ 98.606038][ T5311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.613071][ T5311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.639075][ T5311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.652742][ T5373] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.664090][ T5311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.671130][ T5311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.697117][ T5311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.743834][ T5311] hsr_slave_0: entered promiscuous mode [ 98.757738][ T5311] hsr_slave_1: entered promiscuous mode [ 98.763820][ T5311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.771746][ T5311] Cannot create hsr debugfs directory [ 98.821113][ T5409] loop1: detected capacity change from 0 to 512 [ 98.833569][ T5409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.850109][ T5409] EXT4-fs (loop1): 1 truncate cleaned up [ 98.858732][ T5409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.913735][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.043836][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 99.143237][ T5311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.154385][ T5452] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.165398][ T5311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.174920][ T5311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.183734][ T5311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.208004][ T5452] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.242297][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.252677][ T5452] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.271491][ T5311] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.281077][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.288259][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.308156][ T5311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.318612][ T5311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.333080][ T5452] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.345199][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.352288][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.417727][ T5311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.499703][ T5311] veth0_vlan: entered promiscuous mode [ 99.509411][ T5311] veth1_vlan: entered promiscuous mode [ 99.527747][ T5311] veth0_macvtap: entered promiscuous mode [ 99.535685][ T5311] veth1_macvtap: entered promiscuous mode [ 99.548487][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.559030][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.568925][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.579461][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.589391][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.599853][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.609764][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.620304][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.631012][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.641828][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.652331][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.662235][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.672790][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.682662][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.693253][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.698702][ T3874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.703107][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.722580][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.733654][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.744441][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.758825][ T5311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.767653][ T5311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776440][ T5311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.785228][ T5311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.808799][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.877698][ T5529] loop3: detected capacity change from 0 to 512 [ 99.887183][ T5529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.898061][ T5529] EXT4-fs (loop3): 1 truncate cleaned up [ 99.898732][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.904021][ T5529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.961178][ T5311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.997270][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.022011][ T5536] loop3: detected capacity change from 0 to 512 [ 100.029919][ T5536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.041090][ T5536] EXT4-fs (loop3): 1 truncate cleaned up [ 100.042809][ T5516] chnl_net:caif_netlink_parms(): no params data found [ 100.047832][ T5536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.092573][ T5311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.123335][ T5543] loop3: detected capacity change from 0 to 512 [ 100.131221][ T5543] EXT4-fs: Ignoring removed nobh option [ 100.136855][ T5543] EXT4-fs: Ignoring removed nobh option [ 100.145455][ T5543] EXT4-fs (loop3): failed to initialize system zone (-117) [ 100.152747][ T5543] EXT4-fs (loop3): mount failed [ 100.218949][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.231003][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.245564][ T50] bond0 (unregistering): Released all slaves [ 100.261589][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.268744][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.276573][ T5516] bridge_slave_0: entered allmulticast mode [ 100.283042][ T5516] bridge_slave_0: entered promiscuous mode [ 100.290576][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.297824][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.305007][ T5516] bridge_slave_1: entered allmulticast mode [ 100.311972][ T5516] bridge_slave_1: entered promiscuous mode [ 100.323150][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 100.332181][ T5551] bridge_slave_1: left allmulticast mode [ 100.338020][ T5551] bridge_slave_1: left promiscuous mode [ 100.343790][ T5551] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.351779][ T5551] bridge_slave_0: left allmulticast mode [ 100.357507][ T5551] bridge_slave_0: left promiscuous mode [ 100.363248][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.428746][ T5452] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.452568][ T5452] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.466865][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.479605][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.489685][ T50] dummy0: left promiscuous mode [ 100.496839][ T50] batadv_slave_1: left promiscuous mode [ 100.504160][ T50] hsr_slave_0: left promiscuous mode [ 100.510031][ T50] hsr_slave_1: left promiscuous mode [ 100.515823][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.523316][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.532369][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.539862][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.550606][ T50] veth1_macvtap: left promiscuous mode [ 100.556219][ T50] veth0_macvtap: left promiscuous mode [ 100.561761][ T50] veth1_vlan: left promiscuous mode [ 100.567145][ T50] veth0_vlan: left promiscuous mode [ 100.650966][ T50] team0 (unregistering): Port device team_slave_1 removed [ 100.661887][ T50] team0 (unregistering): Port device team_slave_0 removed [ 100.698825][ T5452] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.709659][ T5298] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734052][ T5452] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.756757][ T5298] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.767677][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 100.767694][ T29] audit: type=1404 audit(1729363459.615:1678): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 100.790041][ T29] audit: type=1400 audit(1729363459.615:1679): avc: denied { search } for pid=5571 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 100.815581][ T5516] team0: Port device team_slave_0 added [ 100.822171][ T5516] team0: Port device team_slave_1 added [ 100.833721][ T29] audit: type=1400 audit(1729363459.645:1680): avc: denied { search } for pid=5573 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 100.849183][ T5298] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.855888][ T29] audit: type=1404 audit(1729363459.645:1681): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 100.878982][ T29] audit: type=1400 audit(1729363459.645:1682): avc: denied { create } for pid=5569 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.899450][ T29] audit: type=1400 audit(1729363459.645:1683): avc: denied { relabelfrom } for pid=5569 comm="syz.1.430" name="NETLINK" dev="sockfs" ino=18324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.923575][ T29] audit: type=1400 audit(1729363459.645:1684): avc: denied { mac_admin } for pid=5569 comm="syz.1.430" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.944568][ T29] audit: type=1400 audit(1729363459.645:1685): avc: denied { relabelto } for pid=5569 comm="syz.1.430" name="NETLINK" dev="sockfs" ino=18324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 100.973791][ T29] audit: type=1400 audit(1729363459.645:1686): avc: denied { ioctl } for pid=5569 comm="syz.1.430" path="socket:[18324]" dev="sockfs" ino=18324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.999445][ T29] audit: type=1400 audit(1729363459.645:1687): avc: denied { module_request } for pid=5569 comm="syz.1.430" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.028595][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.038502][ T5298] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.051275][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.058442][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.066222][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.084576][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.107783][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.114906][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.141262][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.182847][ T5516] hsr_slave_0: entered promiscuous mode [ 101.190536][ T5516] hsr_slave_1: entered promiscuous mode [ 101.196962][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.204564][ T5516] Cannot create hsr debugfs directory [ 101.356569][ T5373] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.371965][ T5373] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.529859][ T5373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.549944][ T5373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.713431][ T5619] bond1: entered promiscuous mode [ 101.718609][ T5619] bond1: entered allmulticast mode [ 101.731886][ T5623] loop3: detected capacity change from 0 to 512 [ 101.733896][ T5619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.748239][ T5623] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.760497][ T5619] bond1 (unregistering): Released all slaves [ 101.767388][ T5623] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.790491][ T5630] loop2: detected capacity change from 0 to 128 [ 101.792130][ T5623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 101.805908][ T5623] System zones: 1-12 [ 101.810163][ T5630] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.815396][ T5623] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.438: corrupted in-inode xattr: e_value size too large [ 101.823165][ T5630] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.858315][ T5623] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.438: couldn't read orphan inode 15 (err -117) [ 101.896621][ T5639] xt_hashlimit: size too large, truncated to 1048576 [ 101.896852][ T5623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.910461][ T5516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.935986][ T5516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.981833][ T5640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.440'. [ 102.003801][ T5516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.015897][ T5311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.056884][ T5516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.064071][ T5035] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.076716][ T5645] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.154343][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 102.168877][ T5655] bridge_slave_1: left allmulticast mode [ 102.174673][ T5655] bridge_slave_1: left promiscuous mode [ 102.180435][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.202779][ T5655] bridge_slave_0: left allmulticast mode [ 102.208525][ T5655] bridge_slave_0: left promiscuous mode [ 102.214196][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.290889][ T5645] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.316957][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.351648][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.361981][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.369170][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.381311][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.388477][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.402366][ T5645] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.496606][ T5645] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.530209][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.685294][ T5516] veth0_vlan: entered promiscuous mode [ 102.703749][ T5516] veth1_vlan: entered promiscuous mode [ 102.734256][ T5516] veth0_macvtap: entered promiscuous mode [ 102.741818][ T5516] veth1_macvtap: entered promiscuous mode [ 102.758524][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.764164][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.777822][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.787815][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.798306][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.808190][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.818807][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.828767][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.839224][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.851294][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.852670][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.867797][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.878373][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.888215][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.898882][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.908827][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.919349][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.929211][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.939999][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.952572][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.966903][ T5516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.975718][ T5516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.984493][ T5516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.993271][ T5516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.045646][ T5743] loop4: detected capacity change from 0 to 128 [ 103.055297][ T5743] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.068130][ T5743] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.083963][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 103.689079][ T5754] loop1: detected capacity change from 0 to 2048 [ 104.398347][ T5756] loop1: detected capacity change from 0 to 512 [ 104.406198][ T5756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.427138][ T5756] EXT4-fs (loop1): 1 truncate cleaned up [ 104.433675][ T5756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.463788][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.520686][ T5645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.533792][ T5645] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.545219][ T5645] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.556389][ T5645] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.565706][ T5516] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.584809][ T5763] loop0: detected capacity change from 0 to 512 [ 104.594559][ T5763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.614270][ T5766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.699611][ T5768] loop1: detected capacity change from 0 to 2048 [ 104.712852][ T5763] EXT4-fs (loop0): 1 truncate cleaned up [ 104.726900][ T5763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.907001][ T4174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.994331][ T5774] loop0: detected capacity change from 0 to 512 [ 105.001019][ T5774] EXT4-fs: Ignoring removed nobh option [ 105.006755][ T5774] EXT4-fs: Ignoring removed nobh option [ 105.013620][ T5774] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.021017][ T5774] EXT4-fs (loop0): mount failed [ 105.072549][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.082961][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.524846][ T5788] loop1: detected capacity change from 0 to 512 [ 105.531652][ T5788] EXT4-fs: Ignoring removed nobh option [ 105.537391][ T5788] EXT4-fs: Ignoring removed nobh option [ 105.555020][ T5788] EXT4-fs (loop1): failed to initialize system zone (-117) [ 105.562249][ T5788] EXT4-fs (loop1): mount failed [ 105.635917][ T5793] xt_hashlimit: size too large, truncated to 1048576 [ 105.689333][ T5794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.463'. [ 105.856678][ T5797] loop2: detected capacity change from 0 to 128 [ 105.868026][ T5797] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.880458][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 105.880470][ T29] audit: type=1400 audit(1729363464.735:1986): avc: denied { mount } for pid=5796 comm="syz.2.464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.881073][ T5797] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.889011][ T29] audit: type=1400 audit(1729363464.735:1987): avc: denied { write } for pid=2952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.940279][ T29] audit: type=1400 audit(1729363464.735:1988): avc: denied { remove_name } for pid=2952 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.963106][ T29] audit: type=1400 audit(1729363464.735:1989): avc: denied { rename } for pid=2952 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.985426][ T29] audit: type=1400 audit(1729363464.735:1990): avc: denied { add_name } for pid=2952 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.008038][ T29] audit: type=1400 audit(1729363464.735:1991): avc: denied { unlink } for pid=2952 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.018299][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 106.030512][ T29] audit: type=1400 audit(1729363464.735:1992): avc: denied { create } for pid=2952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.042598][ T29] audit: type=1400 audit(1729363464.795:1993): avc: denied { write } for pid=5796 comm="syz.2.464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.081809][ T29] audit: type=1400 audit(1729363464.795:1994): avc: denied { add_name } for pid=5796 comm="syz.2.464" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.102280][ T29] audit: type=1400 audit(1729363464.795:1995): avc: denied { create } for pid=5796 comm="syz.2.464" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.128359][ T5806] netlink: 'syz.1.468': attribute type 15 has an invalid length. [ 106.190985][ T5035] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.278230][ T5827] loop2: detected capacity change from 0 to 512 [ 106.284921][ T5827] EXT4-fs: Ignoring removed oldalloc option [ 106.305816][ T5827] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.471: Parent and EA inode have the same ino 15 [ 106.310071][ T5832] SELinux: policydb version -24903490 does not match my version range 15-33 [ 106.319366][ T5827] EXT4-fs (loop2): Remounting filesystem read-only [ 106.327256][ T5832] SELinux: failed to load policy [ 106.333393][ T5827] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 106.343028][ T5832] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 106.348503][ T5827] EXT4-fs (loop2): 1 orphan inode deleted [ 106.359951][ T5832] SELinux: failed to load policy [ 106.364108][ T5827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.380821][ T5827] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 106.388362][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.438331][ T5766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.472870][ T5837] 9pnet: Could not find request transport: 0xffffffffffffffff [ 106.500241][ T5766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.549727][ T5766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.561684][ T5844] loop1: detected capacity change from 0 to 2048 [ 106.587711][ T5844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.657155][ T5766] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.668562][ T5766] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.680419][ T5766] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.692296][ T5766] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.727715][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 106.737637][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 106.772775][ T5850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5850 comm=syz.4.480 [ 106.788591][ T5850] netlink: 68 bytes leftover after parsing attributes in process `syz.4.480'. [ 106.849179][ T5850] loop4: detected capacity change from 0 to 8192 [ 106.863861][ T5850] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.891573][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 107.634284][ T5827] syz.2.471 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 107.648422][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz.2.471 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 107.659035][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.669181][ T5827] Call Trace: [ 107.672465][ T5827] [ 107.675492][ T5827] dump_stack_lvl+0xf2/0x150 [ 107.680182][ T5827] dump_stack+0x15/0x20 [ 107.684356][ T5827] dump_header+0x83/0x2d0 [ 107.688821][ T5827] oom_kill_process+0x341/0x4c0 [ 107.693719][ T5827] out_of_memory+0x9af/0xbe0 [ 107.698346][ T5827] ? css_next_descendant_pre+0x11c/0x140 [ 107.704164][ T5827] mem_cgroup_out_of_memory+0x13e/0x190 [ 107.709764][ T5827] try_charge_memcg+0x51b/0x810 [ 107.714688][ T5827] obj_cgroup_charge_pages+0xbd/0x1a0 [ 107.720102][ T5827] __memcg_kmem_charge_page+0x9d/0x170 [ 107.725619][ T5827] __alloc_pages_noprof+0x1bc/0x340 [ 107.730843][ T5827] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 107.736272][ T5827] alloc_pages_noprof+0xe1/0x100 [ 107.741403][ T5827] __vmalloc_node_range_noprof+0x72e/0xec0 [ 107.742910][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.747238][ T5827] __kvmalloc_node_noprof+0x121/0x170 [ 107.747274][ T5827] ? ip_set_alloc+0x1f/0x30 [ 107.766143][ T5827] ip_set_alloc+0x1f/0x30 [ 107.770502][ T5827] hash_netiface_create+0x273/0x730 [ 107.775773][ T5827] ? __nla_parse+0x40/0x60 [ 107.780278][ T5827] ? __pfx_hash_netiface_create+0x10/0x10 [ 107.786045][ T5827] ip_set_create+0x359/0x8a0 [ 107.790662][ T5827] ? memchr+0x11/0x50 [ 107.794665][ T5827] ? __nla_parse+0x40/0x60 [ 107.799090][ T5827] nfnetlink_rcv_msg+0x4a9/0x570 [ 107.804067][ T5827] netlink_rcv_skb+0x12c/0x230 [ 107.808856][ T5827] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 107.814327][ T5827] nfnetlink_rcv+0x16c/0x15c0 [ 107.819008][ T5827] ? kmem_cache_free+0xdc/0x2d0 [ 107.823941][ T5827] ? nlmon_xmit+0x51/0x60 [ 107.828359][ T5827] ? __kfree_skb+0x102/0x150 [ 107.833059][ T5827] ? consume_skb+0x49/0x160 [ 107.837681][ T5827] ? nlmon_xmit+0x51/0x60 [ 107.842117][ T5827] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 107.847419][ T5827] ? __dev_queue_xmit+0xb4c/0x2040 [ 107.852609][ T5827] ? ref_tracker_free+0x3a5/0x410 [ 107.857655][ T5827] ? __dev_queue_xmit+0x161/0x2040 [ 107.862794][ T5827] ? ref_tracker_alloc+0x1f5/0x2f0 [ 107.867927][ T5827] ? __netlink_deliver_tap+0x495/0x4c0 [ 107.873459][ T5827] netlink_unicast+0x599/0x670 [ 107.878243][ T5827] netlink_sendmsg+0x5cc/0x6e0 [ 107.883049][ T5827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.888356][ T5827] __sock_sendmsg+0x140/0x180 [ 107.893121][ T5827] ____sys_sendmsg+0x312/0x410 [ 107.897919][ T5827] __sys_sendmsg+0x1d9/0x270 [ 107.902580][ T5827] ? futex_wait+0x18e/0x1c0 [ 107.907175][ T5827] __x64_sys_sendmsg+0x46/0x50 [ 107.912060][ T5827] x64_sys_call+0x2689/0x2d60 [ 107.916772][ T5827] do_syscall_64+0xc9/0x1c0 [ 107.921461][ T5827] ? clear_bhb_loop+0x55/0xb0 [ 107.926285][ T5827] ? clear_bhb_loop+0x55/0xb0 [ 107.930983][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.936959][ T5827] RIP: 0033:0x7f73146ddff9 [ 107.941381][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.961031][ T5827] RSP: 002b:00007f7313336038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.969457][ T5827] RAX: ffffffffffffffda RBX: 00007f7314896058 RCX: 00007f73146ddff9 [ 107.977510][ T5827] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 000000000000000c [ 107.985565][ T5827] RBP: 00007f7314750296 R08: 0000000000000000 R09: 0000000000000000 [ 107.993605][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.001575][ T5827] R13: 0000000000000000 R14: 00007f7314896058 R15: 00007ffce2c2fd38 [ 108.009580][ T5827] [ 108.013186][ T5827] memory: usage 307200kB, limit 307200kB, failcnt 675 [ 108.020318][ T5827] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 108.028315][ T5827] kmem: usage 306948kB, limit 9007199254740988kB, failcnt 0 [ 108.035669][ T5827] Memory cgroup stats for /syz2: [ 108.036735][ T5827] cache 188416 [ 108.045296][ T5827] rss 0 [ 108.048058][ T5827] shmem 0 [ 108.051088][ T5827] mapped_file 188416 [ 108.055016][ T5827] dirty 57344 [ 108.058299][ T5827] writeback 131072 [ 108.062015][ T5827] workingset_refault_anon 301 [ 108.066861][ T5827] workingset_refault_file 109 [ 108.071537][ T5827] swap 192512 [ 108.074832][ T5827] swapcached 0 [ 108.078288][ T5827] pgpgin 37795 [ 108.081662][ T5827] pgpgout 37749 [ 108.085218][ T5827] pgfault 46523 [ 108.088714][ T5827] pgmajfault 38 [ 108.092190][ T5827] inactive_anon 0 [ 108.095940][ T5827] active_anon 0 [ 108.099436][ T5827] inactive_file 188416 [ 108.103508][ T5827] active_file 0 [ 108.107056][ T5827] unevictable 0 [ 108.110536][ T5827] hierarchical_memory_limit 314572800 [ 108.115948][ T5827] hierarchical_memsw_limit 9223372036854771712 [ 108.122148][ T5827] total_cache 258048 [ 108.126220][ T5827] total_rss 0 [ 108.129715][ T5827] total_shmem 0 [ 108.133235][ T5827] total_mapped_file 258048 [ 108.137708][ T5827] total_dirty 57344 [ 108.141678][ T5827] total_writeback 200704 [ 108.145967][ T5827] total_workingset_refault_anon 319 [ 108.151225][ T5827] total_workingset_refault_file 149 [ 108.156520][ T5827] total_swap 212992 [ 108.160337][ T5827] total_swapcached 0 [ 108.164242][ T5827] total_pgpgin 38317 [ 108.168169][ T5827] total_pgpgout 38254 [ 108.172163][ T5827] total_pgfault 47316 [ 108.176201][ T5827] total_pgmajfault 172 [ 108.180281][ T5827] total_inactive_anon 0 [ 108.184472][ T5827] total_active_anon 0 [ 108.188493][ T5827] total_inactive_file 188416 [ 108.193092][ T5827] total_active_file 69632 [ 108.197442][ T5827] total_unevictable 0 [ 108.201514][ T5827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2/syz1,task=syz.2.471,pid=5819,uid=0 [ 108.212564][ T5856] loop4: detected capacity change from 0 to 1024 [ 108.216491][ T5827] Memory cgroup out of memory: Killed process 5819 (syz.2.471) total-vm:89296kB, anon-rss:520kB, file-rss:16380kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 108.301227][ T5862] loop1: detected capacity change from 0 to 128 [ 108.309956][ T5856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 108.329371][ T5864] loop0: detected capacity change from 0 to 512 [ 108.351686][ T5864] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.363930][ T5862] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.377828][ T5862] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.388823][ T5856] FAULT_INJECTION: forcing a failure. [ 108.388823][ T5856] name failslab, interval 1, probability 0, space 0, times 0 [ 108.401568][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.4.483 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 108.412172][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.416371][ T5864] EXT4-fs (loop0): 1 truncate cleaned up [ 108.422256][ T5856] Call Trace: [ 108.422264][ T5856] [ 108.422273][ T5856] dump_stack_lvl+0xf2/0x150 [ 108.432496][ T5864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.434165][ T5856] dump_stack+0x15/0x20 [ 108.455076][ T5856] should_fail_ex+0x223/0x230 [ 108.459839][ T5856] ? getname_flags+0x81/0x3b0 [ 108.464546][ T5856] should_failslab+0x8f/0xb0 [ 108.469207][ T5856] kmem_cache_alloc_noprof+0x4c/0x290 [ 108.474602][ T5856] getname_flags+0x81/0x3b0 [ 108.479126][ T5856] getname+0x17/0x20 [ 108.483176][ T5856] do_sys_openat2+0x67/0x120 [ 108.487801][ T5856] __x64_sys_openat+0xf3/0x120 [ 108.492608][ T5856] x64_sys_call+0x1025/0x2d60 [ 108.497366][ T5856] do_syscall_64+0xc9/0x1c0 [ 108.501953][ T5856] ? clear_bhb_loop+0x55/0xb0 [ 108.506688][ T5856] ? clear_bhb_loop+0x55/0xb0 [ 108.511455][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.517398][ T5856] RIP: 0033:0x7fc03b31dff9 [ 108.521824][ T5856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.541475][ T5856] RSP: 002b:00007fc039f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.549942][ T5856] RAX: ffffffffffffffda RBX: 00007fc03b4d5f80 RCX: 00007fc03b31dff9 [ 108.557930][ T5856] RDX: 00000000000026e1 RSI: 0000000020000380 RDI: ffffffffffffff9c [ 108.566083][ T5856] RBP: 00007fc039f97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.571531][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 108.574099][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.574116][ T5856] R13: 0000000000000000 R14: 00007fc03b4d5f80 R15: 00007ffe59b02488 [ 108.574139][ T5856] [ 108.615727][ T4174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.626112][ T5516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 108.637062][ T4059] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.677456][ T5881] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.700704][ T5875] 9pnet: Could not find request transport: 0xffffffffffffffff [ 108.712606][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 108.770494][ T5881] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.791894][ T5892] loop4: detected capacity change from 0 to 2048 [ 108.837678][ T5881] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.023004][ T5894] loop2: detected capacity change from 0 to 2048 [ 109.048063][ T5896] loop0: detected capacity change from 0 to 512 [ 109.077139][ T5881] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.095603][ T5896] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.115045][ T5896] EXT4-fs (loop0): mount failed [ 109.157997][ T5881] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.173913][ T5881] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.196942][ T5881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.236090][ T5881] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.265094][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.286063][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.287678][ T5902] loop1: detected capacity change from 0 to 512 [ 109.308076][ T5902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.329964][ T5902] EXT4-fs (loop1): 1 truncate cleaned up [ 109.340374][ T5902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.394482][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.417298][ T5905] loop1: detected capacity change from 0 to 512 [ 109.424026][ T5905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.434926][ T5905] EXT4-fs (loop1): 1 truncate cleaned up [ 109.441044][ T5905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.480244][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.510710][ T5908] loop1: detected capacity change from 0 to 2048 [ 109.546394][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.606254][ T5914] loop4: detected capacity change from 0 to 512 [ 109.650177][ T5914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.663553][ T5914] EXT4-fs (loop4): 1 truncate cleaned up [ 109.669823][ T5914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.729590][ T5920] loop2: detected capacity change from 0 to 512 [ 109.749103][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.762144][ T5920] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.770302][ T5516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.780808][ T5920] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.850796][ T5920] loop2: detected capacity change from 0 to 1024 [ 109.870982][ T5920] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 109.882018][ T5920] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 109.892572][ T5920] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 109.903478][ T5920] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 110.471560][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.509820][ T5932] loop1: detected capacity change from 0 to 512 [ 110.528371][ T5934] loop2: detected capacity change from 0 to 512 [ 110.536996][ T5932] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.551977][ T5932] EXT4-fs (loop1): mount failed [ 110.553084][ T5934] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.573097][ T5934] EXT4-fs (loop2): mount failed [ 110.622905][ T5941] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.507'. [ 110.697677][ T5948] loop1: detected capacity change from 0 to 512 [ 110.704510][ T5948] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 110.714700][ T5948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 110.722816][ T5948] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.729841][ T5948] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.507: bg 0: block 361: padding at end of block bitmap is not set [ 110.744550][ T5948] EXT4-fs (loop1): Remounting filesystem read-only [ 110.753079][ T5948] EXT4-fs (loop1): 1 truncate cleaned up [ 110.760953][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 110.776021][ T5948] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 110.783533][ T5948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 110.806630][ T5951] loop2: detected capacity change from 0 to 2048 [ 111.087912][ T5941] veth0_vlan: left promiscuous mode [ 111.093563][ T5941] veth0_vlan: entered promiscuous mode [ 111.107287][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 111.107299][ T29] audit: type=1400 audit(1729363469.955:2125): avc: denied { getopt } for pid=5939 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.166033][ T5955] loop1: detected capacity change from 0 to 512 [ 111.172791][ T5955] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.183749][ T5955] EXT4-fs (loop1): 1 truncate cleaned up [ 111.190224][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.278464][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.478659][ T5960] loop1: detected capacity change from 0 to 2048 [ 111.708363][ T29] audit: type=1400 audit(1729363470.555:2126): avc: denied { write } for pid=5963 comm="syz.2.513" name="event2" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.731780][ T29] audit: type=1400 audit(1729363470.555:2127): avc: denied { open } for pid=5963 comm="syz.2.513" path="/dev/input/event2" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.756050][ T29] audit: type=1400 audit(1729363470.555:2128): avc: denied { read } for pid=5963 comm="syz.2.513" name="event2" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.854017][ T5967] loop2: detected capacity change from 0 to 2048 [ 111.877228][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.159134][ T29] audit: type=1400 audit(1729363471.005:2129): avc: denied { execmem } for pid=5970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.246242][ T5973] loop0: detected capacity change from 0 to 512 [ 112.248050][ T29] audit: type=1400 audit(1729363471.095:2130): avc: denied { shutdown } for pid=5971 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.264169][ T5973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.272376][ T29] audit: type=1400 audit(1729363471.095:2131): avc: denied { getopt } for pid=5971 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.293353][ T5973] EXT4-fs (loop0): 1 truncate cleaned up [ 112.301542][ T29] audit: type=1400 audit(1729363471.095:2132): avc: denied { connect } for pid=5971 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.326726][ T29] audit: type=1400 audit(1729363471.095:2133): avc: denied { name_connect } for pid=5971 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 112.346916][ T29] audit: type=1400 audit(1729363471.155:2134): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.365133][ T5973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.405520][ T5977] loop1: detected capacity change from 0 to 512 [ 112.412194][ T5977] EXT4-fs: Ignoring removed oldalloc option [ 112.465566][ T5977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.516: Parent and EA inode have the same ino 15 [ 112.482005][ T5977] EXT4-fs (loop1): Remounting filesystem read-only [ 112.488585][ T5977] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 112.499185][ T5977] EXT4-fs (loop1): 1 orphan inode deleted [ 112.505404][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.518303][ T5977] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 112.525380][ T4174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.535040][ T5977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.654076][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 112.716989][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 112.727794][ T5999] FAULT_INJECTION: forcing a failure. [ 112.727794][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.740992][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.521 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 112.751605][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.761729][ T5999] Call Trace: [ 112.765022][ T5999] [ 112.767959][ T5999] dump_stack_lvl+0xf2/0x150 [ 112.772660][ T5999] dump_stack+0x15/0x20 [ 112.776926][ T5999] should_fail_ex+0x223/0x230 [ 112.781699][ T5999] should_fail+0xb/0x10 [ 112.785906][ T5999] should_fail_usercopy+0x1a/0x20 [ 112.791026][ T5999] _copy_to_user+0x1e/0xa0 [ 112.795469][ T5999] simple_read_from_buffer+0xa0/0x110 [ 112.800872][ T5999] proc_fail_nth_read+0xf9/0x140 [ 112.805841][ T5999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.811408][ T5999] vfs_read+0x195/0x720 [ 112.815585][ T5999] ? __rcu_read_unlock+0x4e/0x70 [ 112.820623][ T5999] ? __fget_files+0x1d4/0x210 [ 112.825423][ T5999] ksys_read+0xeb/0x1b0 [ 112.829771][ T5999] __x64_sys_read+0x42/0x50 [ 112.834297][ T5999] x64_sys_call+0x27d3/0x2d60 [ 112.839042][ T5999] do_syscall_64+0xc9/0x1c0 [ 112.843561][ T5999] ? clear_bhb_loop+0x55/0xb0 [ 112.848400][ T5999] ? clear_bhb_loop+0x55/0xb0 [ 112.853178][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.859215][ T5999] RIP: 0033:0x7ff0c41dca3c [ 112.863725][ T5999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 112.883380][ T5999] RSP: 002b:00007ff0c2e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.891892][ T5999] RAX: ffffffffffffffda RBX: 00007ff0c4395f80 RCX: 00007ff0c41dca3c [ 112.899936][ T5999] RDX: 000000000000000f RSI: 00007ff0c2e570a0 RDI: 0000000000000007 [ 112.908047][ T5999] RBP: 00007ff0c2e57090 R08: 0000000000000000 R09: 0000000000000000 [ 112.916069][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.924060][ T5999] R13: 0000000000000000 R14: 00007ff0c4395f80 R15: 00007ffe2be06cf8 [ 112.932132][ T5999] [ 113.030450][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.037772][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.045852][ T6004] loop0: detected capacity change from 0 to 2048 [ 113.069038][ T5976] bridge_slave_0: entered allmulticast mode [ 113.085161][ T5976] bridge_slave_0: entered promiscuous mode [ 113.092446][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.099569][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.118758][ T5035] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.125111][ T5976] bridge_slave_1: entered allmulticast mode [ 113.134302][ T5976] bridge_slave_1: entered promiscuous mode [ 113.159393][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.173090][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.180402][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.222807][ T5976] team0: Port device team_slave_0 added [ 113.236755][ T5976] team0: Port device team_slave_1 added [ 113.275398][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.282394][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.308376][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.336789][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.343780][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.369913][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.417170][ T5976] hsr_slave_0: entered promiscuous mode [ 113.423571][ T5976] hsr_slave_1: entered promiscuous mode [ 113.429607][ T5976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.437280][ T5976] Cannot create hsr debugfs directory [ 113.547854][ T6017] loop2: detected capacity change from 0 to 2048 [ 113.792891][ T6022] loop1: detected capacity change from 0 to 512 [ 113.820336][ T6022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.832028][ T6022] EXT4-fs (loop1): 1 truncate cleaned up [ 113.844273][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.857778][ T524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.895624][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.921751][ T524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.932100][ T4174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.941394][ T6025] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.529'. [ 113.988395][ T524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.000943][ T6031] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.031356][ T6032] loop1: detected capacity change from 0 to 512 [ 114.040765][ T524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.050635][ T6032] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.062243][ T6032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 114.071430][ T6032] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.081556][ T6032] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.529: bg 0: block 361: padding at end of block bitmap is not set [ 114.095974][ T6032] EXT4-fs (loop1): Remounting filesystem read-only [ 114.102844][ T6032] EXT4-fs (loop1): 1 truncate cleaned up [ 114.109218][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 114.110307][ T6031] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.121228][ T6032] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 114.121787][ T6032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 114.189376][ T6031] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.300307][ T524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.310998][ T524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.323949][ T524] bond0 (unregistering): Released all slaves [ 114.341669][ T6031] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.436204][ T6031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.463415][ T6031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.477180][ T524] hsr_slave_0: left promiscuous mode [ 114.504842][ T524] hsr_slave_1: left promiscuous mode [ 114.510943][ T6060] loop2: detected capacity change from 0 to 2048 [ 114.541301][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.548797][ T524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.573338][ T6067] loop1: detected capacity change from 0 to 512 [ 114.581510][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.586419][ T6067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.588998][ T524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.612869][ T6067] EXT4-fs (loop1): 1 truncate cleaned up [ 114.621147][ T524] veth1_macvtap: left promiscuous mode [ 114.626406][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.626687][ T524] veth0_macvtap: left promiscuous mode [ 114.644123][ T524] veth1_vlan: left promiscuous mode [ 114.649431][ T524] veth0_vlan: left promiscuous mode [ 114.689326][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.781312][ T6081] syz.1.540[6081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.781408][ T6081] syz.1.540[6081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.795567][ T6081] syz.1.540[6081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.835548][ T524] team0 (unregistering): Port device team_slave_1 removed [ 114.850272][ T6083] loop2: detected capacity change from 0 to 164 [ 114.864950][ T524] team0 (unregistering): Port device team_slave_0 removed [ 114.872397][ T6081] loop1: detected capacity change from 0 to 512 [ 114.880244][ T6081] ext4: Unknown parameter 'hash' [ 114.960826][ T6086] loop2: detected capacity change from 0 to 2048 [ 114.971672][ T6031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.050799][ T6031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.060146][ T6086] loop2: p1 < > p4 [ 115.087984][ T6086] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.283994][ T6086] veth0_vlan: left promiscuous mode [ 115.290723][ T6086] veth0_vlan: entered promiscuous mode [ 115.308085][ T5976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.363899][ T5976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.403167][ T5976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.439993][ T5976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.502944][ T2970] loop2: p1 < > p4 [ 115.508098][ T2970] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.539184][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.552638][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.566757][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.573903][ T1733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.589846][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.592726][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 115.597009][ T1733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.608349][ T3577] udevd[3577]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 115.630386][ T6115] FAULT_INJECTION: forcing a failure. [ 115.630386][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 115.643095][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.547 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 115.653699][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.663836][ T6115] Call Trace: [ 115.667106][ T6115] [ 115.670033][ T6115] dump_stack_lvl+0xf2/0x150 [ 115.674644][ T6115] dump_stack+0x15/0x20 [ 115.678863][ T6115] should_fail_ex+0x223/0x230 [ 115.683566][ T6115] ? qdisc_alloc+0x65/0x450 [ 115.688152][ T6115] should_failslab+0x8f/0xb0 [ 115.692806][ T6115] __kmalloc_node_noprof+0xa8/0x380 [ 115.698012][ T6115] qdisc_alloc+0x65/0x450 [ 115.702383][ T6115] qdisc_create_dflt+0x4c/0x280 [ 115.707378][ T6115] mq_init+0x1b9/0x380 [ 115.711466][ T6115] qdisc_create_dflt+0xce/0x280 [ 115.716328][ T6115] dev_activate+0xd9/0x9e0 [ 115.720801][ T6115] ? dev_set_rx_mode+0x189/0x1a0 [ 115.725752][ T6115] __dev_open+0x263/0x2e0 [ 115.730080][ T6115] __dev_change_flags+0x155/0x410 [ 115.735123][ T6115] dev_change_flags+0x59/0xd0 [ 115.739820][ T6115] dev_ifsioc+0x67f/0xa10 [ 115.744225][ T6115] dev_ioctl+0x7fa/0xab0 [ 115.748484][ T6115] sock_do_ioctl+0x11c/0x260 [ 115.753117][ T6115] sock_ioctl+0x46a/0x640 [ 115.757508][ T6115] ? __pfx_sock_ioctl+0x10/0x10 [ 115.762480][ T6115] __se_sys_ioctl+0xcd/0x140 [ 115.767077][ T6115] __x64_sys_ioctl+0x43/0x50 [ 115.771724][ T6115] x64_sys_call+0x15cc/0x2d60 [ 115.776448][ T6115] do_syscall_64+0xc9/0x1c0 [ 115.780963][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 115.785659][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 115.790396][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.796370][ T6115] RIP: 0033:0x7f73146ddff9 [ 115.800830][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.820444][ T6115] RSP: 002b:00007f7313357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.820472][ T6115] RAX: ffffffffffffffda RBX: 00007f7314895f80 RCX: 00007f73146ddff9 [ 115.836875][ T6115] RDX: 00000000200000c0 RSI: 0000000000008914 RDI: 0000000000000004 [ 115.844852][ T6115] RBP: 00007f7313357090 R08: 0000000000000000 R09: 0000000000000000 [ 115.852896][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.860927][ T6115] R13: 0000000000000000 R14: 00007f7314895f80 R15: 00007ffce2c2fd38 [ 115.868905][ T6115] [ 115.872528][ T6115] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 115.883666][ T6115] syzkaller0: entered promiscuous mode [ 115.889217][ T6115] syzkaller0: entered allmulticast mode [ 116.038058][ T6123] xt_hashlimit: size too large, truncated to 1048576 [ 116.080260][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.097882][ T6126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.550'. [ 116.173890][ T6129] xt_hashlimit: size too large, truncated to 1048576 [ 116.226258][ T6132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.551'. [ 116.358376][ T5976] veth0_vlan: entered promiscuous mode [ 116.380597][ T5976] veth1_vlan: entered promiscuous mode [ 116.409358][ T5976] veth0_macvtap: entered promiscuous mode [ 116.425138][ T5976] veth1_macvtap: entered promiscuous mode [ 116.445836][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.456333][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.466240][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.476676][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.486495][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.496963][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.506824][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.517257][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.552737][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.574009][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.584505][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.594360][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.604881][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.614716][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.625167][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.634996][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.645444][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.659967][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.671738][ T5976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680572][ T5976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.689351][ T5976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.698073][ T5976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.729559][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 116.729575][ T29] audit: type=1400 audit(1729363475.575:2234): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/root/syzkaller.Vt4sFO/syz-tmp" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 116.786418][ T6140] netlink: 3 bytes leftover after parsing attributes in process `syz.1.552'. [ 116.795568][ T29] audit: type=1400 audit(1729363475.575:2235): avc: denied { mount } for pid=5976 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.800461][ T6140] 0ªX¹¦À: renamed from caif0 [ 116.817768][ T29] audit: type=1400 audit(1729363475.575:2236): avc: denied { mount } for pid=5976 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.817803][ T29] audit: type=1400 audit(1729363475.575:2237): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/root/syzkaller.Vt4sFO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 116.871191][ T29] audit: type=1400 audit(1729363475.575:2238): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/root/syzkaller.Vt4sFO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 116.898932][ T29] audit: type=1400 audit(1729363475.605:2239): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 116.921971][ T29] audit: type=1400 audit(1729363475.615:2240): avc: denied { read } for pid=6138 comm="syz.1.552" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.945413][ T29] audit: type=1400 audit(1729363475.615:2241): avc: denied { open } for pid=6138 comm="syz.1.552" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.969243][ T29] audit: type=1400 audit(1729363475.615:2242): avc: denied { ioctl } for pid=6138 comm="syz.1.552" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.994979][ T29] audit: type=1400 audit(1729363475.695:2243): avc: denied { create } for pid=6138 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.020678][ T6140] 0ªX¹¦À: entered allmulticast mode [ 117.025983][ T6140] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 117.070854][ T6145] loop2: detected capacity change from 0 to 512 [ 117.084503][ T6143] loop3: detected capacity change from 0 to 512 [ 117.088038][ T6145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.109656][ T6145] EXT4-fs (loop2): 1 truncate cleaned up [ 117.116785][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.120427][ T6143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.127856][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.147574][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.148856][ T6143] EXT4-fs (loop3): 1 truncate cleaned up [ 117.163907][ T6143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.175471][ T6148] syz.0.554[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.176016][ T6148] syz.0.554[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.187448][ T6148] syz.0.554[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.202462][ T5035] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.227296][ T5976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.318598][ T6154] loop1: detected capacity change from 0 to 2048 [ 117.504338][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.521557][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.532767][ T6156] loop3: detected capacity change from 0 to 512 [ 117.543186][ T6158] process 'syz.2.556' launched '/dev/fd/3' with NULL argv: empty string added [ 117.560464][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 117.569583][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 117.582536][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.582819][ T6148] dummy0: entered promiscuous mode [ 117.595240][ T6156] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.611736][ T6148] batadv_slave_1: entered promiscuous mode [ 117.617942][ T6156] FAULT_INJECTION: forcing a failure. [ 117.617942][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 117.630614][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.3.557 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 117.641220][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.651266][ T6156] Call Trace: [ 117.654597][ T6156] [ 117.657577][ T6156] dump_stack_lvl+0xf2/0x150 [ 117.662193][ T6156] dump_stack+0x15/0x20 [ 117.666458][ T6156] should_fail_ex+0x223/0x230 [ 117.671171][ T6156] ? find_next_id+0x3a/0x510 [ 117.675778][ T6156] should_failslab+0x8f/0xb0 [ 117.680385][ T6156] __kmalloc_noprof+0xa5/0x370 [ 117.685233][ T6156] find_next_id+0x3a/0x510 [ 117.689657][ T6156] ? ext4_bread+0xcc/0x110 [ 117.694173][ T6156] ? __brelse+0x30/0x60 [ 117.698337][ T6156] find_next_id+0x401/0x510 [ 117.702843][ T6156] ? __pfx_ext4_quota_read+0x10/0x10 [ 117.708159][ T6156] qtree_get_next_id+0x54/0x120 [ 117.713069][ T6156] v2_get_next_id+0x7f/0xc0 [ 117.717661][ T6156] ? __pfx_v2_get_next_id+0x10/0x10 [ 117.722896][ T6156] dquot_get_next_id+0xa9/0xe0 [ 117.727704][ T6156] dquot_get_next_dqblk+0x43/0x210 [ 117.732852][ T6156] quota_getnextquota+0x176/0x2d0 [ 117.738014][ T6156] ? selinux_capable+0x1f2/0x260 [ 117.742964][ T6156] do_quotactl+0x3d2/0x6d0 [ 117.747400][ T6156] __se_sys_quotactl+0x201/0x660 [ 117.752351][ T6156] __x64_sys_quotactl+0x55/0x70 [ 117.757264][ T6156] x64_sys_call+0x2b7f/0x2d60 [ 117.761943][ T6156] do_syscall_64+0xc9/0x1c0 [ 117.766467][ T6156] ? clear_bhb_loop+0x55/0xb0 [ 117.771196][ T6156] ? clear_bhb_loop+0x55/0xb0 [ 117.775909][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.781913][ T6156] RIP: 0033:0x7f3e3897dff9 [ 117.786321][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.805962][ T6156] RSP: 002b:00007f3e375f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 117.814431][ T6156] RAX: ffffffffffffffda RBX: 00007f3e38b35f80 RCX: 00007f3e3897dff9 [ 117.822503][ T6156] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: ffffffff80000900 [ 117.830519][ T6156] RBP: 00007f3e375f1090 R08: 0000000000000000 R09: 0000000000000000 [ 117.838486][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.846464][ T6156] R13: 0000000000000000 R14: 00007f3e38b35f80 R15: 00007ffe617747c8 [ 117.854498][ T6156] [ 117.882879][ T5976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.965252][ T6180] xt_hashlimit: size too large, truncated to 1048576 [ 118.017378][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 118.114561][ T6185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.241005][ T6188] loop1: detected capacity change from 0 to 128 [ 118.287866][ T6187] syz.1.565: attempt to access beyond end of device [ 118.287866][ T6187] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 118.303076][ T6187] netlink: 'syz.1.565': attribute type 10 has an invalid length. [ 118.333176][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.460021][ T6192] FAULT_INJECTION: forcing a failure. [ 118.460021][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 118.472748][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.0.567 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 118.483378][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.493549][ T6192] Call Trace: [ 118.496828][ T6192] [ 118.499762][ T6192] dump_stack_lvl+0xf2/0x150 [ 118.504385][ T6192] dump_stack+0x15/0x20 [ 118.508608][ T6192] should_fail_ex+0x223/0x230 [ 118.513348][ T6192] ? skb_clone+0x154/0x1f0 [ 118.517780][ T6192] should_failslab+0x8f/0xb0 [ 118.522410][ T6192] kmem_cache_alloc_noprof+0x4c/0x290 [ 118.527798][ T6192] skb_clone+0x154/0x1f0 [ 118.532177][ T6192] __netlink_deliver_tap+0x2bd/0x4c0 [ 118.537495][ T6192] netlink_unicast+0x64a/0x670 [ 118.542296][ T6192] netlink_sendmsg+0x5cc/0x6e0 [ 118.547144][ T6192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.552667][ T6192] __sock_sendmsg+0x140/0x180 [ 118.557352][ T6192] ____sys_sendmsg+0x312/0x410 [ 118.562200][ T6192] __sys_sendmsg+0x1d9/0x270 [ 118.566823][ T6192] __x64_sys_sendmsg+0x46/0x50 [ 118.571751][ T6192] x64_sys_call+0x2689/0x2d60 [ 118.576457][ T6192] do_syscall_64+0xc9/0x1c0 [ 118.580965][ T6192] ? clear_bhb_loop+0x55/0xb0 [ 118.585653][ T6192] ? clear_bhb_loop+0x55/0xb0 [ 118.590425][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.596395][ T6192] RIP: 0033:0x7ff0c41ddff9 [ 118.600827][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.620471][ T6192] RSP: 002b:00007ff0c2e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.628884][ T6192] RAX: ffffffffffffffda RBX: 00007ff0c4395f80 RCX: 00007ff0c41ddff9 [ 118.636851][ T6192] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 118.644822][ T6192] RBP: 00007ff0c2e57090 R08: 0000000000000000 R09: 0000000000000000 [ 118.652904][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.660874][ T6192] R13: 0000000000000000 R14: 00007ff0c4395f80 R15: 00007ffe2be06cf8 [ 118.668850][ T6192] [ 118.681005][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 118.706824][ T6201] loop0: detected capacity change from 0 to 512 [ 118.715976][ T6201] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.733469][ T6201] EXT4-fs (loop0): mount failed [ 118.806518][ T6214] loop0: detected capacity change from 0 to 512 [ 118.817758][ T6214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.828716][ T6214] EXT4-fs (loop0): 1 truncate cleaned up [ 118.867403][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.878087][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.896739][ T6218] Cannot find add_set index 0 as target [ 118.907216][ T6218] loop0: detected capacity change from 0 to 128 [ 118.937153][ T6220] loop0: detected capacity change from 0 to 512 [ 118.944108][ T6220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.965420][ T6220] EXT4-fs (loop0): 1 truncate cleaned up [ 119.024302][ T6225] xt_hashlimit: size too large, truncated to 1048576 [ 119.077530][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.578'. [ 119.272042][ T6229] loop0: detected capacity change from 0 to 512 [ 119.286790][ T6229] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.301213][ T6229] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.579: Failed to acquire dquot type 0 [ 119.438661][ T6236] loop2: detected capacity change from 0 to 512 [ 119.446215][ T6236] EXT4-fs: Ignoring removed nobh option [ 119.451860][ T6236] EXT4-fs: Ignoring removed nobh option [ 119.459868][ T6236] EXT4-fs (loop2): failed to initialize system zone (-117) [ 119.474850][ T6236] EXT4-fs (loop2): mount failed [ 119.556975][ T6245] loop2: detected capacity change from 0 to 512 [ 119.588692][ T6245] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.635654][ T6245] EXT4-fs (loop2): mount failed [ 119.649769][ T6251] loop1: detected capacity change from 0 to 512 [ 119.660769][ T6251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.683619][ T6251] EXT4-fs (loop1): 1 truncate cleaned up [ 119.988763][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.011137][ T6273] loop3: detected capacity change from 0 to 2048 [ 120.246041][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.263931][ T6269] loop1: detected capacity change from 0 to 2048 [ 120.326353][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.432690][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.471447][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 120.474716][ T6286] loop2: detected capacity change from 0 to 512 [ 120.490794][ T6286] EXT4-fs: Ignoring removed nobh option [ 120.496492][ T6286] EXT4-fs: Ignoring removed nobh option [ 120.535877][ T6286] EXT4-fs (loop2): failed to initialize system zone (-117) [ 120.544286][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.551498][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.552588][ T6286] EXT4-fs (loop2): mount failed [ 120.559991][ T6261] bridge_slave_0: entered allmulticast mode [ 120.570120][ T6261] bridge_slave_0: entered promiscuous mode [ 120.576952][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.584099][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.591375][ T6261] bridge_slave_1: entered allmulticast mode [ 120.598208][ T6261] bridge_slave_1: entered promiscuous mode [ 120.598333][ T6280] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.654186][ T11] bridge_slave_1: left allmulticast mode [ 120.660082][ T11] bridge_slave_1: left promiscuous mode [ 120.665876][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.674974][ T11] bridge_slave_0: left allmulticast mode [ 120.680640][ T11] bridge_slave_0: left promiscuous mode [ 120.683170][ T6298] loop0: detected capacity change from 0 to 1764 [ 120.686444][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.906980][ T6308] loop0: detected capacity change from 0 to 2048 [ 121.087792][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.119964][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.133129][ T6313] loop1: detected capacity change from 0 to 128 [ 121.152664][ T11] bond0 (unregistering): Released all slaves [ 121.163371][ T6313] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.231060][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.241404][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.458099][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.548796][ T11] hsr_slave_0: left promiscuous mode [ 121.584351][ T11] hsr_slave_1: left promiscuous mode [ 121.760314][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.771179][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.778825][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.786153][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.796070][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.798276][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 121.798292][ T29] audit: type=1400 audit(1729363480.645:2344): avc: denied { write } for pid=6332 comm="syz.1.605" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.803477][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.810589][ T6334] syz.1.605[6334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.843024][ T11] veth1_macvtap: left promiscuous mode [ 121.857872][ T6334] syz.1.605[6334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.860233][ T11] veth0_macvtap: left promiscuous mode [ 121.864069][ T6334] syz.1.605[6334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.871517][ T11] veth1_vlan: left promiscuous mode [ 121.871559][ T11] veth0_vlan: left promiscuous mode [ 121.877237][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.893886][ T29] audit: type=1400 audit(1729363480.735:2345): avc: denied { ioctl } for pid=6340 comm="syz.2.607" path="socket:[22666]" dev="sockfs" ino=22666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.953189][ T29] audit: type=1400 audit(1729363480.755:2346): avc: denied { write } for pid=6320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.976250][ T29] audit: type=1400 audit(1729363480.755:2347): avc: denied { add_name } for pid=6320 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.998778][ T29] audit: type=1400 audit(1729363480.755:2348): avc: denied { create } for pid=6320 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.009573][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.021347][ T29] audit: type=1400 audit(1729363480.755:2349): avc: denied { write } for pid=6320 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.055164][ T29] audit: type=1400 audit(1729363480.755:2350): avc: denied { append } for pid=6320 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.079852][ T29] audit: type=1400 audit(1729363480.825:2351): avc: denied { remove_name } for pid=6346 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.103649][ T29] audit: type=1400 audit(1729363480.825:2352): avc: denied { unlink } for pid=6346 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.126980][ T29] audit: type=1326 audit(1729363480.905:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3897dff9 code=0x7ffc0000 [ 122.238710][ T11] team0 (unregistering): Port device team_slave_1 removed [ 122.252136][ T11] team0 (unregistering): Port device team_slave_0 removed [ 122.318484][ T6330] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.456707][ T6330] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.518223][ T6330] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.574876][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 122.587285][ T6330] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.603546][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.612528][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.632544][ T6334] team0: entered promiscuous mode [ 122.637765][ T6334] team_slave_0: entered promiscuous mode [ 122.643475][ T6334] team_slave_1: entered promiscuous mode [ 122.652786][ T6334] batadv_slave_1: entered promiscuous mode [ 122.659252][ T6334] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 122.667237][ T6334] Cannot create hsr debugfs directory [ 122.670225][ T6356] loop2: detected capacity change from 0 to 256 [ 122.696736][ T6261] team0: Port device team_slave_0 added [ 122.704225][ T6261] team0: Port device team_slave_1 added [ 122.733001][ T6330] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.744385][ T6330] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.753939][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.761010][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.787007][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.801034][ T6330] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.818072][ T6330] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.827339][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.834304][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.860261][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.939218][ T6366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.612'. [ 122.949498][ T6371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.613'. [ 123.004819][ T6261] hsr_slave_0: entered promiscuous mode [ 123.010920][ T6261] hsr_slave_1: entered promiscuous mode [ 123.018205][ T6261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.026937][ T6261] Cannot create hsr debugfs directory [ 123.059280][ T6386] tipc: Enabling of bearer rejected, failed to enable media [ 123.068777][ T6388] tipc: Enabling of bearer rejected, failed to enable media [ 123.249983][ T6411] loop0: detected capacity change from 0 to 128 [ 123.279057][ T6411] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.295031][ T6419] loop3: detected capacity change from 0 to 512 [ 123.327744][ T6419] EXT4-fs: Ignoring removed oldalloc option [ 123.399168][ T6419] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.621: Parent and EA inode have the same ino 15 [ 123.412592][ T6419] EXT4-fs (loop3): Remounting filesystem read-only [ 123.419150][ T6419] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 123.429290][ T6419] EXT4-fs (loop3): 1 orphan inode deleted [ 123.435692][ T6419] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 123.690281][ T6261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.742166][ T6261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.797884][ T6261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.843807][ T6261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.911654][ T6442] FAULT_INJECTION: forcing a failure. [ 123.911654][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.913468][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.924819][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.2.625 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 123.939674][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.941939][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.958708][ T6442] Call Trace: [ 123.962035][ T6442] [ 123.962686][ T6261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.964963][ T6442] dump_stack_lvl+0xf2/0x150 [ 123.975367][ T6261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.979863][ T6442] dump_stack+0x15/0x20 [ 123.994426][ T6442] should_fail_ex+0x223/0x230 [ 123.997403][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.999117][ T6442] should_fail+0xb/0x10 [ 124.006187][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.010263][ T6442] should_fail_usercopy+0x1a/0x20 [ 124.022497][ T6442] _copy_from_user+0x1e/0xd0 [ 124.027104][ T6442] copy_msghdr_from_user+0x54/0x2a0 [ 124.027815][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.032336][ T6442] __sys_sendmsg+0x171/0x270 [ 124.039424][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.044019][ T6442] __x64_sys_sendmsg+0x46/0x50 [ 124.055989][ T6442] x64_sys_call+0x2689/0x2d60 [ 124.060687][ T6442] do_syscall_64+0xc9/0x1c0 [ 124.065234][ T6442] ? clear_bhb_loop+0x55/0xb0 [ 124.069975][ T6442] ? clear_bhb_loop+0x55/0xb0 [ 124.074791][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.080717][ T6442] RIP: 0033:0x7f73146ddff9 [ 124.085144][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.104840][ T6442] RSP: 002b:00007f7313357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.113273][ T6442] RAX: ffffffffffffffda RBX: 00007f7314895f80 RCX: 00007f73146ddff9 [ 124.121257][ T6442] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000007 [ 124.129306][ T6442] RBP: 00007f7313357090 R08: 0000000000000000 R09: 0000000000000000 [ 124.137314][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.145400][ T6442] R13: 0000000000000000 R14: 00007f7314895f80 R15: 00007ffce2c2fd38 [ 124.153397][ T6442] [ 124.256040][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.290440][ T6451] loop1: detected capacity change from 0 to 1024 [ 124.307985][ T6451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.330184][ T6460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.627'. [ 124.444135][ T6478] loop2: detected capacity change from 0 to 512 [ 124.461350][ T6478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.515076][ T6478] EXT4-fs (loop2): 1 truncate cleaned up [ 124.575423][ T6502] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.611977][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 124.629471][ T6261] veth0_vlan: entered promiscuous mode [ 124.655760][ T6261] veth1_vlan: entered promiscuous mode [ 124.688089][ T6502] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.706980][ T6516] xt_connbytes: Forcing CT accounting to be enabled [ 124.720064][ T6516] Cannot find add_set index 0 as target [ 124.724133][ T6261] veth0_macvtap: entered promiscuous mode [ 124.733666][ T6261] veth1_macvtap: entered promiscuous mode [ 124.768337][ T6502] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.793519][ T6527] loop2: detected capacity change from 0 to 256 [ 124.812149][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.822798][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.832080][ T6533] loop1: detected capacity change from 0 to 512 [ 124.832651][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.849379][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.859302][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.869779][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.879639][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.890186][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.902900][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.914289][ T6533] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.929709][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.940317][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.950307][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.960752][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.970591][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.981031][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.990874][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.001375][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.012406][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.022542][ T6502] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.038008][ T6261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.046919][ T6261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.056032][ T6261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.064902][ T6261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.142252][ T6502] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.185934][ T6502] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.206190][ T6502] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.238689][ T6502] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.258608][ T6550] loop4: detected capacity change from 0 to 512 [ 125.279282][ T6550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.335950][ T6550] EXT4-fs (loop4): 1 truncate cleaned up [ 125.393853][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.443438][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.516845][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 125.542967][ T6563] bridge_slave_1: left allmulticast mode [ 125.548883][ T6563] bridge_slave_1: left promiscuous mode [ 125.549538][ T6562] loop4: detected capacity change from 0 to 256 [ 125.554755][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.595709][ T6562] vfat: Unknown parameter 'ÿÿÿÿÿ0x0000000000000000' [ 125.606602][ T6563] bridge_slave_0: left allmulticast mode [ 125.612337][ T6563] bridge_slave_0: left promiscuous mode [ 125.618107][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.802311][ T6575] loop4: detected capacity change from 0 to 512 [ 125.809154][ T6575] EXT4-fs: Ignoring removed nobh option [ 125.814766][ T6575] EXT4-fs: Ignoring removed nobh option [ 125.828676][ T6575] EXT4-fs (loop4): failed to initialize system zone (-117) [ 125.835969][ T6575] EXT4-fs (loop4): mount failed [ 125.890037][ T6586] loop4: detected capacity change from 0 to 512 [ 125.905365][ T6586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.917824][ T6586] EXT4-fs (loop4): 1 truncate cleaned up [ 125.952245][ T6595] loop1: detected capacity change from 0 to 512 [ 125.958975][ T6595] EXT4-fs: Ignoring removed nobh option [ 125.964556][ T6595] EXT4-fs: Ignoring removed nobh option [ 125.974665][ T6595] EXT4-fs (loop1): failed to initialize system zone (-117) [ 125.984038][ T6595] EXT4-fs (loop1): mount failed [ 126.017664][ T6600] loop4: detected capacity change from 0 to 512 [ 126.019489][ T6602] loop1: detected capacity change from 0 to 512 [ 126.029957][ T6600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.041288][ T6600] EXT4-fs (loop4): 1 truncate cleaned up [ 126.060703][ T6602] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.289289][ T6617] loop4: detected capacity change from 0 to 512 [ 126.317160][ T6617] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.345288][ T6617] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 126.361900][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 126.534023][ T6623] loop4: detected capacity change from 0 to 2048 [ 126.626260][ T6627] netlink: 68 bytes leftover after parsing attributes in process `syz.4.663'. [ 126.729872][ T6629] loop4: detected capacity change from 0 to 2048 [ 126.806665][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 126.806682][ T29] audit: type=1326 audit(1729363485.655:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc676a84fa7 code=0x7ffc0000 [ 126.836787][ T29] audit: type=1326 audit(1729363485.685:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc676a29959 code=0x7ffc0000 [ 126.860024][ T29] audit: type=1326 audit(1729363485.685:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc676a8dff9 code=0x7ffc0000 [ 126.883435][ T29] audit: type=1326 audit(1729363485.685:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc676a84fa7 code=0x7ffc0000 [ 126.906820][ T29] audit: type=1326 audit(1729363485.685:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc676a29959 code=0x7ffc0000 [ 126.930153][ T29] audit: type=1326 audit(1729363485.685:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc676a8dff9 code=0x7ffc0000 [ 126.953568][ T29] audit: type=1326 audit(1729363485.695:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc676a84fa7 code=0x7ffc0000 [ 126.977210][ T29] audit: type=1326 audit(1729363485.695:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc676a29959 code=0x7ffc0000 [ 127.000603][ T29] audit: type=1326 audit(1729363485.695:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc676a8dff9 code=0x7ffc0000 [ 127.023920][ T29] audit: type=1326 audit(1729363485.705:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc676a84fa7 code=0x7ffc0000 [ 127.148272][ T6633] loop1: detected capacity change from 0 to 512 [ 127.157806][ T6633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.168538][ T6633] EXT4-fs (loop1): 1 truncate cleaned up [ 127.293940][ T6640] loop1: detected capacity change from 0 to 2048 [ 127.737411][ T6261] EXT4-fs unmount: 37 callbacks suppressed [ 127.737461][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.963218][ T6655] loop4: detected capacity change from 0 to 512 [ 127.976671][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.989848][ T6655] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.990872][ T6424] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.020580][ T56] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.073662][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.099618][ T56] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.156779][ T56] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.206270][ T56] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.281139][ T6674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.680'. [ 128.331944][ T6676] loop4: detected capacity change from 0 to 2048 [ 128.408093][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.414443][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.432999][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.467655][ T6690] loop1: detected capacity change from 0 to 512 [ 128.475690][ T56] bond0 (unregistering): Released all slaves [ 128.488739][ T6676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.490946][ T6680] netlink: 68 bytes leftover after parsing attributes in process `syz.2.681'. [ 128.501167][ T6690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.549856][ T6690] EXT4-fs (loop1): 1 truncate cleaned up [ 128.563274][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.591519][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 128.604399][ T4059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.617142][ T56] dummy0: left promiscuous mode [ 128.624345][ T56] batadv_slave_1: left promiscuous mode [ 128.644659][ T56] hsr_slave_0: left promiscuous mode [ 128.655419][ T6705] loop2: detected capacity change from 0 to 1024 [ 128.665911][ T56] hsr_slave_1: left promiscuous mode [ 128.672827][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.676364][ T6705] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 128.680336][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.689929][ T6705] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 128.706773][ T6705] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.717678][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.717772][ T6705] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.684: unexpected bad inode w/o EXT4_IGET_BAD [ 128.725143][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.739475][ T6705] EXT4-fs (loop2): no journal found [ 128.750507][ T6705] EXT4-fs (loop2): can't get journal size [ 128.758284][ T6705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.770865][ T56] veth1_macvtap: left promiscuous mode [ 128.774599][ T6705] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.684: bg 0: block 32: padding at end of block bitmap is not set [ 128.776402][ T56] veth0_macvtap: left promiscuous mode [ 128.795940][ T56] veth1_vlan: left promiscuous mode [ 128.801251][ T56] veth0_vlan: left promiscuous mode [ 128.893920][ T56] team0 (unregistering): Port device team_slave_1 removed [ 128.907163][ T56] team0 (unregistering): Port device team_slave_0 removed [ 128.954417][ T6705] batadv_slave_0: entered promiscuous mode [ 128.969432][ T6704] batadv_slave_0: left promiscuous mode [ 129.007472][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.014651][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.021839][ T6659] bridge_slave_0: entered allmulticast mode [ 129.028478][ T6659] bridge_slave_0: entered promiscuous mode [ 129.035317][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.042378][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.049536][ T6659] bridge_slave_1: entered allmulticast mode [ 129.056144][ T6659] bridge_slave_1: entered promiscuous mode [ 129.126805][ T5035] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.129239][ T6726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.687'. [ 129.145108][ T6726] unsupported nlmsg_type 40 [ 129.153304][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.172913][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.204856][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 129.226703][ T6659] team0: Port device team_slave_0 added [ 129.233404][ T6659] team0: Port device team_slave_1 added [ 129.236606][ T6735] loop1: detected capacity change from 0 to 128 [ 129.266761][ T6735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.287800][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 129.299722][ T6735] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.300043][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.317464][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.343449][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.354812][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.359403][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.361793][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.396798][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.463530][ T6659] hsr_slave_0: entered promiscuous mode [ 129.469384][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 129.479987][ T6659] hsr_slave_1: entered promiscuous mode [ 129.484149][ T6757] loop4: detected capacity change from 0 to 512 [ 129.493878][ T6757] EXT4-fs: Ignoring removed i_version option [ 129.499911][ T6757] EXT4-fs: Ignoring removed nobh option [ 129.506869][ T6757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.510482][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 129.576420][ T6757] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 129.629683][ T4059] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.733504][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 129.759137][ T6793] loop4: detected capacity change from 0 to 512 [ 129.787788][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.798401][ T6798] loop3: detected capacity change from 0 to 512 [ 129.817398][ T6793] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.829807][ T6798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.843428][ T6800] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 129.846775][ T6802] loop2: detected capacity change from 0 to 128 [ 129.876063][ T6798] EXT4-fs (loop3): 1 truncate cleaned up [ 129.885290][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.897817][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.900006][ T6802] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.930793][ T6802] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.941674][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.949137][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.961522][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.969040][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.996732][ T5976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.060823][ T6659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.072070][ T6813] loop3: detected capacity change from 0 to 128 [ 130.081809][ T6659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.090600][ T6813] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.119365][ T6813] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.138348][ T6659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.157986][ T6659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.177534][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 130.243275][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.254806][ T5976] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.269743][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.281393][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.288491][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.298371][ T5976] ================================================================== [ 130.306480][ T5976] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 130.314054][ T5976] [ 130.316383][ T5976] read-write to 0xffff888237c2ac68 of 1 bytes by task 6832 on cpu 0: [ 130.316862][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.324435][ T5976] folio_add_lru+0xa3/0x1f0 [ 130.331484][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.335918][ T5976] folio_add_lru_vma+0x48/0x60 [ 130.335954][ T5976] handle_mm_fault+0x2493/0x2a80 [ 130.352847][ T5976] exc_page_fault+0x3b9/0x650 [ 130.357552][ T5976] asm_exc_page_fault+0x26/0x30 [ 130.362437][ T5976] [ 130.364766][ T5976] read to 0xffff888237c2ac68 of 1 bytes by task 5976 on cpu 1: [ 130.372313][ T5976] __lru_add_drain_all+0x136/0x3f0 [ 130.377472][ T5976] lru_add_drain_all+0x10/0x20 [ 130.382283][ T5976] invalidate_bdev+0x47/0x70 [ 130.386904][ T5976] ext4_put_super+0x571/0x840 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 130.391606][ T5976] generic_shutdown_super+0xe5/0x220 [ 130.396911][ T5976] kill_block_super+0x2a/0x70 [ 130.401617][ T5976] ext4_kill_sb+0x44/0x80 [ 130.405971][ T5976] deactivate_locked_super+0x7d/0x1c0 [ 130.411369][ T5976] deactivate_super+0x9f/0xb0 [ 130.416083][ T5976] cleanup_mnt+0x268/0x2e0 [ 130.420515][ T5976] __cleanup_mnt+0x19/0x20 [ 130.424939][ T5976] task_work_run+0x13a/0x1a0 [ 130.429549][ T5976] syscall_exit_to_user_mode+0xbe/0x130 [ 130.435158][ T5976] do_syscall_64+0xd6/0x1c0 [ 130.439671][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.445589][ T5976] [ 130.447914][ T5976] value changed: 0x15 -> 0x16 [ 130.452588][ T5976] [ 130.454912][ T5976] Reported by Kernel Concurrency Sanitizer on: [ 130.461060][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 130.471928][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.481993][ T5976] ================================================================== [ 130.541552][ T6809] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.555872][ T56] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.626817][ T56] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.726181][ T56] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.776174][ T56] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.878273][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.889295][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.900043][ T56] bond0 (unregistering): Released all slaves [ 130.976122][ T56] hsr_slave_0: left promiscuous mode [ 130.981812][ T56] hsr_slave_1: left promiscuous mode [ 130.987635][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.995105][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.005032][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.012547][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.022497][ T56] veth1_macvtap: left promiscuous mode [ 131.028076][ T56] veth0_macvtap: left promiscuous mode [ 131.033580][ T56] veth1_vlan: left promiscuous mode [ 131.038849][ T56] veth0_vlan: left promiscuous mode [ 131.116905][ T56] team0 (unregistering): Port device team_slave_1 removed [ 131.127175][ T56] team0 (unregistering): Port device team_slave_0 removed [ 131.479345][ T524] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.566502][ T524] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.616517][ T524] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.676638][ T524] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.760262][ T524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.798311][ T524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.848071][ T524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.908182][ T524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.969941][ T524] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.007077][ T524] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.056329][ T524] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.106582][ T524] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.212138][ T524] bridge_slave_1: left allmulticast mode [ 132.217862][ T524] bridge_slave_1: left promiscuous mode [ 132.223570][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.231459][ T524] bridge_slave_0: left allmulticast mode [ 132.237131][ T524] bridge_slave_0: left promiscuous mode [ 132.242727][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.426799][ T524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.436931][ T524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.447093][ T524] bond0 (unregistering): Released all slaves [ 132.456603][ T524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.467567][ T524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.477945][ T524] bond0 (unregistering): Released all slaves [ 132.487287][ T524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.497523][ T524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.507383][ T524] bond0 (unregistering): Released all slaves [ 132.618940][ T524] team0: left promiscuous mode [ 132.623864][ T524] team_slave_0: left promiscuous mode [ 132.629408][ T524] team_slave_1: left promiscuous mode [ 132.635774][ T524] batadv_slave_1: left promiscuous mode [ 132.641934][ T524] hsr_slave_0: left promiscuous mode [ 132.647858][ T524] hsr_slave_1: left promiscuous mode [ 132.655265][ T524] hsr_slave_0: left promiscuous mode [ 132.660858][ T524] hsr_slave_1: left promiscuous mode [ 132.666624][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.674049][ T524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.681515][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.688940][ T524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.697906][ T524] hsr_slave_0: left promiscuous mode [ 132.703557][ T524] hsr_slave_1: left promiscuous mode [ 132.709390][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.716923][ T524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.724361][ T524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.731823][ T524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.742569][ T524] veth1_macvtap: left promiscuous mode [ 132.748084][ T524] veth0_macvtap: left promiscuous mode [ 132.754032][ T524] veth1_macvtap: left promiscuous mode [ 132.759514][ T524] veth0_macvtap: left promiscuous mode [ 132.765038][ T524] veth1_vlan: left promiscuous mode [ 132.770287][ T524] veth0_vlan: left promiscuous mode [ 132.775963][ T524] veth1_macvtap: left promiscuous mode [ 132.781460][ T524] veth0_macvtap: left promiscuous mode [ 132.787134][ T524] veth1_vlan: left promiscuous mode [ 132.792374][ T524] veth0_vlan: left promiscuous mode [ 132.817060][ T524] infiniband syz1: set down [ 132.939202][ T524] team0 (unregistering): Port device team_slave_1 removed [ 132.949207][ T524] team0 (unregistering): Port device team_slave_0 removed [ 132.957205][ T50] smc: removing ib device syz1 [ 133.007711][ T524] team0 (unregistering): Port device team_slave_1 removed [ 133.018071][ T524] team0 (unregistering): Port device team_slave_0 removed [ 133.078422][ T524] team0 (unregistering): Port device team_slave_1 removed [ 133.088525][ T524] team0 (unregistering): Port device team_slave_0 removed [ 133.133568][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 133.133584][ T29] audit: type=1400 audit(1729363491.975:3185): avc: denied { sys_chroot } for pid=7015 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.162049][ T29] audit: type=1400 audit(1729363491.975:3186): avc: denied { setgid } for pid=7015 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.182942][ T29] audit: type=1400 audit(1729363491.975:3187): avc: denied { setuid } for pid=7015 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 133.203756][ T29] audit: type=1400 audit(1729363491.975:3188): avc: denied { setrlimit } for pid=7015 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 133.999971][ T524] bridge_slave_1: left allmulticast mode [ 134.005864][ T524] bridge_slave_1: left promiscuous mode [ 134.011547][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.019522][ T524] bridge_slave_0: left allmulticast mode [ 134.025278][ T524] bridge_slave_0: left promiscuous mode [ 134.030899][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.107713][ T524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.117736][ T524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.127393][ T524] bond0 (unregistering): Released all slaves [ 134.168116][ T524] hsr_slave_0: left promiscuous mode [ 134.173748][ T524] hsr_slave_1: left promiscuous mode [ 134.179862][ T524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.188107][ T524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.240586][ T524] team0 (unregistering): Port device team_slave_1 removed [ 134.251084][ T524] team0 (unregistering): Port device team_slave_0 removed