last executing test programs: 5.504112269s ago: executing program 2 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24f98127e4ed2013}, 0x48004) sendmmsg$inet(r3, &(0x7f0000002ac0), 0x400000000000261, 0x85) 5.502173839s ago: executing program 2 (id=503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) 5.430516765s ago: executing program 2 (id=505): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1091, 0x0) chdir(&(0x7f0000000080)='./file0/file0\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) pidfd_send_signal(r0, 0x24, &(0x7f0000000700)={0xb, 0x81, 0x6}, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) 5.369198569s ago: executing program 2 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 5.076079501s ago: executing program 2 (id=511): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x10, 0x82, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xa0ea}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.686515535s ago: executing program 0 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000880)={r4, @in={{0x2, 0x4e24, @remote}}}, 0x84) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000800)={0x0, 0x2, 0x5, 0x3a2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0100d531ad11310b2cc10000f6be"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) 3.671228926s ago: executing program 1 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={[{@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@block_validity}, {@minixdf}]}, 0x1, 0x770, &(0x7f0000000a80)="$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") mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, &(0x7f0000000040)=0x211, 0x29, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.179431923s ago: executing program 0 (id=529): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe99}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="28010000170000002dbd7000fddbdf25ffffffff0000000000000000000000000000000000000000ff0200000000000000000000000000010a010102000000000000000000000000ff01000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d5fb0000040000000000000000000000fc01a4905e61f31e0000000000000032000000000800"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000700000000600000000000000080000000000000000000000b96b6e00"/128], 0x128}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff890200004000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@private2, 0x2c}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x48400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 3.011561595s ago: executing program 1 (id=531): ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x100440a, &(0x7f0000000540)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES16, @ANYRES16], 0xfb, 0x687, &(0x7f0000000d40)="$eJzs3c9v2+Ydx/EPZfnnsGzYhiII0vhpsg4OlimS3LgwssM0irLZSaJA0oN9KrLGLoLI6ZZkwOJL58t+ANs/sFsvPeyPGLDzzvsHdhxQbLcBu2ggKUqyRFqOrThZ+34ZrR7x+ZLPlz+ix7TIhwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALLserlcsdR02zu7Jp9d973WKfXJ0gq6nRRuT21XsqL/tLSkq8mkq98ZVr8V/e+mrifvrmspelnS0dfe+ub9bxcL6fynJHQeetkFPntx9PhBt7v/9Hyt9azzzPdKTGSiwhnm2nLabuC5rdqWY9zAM5sbG+W7243ANNymE+wFodMytu8UQs83a/ZtU9ncXDdOac/baW/Va00nnfj+D6rl8ob5YLG/++9+UArsbbfZdNtbcUxUHcUsDo4Qp9Yy5uBRd399WpJRUOUsQdVpQdVytVqpVKuVjXub994vl4sTE8pjNBExPGjfnJ2PyzSjT27g4gpR//8PS2pqSW3taFcm88dWXb48tXLq+9L+/927zrCNjHZH+/+0l786rL6muP+/kby7kdf/5+RiZOIZsmqsnOnn+3mmFzrSYz1QV13t6+lslrs6i6XMzXA98362pKLkKpCnqG+uaUuOTH+K0aY2tKGyPtS2Ggpk1JCrphwF2lOgUI5a8T7x5aimUJ58Ga3J1m0ZVbSpTa3LyFFJe/K0o7a2VFdN/+n1egd6FG/39VNy1IG+93VpX5XTg5IlFQfH4GRQXv//s0+TOV6u/8eXz+DYOUMM8Nr1+uf/+eayJq6+uowAAAAAAMCsWfFf36Pz/3m9Lamnhtt0yq87LQAAAAAAMEPxN//Xo5f5qPS2rJzz/97l5wYAAAAAAGbDiu+xsyStxBf1W8M7oc5yEUDmzQEAAAAAAODNEn//f2NB6sVDq63KeqnzfwAAAAAA8H/gdyNj7BfTMXZ76df6BUlBZ9H6y78W5c9bx53d71qHtaimdtiPmbgCIGxcs4pKBuqNx+tdkBS/s53rVn984P4gmFYysK/0xcHYWP9z42P9Wv5YAgtz6Z8vMhK4cjSSwEax/05/0DtJzDv9dh8eFRTXJK2sNNymU7K95v2KarUrhdDZDX/55NGvJH+wngePuvuljz7pPoxzOY4mHR9GeXx6Ip3CtFyex+MtxPdcZI1uvKxG2uTv260VK263nK7/nGqHhdGGzrb+v9HNJObmSvK6cpTuAVm/7hcqpXiXDdc+Hh3CGmZRGV/zrB2Rk8VSnMWtJObW2q3kJc0v2QtL35+TqqXJfeCPZlEdzWL6trD+PbEtpmQRHQvrURZ/jRaUk8X6y2UxsUcA4HU5GPZC8SDmSS+0nFZblsb73fN8yo337hMj+Vs/OtnK8z/1khsO56Ri/7uJ5CbEvH5F0Sf6WhK2kIziXryW8Yle7vcrS8r5RC9foHeL2vrz8BlI/bT7NcVBFv/t9Xr3K3G7fxzrVT+LZvgst92gWZ2LNuHd54c/jwfAj3y8//H+k2p1faP8Xrl8r6r5eDX6L/Q9AIAM05+xczJiadifDfru9wZn1Q//+W5SOtHvfmtwSUFJH+kTdfVQd9JHCKxmt7sychnCncmz1ig2/iXlZGxFd3LP6uK+dCS2OoidVzrLyd8XhrHrr3o3AABwqW5O6YfH+/+sc/c76Xn32rXM8+6Tffn4E4LzYiuXvCUAAPjqcPwvrJXwt5bvu50PK5ublVq47Rjfs39ifLe+5Ri3HTq+vV1rbzmm43uhZ3tN0/G16NadwAQ7nY7nh6bh+abjBe5u/OR303/0e+C0au3QtYNO06kFjrG9dlizQ1N3A9t0dn7cdINtx49nDjqO7TZcuxa6XtsE3rJsp2RM4DgjgW7daYduw42KbdPx3VbN3zM/9Zo7LcfUncD23U7oJQtM23LbDc9vxYstqXfagw4BAPjKePbi6PGDbnf/6SmFYyWF9Hq0U4IXshb4mlcRAACMoZcGAAAAAAAAAAAAAAAAAAAAAODNd5b7/04tpDcFplPmlREsDab84sqZlmxpOOXzv18ow/xClHdmVWF8Sn+k3d70Jf8tKRSzYpajwkLUaLr5R2OOZ7qCq2cKVlIozn7zLktZR8IrK/zw4ORxOBbzjbgys2pxsC+KF//nkFV48nlO1fQjavHkNlzIX8HxQlHS04UL7ILL/iQCcNn+FwAA///6IjlL") perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x3}, 0x18) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/182, 0xb6) socket$xdp(0x2c, 0x3, 0x0) 2.803248221s ago: executing program 1 (id=532): r0 = socket(0x200000100000011, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.710473068s ago: executing program 1 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r1, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x800]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid=r1}) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x7ffffffff000}, 0x0, 0x0, 0xff, 0xb}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x2, 0x1}, &(0x7f0000000100)=0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x0, 0xff, 0xa, 0xac7, 0x1}, 0x20) accept4(r2, &(0x7f0000000280)=@isdn, &(0x7f0000000300)=0x80, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x30000d6, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@barrier}, {@resgid={'resgid', 0x3d, r4}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r7, r6, 0x0, 0x8000000d) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r9, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r9, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x800]}) 2.491880564s ago: executing program 1 (id=534): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') (fail_nth: 3) 2.375217133s ago: executing program 4 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0x0) 2.345943625s ago: executing program 4 (id=538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000880)={r4, @in={{0x2, 0x4e24, @remote}}}, 0x84) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000800)={0x0, 0x2, 0x5, 0x3a2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0100d531ad11310b2cc10000f6be"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) 2.211808335s ago: executing program 3 (id=540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000880)={r4, @in={{0x2, 0x4e24, @remote}}}, 0x84) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000800)={0x0, 0x2, 0x5, 0x3a2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="0100d531ad11310b2cc10000f6be"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x163}], 0x1}}], 0x1, 0x4008095) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x9, 0x185, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x0, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001f8ffff00000000ea07000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000001a000055090100000000009500000000000000064802009b070000bf91000000000000b7020000000000008500000084000000b7200000000000009500000000000000a5b0f7d74bdc51adddc80586186927554b757607a54501674d43c293ab71f42e9656204b06146656bd04f46963b08d8b3898d785cf1844de8391de7a71013159e762d8c85999d2e83faaff5f47d121135861eb3cbe640696d8ac023e5d514077000000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x5c, &(0x7f00000002c0)=""/92, 0x41000, 0x50, '\x00', r10, 0x0, r1, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r1], &(0x7f0000000540)=[{0x0, 0x1, 0x8, 0xc}, {0x3, 0x4, 0xf, 0x2}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x4, 0xa, 0x1}, {0x0, 0x1, 0x9, 0x7}, {0x4, 0x1, 0xf, 0xc}]}, 0x90) 2.211298305s ago: executing program 0 (id=541): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000001040)={0xf97cff8c, 0x8, 'SE Linux', "e819bcecf4160e6def0acd5165857810e6f0d73f478dc266376c075805237d19e11ac120cb9c95d43ab3962330ba5891e565220e74b1816404afa7023b84a52205e42e91e43828eb02cd0ea91c716f3d9b87328fd6bd76080791d70f586021e1007df6319a518ac4400f3e8a4ad8ab77b0ef0b9ca61393328fb943e422b0500269f03c67d4154b7b477a6556d1983cef179bd88cb76e734c6ce0d4884047e86c45aea836a3edab6ccb69d62ecf1a3890ef18d6cda2f24bc9c7c2fe42f69244972b1159b67683a6967dec0b1fc70b3a220ce12bd8737f414abdb93e9235215debfcac7513"}, 0xf4) 2.158210019s ago: executing program 1 (id=542): r0 = socket(0x2a, 0x2, 0xfffffffc) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd000000010000001800038034"], 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r9, 0x111, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r9, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfacb, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x80) 2.064704996s ago: executing program 0 (id=544): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0xc, 0x1, 0xe6, 0x5}, {0xff32, 0x3, 0x4, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.917404767s ago: executing program 4 (id=545): prlimit64(0x0, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010002000008000000b70300000000000085000000060000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='ext4_ext_remove_space_done\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000000)=0xb, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x93, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close_range(r4, r5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) creat(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) 1.629411269s ago: executing program 3 (id=546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000880)='kmem_cache_free\x00', r2}, 0x10) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) 1.557181054s ago: executing program 4 (id=547): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140)}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") open(0x0, 0x141a42, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x11, &(0x7f0000000740)=ANY=[], 0x5000) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x64}}, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/93, 0x18) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) getdents(r3, &(0x7f00000009c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x20010, 0xffffffffffffffff, 0x5db3a000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.515465277s ago: executing program 3 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24f98127e4ed2013}, 0x48004) sendmmsg$inet(r3, &(0x7f0000002ac0), 0x400000000000261, 0x85) 1.402542766s ago: executing program 4 (id=549): socket(0x2a, 0x2, 0xfffffffc) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd000000010000001800038034"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1.150392944s ago: executing program 0 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext, 0x0, 0x19fbcc0a, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./cgroup/../file0\x00', 0x1a8001d, &(0x7f0000000300)={[{@grpquota}, {@noacl}, {@grpid}, {@nouser_xattr}], [{@euid_lt={'euid<', 0xee01}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@euid_eq}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r6}}, {@context={'context', 0x3d, 'root'}}, {@hash}, {@appraise_type}, {@hash}, {@subj_role={'subj_role', 0x3d, 'gra\x00\x00\x00\x00\x00'}}]}, 0x0, 0x4f5, &(0x7f0000000ac0)="$eJzs3T9sW1sZAPDPTpw4ad5LXukACNrSFgqq6iRuG1UdoEwIoUqIjiDRkLhRFCeO4qQ0oUM6syJRiQlGZsTciZ0FwcZSBqQCEahBYjC61zepm9pN1PxxFP9+0tU95x7X3zlN7zn159gngJ51OSI2I2IgIh5FxGh2PZcdcb95JI97s/VsZnvr2UwuGo2H/8yl7cm1aPkziXPZcxYj4gffifhJ7v249fWNhelqtbKS1cdXF5fH6+sbN+cXp+cqc5Wlcnlqcmri7q075SMb66XFgaz05Vd/3PzGz5JujWRXWsdxlJpDL+zGSfRHxPeOI1gX9GXjGeh2R/go+Yg4HxFX0vt/NPrSnyYAcJY1GqPRGG2tAwBnXT7NgeXypSwXMBL5fKnUzOFdiOF8tVZfvfG4trY028yVjUUh/3i+WpnIcoVjUcgl9cm0/LZe3lO/FRGfRcQvBofSemmmVp3t5n98AKCHnduz/v9nsLn+AwBnXLHbHQAATpz1HwB6j/UfAHqP9R8Aek9z/R/qdjcAgBPk9T8A9B7rPwD0lO8/eJAcje3s+69nn6yvLdSe3Jyt1BdKi2szpZnaynJprlabS7+zZ3G/56vWasuTt2Pt6dg3l+ur4/X13y01G9Lv9f5xpZBWNo97WADAB3x26eVfcsmKfG8oPaJlL4dCV3sGHLd8tzsAdE1ftzsAdI3dvqB3HeI1vvQAnBFttuh9R7HdB4QajUbj+LoEHLPrX5D/h17Vkv/3W8DQY+T/oXfJ/0PvajRyB93zPw76QADgdJPjBzq8/38+O/82e3PgR7N7H/HiOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9vO/r+lbC/wkcjnS6WITyJiLAq5x/PVykREfBoRfx4sDCb1yS73GQA4rPzfc9n+X9dHr42803Tx3G5xICJ++quHv3w6vbq68qeIgdy/Bneur77IrpdPvvcAwP521un03PJC/s3Ws5md4yT78/rbEVFsxt/eGojt3fj90Z+ei1GIiOF/57J6U64ld3EYm88j4vPtxp+LkTQH0tz5dG/8JPYnJxo//078fNrWPCd/F587gr5Ar3mZzD/3291/+bicntvf/8V0hjq8bP5LnmpmO50D38bfmf/6Osx/lw8a4/YfvtssDe1pKcbr5xFf7I/Yib3dMv/sxM91iH/tgPH/+qWLVzq1NX4dcT3ax2+NNb66uDxeX9+4Ob84PVeZqyyVy1OTUxN3b90pj6c56vHOq8E/7t34tFNbMv7hDvGL+4z/qwcc/2/+9+iHX/lA/K9fbRc/Hxc+ED9ZE792wPjTw78vdmpL4s92GP9+P/8bB4z/6m8b720bDgB0T319Y2G6Wq2sKCic/kLyT/YUdKNt4VsnFWsg2jf9/Grznt7T1Gh8VKxOM8ZRZN2A02D3po+I/3a7MwAAAAAAAAAAAAAAQFsn8Ymlbo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs+v/AQAA//99rszi") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x99, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x5, 0x2, 0x5, 0x1}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1800000008000b1f00000000e4ffffff140100000800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) r10 = openat$cgroup_procs(r7, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000880), 0x12) 646.128102ms ago: executing program 3 (id=551): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 598.190745ms ago: executing program 3 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000200ff0000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0)="c5", &(0x7f0000000280)=""/239}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) unlink(&(0x7f0000000100)='./file0\x00') bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 366.180283ms ago: executing program 0 (id=553): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) 298.517978ms ago: executing program 4 (id=554): r0 = socket(0x2a, 0x2, 0xfffffffc) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd000000010000001800038034"], 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x111, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfacb, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x80) 80.064684ms ago: executing program 2 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000580)=0x101, 0x2) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10003, 0xfffffffe, 0x10000, 0x1, 0x0, 0x0, 0xfffffffe}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x2, 0x0, 0x16, 0x0, "598ae7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96372b74ee2bf69384a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f0000000fc0)=""/255, 0xff}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000b00)=""/214, 0xd6}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x7}, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000680)=""/177, 0xb1}], 0x1, 0x100, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x20, &(0x7f0000000840)={&(0x7f0000000540)=""/27, 0x1b, 0x0, &(0x7f0000000800)=""/63, 0x3f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r6, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x66, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3, 0x1c) 0s ago: executing program 3 (id=556): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="008b2288f6bed4093e00000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) capget(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1ff, 0x3, 0x3b800000, 0x3, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f05dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) kernel console output (not intermixed with test programs): 85.577083][ T6715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.608278][ T6795] delete_channel: no stack [ 85.620809][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.628742][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.642959][ T6795] Driver unsupported XDP return value 0 on prog (id 183) dev N/A, expect packet loss! [ 85.697071][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.704431][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.735397][ T6715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.749833][ T3685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.751250][ T6715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.805910][ T6715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.838350][ T6715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.967233][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.001695][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.023725][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.057227][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.064607][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.108948][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.116361][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.355595][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.372111][ T6636] veth0_vlan: entered promiscuous mode [ 86.392082][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 86.419656][ T6636] veth1_vlan: entered promiscuous mode [ 86.483872][ T6832] loop4: detected capacity change from 0 to 512 [ 86.494201][ T6832] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.381: attempt to clear invalid blocks 1 len 1 [ 86.515397][ T6832] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.381: bg 0: block 343: padding at end of block bitmap is not set [ 86.531746][ T6832] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 86.548268][ T6832] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.381: invalid indirect mapped block 1819239214 (level 0) [ 86.563201][ T6832] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.381: invalid indirect mapped block 1819239214 (level 1) [ 86.581416][ T6832] EXT4-fs (loop4): 1 truncate cleaned up [ 86.582510][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.587922][ T6832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.595433][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.619860][ T6799] bridge_slave_0: entered allmulticast mode [ 86.627490][ T6799] bridge_slave_0: entered promiscuous mode [ 86.636887][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.646105][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.655898][ T6799] bridge_slave_1: entered allmulticast mode [ 86.663144][ T6799] bridge_slave_1: entered promiscuous mode [ 86.674178][ T6636] veth0_macvtap: entered promiscuous mode [ 86.716167][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.743767][ T6636] veth1_macvtap: entered promiscuous mode [ 86.757391][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.797977][ T6799] team0: Port device team_slave_0 added [ 86.806447][ T6799] team0: Port device team_slave_1 added [ 86.814233][ T6715] veth0_vlan: entered promiscuous mode [ 86.840321][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.847536][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.874439][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.888675][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.899602][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.909783][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.920532][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.930732][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.941498][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.951654][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.962589][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.972692][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.983512][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.993785][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.004604][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.022154][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.028780][ T6841] loop1: detected capacity change from 0 to 512 [ 87.031221][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.044258][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.055180][ T6841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.073385][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.092778][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.105935][ T6841] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.107963][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.128884][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140144][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.151791][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.162616][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.174196][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.185210][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.197013][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.208055][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.219826][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.230966][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.242444][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.255087][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.265462][ T6715] veth1_vlan: entered promiscuous mode [ 87.277887][ T6841] loop1: detected capacity change from 512 to 511 [ 87.309666][ T6636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.319515][ T6636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329468][ T6636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329808][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 8: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.339365][ T6636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.372416][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 9: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.396062][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 10: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.400176][ T6799] hsr_slave_0: entered promiscuous mode [ 87.419518][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 11: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.448572][ T6799] hsr_slave_1: entered promiscuous mode [ 87.450182][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 12: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.478870][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 13: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.480948][ T5269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.501394][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.501573][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 15: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.502092][ T6520] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 8: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=3072, inode=0, rec_len=0, size=1024 fake=0 [ 87.504453][ T6520] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 8: comm syz-executor: path /3/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 87.512402][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 87.512434][ T29] audit: type=1400 audit(1725508844.311:915): avc: denied { remove_name } for pid=6520 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.559713][ T6799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.580524][ T29] audit: type=1400 audit(1725508844.311:916): avc: denied { rmdir } for pid=6520 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.604775][ T6799] Cannot create hsr debugfs directory [ 87.686386][ T6715] veth0_macvtap: entered promiscuous mode [ 87.692576][ T29] audit: type=1326 audit(1725508844.491:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 87.716861][ T29] audit: type=1326 audit(1725508844.501:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 87.730139][ T6715] veth1_macvtap: entered promiscuous mode [ 87.756081][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.767003][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.777223][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.788074][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.798237][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.804266][ T29] audit: type=1326 audit(1725508844.501:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 87.809018][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.809046][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.809099][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.809116][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.809132][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.809147][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.834958][ T29] audit: type=1326 audit(1725508844.501:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 87.843265][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.843280][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.843309][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.844972][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.855510][ T29] audit: type=1326 audit(1725508844.501:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 87.875423][ T6846] loop4: detected capacity change from 0 to 512 [ 87.877169][ T29] audit: type=1326 audit(1725508844.501:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 88.025085][ T29] audit: type=1326 audit(1725508844.501:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 88.050957][ T29] audit: type=1326 audit(1725508844.501:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70af1cef9 code=0x7ffc0000 [ 88.051405][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.089800][ T6846] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.118589][ T5269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.154287][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.165174][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.175430][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.186420][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.196980][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.207854][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.218013][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.228997][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.239222][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.250064][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.260336][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.271095][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.281229][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.292110][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.304513][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.327458][ T6852] macvtap0: entered promiscuous mode [ 88.334206][ T6852] macvtap0: left promiscuous mode [ 88.344648][ T6715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353869][ T6715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.362977][ T6715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.372099][ T6715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.390120][ T6520] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.430619][ T5754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.519007][ T5754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.601013][ T5754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.617184][ T6868] loop0: detected capacity change from 0 to 512 [ 88.638212][ T6868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.681331][ T6868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.690235][ T6799] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.705200][ T6868] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.712193][ T6875] loop2: detected capacity change from 0 to 512 [ 88.752145][ T6860] loop4: detected capacity change from 0 to 8192 [ 88.761145][ T5754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.780371][ T6868] loop0: detected capacity change from 512 to 511 [ 88.801657][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.827650][ T6799] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.840331][ T6636] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 4: comm syz-executor: path /1/file0: bad entry in directory: directory entry overrun - offset=992, inode=2, rec_len=1012, size=1024 fake=1 [ 88.841984][ T6875] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.881051][ T6636] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.925810][ T6636] EXT4-fs error (device loop0): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.949697][ T6799] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.969696][ T6875] program syz.2.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.040234][ T6799] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.072967][ T5754] bridge_slave_1: left allmulticast mode [ 89.078994][ T5754] bridge_slave_1: left promiscuous mode [ 89.085000][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.103789][ T5754] bridge_slave_0: left allmulticast mode [ 89.109844][ T5754] bridge_slave_0: left promiscuous mode [ 89.115788][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.237330][ T5754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.250419][ T5754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.263016][ T5754] bond0 (unregistering): Released all slaves [ 89.347023][ T6884] syz.4.392[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.347166][ T6884] syz.4.392[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.356564][ T6799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.405571][ T6799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.427528][ T5754] hsr_slave_0: left promiscuous mode [ 89.434990][ T5754] hsr_slave_1: left promiscuous mode [ 89.441953][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.450264][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.459117][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.467333][ T5754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.491226][ T6715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.506598][ T5754] veth1_macvtap: left promiscuous mode [ 89.512414][ T5754] veth0_macvtap: left promiscuous mode [ 89.518319][ T5754] veth1_vlan: left promiscuous mode [ 89.523826][ T5754] veth0_vlan: left promiscuous mode [ 89.766689][ T5754] team0 (unregistering): Port device team_slave_1 removed [ 89.798942][ T5754] team0 (unregistering): Port device team_slave_0 removed [ 89.935810][ T6799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.968786][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.012313][ T6799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.050777][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 90.150022][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.158080][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.166273][ T6863] bridge_slave_0: entered allmulticast mode [ 90.173907][ T6863] bridge_slave_0: entered promiscuous mode [ 90.186664][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.194099][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.202109][ T6863] bridge_slave_1: entered allmulticast mode [ 90.210713][ T6863] bridge_slave_1: entered promiscuous mode [ 90.245046][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.272223][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.287036][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.294730][ T6912] loop2: detected capacity change from 0 to 512 [ 90.304140][ T6912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.321356][ T6912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.342703][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.350279][ T6912] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.372870][ T6863] team0: Port device team_slave_0 added [ 90.388211][ T6863] team0: Port device team_slave_1 added [ 90.423492][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.431439][ T4805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.443003][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.450921][ T4805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.466815][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.474170][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.495745][ T6916] loop4: detected capacity change from 0 to 8192 [ 90.501070][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.528731][ T6912] loop2: detected capacity change from 512 to 511 [ 90.543107][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.550414][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.577260][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.583372][ T6715] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 4: comm syz-executor: path /6/file0: bad entry in directory: directory entry overrun - offset=992, inode=2, rec_len=1012, size=1024 fake=1 [ 90.639346][ T6715] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 90.670942][ T6715] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 90.689237][ T6863] hsr_slave_0: entered promiscuous mode [ 90.701570][ T6636] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.711413][ T6863] hsr_slave_1: entered promiscuous mode [ 90.721629][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.730323][ T6863] Cannot create hsr debugfs directory [ 90.741722][ T4805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.766100][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.019475][ T6799] veth0_vlan: entered promiscuous mode [ 91.031275][ T6799] veth1_vlan: entered promiscuous mode [ 91.071307][ T6799] veth0_macvtap: entered promiscuous mode [ 91.082409][ T6799] veth1_macvtap: entered promiscuous mode [ 91.102858][ T4805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.122843][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.133824][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.144192][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.155119][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.165303][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.176192][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.186404][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.197352][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.207500][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.219429][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.229757][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.240656][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.261748][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.274759][ T4805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.286077][ T6941] loop4: detected capacity change from 0 to 512 [ 91.309739][ T6941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.311711][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.324289][ T6941] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.333627][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333646][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333664][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333770][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333786][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333800][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333831][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333859][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333913][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333946][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.333976][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333996][ T6799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.334036][ T6799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.337787][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.505202][ T6946] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 91.506059][ T4805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.543540][ T5269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.554334][ T6799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563427][ T6799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572478][ T6799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.575759][ T6949] loop4: detected capacity change from 0 to 128 [ 91.581550][ T6799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600117][ T6949] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.613996][ T6949] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.690989][ T6863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.698602][ T5269] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 91.707006][ T5269] FAT-fs (loop4): Filesystem has been set read-only [ 91.715160][ T5269] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 91.735867][ T6863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.799820][ T6957] loop3: detected capacity change from 0 to 512 [ 91.821158][ T6863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.833339][ T6863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.843396][ T6957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.859762][ T6957] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.863005][ T4805] bridge_slave_1: left allmulticast mode [ 91.876343][ T4805] bridge_slave_1: left promiscuous mode [ 91.882263][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.893784][ T4805] bridge_slave_0: left allmulticast mode [ 91.899690][ T4805] bridge_slave_0: left promiscuous mode [ 91.905578][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.923897][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.047550][ T6964] loop3: detected capacity change from 0 to 512 [ 92.059221][ T6964] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.409: attempt to clear invalid blocks 1 len 1 [ 92.073148][ T6964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.409: bg 0: block 343: padding at end of block bitmap is not set [ 92.091791][ T6964] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 92.092095][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.116539][ T6964] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.409: invalid indirect mapped block 1819239214 (level 0) [ 92.138622][ T6964] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.409: invalid indirect mapped block 1819239214 (level 1) [ 92.153505][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.166462][ T6964] EXT4-fs (loop3): 1 truncate cleaned up [ 92.167511][ T4805] bond0 (unregistering): Released all slaves [ 92.173167][ T6964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.212291][ T6928] chnl_net:caif_netlink_parms(): no params data found [ 92.308693][ T4805] hsr_slave_0: left promiscuous mode [ 92.317368][ T4805] hsr_slave_1: left promiscuous mode [ 92.326827][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.335041][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.346509][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.354320][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.365244][ T4805] veth1_macvtap: left promiscuous mode [ 92.370970][ T4805] veth0_macvtap: left promiscuous mode [ 92.376739][ T4805] veth1_vlan: left promiscuous mode [ 92.382292][ T4805] veth0_vlan: left promiscuous mode [ 92.471107][ T6715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.520662][ T4805] team0 (unregistering): Port device team_slave_1 removed [ 92.536212][ T4805] team0 (unregistering): Port device team_slave_0 removed [ 92.603747][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.611200][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.618677][ T6928] bridge_slave_0: entered allmulticast mode [ 92.626288][ T6928] bridge_slave_0: entered promiscuous mode [ 92.645011][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.652558][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.666780][ T6928] bridge_slave_1: entered allmulticast mode [ 92.674105][ T6928] bridge_slave_1: entered promiscuous mode [ 92.714047][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.744120][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.764955][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.803108][ T6928] team0: Port device team_slave_0 added [ 92.813202][ T6928] team0: Port device team_slave_1 added [ 92.856065][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.863415][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.890338][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.902717][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.910054][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.936910][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.950273][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.965225][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.049836][ T6993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6993 comm=syz.3.415 [ 93.066435][ T6928] hsr_slave_0: entered promiscuous mode [ 93.073941][ T6928] hsr_slave_1: entered promiscuous mode [ 93.083012][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.091000][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.099014][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 93.099040][ T29] audit: type=1400 audit(1725508849.901:1161): avc: denied { create } for pid=6994 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.106986][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.126832][ T6995] FAULT_INJECTION: forcing a failure. [ 93.126832][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 93.126860][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.416 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 93.126965][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.126993][ T6995] Call Trace: [ 93.127001][ T6995] [ 93.127010][ T6995] dump_stack_lvl+0xf2/0x150 [ 93.127042][ T6995] dump_stack+0x15/0x20 [ 93.127075][ T6995] should_fail_ex+0x229/0x230 [ 93.127105][ T6995] ? kernfs_fop_write_iter+0xe7/0x2c0 [ 93.127134][ T6995] should_failslab+0x8f/0xb0 [ 93.127230][ T6995] __kmalloc_noprof+0xa5/0x370 [ 93.127287][ T6995] kernfs_fop_write_iter+0xe7/0x2c0 [ 93.127315][ T6995] vfs_write+0x78f/0x900 [ 93.127350][ T6995] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.127386][ T6995] ksys_write+0xeb/0x1b0 [ 93.127415][ T6995] __x64_sys_write+0x42/0x50 [ 93.127444][ T6995] x64_sys_call+0x27dd/0x2d60 [ 93.127477][ T6995] do_syscall_64+0xc9/0x1c0 [ 93.127502][ T6995] ? clear_bhb_loop+0x55/0xb0 [ 93.127522][ T6995] ? clear_bhb_loop+0x55/0xb0 [ 93.127543][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.127649][ T6995] RIP: 0033:0x7fe142f8cef9 [ 93.127666][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.127719][ T6995] RSP: 002b:00007fe141c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.135607][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.147302][ T6995] RAX: ffffffffffffffda RBX: 00007fe143145f80 RCX: 00007fe142f8cef9 [ 93.147320][ T6995] RDX: 0000000000000012 RSI: 0000000020000c40 RDI: 0000000000000009 [ 93.147414][ T6995] RBP: 00007fe141c07090 R08: 0000000000000000 R09: 0000000000000000 [ 93.147488][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.147503][ T6995] R13: 0000000000000000 R14: 00007fe143145f80 R15: 00007ffd7a728918 [ 93.147525][ T6995] [ 93.476472][ T29] audit: type=1400 audit(1725508850.281:1162): avc: denied { create } for pid=7002 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.497239][ T29] audit: type=1400 audit(1725508850.281:1163): avc: denied { create } for pid=7002 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.517429][ T29] audit: type=1400 audit(1725508850.281:1164): avc: denied { bind } for pid=7002 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.537387][ T29] audit: type=1400 audit(1725508850.281:1165): avc: denied { name_bind } for pid=7002 comm="syz.3.418" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 93.544158][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 93.558928][ T29] audit: type=1400 audit(1725508850.281:1166): avc: denied { node_bind } for pid=7002 comm="syz.3.418" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 93.559052][ T29] audit: type=1400 audit(1725508850.281:1167): avc: denied { listen } for pid=7002 comm="syz.3.418" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.559141][ T29] audit: type=1400 audit(1725508850.281:1168): avc: denied { write } for pid=7002 comm="syz.3.418" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.559181][ T29] audit: type=1400 audit(1725508850.281:1169): avc: denied { setopt } for pid=7002 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.559258][ T29] audit: type=1400 audit(1725508850.281:1170): avc: denied { connect } for pid=7002 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 93.632983][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.672320][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 93.691922][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.703847][ T5752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.754796][ T5752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.812893][ T5752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.878800][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.886829][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.895241][ T6967] bridge_slave_0: entered allmulticast mode [ 93.903208][ T6967] bridge_slave_0: entered promiscuous mode [ 93.915346][ T5752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.943738][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.951770][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.959868][ T6967] bridge_slave_1: entered allmulticast mode [ 93.966975][ T6967] bridge_slave_1: entered promiscuous mode [ 93.989835][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.997204][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.005554][ T6981] bridge_slave_0: entered allmulticast mode [ 94.013679][ T6981] bridge_slave_0: entered promiscuous mode [ 94.022638][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.030723][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.039190][ T6981] bridge_slave_1: entered allmulticast mode [ 94.046696][ T6981] bridge_slave_1: entered promiscuous mode [ 94.064397][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.088238][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.115677][ T6967] team0: Port device team_slave_0 added [ 94.132841][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.148078][ T6967] team0: Port device team_slave_1 added [ 94.163537][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.215000][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.222878][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.251763][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.267554][ T5752] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.288419][ T6981] team0: Port device team_slave_0 added [ 94.296295][ T6981] team0: Port device team_slave_1 added [ 94.303176][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.310614][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.337491][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.370785][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.397517][ T5752] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.409802][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.418444][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.447781][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.463104][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.470854][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.499709][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.539828][ T6967] hsr_slave_0: entered promiscuous mode [ 94.547196][ T6967] hsr_slave_1: entered promiscuous mode [ 94.554613][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.563074][ T6967] Cannot create hsr debugfs directory [ 94.574135][ T5752] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.617861][ T6928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.634385][ T7024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7024 comm=syz.3.422 [ 94.659277][ T6928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.689242][ T5752] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.736669][ T6981] hsr_slave_0: entered promiscuous mode [ 94.744747][ T6981] hsr_slave_1: entered promiscuous mode [ 94.755697][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.764976][ T6981] Cannot create hsr debugfs directory [ 94.780105][ T6928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.795188][ T6928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.892473][ T5752] bridge_slave_1: left allmulticast mode [ 94.899065][ T5752] bridge_slave_1: left promiscuous mode [ 94.905178][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.913990][ T5752] bridge_slave_0: left allmulticast mode [ 94.920425][ T5752] bridge_slave_0: left promiscuous mode [ 94.926810][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.936303][ T5752] bridge_slave_1: left allmulticast mode [ 94.942734][ T5752] bridge_slave_1: left promiscuous mode [ 94.949209][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.958794][ T5752] bridge_slave_0: left allmulticast mode [ 94.965190][ T5752] bridge_slave_0: left promiscuous mode [ 94.971819][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.251415][ T5752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.263294][ T5752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.274733][ T5752] bond0 (unregistering): Released all slaves [ 95.286453][ T5752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.298364][ T5752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.310311][ T5752] bond0 (unregistering): Released all slaves [ 95.396382][ T6863] veth0_vlan: entered promiscuous mode [ 95.422297][ T6863] veth1_vlan: entered promiscuous mode [ 95.442757][ T5752] hsr_slave_0: left promiscuous mode [ 95.448980][ T5752] hsr_slave_1: left promiscuous mode [ 95.455285][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.464533][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.472605][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.484299][ T5752] hsr_slave_0: left promiscuous mode [ 95.490920][ T5752] hsr_slave_1: left promiscuous mode [ 95.497279][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.505459][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.514002][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.522097][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.536193][ T5752] veth1_macvtap: left promiscuous mode [ 95.542418][ T5752] veth0_macvtap: left promiscuous mode [ 95.548416][ T5752] veth1_vlan: left promiscuous mode [ 95.554081][ T5752] veth0_vlan: left promiscuous mode [ 95.561054][ T5752] veth1_macvtap: left promiscuous mode [ 95.566965][ T5752] veth0_macvtap: left promiscuous mode [ 95.572952][ T5752] veth1_vlan: left promiscuous mode [ 95.578638][ T5752] veth0_vlan: left promiscuous mode [ 95.766876][ T5752] team0 (unregistering): Port device team_slave_1 removed [ 95.779563][ T5752] team0 (unregistering): Port device team_slave_0 removed [ 95.783212][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.795071][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.803051][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.810960][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.818893][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.826790][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.834779][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.842812][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.850844][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.853066][ T7043] SELinux: policydb version -323216920 does not match my version range 15-33 [ 95.858984][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.872599][ T7043] SELinux: failed to load policy [ 95.876145][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.889163][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.897076][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.905031][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.913000][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.921043][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.928972][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.937021][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.944960][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.952967][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.960991][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.969013][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.976922][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.984828][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 95.992888][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.000800][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.008793][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.016721][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.025038][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.032989][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.040906][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.048922][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.056838][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.064839][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.072837][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.080793][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.088865][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.096801][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.104746][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.112650][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.120587][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.128444][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.136430][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.144404][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.152388][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.160300][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.168323][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.176377][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.184374][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.192303][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.200215][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.208198][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.216145][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.224266][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.232176][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.240074][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.247996][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.255885][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.263912][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.271914][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.279800][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.287735][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.295645][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.303557][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.311607][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.319448][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.327483][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.335379][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.343364][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.351433][ T3442] hid-generic 000F:0000:0000.0002: unknown main item tag 0x0 [ 96.361163][ T3442] hid-generic 000F:0000:0000.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 96.408637][ T5752] team0 (unregistering): Port device team_slave_1 removed [ 96.421793][ T5752] team0 (unregistering): Port device team_slave_0 removed [ 96.498678][ T6863] veth0_macvtap: entered promiscuous mode [ 96.509670][ T6863] veth1_macvtap: entered promiscuous mode [ 96.539043][ T7045] loop3: detected capacity change from 0 to 512 [ 96.544887][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.556828][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.567307][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.578903][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.589509][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.600627][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.611134][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.622182][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.632560][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.643579][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.655582][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.655983][ T7045] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.426: attempt to clear invalid blocks 1 len 1 [ 96.669848][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.687769][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.698146][ T7045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.426: bg 0: block 343: padding at end of block bitmap is not set [ 96.698402][ T7045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 96.723054][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.731062][ T7045] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.426: invalid indirect mapped block 1819239214 (level 0) [ 96.734446][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.752435][ T7045] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.426: invalid indirect mapped block 1819239214 (level 1) [ 96.759557][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.784958][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.795495][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.801864][ T7045] EXT4-fs (loop3): 1 truncate cleaned up [ 96.806886][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.823331][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.823686][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.834527][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.837581][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.881379][ T6863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.890713][ T6863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900087][ T6863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909711][ T6863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.937190][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.952304][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.996617][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.004255][ T5754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.018618][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.026233][ T4805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.108727][ T6981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.121611][ T6981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.133834][ T6981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.153032][ T6981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.261295][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.293948][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.306321][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.335903][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.343638][ T5754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.372120][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.379779][ T5754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.421001][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.559369][ T6967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.593536][ T6967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.626465][ T6967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.667093][ T6981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.691025][ T6967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.737179][ T6928] veth0_vlan: entered promiscuous mode [ 97.781275][ T6928] veth1_vlan: entered promiscuous mode [ 97.896468][ T6928] veth0_macvtap: entered promiscuous mode [ 97.919222][ T6928] veth1_macvtap: entered promiscuous mode [ 97.939992][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.954769][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.987437][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.998803][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.009349][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.020877][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.031348][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.042501][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.052929][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.064198][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.074832][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.086097][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.096591][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.108014][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.133191][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.147758][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.171927][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.183330][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.193914][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.205119][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.215665][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.227113][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.237820][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.249065][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.259718][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.270959][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.281534][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.292720][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.306217][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.329309][ T6928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.338800][ T6928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.348297][ T6928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.357611][ T6928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.494903][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.502680][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.554799][ T7154] wg2: entered promiscuous mode [ 98.560155][ T7154] wg2: entered allmulticast mode [ 98.592426][ T7156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7156 comm=syz.1.429 [ 98.641788][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.649416][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.736731][ T7161] loop1: detected capacity change from 0 to 8192 [ 98.755544][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 98.755577][ T29] audit: type=1400 audit(1725508855.561:1194): avc: denied { mount } for pid=7160 comm="syz.1.432" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 98.756629][ T6981] veth0_vlan: entered promiscuous mode [ 98.845101][ T6981] veth1_vlan: entered promiscuous mode [ 98.854442][ T7168] FAULT_INJECTION: forcing a failure. [ 98.854442][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.868864][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.0.403 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 98.874543][ T6981] veth0_macvtap: entered promiscuous mode [ 98.879463][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.879480][ T7168] Call Trace: [ 98.879489][ T7168] [ 98.879497][ T7168] dump_stack_lvl+0xf2/0x150 [ 98.879526][ T7168] dump_stack+0x15/0x20 [ 98.879694][ T7168] should_fail_ex+0x229/0x230 [ 98.879726][ T7168] should_fail+0xb/0x10 [ 98.879752][ T7168] should_fail_usercopy+0x1a/0x20 [ 98.879781][ T7168] _copy_from_user+0x1e/0xd0 [ 98.879810][ T7168] copy_msghdr_from_user+0x54/0x2a0 [ 98.879861][ T7168] do_recvmmsg+0x290/0x720 [ 98.892297][ T6981] veth1_macvtap: entered promiscuous mode [ 98.895658][ T7168] __x64_sys_recvmmsg+0xe2/0x170 [ 98.895700][ T7168] x64_sys_call+0x26e3/0x2d60 [ 98.895752][ T7168] do_syscall_64+0xc9/0x1c0 [ 98.895808][ T7168] ? clear_bhb_loop+0x55/0xb0 [ 98.895833][ T7168] ? clear_bhb_loop+0x55/0xb0 [ 98.895855][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.941386][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.944954][ T7168] RIP: 0033:0x7f53bf79cef9 [ 98.944978][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.945001][ T7168] RSP: 002b:00007f53be417038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.945053][ T7168] RAX: ffffffffffffffda RBX: 00007f53bf955f80 RCX: 00007f53bf79cef9 [ 98.945070][ T7168] RDX: 0000000000000001 RSI: 0000000020007340 RDI: 0000000000000009 [ 98.945085][ T7168] RBP: 00007f53be417090 R08: 0000000000000000 R09: 0000000000000000 [ 98.945101][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.945117][ T7168] R13: 0000000000000000 R14: 00007f53bf955f80 R15: 00007fff0c1ff328 [ 98.945139][ T7168] [ 99.068358][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.078840][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.089967][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.100425][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.111653][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.122212][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.133335][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.143753][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.154808][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.165574][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.176952][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.187412][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.198558][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.214592][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.237181][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.248455][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.259116][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.270507][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.281015][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.292454][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.303306][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.314700][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.325302][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.336490][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.347071][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.358310][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.368758][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.379976][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.393976][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.420515][ T6981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.430245][ T6981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.439752][ T6981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.449704][ T6981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.590135][ T7186] loop1: detected capacity change from 0 to 512 [ 99.619475][ T7186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.643042][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.665721][ T7186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.724919][ T29] audit: type=1400 audit(1725508856.531:1195): avc: denied { ioctl } for pid=7198 comm="syz.2.436" path="socket:[17670]" dev="sockfs" ino=17670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.727317][ T7186] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.820380][ T29] audit: type=1400 audit(1725508856.561:1196): avc: denied { write } for pid=7198 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.847502][ T7207] wg2: left promiscuous mode [ 99.853083][ T7207] wg2: left allmulticast mode [ 99.895627][ T7207] wg2: entered promiscuous mode [ 99.901152][ T7207] wg2: entered allmulticast mode [ 100.129894][ T29] audit: type=1400 audit(1725508856.921:1197): avc: denied { create } for pid=7249 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.200777][ T6863] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 100.220808][ T7271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7271 comm=syz.3.439 [ 100.248705][ T6863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 100.254150][ T29] audit: type=1400 audit(1725508856.971:1198): avc: denied { mounton } for pid=7185 comm="syz.1.434" path="/4/file0/bus" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.282662][ T29] audit: type=1400 audit(1725508856.971:1199): avc: denied { create } for pid=7185 comm="syz.1.434" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.297945][ T6863] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 100.305389][ T29] audit: type=1400 audit(1725508856.971:1200): avc: denied { write } for pid=7185 comm="syz.1.434" path="/4/file0/bus" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.343490][ T29] audit: type=1400 audit(1725508856.971:1201): avc: denied { map } for pid=7185 comm="syz.1.434" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.362026][ T6863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 100.369780][ T29] audit: type=1400 audit(1725508856.971:1202): avc: denied { read write } for pid=7185 comm="syz.1.434" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.382490][ T6863] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 100.404944][ T29] audit: type=1400 audit(1725508856.971:1203): avc: denied { ioctl } for pid=7185 comm="syz.1.434" path="/4/file0/bus" dev="loop1" ino=16 ioctlcmd=0x4c02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.514737][ T6863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 100.516315][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 100.542283][ T7279] loop3: detected capacity change from 0 to 512 [ 100.558148][ T6863] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2978: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 100.560179][ T7279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.619099][ T6863] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 100.648497][ T7279] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 100.648763][ T6967] veth0_vlan: entered promiscuous mode [ 100.663860][ T7279] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 100.664405][ T6863] EXT4-fs warning (device loop1): __ext4_unlink:3283: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 100.679235][ T7279] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510273 > max in inode 13 [ 100.693301][ T6967] veth1_vlan: entered promiscuous mode [ 100.717170][ T6967] veth0_macvtap: entered promiscuous mode [ 100.726668][ T6967] veth1_macvtap: entered promiscuous mode [ 100.738050][ T7279] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510274 > max in inode 13 [ 100.749926][ T7279] EXT4-fs (loop3): 1 truncate cleaned up [ 100.759436][ T6863] EXT4-fs warning (device loop1): __ext4_unlink:3283: inode #16: comm syz-executor: Deleting file 'bus' with no links [ 100.768287][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.798752][ T6863] EXT4-fs warning (device loop1): __ext4_unlink:3283: inode #17: comm syz-executor: Deleting file 'éq‰Y’3aK' with no links [ 100.811941][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.811980][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.811994][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812028][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812041][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812058][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812070][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812163][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812173][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812188][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812262][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812293][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812306][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812322][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812336][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.812381][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.813620][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.012859][ T6863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.037950][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.049766][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.060743][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.072228][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.083271][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.094761][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.105587][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.117300][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.128254][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.140041][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.150998][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.162855][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.173884][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.185615][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.196663][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.208302][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.221710][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.270831][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.309820][ T6967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.319445][ T6967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.328879][ T6967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.330790][ T7295] loop0: detected capacity change from 0 to 256 [ 101.338294][ T6967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.418803][ T7309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7309 comm=syz.3.447 [ 101.482685][ T7295] FAT-fs (loop0): Directory bread(block 64) failed [ 101.506168][ T7295] FAT-fs (loop0): Directory bread(block 65) failed [ 101.527367][ T7313] loop2: detected capacity change from 0 to 512 [ 101.536166][ T7295] FAT-fs (loop0): Directory bread(block 66) failed [ 101.540217][ T7319] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 101.560020][ T7295] FAT-fs (loop0): Directory bread(block 67) failed [ 101.567471][ T7295] FAT-fs (loop0): Directory bread(block 68) failed [ 101.573509][ T7313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.590959][ T7295] FAT-fs (loop0): Directory bread(block 69) failed [ 101.608110][ T7295] FAT-fs (loop0): Directory bread(block 70) failed [ 101.629497][ T7313] EXT4-fs (loop2): 1 orphan inode deleted [ 101.635637][ T7313] EXT4-fs (loop2): 1 truncate cleaned up [ 101.635900][ T7295] FAT-fs (loop0): Directory bread(block 71) failed [ 101.649628][ T7295] FAT-fs (loop0): Directory bread(block 72) failed [ 101.656942][ T7295] FAT-fs (loop0): Directory bread(block 73) failed [ 101.661381][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.708202][ T7295] syz.0.445: attempt to access beyond end of device [ 101.708202][ T7295] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 101.726405][ T7295] syz.0.445: attempt to access beyond end of device [ 101.726405][ T7295] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 101.743192][ T7329] loop3: detected capacity change from 0 to 512 [ 101.794766][ T7313] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #12: block 7: comm syz.2.448: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 101.828803][ T7313] EXT4-fs (loop2): Remounting filesystem read-only [ 101.842980][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.857611][ T7329] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.874582][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.450'. [ 101.912747][ T7144] kworker/u8:16: attempt to access beyond end of device [ 101.912747][ T7144] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 101.959173][ T6981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.965546][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.089702][ T7341] loop0: detected capacity change from 0 to 1024 [ 102.097405][ T7341] EXT4-fs: Ignoring removed oldalloc option [ 102.194862][ T7341] EXT4-fs (loop0): stripe (222) is not aligned with cluster size (16), stripe is disabled [ 102.287191][ T7382] loop2: detected capacity change from 0 to 512 [ 102.302493][ T7382] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.453: corrupted in-inode xattr: invalid ea_ino [ 102.341469][ T7341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.359423][ T7382] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.453: couldn't read orphan inode 15 (err -117) [ 102.373131][ T7396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7396 comm=syz.3.451 [ 102.383021][ T7382] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.394694][ T7403] FAULT_INJECTION: forcing a failure. [ 102.394694][ T7403] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.412918][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.4.456 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 102.423528][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 102.433676][ T7403] Call Trace: [ 102.436987][ T7403] [ 102.439922][ T7403] dump_stack_lvl+0xf2/0x150 [ 102.444530][ T7403] dump_stack+0x15/0x20 [ 102.448693][ T7403] should_fail_ex+0x229/0x230 [ 102.453464][ T7403] should_fail_alloc_page+0xfd/0x110 [ 102.458767][ T7403] __alloc_pages_noprof+0x109/0x360 [ 102.464038][ T7403] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 102.469603][ T7403] alloc_pages_noprof+0xe1/0x100 [ 102.474562][ T7403] get_zeroed_page_noprof+0x17/0x40 [ 102.479806][ T7403] simple_transaction_get+0x4c/0x120 [ 102.485104][ T7403] selinux_transaction_write+0x8c/0x100 [ 102.490740][ T7403] ? __pfx_selinux_transaction_write+0x10/0x10 [ 102.496960][ T7403] vfs_write+0x28b/0x900 [ 102.501298][ T7403] ? __fget_files+0x1da/0x210 [ 102.506004][ T7403] ksys_write+0xeb/0x1b0 [ 102.510309][ T7403] __x64_sys_write+0x42/0x50 [ 102.514982][ T7403] x64_sys_call+0x27dd/0x2d60 [ 102.519672][ T7403] do_syscall_64+0xc9/0x1c0 [ 102.524217][ T7403] ? clear_bhb_loop+0x55/0xb0 [ 102.529042][ T7403] ? clear_bhb_loop+0x55/0xb0 [ 102.533727][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.539683][ T7403] RIP: 0033:0x7f692be8cef9 [ 102.544155][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.563894][ T7403] RSP: 002b:00007f692ab07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.572329][ T7403] RAX: ffffffffffffffda RBX: 00007f692c045f80 RCX: 00007f692be8cef9 [ 102.580462][ T7403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 102.588446][ T7403] RBP: 00007f692ab07090 R08: 0000000000000000 R09: 0000000000000000 [ 102.596487][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.604487][ T7403] R13: 0000000000000000 R14: 00007f692c045f80 R15: 00007ffc97bb51f8 [ 102.612471][ T7403] [ 102.714425][ T7412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7412 comm=syz.1.459 [ 102.733684][ T6981] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 102.783306][ T6928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.909397][ T7434] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.460'. [ 102.930506][ T7418] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.460'. [ 102.950573][ T7434] netlink: 'syz.2.460': attribute type 3 has an invalid length. [ 102.996508][ T7443] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 103.061862][ T7463] loop2: detected capacity change from 0 to 512 [ 103.081294][ T7463] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.466: attempt to clear invalid blocks 1 len 1 [ 103.108459][ T7463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.466: bg 0: block 343: padding at end of block bitmap is not set [ 103.133863][ T7463] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 103.145311][ T7463] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.466: invalid indirect mapped block 1819239214 (level 0) [ 103.167757][ T7463] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.466: invalid indirect mapped block 1819239214 (level 1) [ 103.198767][ T7463] EXT4-fs (loop2): 1 truncate cleaned up [ 103.208393][ T7463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.652762][ T7511] loop4: detected capacity change from 0 to 2048 [ 103.915003][ T6981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.945922][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 103.945940][ T29] audit: type=1326 audit(1725508860.751:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 103.958788][ T7542] FAULT_INJECTION: forcing a failure. [ 103.958788][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 103.980251][ T29] audit: type=1326 audit(1725508860.761:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 103.992479][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.2.470 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 104.018955][ T29] audit: type=1326 audit(1725508860.761:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.026072][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.026090][ T7542] Call Trace: [ 104.026098][ T7542] [ 104.026173][ T7542] dump_stack_lvl+0xf2/0x150 [ 104.026261][ T7542] dump_stack+0x15/0x20 [ 104.026286][ T7542] should_fail_ex+0x229/0x230 [ 104.026317][ T7542] ? audit_log_start+0x34c/0x6b0 [ 104.026346][ T7542] should_failslab+0x8f/0xb0 [ 104.026399][ T7542] kmem_cache_alloc_noprof+0x4c/0x290 [ 104.026434][ T7542] audit_log_start+0x34c/0x6b0 [ 104.026468][ T7542] ? mod_objcg_state+0x2ea/0x4f0 [ 104.026501][ T7542] audit_seccomp+0x4b/0x130 [ 104.026528][ T7542] ? expand_files+0x55/0x530 [ 104.026569][ T7542] __seccomp_filter+0x6fa/0x1180 [ 104.026697][ T7542] ? __rcu_read_unlock+0x4e/0x70 [ 104.026726][ T7542] ? mntput_no_expire+0x70/0x3c0 [ 104.026759][ T7542] __secure_computing+0x9f/0x1c0 [ 104.026846][ T7542] syscall_trace_enter+0xd1/0x1f0 [ 104.026887][ T7542] ? fpregs_assert_state_consistent+0x83/0xa0 [ 104.027000][ T7542] do_syscall_64+0xaa/0x1c0 [ 104.027026][ T7542] ? clear_bhb_loop+0x55/0xb0 [ 104.027049][ T7542] ? clear_bhb_loop+0x55/0xb0 [ 104.027069][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.053200][ T29] audit: type=1326 audit(1725508860.761:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.060397][ T7542] RIP: 0033:0x7f788c63b93c [ 104.060419][ T7542] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 104.060442][ T7542] RSP: 002b:00007f788b2b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.060463][ T7542] RAX: ffffffffffffffda RBX: 00007f788c7f5f80 RCX: 00007f788c63b93c [ 104.060478][ T7542] RDX: 000000000000000f RSI: 00007f788b2b70a0 RDI: 0000000000000005 [ 104.060492][ T7542] RBP: 00007f788b2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.060508][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.060522][ T7542] R13: 0000000000000000 R14: 00007f788c7f5f80 R15: 00007ffc752f0418 [ 104.060569][ T7542] [ 104.070015][ T7542] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 104.073433][ T29] audit: type=1326 audit(1725508860.761:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.078814][ T7542] audit: out of memory in audit_log_start [ 104.082702][ T29] audit: type=1326 audit(1725508860.761:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.356022][ T29] audit: type=1326 audit(1725508860.761:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.382071][ T29] audit: type=1326 audit(1725508860.761:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f788c63cef9 code=0x7ffc0000 [ 104.505257][ T7572] netlink: 48 bytes leftover after parsing attributes in process `syz.4.473'. [ 104.581533][ T7580] loop2: detected capacity change from 0 to 1024 [ 104.595387][ T7584] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 104.613910][ T7580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.630099][ T7592] FAULT_INJECTION: forcing a failure. [ 104.630099][ T7592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.644741][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.4.478 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 104.655438][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.665521][ T7592] Call Trace: [ 104.668904][ T7592] [ 104.671894][ T7592] dump_stack_lvl+0xf2/0x150 [ 104.676602][ T7592] dump_stack+0x15/0x20 [ 104.680781][ T7592] should_fail_ex+0x229/0x230 [ 104.685490][ T7592] should_fail+0xb/0x10 [ 104.689797][ T7592] should_fail_usercopy+0x1a/0x20 [ 104.694847][ T7592] _copy_from_user+0x1e/0xd0 [ 104.699462][ T7592] copy_msghdr_from_user+0x54/0x2a0 [ 104.704751][ T7592] __sys_sendmsg+0x17d/0x280 [ 104.709392][ T7592] __x64_sys_sendmsg+0x46/0x50 [ 104.714226][ T7592] x64_sys_call+0x2689/0x2d60 [ 104.718944][ T7592] do_syscall_64+0xc9/0x1c0 [ 104.723508][ T7592] ? clear_bhb_loop+0x55/0xb0 [ 104.728240][ T7592] ? clear_bhb_loop+0x55/0xb0 [ 104.732970][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.738944][ T7592] RIP: 0033:0x7f692be8cef9 [ 104.743419][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.763072][ T7592] RSP: 002b:00007f692ab07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.771512][ T7592] RAX: ffffffffffffffda RBX: 00007f692c045f80 RCX: 00007f692be8cef9 [ 104.779503][ T7592] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 104.787568][ T7592] RBP: 00007f692ab07090 R08: 0000000000000000 R09: 0000000000000000 [ 104.795634][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.803641][ T7592] R13: 0000000000000000 R14: 00007f692c045f80 R15: 00007ffc97bb51f8 [ 104.811642][ T7592] [ 104.838878][ T6981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.892346][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7605 comm=syz.4.482 [ 104.919986][ T7603] loop2: detected capacity change from 0 to 512 [ 104.939330][ T7603] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.479: attempt to clear invalid blocks 1 len 1 [ 104.954651][ T7603] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.479: bg 0: block 343: padding at end of block bitmap is not set [ 104.975765][ T7603] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 104.991481][ T7615] loop4: detected capacity change from 0 to 2048 [ 104.999735][ T7603] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.479: invalid indirect mapped block 1819239214 (level 0) [ 105.016624][ T7603] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.479: invalid indirect mapped block 1819239214 (level 1) [ 105.037834][ T7615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.054990][ T7603] EXT4-fs (loop2): 1 truncate cleaned up [ 105.062642][ T7603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.078369][ T7615] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.114622][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.148246][ T7630] loop4: detected capacity change from 0 to 512 [ 105.161146][ T7630] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.484: attempt to clear invalid blocks 1 len 1 [ 105.191615][ T7630] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.484: bg 0: block 343: padding at end of block bitmap is not set [ 105.208195][ T7630] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 105.222222][ T7630] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.484: invalid indirect mapped block 1819239214 (level 0) [ 105.248332][ T7630] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.484: invalid indirect mapped block 1819239214 (level 1) [ 105.302567][ T7630] EXT4-fs (loop4): 1 truncate cleaned up [ 105.309715][ T7630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.346046][ T7642] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 105.416348][ T7646] loop3: detected capacity change from 0 to 256 [ 105.733662][ T6981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.752355][ T7662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7662 comm=syz.0.494 [ 106.021848][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.050538][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.496'. [ 106.290194][ T7675] loop3: detected capacity change from 0 to 512 [ 106.308601][ T7675] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.497: attempt to clear invalid blocks 1 len 1 [ 106.323778][ T7675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.497: bg 0: block 343: padding at end of block bitmap is not set [ 106.341502][ T7675] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 106.361957][ T7675] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.497: invalid indirect mapped block 1819239214 (level 0) [ 106.363852][ T7678] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 106.401935][ T7675] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.497: invalid indirect mapped block 1819239214 (level 1) [ 106.459490][ T7675] EXT4-fs (loop3): 1 truncate cleaned up [ 106.473946][ T7675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.476875][ T7686] loop2: detected capacity change from 0 to 128 [ 106.495994][ T7686] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.510696][ T7686] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.574431][ T6981] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 106.584330][ T6981] FAT-fs (loop2): Filesystem has been set read-only [ 106.598746][ T6981] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 106.826730][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.834961][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.843070][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.851332][ T7697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.860584][ T7697] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.877284][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.904168][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.912477][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.920659][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.938360][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.955281][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.966464][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.985922][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.001605][ T7700] loop4: detected capacity change from 0 to 2048 [ 107.012388][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.020396][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.030441][ T7700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.039418][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.057027][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.074355][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.082662][ T7697] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.096676][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.164461][ T6799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.201158][ T36] bridge_slave_1: left allmulticast mode [ 107.207993][ T36] bridge_slave_1: left promiscuous mode [ 107.214841][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.231767][ T36] bridge_slave_0: left allmulticast mode [ 107.238458][ T36] bridge_slave_0: left promiscuous mode [ 107.245031][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.395488][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.412506][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.426083][ T36] bond0 (unregistering): Released all slaves [ 107.446848][ T7701] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.534646][ T36] hsr_slave_0: left promiscuous mode [ 107.548346][ T36] hsr_slave_1: left promiscuous mode [ 107.555295][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.564100][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.573860][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.582904][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.599295][ T36] veth1_macvtap: left promiscuous mode [ 107.605516][ T36] veth0_macvtap: left promiscuous mode [ 107.611892][ T36] veth1_vlan: left promiscuous mode [ 107.617780][ T36] veth0_vlan: left promiscuous mode [ 107.763017][ T36] team0 (unregistering): Port device team_slave_1 removed [ 107.778777][ T36] team0 (unregistering): Port device team_slave_0 removed [ 107.844917][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 107.910801][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.918974][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.927485][ T7701] bridge_slave_0: entered allmulticast mode [ 107.935021][ T7701] bridge_slave_0: entered promiscuous mode [ 107.944267][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.952209][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.961845][ T7701] bridge_slave_1: entered allmulticast mode [ 107.969499][ T7701] bridge_slave_1: entered promiscuous mode [ 108.004061][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.004565][ T7740] loop4: detected capacity change from 0 to 128 [ 108.024223][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.036035][ T7740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.071944][ T7701] team0: Port device team_slave_0 added [ 108.075031][ T7740] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.118274][ T7744] FAULT_INJECTION: forcing a failure. [ 108.118274][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 108.132485][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.3.522 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 108.142449][ T7701] team0: Port device team_slave_1 added [ 108.143141][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.143159][ T7744] Call Trace: [ 108.143167][ T7744] [ 108.143176][ T7744] dump_stack_lvl+0xf2/0x150 [ 108.169755][ T7744] dump_stack+0x15/0x20 [ 108.173943][ T7744] should_fail_ex+0x229/0x230 [ 108.178802][ T7744] ? dup_task_struct+0x6c/0x710 [ 108.183672][ T7744] should_failslab+0x8f/0xb0 [ 108.188310][ T7744] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 108.194198][ T7744] dup_task_struct+0x6c/0x710 [ 108.198983][ T7744] ? path_openat+0x19bc/0x1f10 [ 108.203792][ T7744] copy_process+0x3a9/0x1f90 [ 108.208415][ T7744] ? _copy_from_user+0x9a/0xd0 [ 108.213296][ T7744] kernel_clone+0x167/0x5e0 [ 108.217835][ T7744] __se_sys_clone3+0x1b5/0x1f0 [ 108.222636][ T7744] __x64_sys_clone3+0x31/0x40 [ 108.227457][ T7744] x64_sys_call+0x287d/0x2d60 [ 108.232230][ T7744] do_syscall_64+0xc9/0x1c0 [ 108.236852][ T7744] ? clear_bhb_loop+0x55/0xb0 [ 108.241552][ T7744] ? clear_bhb_loop+0x55/0xb0 [ 108.246244][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.252188][ T7744] RIP: 0033:0x7fe142f8cef9 [ 108.256620][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.276416][ T7744] RSP: 002b:00007fe141c06f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 108.284917][ T7744] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe142f8cef9 [ 108.292937][ T7744] RDX: 00007fe141c06f20 RSI: 0000000000000058 RDI: 00007fe141c06f20 [ 108.300926][ T7744] RBP: 00007fe141c07090 R08: 0000000000000000 R09: 0000000000000058 [ 108.308918][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.316922][ T7744] R13: 0000000000000000 R14: 00007fe143145f80 R15: 00007ffd7a728918 [ 108.325106][ T7744] [ 108.365071][ T6967] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.402766][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.410760][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.440529][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.487191][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.495366][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.525836][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.626949][ T7701] hsr_slave_0: entered promiscuous mode [ 108.635489][ T7757] loop1: detected capacity change from 0 to 2048 [ 108.645310][ T7701] hsr_slave_1: entered promiscuous mode [ 108.656979][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.665866][ T7701] Cannot create hsr debugfs directory [ 108.672702][ T7761] netem: incorrect gi model size [ 108.678471][ T7761] netem: change failed [ 108.704110][ T7757] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 108.727016][ T7757] System zones: 0-4 [ 108.744637][ T7757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.775981][ T7757] ext4 filesystem being mounted at /22/loop3 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.812564][ T7771] loop0: detected capacity change from 0 to 512 [ 108.825603][ T7771] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.529: attempt to clear invalid blocks 1 len 1 [ 108.844997][ T7747] EXT4-fs (loop1): resizing filesystem from 256 to 0 blocks [ 108.848200][ T7771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.529: bg 0: block 343: padding at end of block bitmap is not set [ 108.853245][ T7747] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 108.874686][ T7771] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 108.890742][ T7771] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.529: invalid indirect mapped block 1819239214 (level 0) [ 108.912452][ T7771] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.529: invalid indirect mapped block 1819239214 (level 1) [ 108.928950][ T7771] EXT4-fs (loop0): 1 truncate cleaned up [ 108.930526][ T6863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.935734][ T7771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.981569][ T7775] loop1: detected capacity change from 0 to 164 [ 108.989549][ T7775] Unable to read rock-ridge attributes [ 108.996384][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 108.996399][ T29] audit: type=1400 audit(1725508865.801:1625): avc: denied { mount } for pid=7774 comm="syz.1.531" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 109.001375][ T7775] Unable to read rock-ridge attributes [ 109.007071][ T29] audit: type=1400 audit(1725508865.811:1626): avc: denied { ioctl } for pid=7774 comm="syz.1.531" path="socket:[18893]" dev="sockfs" ino=18893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.063226][ T29] audit: type=1400 audit(1725508865.841:1627): avc: denied { create } for pid=7774 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.111594][ T29] audit: type=1400 audit(1725508865.921:1628): avc: denied { unmount } for pid=6863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 109.139003][ T29] audit: type=1400 audit(1725508865.951:1629): avc: denied { bind } for pid=7777 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.162890][ T29] audit: type=1400 audit(1725508865.951:1630): avc: denied { ioctl } for pid=7770 comm="syz.0.529" path="/dev/vsock" dev="devtmpfs" ino=233 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.191312][ T29] audit: type=1400 audit(1725508865.971:1631): avc: denied { write } for pid=7777 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.240327][ T29] audit: type=1400 audit(1725508866.051:1632): avc: denied { setopt } for pid=7779 comm="syz.1.533" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.253790][ T7780] loop1: detected capacity change from 0 to 1024 [ 109.263981][ T29] audit: type=1400 audit(1725508866.051:1633): avc: denied { getopt } for pid=7779 comm="syz.1.533" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.271806][ T7780] EXT4-fs: Ignoring removed orlov option [ 109.292091][ T29] audit: type=1400 audit(1725508866.051:1634): avc: denied { accept } for pid=7779 comm="syz.1.533" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.299886][ T7780] EXT4-fs: Ignoring removed bh option [ 109.330172][ T7780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.400170][ T7701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.410777][ T7701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.430755][ T7701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.446974][ T7701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.563918][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.583591][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.597524][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.605983][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.638965][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.646894][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.690884][ T6863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.714515][ T6928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.754946][ T7701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.798339][ T7800] SELinux: policydb version -323216920 does not match my version range 15-33 [ 109.822031][ T7800] SELinux: failed to load policy [ 109.970052][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.172211][ T7809] ip6gretap0 speed is unknown, defaulting to 1000 [ 110.187181][ T7825] loop4: detected capacity change from 0 to 2048 [ 110.208264][ T7701] veth0_vlan: entered promiscuous mode [ 110.228512][ T7825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.230236][ T7701] veth1_vlan: entered promiscuous mode [ 110.251085][ T7825] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.275299][ T7825] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 16: comm syz.4.545: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 110.343156][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.373895][ T7701] veth0_macvtap: entered promiscuous mode [ 110.390216][ T7701] veth1_macvtap: entered promiscuous mode [ 110.407043][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 110.430203][ T7834] loop4: detected capacity change from 0 to 128 [ 110.447955][ T7834] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.462532][ T7834] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.512107][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.524236][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.535863][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.548168][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.559690][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.571607][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.583016][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.595003][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.606478][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.618481][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.629847][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.642055][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.653394][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.665477][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.676997][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.689293][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.702530][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 110.703738][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.732411][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.740490][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.749982][ T7809] bridge_slave_0: entered allmulticast mode [ 110.750702][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 110.758257][ T7809] bridge_slave_0: entered promiscuous mode [ 110.780852][ T6967] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 110.798731][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 110.805519][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.814866][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 110.822151][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.846717][ T6967] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 110.865795][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 110.867640][ T7809] bridge_slave_1: entered allmulticast mode [ 110.885088][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 110.891784][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.906946][ T6967] EXT4-fs error (device loop4): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 110.912323][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.929941][ T7809] bridge_slave_1: entered promiscuous mode [ 110.934871][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.945292][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.960347][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.971133][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.982705][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.993547][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.003042][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.005205][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.012733][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.023283][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.023301][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.023388][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.023402][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.023417][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.023432][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.023465][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.023478][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.023492][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.032070][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.043358][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.049615][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.055279][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.120848][ T6967] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 111.124861][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.197088][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.205799][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.214448][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.223082][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.231574][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.240347][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.248910][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.257506][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.266310][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.274884][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.283421][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.292188][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.343567][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.352348][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.361108][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.369919][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.378644][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.387200][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.395856][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.404442][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.413046][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.421873][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.430511][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.439150][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.447742][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.456409][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.464934][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.473534][ T6850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 111.488124][ T6850] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.503745][ T7701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.513745][ T7701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.523510][ T7701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.533306][ T7701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.556553][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.577323][ T6967] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.598573][ T7144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.677874][ T7851] loop0: detected capacity change from 0 to 8192 [ 111.705461][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.791228][ T7144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.826026][ T7809] team0: Port device team_slave_0 added [ 111.850424][ T7809] team0: Port device team_slave_1 added [ 111.921048][ T7144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.984967][ T7863] netlink: 'syz.2.512': attribute type 29 has an invalid length. [ 111.999764][ T7144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.032964][ T7851] ================================================================== [ 112.041110][ T7851] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 112.049929][ T7851] [ 112.052264][ T7851] write to 0xffff8881145900c0 of 8 bytes by task 7856 on cpu 1: [ 112.059917][ T7851] mark_buffer_dirty_inode+0x18d/0x1c0 [ 112.065420][ T7851] fat_mirror_bhs+0x241/0x330 [ 112.070148][ T7851] fat_alloc_clusters+0x994/0xa80 [ 112.075222][ T7851] fat_get_block+0x25c/0x5e0 [ 112.079831][ T7851] __block_write_begin_int+0x417/0xfa0 [ 112.085362][ T7851] block_write_begin+0x7b/0x170 [ 112.090237][ T7851] cont_write_begin+0x486/0x6b0 [ 112.095104][ T7851] fat_write_begin+0x61/0xf0 [ 112.099719][ T7851] generic_perform_write+0x1b4/0x580 [ 112.105021][ T7851] __generic_file_write_iter+0xa1/0x120 [ 112.110578][ T7851] generic_file_write_iter+0x7d/0x1d0 [ 112.115970][ T7851] iter_file_splice_write+0x5e6/0x970 [ 112.121385][ T7851] direct_splice_actor+0x16c/0x2c0 [ 112.126514][ T7851] splice_direct_to_actor+0x305/0x670 [ 112.131930][ T7851] do_splice_direct+0xd7/0x150 [ 112.136730][ T7851] do_sendfile+0x3ab/0x950 [ 112.141161][ T7851] __x64_sys_sendfile64+0xbd/0x150 [ 112.146324][ T7851] x64_sys_call+0xed5/0x2d60 [ 112.150940][ T7851] do_syscall_64+0xc9/0x1c0 [ 112.155461][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.161387][ T7851] [ 112.163720][ T7851] read to 0xffff8881145900c0 of 8 bytes by task 7851 on cpu 0: [ 112.171279][ T7851] mark_buffer_dirty_inode+0x96/0x1c0 [ 112.176685][ T7851] fat_mirror_bhs+0x241/0x330 [ 112.181396][ T7851] fat_ent_write+0xcc/0xe0 [ 112.185846][ T7851] fat_chain_add+0x15f/0x400 [ 112.190471][ T7851] fat_get_block+0x46b/0x5e0 [ 112.195073][ T7851] __block_write_begin_int+0x417/0xfa0 [ 112.200549][ T7851] block_write_begin+0x7b/0x170 [ 112.205413][ T7851] cont_write_begin+0x486/0x6b0 [ 112.210280][ T7851] fat_write_begin+0x61/0xf0 [ 112.214883][ T7851] generic_perform_write+0x1b4/0x580 [ 112.220201][ T7851] __generic_file_write_iter+0xa1/0x120 [ 112.225771][ T7851] generic_file_write_iter+0x7d/0x1d0 [ 112.231169][ T7851] vfs_write+0x78f/0x900 [ 112.235431][ T7851] ksys_write+0xeb/0x1b0 [ 112.239696][ T7851] __x64_sys_write+0x42/0x50 [ 112.244305][ T7851] x64_sys_call+0x27dd/0x2d60 [ 112.249011][ T7851] do_syscall_64+0xc9/0x1c0 [ 112.253528][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.259455][ T7851] [ 112.261783][ T7851] value changed: 0x0000000000000000 -> 0xffff8881145b2f08 [ 112.268904][ T7851] [ 112.271229][ T7851] Reported by Kernel Concurrency Sanitizer on: [ 112.277383][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.0.553 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 112.287983][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.298048][ T7851] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.351200][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.358319][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.390685][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.419842][ T7861] netlink: 'syz.2.512': attribute type 29 has an invalid length. [ 112.584005][ T7144] bridge_slave_1: left allmulticast mode [ 112.590504][ T7144] bridge_slave_1: left promiscuous mode [ 112.596928][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.611763][ T7144] bridge_slave_0: left allmulticast mode [ 112.618353][ T7144] bridge_slave_0: left promiscuous mode [ 112.624606][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.761898][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.774053][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.786447][ T7144] bond0 (unregistering): Released all slaves [ 112.952113][ T7144] hsr_slave_0: left promiscuous mode [ 112.959213][ T7144] hsr_slave_1: left promiscuous mode [ 112.966248][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.974834][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.985573][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.993962][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.006438][ T7144] veth1_macvtap: left promiscuous mode [ 113.012367][ T7144] veth0_macvtap: left promiscuous mode [ 113.018377][ T7144] veth1_vlan: left promiscuous mode [ 113.024046][ T7144] veth0_vlan: left promiscuous mode [ 113.154124][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 113.166821][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 113.598657][ T7144] bridge_slave_1: left allmulticast mode [ 113.605341][ T7144] bridge_slave_1: left promiscuous mode [ 113.612143][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.622191][ T7144] bridge_slave_0: left allmulticast mode [ 113.628313][ T7144] bridge_slave_0: left promiscuous mode [ 113.634487][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.710803][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.722713][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.734285][ T7144] bond0 (unregistering): Released all slaves [ 113.828915][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.847206][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 113.859362][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 115.233396][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.452780][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.522378][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.581642][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.658775][ T36] bridge_slave_1: left allmulticast mode [ 115.665437][ T36] bridge_slave_1: left promiscuous mode [ 115.672267][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.681385][ T36] bridge_slave_0: left allmulticast mode [ 115.688121][ T36] bridge_slave_0: left promiscuous mode [ 115.694810][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.822663][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.835039][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.846394][ T36] bond0 (unregistering): Released all slaves [ 115.942166][ T36] hsr_slave_0: left promiscuous mode [ 115.948726][ T36] hsr_slave_1: left promiscuous mode [ 115.955070][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.963093][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.971313][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.979373][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.990141][ T36] veth1_macvtap: left promiscuous mode [ 115.996034][ T36] veth0_macvtap: left promiscuous mode [ 116.001991][ T36] veth1_vlan: left promiscuous mode [ 116.007547][ T36] veth0_vlan: left promiscuous mode [ 116.128743][ T36] team0 (unregistering): Port device team_slave_1 removed [ 116.142745][ T36] team0 (unregistering): Port device team_slave_0 removed