last executing test programs: 12.157054401s ago: executing program 3 (id=6863): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{}], [{@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '(-'}}]}, 0x1, 0x453, &(0x7f0000001040)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@debug}, {@grpquota}, {@usrjquota}]}, 0x23, 0x452, &(0x7f0000000880)="$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") syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c71756965742c6e6f646f74732c646f74732c73686f77657865632c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c646f74732c636865636b3d7374726963742c646f74732c00ca341a9c0bc51ce5fa728b"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "44e200309fd2dff5f290f12375119814"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9c31bc21735c77a3b4220c0761a0d5a1"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5f42bc4ea69504a7507d59ea33aedf79"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000ba6c01bf3ebcf47f040003000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x4}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioperm(0x1, 0x5, 0xdd) clock_getres(0x0, 0x0) syz_usb_disconnect(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') 10.991856288s ago: executing program 3 (id=6865): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLZFfpQuiD9AlFUkNqItLagcvGg04WJiogc91lIJsoChNRFCBI3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att3WdrfLgvP5JNN9b3699+bN67yZt7MBlFYt+5NEbIuIXyJirBVdvEKt9XH92sXZv65dnE2i0Xjlj6S53p/XLs4Wq27LP7fm+xxPI9IPk7jcId358xdOzdTrc+fy+OTC6bcn589fePLk6ZkTcyfmzkwfPXrk8NQzT08/tSHlHM3yuue9s3t3H3v9k5dmG/HG919m+a/ky9vL0VLtOc1a1KLRaDTSRXNHmn8P9Lz328toWzgZGmBGWJfs/M+qa7jZ/seiEjcrbyxe/GCgmQP6Krs+7Vg2t3VVTA8kzeXA/5U2DmVVXPGz+99iurU9kMG6+lzrBigr9/V8ai0Ziuy+Pam27tgrfUp/W0S8dvnvT7MpOj6HAADYWF9n/Z8nOvX/0ri3bb3t+dhQNSIORsTOiLg7InZFxD0RzXXvi4j715l+bUl8ef/np81dFWyNsv7fs/nY1uL+341Rm2olj402yz+cvHmyPncoPybjMbwpi0+tksY3L/z88UrLam39v2zK0i/6gnk+fh/atHib4zMLM72Uud3V9yP2DHUqf3JjJCCJiN0RsaeL/WfH7OTjX+zNwtu3Ll/+3+VfxQaMMzU+j3isVf+XY0n5C0krpZXGJyfvivrcocnirFjuhx+vvNweH24L91T+DZDV/5aO539e/qIZFOO18+tP48qvH614T9Pt+T+SvNoMj+Tz3p1ZWDg3FTGSz1g0f/rmtkW8WD8r//j+zu1/Z8Q/n+XbPRAR2Un8YEQ8FBH78rw/HBGPRMT+Vcr/3fOPvrX6ERps/R9frf4jqkn7eH0Xgcqpb79aKf211f+RZmg8n7OW/39rzWAvxw4AAADuFGlzDDpJJ26E03RiovUd/l2xJa2fnV84WIt3zhxvjVVXYzgtnnSNtT0PncqfDRfx6SXxwxGxo/lNo83N+MTs2frooAsPJbd1hfaf+a1fX3oBbh/rGkdL+pcP4NbzviaUl/YP5aX9Q3lp/1Bendr/pYjrA8gKcIu5/kN5af9QXto/lJf2D6W0/JX44udWunnT/2Zg57GeNi9RoNKnPUf7j3b0IRDpwA9d94H0dsjGvjywKSLWutWlvtbp0vMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzvdvAAAA//+bHeQQ") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x40002000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x1}, 0xf) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 9.283749295s ago: executing program 3 (id=6878): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.613595591s ago: executing program 3 (id=6879): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000d0000000c00018008"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') write$nbd(r1, &(0x7f0000000640)={0x67446698, 0x1, 0x2, 0x0, 0x2, "9f89bff94988dceb73aa26bee0808d77d30d250c8778d62392bdb685841346775cd3f6e4e35f487fb8652550fd9a91c7be9fd06805ac2708685ae80fc1b102306c54e1e059136eb4c0ef8c97a28b185a0799e99febd6d0cca563f16fdd504ddd75d2abc2e19f000e094a84a939f9c6e6f6bf9439b51b1b65b17d8c1b93f6ea114a36db8ddaa27125a62f1ccdc214f90955d459df3facab54d775110183ee7069f031a9c9a19902ca21b4fd5660522e015d663106333f74681608be3e37f7c59ccc8756a1ffdb9333484e62bd9c3b54b5"}, 0xe0) pread64(r1, &(0x7f00000002c0)=""/252, 0xfc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={r2, 0x0, 0x10}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@data_journal}, {@nombcache}, {@block_validity}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0xd2f0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd}) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40011) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 6.272233452s ago: executing program 3 (id=6921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsync(r0) 5.797479016s ago: executing program 2 (id=6926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8000c61) 5.725627543s ago: executing program 2 (id=6927): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) setxattr$security_ima(0x0, &(0x7f0000000140), 0x0, 0x700, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x32}, 0x18) 5.549974619s ago: executing program 2 (id=6930): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x800002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4e, &(0x7f0000000080)}, 0x805) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c757466380073657373696f6e3d3078303030400937bc311fbbbef8d36fcbbdf7f40f3030303030d61cbbb5369e926fc8365a1db8c4313230303030303035352c626b3d3078303030303030303030303030303430302c636865636b3d72656c0b2528275ed8d4617865642c6e6f726f636b416d61703d6f66662c8000000022686d64652c6d61703d61636f726e2c6f76657272696465726f4a6b7065726d2c7362736563746f723d3078303030303030303030303030302ba3c439fb69d865786d60552bb43f96cc0c5884088b1d8e547fb0885c7263b4908ec4cba25004f8c32d7c812ec7613c64982e32c70fe9b15f9b94b522433bc000be5069286b01ef038e535514310a72a852cb3c4caa5256c8ada46b4be6622e35bb896c432f072aa70000443068257c3786ac8602d93a0e937fdbbeb33fd4cfe1b80b9f30b06461f58682d95da2793dc5ca0eda66d9f9435a3c7392f7c754d92d68935054822bf56b179bd02a5650a40af4dd0f6dd13d15ec268e878557af4743e77ffc6f7af79c36e4fa4478fd94a18f3c8d842c03fb828aa377cc0052a4b93f42832e220731862a6b276b2d84e406e97508804fb73534e23555046b8fb73f7ee4955d7484a42b361dee30ed05c57c23100e6975a8f3c90035718ef0b7a703f5fb75fe36071efe3bb903c9098c7d63b88d7e8e892d6a37d6329dd117f9539c22e8e9d7edce6947", @ANYRES64=0xffffffffffffffff], 0x20, 0x6a5, &(0x7f0000000f00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, r1, 0x757c2000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x2}, 0x20, 0x4, 0x6}, 0x0, 0x0, r5, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) write$cgroup_int(r3, &(0x7f0000000240)=0xd, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$getsig(0x4202, r9, 0xf, &(0x7f00000001c0)) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) brk(0xa) 5.357067177s ago: executing program 2 (id=6931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) socket(0x2, 0x3, 0x100000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180071800000208b88b62403c957000000030000000000000000000000807da00115fa0db3073fa64a06dc34997e6bce6698e920723570e384c5f062135992558a5cee39e0bd6cc5bbf8a4b908d1f6221d4149ca04c5e809d57928f39e785ce1745fdf0d212209bd1388517497", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='kvm_ioapic_delayed_eoi_inj\x00', r0, 0x0, 0x4}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x6}, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r7 = inotify_init() setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xd6f}, 0xc) inotify_add_watch(r7, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x69) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r5, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000280)}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2c, &(0x7f0000000400)=ANY=[@ANYRESDEC=r8], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x932}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x41, 0x7ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYRES64=r6, @ANYRESDEC=r9, @ANYRES32=r2, @ANYRESDEC=r11, @ANYRES16=r0, @ANYBLOB="66dd3de60d718d8cbbcbb00f2d72baa2182857520e7c1c452777e98c6b"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) 1.866442848s ago: executing program 3 (id=6981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)='syzkaller\x00', 0x0, r0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 1.710356612s ago: executing program 4 (id=6986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000a020000000000000001000005000000000000000001"], 0x0, 0x3e, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) write(r5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x2, 0xff, 0x1, 0x8}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$netlink(r5, &(0x7f0000000280), &(0x7f0000000300)=0xc) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 1.140322545s ago: executing program 4 (id=6990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000480)=""/19, 0x13, 0xfffc, 0x0, 0xffffffff, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404809, 0x0) 1.0779755s ago: executing program 0 (id=6991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x1010, 0x464, 0x200, 0x70bd2a, 0x25dfdbff, "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", ["", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='devfreq_monitor\x00', r1}, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000280)={0x6, 0x9, 0x1, 'queue1\x00', 0x4}) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') unshare(0x20000400) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getdents64(r6, &(0x7f0000000000)=""/53, 0x35) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.000263938s ago: executing program 0 (id=6992): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) 944.181883ms ago: executing program 0 (id=6993): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 943.818763ms ago: executing program 0 (id=6994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x4, 0x0, &(0x7f0000000740)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 899.639327ms ago: executing program 0 (id=6995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) 757.23029ms ago: executing program 0 (id=6997): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss, @window, @window], 0x5) recvmmsg(r3, 0x0, 0x0, 0x40002000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x1}, 0xf) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 565.129188ms ago: executing program 1 (id=7001): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0xa0, 0x10, 0x403, 0x0, 0xefff, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x60, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x81}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1c}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x80000001}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa0}}, 0x0) 531.759571ms ago: executing program 1 (id=7002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000700000000000000b1c9d7506bb4b0e0fea624a2888b1178d42d14b5a860704de2fd09475d3fbce348a989cedb885a66d187ec256284576e611e780e1e0c5bf3c4b2964f597aa943997eae49ee771075efa2ec3170d7a649460e0ae4dd128098b2e43cbaa61ffd92611c0857798bc935931d8a055bcc22de8b22a992096fc5fee68ed0e4c9c3ee385b2feb4d4de4cb7a9edfef89950cbeb83f8b4e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) rt_sigqueueinfo(r1, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) 375.878115ms ago: executing program 1 (id=7003): get_mempolicy(0x0, &(0x7f0000000280), 0x72b2, &(0x7f0000fff000/0x1000)=nil, 0x4) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x3, 0xff, 0x0, 0x0, 0x2, 0xf7, 0xff, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3]}}) (async, rerun: 32) r3 = socket$inet6(0xa, 0x80003, 0xff) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000140)=0xfffffffd, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xc8}}, 0x0) (async) r8 = syz_open_dev$sg(&(0x7f0000000100), 0x3ff, 0x210001) ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000000240)={0x2, ""/2}) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00eb00", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 375.585675ms ago: executing program 4 (id=7004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000280)='\xa4\x9e\x0e\x14\xc6l\xed9\xb5\xf2\xd4\x940@\x9f\xa6d\x13\xc8D\xa3d&)\x10\x02\xe3\xd7\xab\x9cX\x91M\xa8+\xe8\x91\x9fD\xe2J\xbd\x1b\xfa\x85\x00\x00\x00\x00\xa4O\xbe\x93\x11\xed\xb4\xc8\xd9G\xd10k\x1f\xcc\fu%\t\xc3\x1e\xf2Vj\n\xa3cC\xd5\x1e$\xd5\xe0f\xa9M%\xc7ut\xfb\xce\xc4\xa3\xfe*[\xf9\x03c*\x0e\xed\xe3,|n\xc6\xd4~\x8a\x9d\xaf\xd0\xda\x7fy\x9f0\xfb#\xc8\xc90c\xfcO\xdd\x8d8\xcffx\xda\x90l\xf7Q^\xaf1\xfd\xf9\x00\x13\x13\x7f\xe7\xf6\xb6e\xe1\xbb\t\xa9OE\xb3\x90\xa2.\xfe\xe1\xfb\tgg\x16\xcb\n\x92!\xe0\xea\xdf\x87\xea\x00\\\xed`\x11\xd2\x93\xb6\xe2\'}\t\xb7\xee\xe3\a\xc8\x83\xe7\xa6j|F*\xb9\xb1\x12\x84Lx:\x7fz\x95\xa3/vL\x1f{\xcfEi\x96\xd14\x81HQZ%\xc9K\xb7\x93\xe9,\xd4E\x02~/\x0f\t\xa3\xb9\xfc\xee\xb1Y\xe2\xc4\x8aw`1\xfe\xa3\xf3\xc7\xe8/wp\xc9\xf5u\xa3\x80\xc4\b\bK\xd7~\x16\xbf-\x1f\x00\x88N\r\xd6p\x06\xcd\x19\x84\x953\x85#2#\xba\xea\xd9f\xa1\xf9`\xde_\xfa\x03\x00\x00\x00\x00\x00\x00\x00\xf5jFg\xdf\xeb\xee\xf0') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 375.494895ms ago: executing program 1 (id=7005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsync(r0) 372.749685ms ago: executing program 4 (id=7006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) 362.755296ms ago: executing program 1 (id=7007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000100ffffffffffffaaaaaaaaaabb88a8000081"], 0x3e) 274.978824ms ago: executing program 4 (id=7008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (fail_nth: 8) 264.780835ms ago: executing program 1 (id=7009): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000200000020000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c"], 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000740)={'team_slave_1\x00', @multicast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a040200000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000000380)=""/2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x49}, &(0x7f0000000140), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x238, r10, 0x210, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0x82a9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xfff7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xbbc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6}, {0x5}, {0x6, 0x11, 0x5e}, {0x8, 0xb, 0xe7f4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8c}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x1c7}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xff44}, {0x5}, {0x6, 0x11, 0x762}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x401}, {0x5}, {0x6}, {0x8, 0xb, 0x81}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4048090}, 0x10008801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 0s ago: executing program 4 (id=7010): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x6ae2, 0x0, 0x0, 0x8000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x40, 0x8, 0x80, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast1, {[@end, @rr={0x7, 0x13, 0xbb, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000480), 0x309002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r7, &(0x7f0000000400)={0x7}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x5, 0xb, 0x6, 0x8020, r2, 0xffffffff, '\x00', r3, r4, 0x3, 0x3, 0x2, 0x0, @value=r5, @void, @void, @value}, 0x50) chroot(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): 686] loop1: detected capacity change from 0 to 2048 [ 450.428157][T30696] FAULT_INJECTION: forcing a failure. [ 450.428157][T30696] name failslab, interval 1, probability 0, space 0, times 0 [ 450.440823][T30696] CPU: 0 UID: 0 PID: 30696 Comm: syz.1.6775 Not tainted 6.12.0-rc2-syzkaller #0 [ 450.449841][T30696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.459895][T30696] Call Trace: [ 450.463191][T30696] [ 450.466116][T30696] dump_stack_lvl+0xf2/0x150 [ 450.470700][T30696] dump_stack+0x15/0x20 [ 450.474905][T30696] should_fail_ex+0x223/0x230 [ 450.479606][T30696] ? __alloc_skb+0x10b/0x310 [ 450.484250][T30696] should_failslab+0x8f/0xb0 [ 450.488854][T30696] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 450.494729][T30696] __alloc_skb+0x10b/0x310 [ 450.499154][T30696] netlink_alloc_large_skb+0xad/0xe0 [ 450.504547][T30696] netlink_sendmsg+0x3b4/0x6e0 [ 450.509317][T30696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.514661][T30696] __sock_sendmsg+0x140/0x180 [ 450.519391][T30696] ____sys_sendmsg+0x312/0x410 [ 450.524224][T30696] __sys_sendmsg+0x1d9/0x270 [ 450.528962][T30696] __x64_sys_sendmsg+0x46/0x50 [ 450.533728][T30696] x64_sys_call+0x2689/0x2d60 [ 450.538410][T30696] do_syscall_64+0xc9/0x1c0 [ 450.542976][T30696] ? clear_bhb_loop+0x55/0xb0 [ 450.547721][T30696] ? clear_bhb_loop+0x55/0xb0 [ 450.552407][T30696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.558326][T30696] RIP: 0033:0x7f3fe592dff9 [ 450.562798][T30696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.582480][T30696] RSP: 002b:00007f3fe45a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.590902][T30696] RAX: ffffffffffffffda RBX: 00007f3fe5ae5f80 RCX: 00007f3fe592dff9 [ 450.598937][T30696] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 450.606984][T30696] RBP: 00007f3fe45a7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.614956][T30696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.622956][T30696] R13: 0000000000000000 R14: 00007f3fe5ae5f80 R15: 00007fffafa15358 [ 450.630953][T30696] [ 450.658964][T30698] FAULT_INJECTION: forcing a failure. [ 450.658964][T30698] name failslab, interval 1, probability 0, space 0, times 0 [ 450.671585][T30698] CPU: 1 UID: 0 PID: 30698 Comm: syz.4.6776 Not tainted 6.12.0-rc2-syzkaller #0 [ 450.680655][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.686297][T30700] loop1: detected capacity change from 0 to 1024 [ 450.690696][T30698] Call Trace: [ 450.690705][T30698] [ 450.690713][T30698] dump_stack_lvl+0xf2/0x150 [ 450.697723][T30700] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 450.700268][T30698] dump_stack+0x15/0x20 [ 450.703523][T30700] JBD2: no valid journal superblock found [ 450.707751][T30698] should_fail_ex+0x223/0x230 [ 450.717860][T30700] EXT4-fs (loop1): Could not load journal inode [ 450.721969][T30698] ? load_msg+0xa8/0x2c0 [ 450.742914][T30698] should_failslab+0x8f/0xb0 [ 450.747514][T30698] __kmalloc_noprof+0xa5/0x370 [ 450.752276][T30698] load_msg+0xa8/0x2c0 [ 450.756363][T30698] do_msgsnd+0xdd/0xaf0 [ 450.760544][T30698] __x64_sys_msgsnd+0xa1/0xc0 [ 450.765263][T30698] x64_sys_call+0x26b1/0x2d60 [ 450.770032][T30698] do_syscall_64+0xc9/0x1c0 [ 450.774530][T30698] ? clear_bhb_loop+0x55/0xb0 [ 450.779275][T30698] ? clear_bhb_loop+0x55/0xb0 [ 450.783950][T30698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.789896][T30698] RIP: 0033:0x7f01f3e6dff9 [ 450.794299][T30698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.813899][T30698] RSP: 002b:00007f01f2ae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 450.822332][T30698] RAX: ffffffffffffffda RBX: 00007f01f4025f80 RCX: 00007f01f3e6dff9 [ 450.830311][T30698] RDX: 0000000000002000 RSI: 00000000200000c0 RDI: 0000000000000000 [ 450.838270][T30698] RBP: 00007f01f2ae1090 R08: 0000000000000000 R09: 0000000000000000 [ 450.846227][T30698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.854184][T30698] R13: 0000000000000000 R14: 00007f01f4025f80 R15: 00007ffef09ad098 [ 450.862202][T30698] [ 450.894711][T30702] loop4: detected capacity change from 0 to 128 [ 450.903509][T30444] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 451.028724][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 451.028738][ T29] audit: type=1326 audit(1728288507.983:54010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.1.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe592dff9 code=0x7ffc0000 [ 451.053675][T30713] loop1: detected capacity change from 0 to 128 [ 451.078856][ T29] audit: type=1326 audit(1728288507.983:54011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.1.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f3fe592dff9 code=0x7ffc0000 [ 451.102346][ T29] audit: type=1326 audit(1728288507.983:54012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.1.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe592dff9 code=0x7ffc0000 [ 451.161046][T30724] loop2: detected capacity change from 0 to 512 [ 451.167711][T30724] ext4: Unknown parameter 'smackfsfloor' [ 451.179635][T30724] loop2: detected capacity change from 0 to 512 [ 451.186103][T30713] 9pnet_virtio: no channels available for device syz [ 451.192811][ T29] audit: type=1400 audit(1728288508.083:54013): avc: denied { remount } for pid=30712 comm="syz.1.6784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 451.212840][ T29] audit: type=1326 audit(1728288508.083:54014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.230055][T30724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 451.236435][ T29] audit: type=1326 audit(1728288508.083:54015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.245975][T30724] System zones: [ 451.268030][ T29] audit: type=1326 audit(1728288508.093:54016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.271569][T30724] 1-12 [ 451.294960][ T29] audit: type=1326 audit(1728288508.093:54017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.298049][T30724] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6788: corrupted in-inode xattr: invalid ea_ino [ 451.321215][ T29] audit: type=1326 audit(1728288508.093:54018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.335754][T30724] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6788: couldn't read orphan inode 15 (err -117) [ 451.357964][ T29] audit: type=1326 audit(1728288508.093:54019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30716 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb13d9dff9 code=0x7ffc0000 [ 451.394858][T30724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.455611][T30729] loop1: detected capacity change from 0 to 4096 [ 451.571131][T30729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.718661][T29819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.115883][T30762] loop4: detected capacity change from 0 to 512 [ 452.122443][T30762] EXT4-fs: Ignoring removed orlov option [ 452.128204][T30762] EXT4-fs: Ignoring removed oldalloc option [ 452.136642][T30762] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.6801: Parent and EA inode have the same ino 15 [ 452.149202][T30762] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.6801: Parent and EA inode have the same ino 15 [ 452.162878][T30762] EXT4-fs (loop4): 1 orphan inode deleted [ 452.169378][T30762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.194230][T30762] netlink: 'syz.4.6801': attribute type 3 has an invalid length. [ 452.201967][T30762] netlink: 'syz.4.6801': attribute type 3 has an invalid length. [ 452.211310][T30762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6801'. [ 452.221278][T30192] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 452.245949][T30762] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.6801: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 452.269187][T30192] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 452.296853][T29865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.309387][T30192] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 452.358455][T30766] loop4: detected capacity change from 0 to 4096 [ 452.367578][T30766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.443939][T29865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.485706][T30192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.496857][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.568041][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.606800][ T11] bond0: (slave netdevsim1): Releasing backup interface [ 452.615793][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.686157][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.714471][T30790] pim6reg1: entered promiscuous mode [ 452.719766][T30790] pim6reg1: entered allmulticast mode [ 452.768505][ T11] bridge_slave_1: left allmulticast mode [ 452.774163][ T11] bridge_slave_1: left promiscuous mode [ 452.779796][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.831240][ T11] bridge_slave_0: left allmulticast mode [ 452.836994][ T11] bridge_slave_0: left promiscuous mode [ 452.842672][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.961323][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.980464][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.992497][ T11] bond0 (unregistering): Released all slaves [ 453.009893][T30775] chnl_net:caif_netlink_parms(): no params data found [ 453.020805][T30801] netlink: 'syz.0.6814': attribute type 12 has an invalid length. [ 453.030387][T30802] ªªªªªª: renamed from vlan0 (while UP) [ 453.052593][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6814'. [ 453.064507][ T11] hsr_slave_0: left promiscuous mode [ 453.070133][ T11] hsr_slave_1: left promiscuous mode [ 453.076131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.083567][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.093256][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.100773][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.109805][ T11] veth1_macvtap: left promiscuous mode [ 453.115354][ T11] veth0_macvtap: left promiscuous mode [ 453.120818][ T11] veth1_vlan: left promiscuous mode [ 453.126163][ T11] veth0_vlan: left promiscuous mode [ 453.148735][T30808] loop1: detected capacity change from 0 to 1024 [ 453.155636][T30808] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 453.167675][T30808] JBD2: no valid journal superblock found [ 453.173465][T30808] EXT4-fs (loop1): Could not load journal inode [ 453.210611][ T11] team0 (unregistering): Port device team_slave_1 removed [ 453.221127][ T11] team0 (unregistering): Port device team_slave_0 removed [ 453.284626][T30775] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.291696][T30775] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.298857][T30775] bridge_slave_0: entered allmulticast mode [ 453.305512][T30775] bridge_slave_0: entered promiscuous mode [ 453.315412][T30775] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.322431][T30775] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.329596][T30775] bridge_slave_1: entered allmulticast mode [ 453.335898][T30775] bridge_slave_1: entered promiscuous mode [ 453.356729][T30775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.367034][T30775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.379067][T30813] loop1: detected capacity change from 0 to 512 [ 453.386104][T30813] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 453.401146][T30775] team0: Port device team_slave_0 added [ 453.409591][T30775] team0: Port device team_slave_1 added [ 453.418390][T30813] loop1: detected capacity change from 0 to 4096 [ 453.426911][T30813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.440324][T30775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.447317][T30775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.473262][T30775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.485781][T30775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.492721][T30775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.518651][T30775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.560054][T29819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.576129][T30775] hsr_slave_0: entered promiscuous mode [ 453.582305][T30775] hsr_slave_1: entered promiscuous mode [ 453.588378][T30775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.596416][T30775] Cannot create hsr debugfs directory [ 453.642176][T30824] loop4: detected capacity change from 0 to 512 [ 453.649194][T30824] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 453.696226][T30824] loop4: detected capacity change from 0 to 4096 [ 453.705848][T30824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.775296][T29865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.808527][T30835] pim6reg1: entered promiscuous mode [ 453.813909][T30835] pim6reg1: entered allmulticast mode [ 453.943794][T30775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.957315][T30775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.966020][T30775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.974480][T30775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.034496][T30775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.056003][T30775] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.064949][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.072047][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.084634][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.091679][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.112348][T30775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.122785][T30775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.150556][T30845] bpf_get_probe_write_proto: 14 callbacks suppressed [ 454.150568][T30845] syz.4.6827[30845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.157406][T30845] syz.4.6827[30845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.168839][T30845] syz.4.6827[30845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.312627][T30775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.591844][T30775] veth0_vlan: entered promiscuous mode [ 454.618206][T30775] veth1_vlan: entered promiscuous mode [ 454.642505][T30856] loop1: detected capacity change from 0 to 512 [ 454.643551][T30775] veth0_macvtap: entered promiscuous mode [ 454.656156][T30856] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 454.666607][T30775] veth1_macvtap: entered promiscuous mode [ 454.677090][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.687575][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.697398][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.707881][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.717755][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.728203][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.738045][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.748454][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.758681][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.769197][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.780883][T30775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.807194][T30856] loop1: detected capacity change from 0 to 4096 [ 454.821370][T30856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.834587][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.845069][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.854964][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.865769][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.875701][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.886228][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.896052][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.906519][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.916327][T30775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.926728][T30775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.937338][T30775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.959221][T30775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.965516][T29819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.968011][T30775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.985728][T30775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.994441][T30775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.039110][T30874] syz.0.6834[30874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.039196][T30874] syz.0.6834[30874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.050749][T30874] syz.0.6834[30874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.056088][T30876] loop1: detected capacity change from 0 to 512 [ 455.107468][T30882] loop4: detected capacity change from 0 to 512 [ 455.118918][T30876] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 455.159349][T30876] loop1: detected capacity change from 0 to 4096 [ 455.170542][T30876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.241059][T29819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.310576][T30899] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 455.318838][T30899] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 455.794443][T30928] syz.1.6840[30928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.794539][T30928] syz.1.6840[30928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.806076][T30928] syz.1.6840[30928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.284945][T30934] syz.4.6844[30934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.335549][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 456.335562][ T29] audit: type=1326 audit(1728288513.283:54244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.4.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f3e6dff9 code=0x7ffc0000 [ 456.376878][ T29] audit: type=1326 audit(1728288513.283:54245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.4.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f3e6dff9 code=0x7ffc0000 [ 456.400431][ T29] audit: type=1326 audit(1728288513.283:54246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.4.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f01f3e6dff9 code=0x7ffc0000 [ 456.423974][ T29] audit: type=1326 audit(1728288513.283:54247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.4.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f3e6dff9 code=0x7ffc0000 [ 456.447574][ T29] audit: type=1326 audit(1728288513.283:54248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30932 comm="syz.4.6844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01f3e6dff9 code=0x7ffc0000 [ 456.479215][T30938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.504723][T30259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.513877][T30938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.079977][T30949] Cannot find set identified by id 0 to match [ 457.100747][ T29] audit: type=1326 audit(1728288514.053:54249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.2.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55413bdff9 code=0x7ffc0000 [ 457.130412][ T29] audit: type=1326 audit(1728288514.083:54250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.2.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55413bdff9 code=0x7ffc0000 [ 457.154136][ T29] audit: type=1326 audit(1728288514.083:54251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.2.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55413bdff9 code=0x7ffc0000 [ 457.177746][ T29] audit: type=1326 audit(1728288514.083:54252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.2.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55413bdff9 code=0x7ffc0000 [ 457.201470][ T29] audit: type=1326 audit(1728288514.083:54253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.2.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55413bdff9 code=0x7ffc0000 [ 457.238861][T30953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.254087][T30953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.264281][T30961] loop4: detected capacity change from 0 to 512 [ 458.271197][T30961] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 458.305778][T30961] loop4: detected capacity change from 0 to 4096 [ 458.313888][T30961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.387690][T29865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.810580][T30976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.832498][T30976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.892575][T30976] loop4: detected capacity change from 0 to 2048 [ 459.914593][T30976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.013138][T30986] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 469.383173][T30979] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 469.391387][T30979] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 469.720473][T31022] bpf_get_probe_write_proto: 5 callbacks suppressed [ 469.720489][T31022] syz.0.6856[31022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.727318][T31022] syz.0.6856[31022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.738839][T31022] syz.0.6856[31022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.788644][T29865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.506332][T31028] FAULT_INJECTION: forcing a failure. [ 470.506332][T31028] name failslab, interval 1, probability 0, space 0, times 0 [ 470.519002][T31028] CPU: 1 UID: 0 PID: 31028 Comm: syz.0.6858 Not tainted 6.12.0-rc2-syzkaller #0 [ 470.528124][T31028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 470.538228][T31028] Call Trace: [ 470.541501][T31028] [ 470.544473][T31028] dump_stack_lvl+0xf2/0x150 [ 470.549078][T31028] dump_stack+0x15/0x20 [ 470.553300][T31028] should_fail_ex+0x223/0x230 [ 470.558023][T31028] ? __alloc_skb+0x10b/0x310 [ 470.562686][T31028] should_failslab+0x8f/0xb0 [ 470.567281][T31028] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 470.573288][T31028] __alloc_skb+0x10b/0x310 [ 470.577792][T31028] netlink_alloc_large_skb+0xad/0xe0 [ 470.583194][T31028] netlink_sendmsg+0x3b4/0x6e0 [ 470.588056][T31028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.593415][T31028] __sock_sendmsg+0x140/0x180 [ 470.598098][T31028] ____sys_sendmsg+0x312/0x410 [ 470.602929][T31028] __sys_sendmsg+0x1d9/0x270 [ 470.607539][T31028] __x64_sys_sendmsg+0x46/0x50 [ 470.612331][T31028] x64_sys_call+0x2689/0x2d60 [ 470.617021][T31028] do_syscall_64+0xc9/0x1c0 [ 470.621591][T31028] ? clear_bhb_loop+0x55/0xb0 [ 470.626340][T31028] ? clear_bhb_loop+0x55/0xb0 [ 470.631026][T31028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.636928][T31028] RIP: 0033:0x7f5dfefcdff9 [ 470.641342][T31028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.661023][T31028] RSP: 002b:00007f5dfdc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.669479][T31028] RAX: ffffffffffffffda RBX: 00007f5dff185f80 RCX: 00007f5dfefcdff9 [ 470.677481][T31028] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000006 [ 470.685470][T31028] RBP: 00007f5dfdc47090 R08: 0000000000000000 R09: 0000000000000000 [ 470.693520][T31028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.701495][T31028] R13: 0000000000000000 R14: 00007f5dff185f80 R15: 00007ffd22bf0308 [ 470.709610][T31028] [ 470.751319][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 470.751332][ T29] audit: type=1326 audit(1728288527.703:54324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.804001][ T29] audit: type=1326 audit(1728288527.743:54325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.827692][ T29] audit: type=1326 audit(1728288527.743:54326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.851292][ T29] audit: type=1326 audit(1728288527.743:54327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.874919][ T29] audit: type=1326 audit(1728288527.743:54328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.898574][ T29] audit: type=1326 audit(1728288527.743:54329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.922165][ T29] audit: type=1326 audit(1728288527.743:54330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.945715][ T29] audit: type=1326 audit(1728288527.743:54331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.969310][ T29] audit: type=1326 audit(1728288527.743:54332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 470.992867][ T29] audit: type=1326 audit(1728288527.743:54333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31029 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5dfefcdff9 code=0x7ffc0000 [ 476.699986][ T1683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.062865][ T1683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.276518][ T1683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.727810][ T1683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.002096][ T1683] bridge_slave_1: left allmulticast mode [ 523.007824][ T1683] bridge_slave_1: left promiscuous mode [ 523.013633][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.027606][ T1683] bridge_slave_0: left allmulticast mode [ 523.033313][ T1683] bridge_slave_0: left promiscuous mode [ 523.039014][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.916337][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.930430][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.944257][ T1683] bond0 (unregistering): Released all slaves [ 549.572621][ T1683] hsr_slave_0: left promiscuous mode [ 549.613327][ T1683] hsr_slave_1: left promiscuous mode [ 549.621241][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.628702][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.643731][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.651115][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.689559][ T1683] veth1_macvtap: left promiscuous mode [ 549.695158][ T1683] veth0_macvtap: left promiscuous mode [ 549.700643][ T1683] veth1_vlan: left promiscuous mode [ 549.705959][ T1683] veth0_vlan: left promiscuous mode [ 560.025203][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 560.035791][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 567.951417][T31065] chnl_net:caif_netlink_parms(): no params data found [ 568.152103][T31087] chnl_net:caif_netlink_parms(): no params data found [ 568.220570][T31083] chnl_net:caif_netlink_parms(): no params data found [ 568.287426][T31097] chnl_net:caif_netlink_parms(): no params data found [ 568.339983][T31079] chnl_net:caif_netlink_parms(): no params data found [ 568.447470][T31065] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.454553][T31065] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.461689][T31065] bridge_slave_0: entered allmulticast mode [ 568.469973][T31065] bridge_slave_0: entered promiscuous mode [ 568.476777][T31065] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.483844][T31065] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.491025][T31065] bridge_slave_1: entered allmulticast mode [ 568.497496][T31065] bridge_slave_1: entered promiscuous mode [ 568.525097][T31087] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.532165][T31087] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.540240][T31087] bridge_slave_0: entered allmulticast mode [ 568.546839][T31087] bridge_slave_0: entered promiscuous mode [ 568.591659][T31065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.603929][T31087] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.611014][T31087] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.620260][T31087] bridge_slave_1: entered allmulticast mode [ 568.626674][T31087] bridge_slave_1: entered promiscuous mode [ 568.688440][T31065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.706166][T31087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.796671][T31087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.845118][T31083] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.852298][T31083] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.860708][T31083] bridge_slave_0: entered allmulticast mode [ 568.867963][T31083] bridge_slave_0: entered promiscuous mode [ 568.875654][T31083] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.882733][T31083] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.890665][T31083] bridge_slave_1: entered allmulticast mode [ 568.898683][T31083] bridge_slave_1: entered promiscuous mode [ 568.946699][T31065] team0: Port device team_slave_0 added [ 569.008242][T31097] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.015397][T31097] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.024393][T31097] bridge_slave_0: entered allmulticast mode [ 569.030781][T31097] bridge_slave_0: entered promiscuous mode [ 569.050653][T31065] team0: Port device team_slave_1 added [ 569.136308][T31097] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.143486][T31097] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.150623][T31097] bridge_slave_1: entered allmulticast mode [ 569.157022][T31097] bridge_slave_1: entered promiscuous mode [ 569.172589][T31087] team0: Port device team_slave_0 added [ 569.180531][ T1683] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.192482][T31083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.210227][T31065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.217250][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.243194][T31065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.254349][T31087] team0: Port device team_slave_1 added [ 569.261168][T31083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.275095][T31079] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.282123][T31079] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.289283][T31079] bridge_slave_0: entered allmulticast mode [ 569.295705][T31079] bridge_slave_0: entered promiscuous mode [ 569.302423][T31065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.309389][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.335371][T31065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.362272][ T1683] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.374898][T31097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.384017][T31079] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.391187][T31079] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.398401][T31079] bridge_slave_1: entered allmulticast mode [ 569.404882][T31079] bridge_slave_1: entered promiscuous mode [ 569.415928][T31087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.422893][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.448808][T31087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.465105][T31097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.479093][ T1683] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.495554][T31079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.505244][T31087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.512213][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.538193][T31087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.551592][T31083] team0: Port device team_slave_0 added [ 569.567499][T31079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.579520][ T1683] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.591662][T31083] team0: Port device team_slave_1 added [ 569.601517][T31097] team0: Port device team_slave_0 added [ 569.625203][T31097] team0: Port device team_slave_1 added [ 569.632493][T31065] hsr_slave_0: entered promiscuous mode [ 569.638745][T31065] hsr_slave_1: entered promiscuous mode [ 569.645701][T31079] team0: Port device team_slave_0 added [ 569.656230][T31083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.663212][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.689178][T31083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.700428][T31083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.707450][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.733328][T31083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.748667][T31079] team0: Port device team_slave_1 added [ 569.779743][T31087] hsr_slave_0: entered promiscuous mode [ 569.785802][T31087] hsr_slave_1: entered promiscuous mode [ 569.791703][T31087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.799279][T31087] Cannot create hsr debugfs directory [ 569.806351][T31097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.813316][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.839246][T31097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.850241][T31079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.857207][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.883124][T31079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.902744][T31097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.909746][T31097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.935685][T31097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.952589][T31079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.959577][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.985481][T31079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.023749][T31097] hsr_slave_0: entered promiscuous mode [ 570.029746][T31097] hsr_slave_1: entered promiscuous mode [ 570.035877][T31097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.043473][T31097] Cannot create hsr debugfs directory [ 570.054934][T31083] hsr_slave_0: entered promiscuous mode [ 570.061029][T31083] hsr_slave_1: entered promiscuous mode [ 570.067042][T31083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.074631][T31083] Cannot create hsr debugfs directory [ 570.122968][T31079] hsr_slave_0: entered promiscuous mode [ 570.128909][T31079] hsr_slave_1: entered promiscuous mode [ 570.135307][T31079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.142838][T31079] Cannot create hsr debugfs directory [ 570.157089][ T1683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.229952][ T1683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.282080][ T1683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.325144][ T1683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.436408][ T1683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.495876][ T1683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.586420][ T1683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.636604][T31083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.649638][ T1683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.660527][T31065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.669394][T31065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.678017][T31065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 570.688830][T31083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.699925][T31065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 570.734680][T31065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.754508][T31065] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.766310][T31083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.779221][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.786276][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.797179][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.804226][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.845589][T31083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.863339][T31065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.909054][ T1683] bridge_slave_1: left allmulticast mode [ 570.914756][ T1683] bridge_slave_1: left promiscuous mode [ 570.920425][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.928109][ T1683] bridge_slave_0: left allmulticast mode [ 570.933821][ T1683] bridge_slave_0: left promiscuous mode [ 570.939558][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.947395][ T1683] bridge_slave_1: left allmulticast mode [ 570.953082][ T1683] bridge_slave_1: left promiscuous mode [ 570.958704][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.966393][ T1683] bridge_slave_0: left allmulticast mode [ 570.972075][ T1683] bridge_slave_0: left promiscuous mode [ 570.977792][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.985930][ T1683] bridge_slave_1: left allmulticast mode [ 570.991568][ T1683] bridge_slave_1: left promiscuous mode [ 570.997202][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.004823][ T1683] bridge_slave_0: left allmulticast mode [ 571.010549][ T1683] bridge_slave_0: left promiscuous mode [ 571.016227][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.024293][ T1683] bridge_slave_1: left allmulticast mode [ 571.029909][ T1683] bridge_slave_1: left promiscuous mode [ 571.035549][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.043405][ T1683] bridge_slave_0: left allmulticast mode [ 571.049023][ T1683] bridge_slave_0: left promiscuous mode [ 571.054731][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.624535][ T1683] bond0 (unregistering): Released all slaves [ 571.632310][ T1683] bond0 (unregistering): Released all slaves [ 571.641217][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.651168][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.660848][ T1683] bond0 (unregistering): Released all slaves [ 571.669252][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.679178][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.689233][ T1683] bond0 (unregistering): Released all slaves [ 571.697847][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.707646][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.717421][ T1683] bond0 (unregistering): Released all slaves [ 571.726466][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.736445][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.746020][ T1683] bond0 (unregistering): Released all slaves [ 571.771683][T31083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 571.780862][T31083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 571.790698][T31083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.802083][T31083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.810345][T31065] veth0_vlan: entered promiscuous mode [ 571.822524][T31065] veth1_vlan: entered promiscuous mode [ 571.830785][ T1683] hsr_slave_0: left promiscuous mode [ 571.836373][ T1683] hsr_slave_1: left promiscuous mode [ 571.842059][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.849532][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.857521][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.864956][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.873937][ T1683] hsr_slave_0: left promiscuous mode [ 571.879500][ T1683] hsr_slave_1: left promiscuous mode [ 571.885237][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.892620][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.900102][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.907516][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.916208][ T1683] hsr_slave_0: left promiscuous mode [ 571.921919][ T1683] hsr_slave_1: left promiscuous mode [ 571.927460][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.934854][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.942264][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.949697][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.958690][ T1683] hsr_slave_0: left promiscuous mode [ 571.964239][ T1683] hsr_slave_1: left promiscuous mode [ 571.969919][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.977311][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.984783][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.992142][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.004824][ T1683] veth1_macvtap: left promiscuous mode [ 572.010342][ T1683] veth0_macvtap: left promiscuous mode [ 572.015888][ T1683] veth1_vlan: left promiscuous mode [ 572.021072][ T1683] veth0_vlan: left promiscuous mode [ 572.026688][ T1683] veth1_macvtap: left promiscuous mode [ 572.032264][ T1683] veth0_macvtap: left promiscuous mode [ 572.037738][ T1683] veth1_vlan: left promiscuous mode [ 572.043090][ T1683] veth0_vlan: left promiscuous mode [ 572.048608][ T1683] veth1_macvtap: left promiscuous mode [ 572.054181][ T1683] veth0_macvtap: left promiscuous mode [ 572.059628][ T1683] veth1_vlan: left promiscuous mode [ 572.064851][ T1683] veth0_vlan: left promiscuous mode [ 572.070410][ T1683] veth1_macvtap: left promiscuous mode [ 572.075906][ T1683] veth0_macvtap: left promiscuous mode [ 572.081411][ T1683] veth1_vlan: left promiscuous mode [ 572.086612][ T1683] veth0_vlan: left promiscuous mode [ 572.265408][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 572.275436][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 572.330506][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 572.339659][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 572.443922][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 572.453923][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 572.499488][T31065] veth0_macvtap: entered promiscuous mode [ 572.506806][T31065] veth1_macvtap: entered promiscuous mode [ 572.516275][T31065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.526852][T31065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.537133][T31065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.547344][T31065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.557837][T31065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.568330][T31065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.581544][T31065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.590307][T31065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.599040][T31065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.607962][T31065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.637476][T31083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.648136][T31083] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.660155][T12678] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.667228][T12678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.684626][T12678] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.685818][T31161] loop3: detected capacity change from 0 to 512 [ 572.691702][T12678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.707632][T31161] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 572.732022][T31087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.740675][T31087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.748985][T31161] loop3: detected capacity change from 0 to 4096 [ 572.750900][T31087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.764123][T31161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.778622][T31087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 572.826982][T31087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.841344][T31087] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.851337][T31083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.865437][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.872473][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.881804][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.889008][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.894807][T31065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.986612][T31097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 573.005126][T31097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 573.016630][T31181] loop3: detected capacity change from 0 to 512 [ 573.018603][T31083] veth0_vlan: entered promiscuous mode [ 573.023243][T31181] ext4: Unknown parameter 'smackfsfloor' [ 573.031941][T31083] veth1_vlan: entered promiscuous mode [ 573.040356][T31097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.051780][T31087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.055336][T31181] loop3: detected capacity change from 0 to 512 [ 573.066745][T31097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.073259][T31181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 573.081382][T31181] System zones: 1-12 [ 573.088063][T31181] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.6863: corrupted in-inode xattr: invalid ea_ino [ 573.091259][T31083] veth0_macvtap: entered promiscuous mode [ 573.109851][T31083] veth1_macvtap: entered promiscuous mode [ 573.119117][T31083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.119323][T31181] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.6863: couldn't read orphan inode 15 (err -117) [ 573.129551][T31083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.129566][T31083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.161659][T31083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.172215][T31083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.181216][T31083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.191674][T31083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.201520][T31083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.212033][T31083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.222633][T31083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.225570][T31181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.245641][T31083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.254421][T31083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.263179][T31083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.271997][T31083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.314159][T31097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.332140][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 573.332153][ T29] audit: type=1326 audit(1728288630.283:54366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.361838][ T29] audit: type=1326 audit(1728288630.283:54367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.386848][ T29] audit: type=1326 audit(1728288630.283:54368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.410572][ T29] audit: type=1326 audit(1728288630.283:54369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.434180][ T29] audit: type=1326 audit(1728288630.283:54370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.457812][ T29] audit: type=1326 audit(1728288630.283:54371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.481430][ T29] audit: type=1326 audit(1728288630.283:54372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.484023][T31087] veth0_vlan: entered promiscuous mode [ 573.505041][ T29] audit: type=1326 audit(1728288630.283:54373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.533962][ T29] audit: type=1326 audit(1728288630.283:54374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.538713][T31087] veth1_vlan: entered promiscuous mode [ 573.557657][ T29] audit: type=1326 audit(1728288630.283:54375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31193 comm="syz.2.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea60dbdff9 code=0x7ffc0000 [ 573.576256][T31097] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.605916][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.613013][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.632769][T31097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.643164][T31097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.657848][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.664917][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.705030][T31087] veth0_macvtap: entered promiscuous mode [ 573.719950][T31087] veth1_macvtap: entered promiscuous mode [ 573.729588][T31079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.741613][T31079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 573.753835][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.764285][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.774117][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.784558][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.794403][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.804862][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.815398][T31206] syz.2.6864[31206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.815508][T31206] syz.2.6864[31206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.826981][T31206] syz.2.6864[31206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.848960][T31087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.868606][T31079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.894532][T31097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.905104][T31079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.999265][T31079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.010836][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.021290][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.031172][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.041610][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.051401][T31087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.061833][T31087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.072314][T31087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.084498][T31087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.093312][T31087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.101997][T31087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.110781][T31087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.130293][T31079] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.151405][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.158529][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.159129][T31065] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 574.168043][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.192826][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.195616][T31065] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 574.215698][T31079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.226829][T31065] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 574.255084][T31097] veth0_vlan: entered promiscuous mode [ 574.282394][T31097] veth1_vlan: entered promiscuous mode [ 574.327783][T31079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.338174][T31097] veth0_macvtap: entered promiscuous mode [ 574.351141][T31097] veth1_macvtap: entered promiscuous mode [ 574.367887][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.378371][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.388271][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.398765][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.408630][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.419094][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.428925][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.439334][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.439983][T31230] loop4: detected capacity change from 0 to 512 [ 574.459405][T31097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.503008][T31230] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 574.504829][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.524119][T31230] EXT4-fs (loop4): mount failed [ 574.528084][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.542739][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.553243][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.563279][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.565475][T31237] loop2: detected capacity change from 0 to 512 [ 574.573778][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.589870][T31097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.600515][T31097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.610961][T31097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.619352][T31097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.628268][T31097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.637013][T31097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.645709][T31097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.736892][T31079] veth0_vlan: entered promiscuous mode [ 574.758402][T31079] veth1_vlan: entered promiscuous mode [ 574.778633][T31079] veth0_macvtap: entered promiscuous mode [ 574.788599][T31248] loop4: detected capacity change from 0 to 512 [ 574.789811][T31079] veth1_macvtap: entered promiscuous mode [ 574.814140][T31248] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 574.814140][T31248] program syz.4.6871 not setting count and/or reply_len properly [ 574.827701][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.841319][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.851321][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.861845][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.871668][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.882089][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.891986][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.902440][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.912275][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.922690][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.934971][T31079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.945310][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.955800][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.965668][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.976246][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.986099][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.996521][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.006325][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.016885][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.026813][T31079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.037264][T31079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.049634][T31079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.061229][T31079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.069989][T31079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.078792][T31079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.087610][T31079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.141321][T31257] loop1: detected capacity change from 0 to 512 [ 575.381226][T31263] loop1: detected capacity change from 0 to 512 [ 575.416363][T31263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.429043][T31263] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.543040][T31263] loop1: detected capacity change from 512 to 0 [ 575.550359][T31262] syz.1.6875: attempt to access beyond end of device [ 575.550359][T31262] loop1: rw=12288, sector=60, nr_sectors = 4 limit=0 [ 575.564938][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 0 [ 575.575989][T31262] syz.1.6875: attempt to access beyond end of device [ 575.575989][T31262] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 575.589239][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 575.648694][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 575.656918][T31262] syz.1.6875: attempt to access beyond end of device [ 575.656918][T31262] loop1: rw=12288, sector=76, nr_sectors = 4 limit=0 [ 575.678829][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 1 [ 575.693664][T31262] syz.1.6875: attempt to access beyond end of device [ 575.693664][T31262] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 575.706938][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 575.716234][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 575.724508][T31262] syz.1.6875: attempt to access beyond end of device [ 575.724508][T31262] loop1: rw=12288, sector=60, nr_sectors = 4 limit=0 [ 575.738038][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 0 [ 575.750366][T31262] syz.1.6875: attempt to access beyond end of device [ 575.750366][T31262] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 575.763653][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 575.785995][T31065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.805412][T12678] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.816413][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 575.823433][T31262] syz.1.6875: attempt to access beyond end of device [ 575.823433][T31262] loop1: rw=12288, sector=76, nr_sectors = 4 limit=0 [ 575.838470][T31277] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 575.846684][T31277] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 575.856784][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 1 [ 575.907568][T12678] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.910460][T31262] syz.1.6875: attempt to access beyond end of device [ 575.910460][T31262] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 575.931221][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 575.954387][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 575.971167][T31262] syz.1.6875: attempt to access beyond end of device [ 575.971167][T31262] loop1: rw=12288, sector=60, nr_sectors = 4 limit=0 [ 575.994237][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 0 [ 576.010012][T12678] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.012760][T31262] syz.1.6875: attempt to access beyond end of device [ 576.012760][T31262] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 576.033519][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.048180][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 576.055045][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 1 [ 576.061770][T31300] loop2: detected capacity change from 0 to 512 [ 576.073219][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.083523][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 576.092068][T31262] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #20: block 35: comm syz.1.6875: unable to read itable block [ 576.107689][T12678] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.110447][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.127179][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 576.133973][T31262] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 576.146129][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.160724][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 576.167612][T31262] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #20: comm syz.1.6875: mark_inode_dirty error [ 576.198771][T12678] bridge_slave_1: left allmulticast mode [ 576.204496][T12678] bridge_slave_1: left promiscuous mode [ 576.210165][T12678] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.220187][T12678] bridge_slave_0: left allmulticast mode [ 576.225966][T12678] bridge_slave_0: left promiscuous mode [ 576.231638][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.247247][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.324524][T31262] EXT4-fs (loop1): I/O error while writing superblock [ 576.335389][T31262] EXT4-fs error (device loop1): ext4_write_dquot:6859: comm syz.1.6875: Failed to commit dquot type 0 [ 576.375650][T31262] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 576.413278][T31263] loop1: detected capacity change from 0 to 511 [ 576.430049][T12678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.474947][T12678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.508563][T12678] bond0 (unregistering): Released all slaves [ 576.581674][T12678] hsr_slave_0: left promiscuous mode [ 576.601750][T12678] hsr_slave_1: left promiscuous mode [ 576.618231][T12678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.625642][T12678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.635513][T12678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.642966][T12678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.666873][T12678] veth1_macvtap: left promiscuous mode [ 576.672346][T12678] veth0_macvtap: left promiscuous mode [ 576.677900][T12678] veth1_vlan: left promiscuous mode [ 576.683128][T12678] veth0_vlan: left promiscuous mode [ 576.819375][T12678] team0 (unregistering): Port device team_slave_1 removed [ 576.839385][T12678] team0 (unregistering): Port device team_slave_0 removed [ 576.912508][T31325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6884'. [ 576.931953][T31326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 576.966704][T31325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6884'. [ 576.985235][T31298] chnl_net:caif_netlink_parms(): no params data found [ 577.027150][T31330] loop2: detected capacity change from 0 to 4096 [ 577.072434][T31298] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.079652][T31298] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.087996][T31330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.110839][T31298] bridge_slave_0: entered allmulticast mode [ 577.118315][T31298] bridge_slave_0: entered promiscuous mode [ 577.124741][T31325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6884'. [ 577.143998][T31298] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.151045][T31298] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.172114][T31298] bridge_slave_1: entered allmulticast mode [ 577.183495][T31298] bridge_slave_1: entered promiscuous mode [ 577.228896][T31298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.242193][T31298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.268809][T31298] team0: Port device team_slave_0 added [ 577.283145][T31298] team0: Port device team_slave_1 added [ 577.326244][T31298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.333312][T31298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.359273][T31298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.371467][T31298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.378522][T31298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.404479][T31298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.431341][T31343] pim6reg1: entered promiscuous mode [ 577.436777][T31343] pim6reg1: entered allmulticast mode [ 577.447613][T31298] hsr_slave_0: entered promiscuous mode [ 577.455985][T31298] hsr_slave_1: entered promiscuous mode [ 577.530654][T31358] pim6reg: entered allmulticast mode [ 577.539535][T31357] pim6reg: left allmulticast mode [ 577.656799][T31364] loop4: detected capacity change from 0 to 1024 [ 577.663856][T31364] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 577.674470][T31364] JBD2: no valid journal superblock found [ 577.680241][T31364] EXT4-fs (loop4): Could not load journal inode [ 577.709278][T31083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.739732][T31368] program syz.4.6899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.771766][T31298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 577.782222][T31298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 577.794817][T31298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.809479][T31373] loop2: detected capacity change from 0 to 512 [ 577.812173][T31298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 577.829940][T31373] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 577.850461][T31298] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.857531][T31298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.864787][T31298] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.871897][T31298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.872440][T31373] EXT4-fs (loop2): mount failed [ 577.901749][T31298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.915387][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.923746][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.939972][T31298] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.949460][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.956518][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.977166][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.984343][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.998995][T31388] loop2: detected capacity change from 0 to 512 [ 578.002590][T31298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.009886][T31388] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 578.009886][T31388] program syz.2.6905 not setting count and/or reply_len properly [ 578.015722][T31298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.066118][T31298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.136131][T31298] veth0_vlan: entered promiscuous mode [ 578.146474][T31298] veth1_vlan: entered promiscuous mode [ 578.152478][T31407] program syz.4.6910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 578.161336][T31298] veth0_macvtap: entered promiscuous mode [ 578.169076][T31298] veth1_macvtap: entered promiscuous mode [ 578.183806][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.194266][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.204186][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.214657][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.224544][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.235015][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.244835][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.255278][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.265381][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.276022][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.287813][T31298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.301504][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.311990][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.321868][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.332468][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.342450][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.353036][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.362886][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.373386][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.374126][T31418] loop4: detected capacity change from 0 to 512 [ 578.383190][T31298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.399958][T31298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.411275][T31298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.422908][T31418] __quota_error: 443 callbacks suppressed [ 578.428692][T31418] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 578.440596][T31418] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 578.441186][T31298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.464101][T31298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.472779][T31298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.481473][T31298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.495730][T31418] EXT4-fs (loop4): mount failed [ 578.554926][T31428] loop3: detected capacity change from 0 to 512 [ 578.563185][T31428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 578.579585][ T29] audit: type=1326 audit(1728288635.533:54797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.603166][ T29] audit: type=1326 audit(1728288635.533:54798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.626759][ T29] audit: type=1326 audit(1728288635.533:54799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.640704][T31411] chnl_net:caif_netlink_parms(): no params data found [ 578.650307][ T29] audit: type=1326 audit(1728288635.533:54800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.680707][ T29] audit: type=1326 audit(1728288635.533:54801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.704324][ T29] audit: type=1326 audit(1728288635.533:54802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.727387][T31428] EXT4-fs (loop3): 1 truncate cleaned up [ 578.727881][ T29] audit: type=1326 audit(1728288635.533:54803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.735262][T31428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.758184][ T29] audit: type=1326 audit(1728288635.533:54804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.792857][ T29] audit: type=1326 audit(1728288635.533:54805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31430 comm="syz.4.6915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 578.863567][T31298] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 578.887696][T31411] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.887878][T31298] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 578.895179][T31411] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.921850][T31411] bridge_slave_0: entered allmulticast mode [ 578.922445][T31448] program syz.4.6920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 578.928227][T31411] bridge_slave_0: entered promiscuous mode [ 578.944248][T31298] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 578.958998][T31444] loop2: detected capacity change from 0 to 1024 [ 578.966343][T31298] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 578.977612][T31444] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 578.993595][T31298] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 579.023976][T31444] JBD2: no valid journal superblock found [ 579.029841][T31444] EXT4-fs (loop2): Could not load journal inode [ 579.040823][T31298] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 579.043062][T31453] loop4: detected capacity change from 0 to 164 [ 579.079589][T31411] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.084492][T31453] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.086699][T31411] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.095784][T31453] FAULT_INJECTION: forcing a failure. [ 579.095784][T31453] name failslab, interval 1, probability 0, space 0, times 0 [ 579.114519][T31453] CPU: 0 UID: 0 PID: 31453 Comm: syz.4.6923 Not tainted 6.12.0-rc2-syzkaller #0 [ 579.123154][T31298] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 579.123528][T31453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.123540][T31453] Call Trace: [ 579.123545][T31453] [ 579.123551][T31453] dump_stack_lvl+0xf2/0x150 [ 579.123583][T31453] dump_stack+0x15/0x20 [ 579.123597][T31453] should_fail_ex+0x223/0x230 [ 579.174420][T31453] ? getname_flags+0x81/0x3b0 [ 579.179089][T31453] should_failslab+0x8f/0xb0 [ 579.183692][T31453] kmem_cache_alloc_noprof+0x4c/0x290 [ 579.189098][T31453] getname_flags+0x81/0x3b0 [ 579.193590][T31453] __x64_sys_mkdir+0x33/0x50 [ 579.198193][T31453] x64_sys_call+0x2729/0x2d60 [ 579.202926][T31453] do_syscall_64+0xc9/0x1c0 [ 579.207418][T31453] ? clear_bhb_loop+0x55/0xb0 [ 579.212124][T31453] ? clear_bhb_loop+0x55/0xb0 [ 579.216802][T31453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.222800][T31453] RIP: 0033:0x7efd3fdadff9 [ 579.227255][T31453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.246931][T31453] RSP: 002b:00007efd3ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 579.255332][T31453] RAX: ffffffffffffffda RBX: 00007efd3ff65f80 RCX: 00007efd3fdadff9 [ 579.263294][T31453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 579.271308][T31453] RBP: 00007efd3ea21090 R08: 0000000000000000 R09: 0000000000000000 [ 579.279330][T31453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.287319][T31453] R13: 0000000000000000 R14: 00007efd3ff65f80 R15: 00007ffc5f372688 [ 579.295391][T31453] [ 579.299740][T31411] bridge_slave_1: entered allmulticast mode [ 579.306195][T31411] bridge_slave_1: entered promiscuous mode [ 579.316142][T31298] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 579.336890][T31298] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 579.364214][T31298] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 579.369143][T31461] loop4: detected capacity change from 0 to 164 [ 579.392720][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.422987][T31461] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.433825][T31411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.433960][T31461] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.444028][T31411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.479635][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.514625][T31411] team0: Port device team_slave_0 added [ 579.521264][T31411] team0: Port device team_slave_1 added [ 579.537324][T31470] loop4: detected capacity change from 0 to 512 [ 579.549259][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.566926][T31471] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 579.566926][T31471] program syz.0.6929 not setting count and/or reply_len properly [ 579.590465][T31473] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6930'. [ 579.601626][T31473] loop2: detected capacity change from 0 to 164 [ 579.608932][T31473] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.610840][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.630435][T31411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.637482][T31411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.663518][T31411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.677819][T31473] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.681566][T31411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.693008][T31411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.694341][T31473] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 579.719130][T31411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.754650][T31472] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 579.755608][T31411] hsr_slave_0: entered promiscuous mode [ 579.762974][T31472] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 579.776199][T31411] hsr_slave_1: entered promiscuous mode [ 579.783000][T31411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.790590][T31411] Cannot create hsr debugfs directory [ 579.818815][ T28] bridge_slave_1: left allmulticast mode [ 579.824519][ T28] bridge_slave_1: left promiscuous mode [ 579.830248][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.850507][ T28] bridge_slave_0: left allmulticast mode [ 579.856678][ T28] bridge_slave_0: left promiscuous mode [ 579.862349][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.999118][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.010131][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.023161][ T28] bond0 (unregistering): Released all slaves [ 580.166352][ T28] hsr_slave_0: left promiscuous mode [ 580.172299][ T28] hsr_slave_1: left promiscuous mode [ 580.179954][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.187418][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.196740][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.204314][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.214252][ T28] veth1_macvtap: left promiscuous mode [ 580.219787][ T28] veth0_macvtap: left promiscuous mode [ 580.225407][ T28] veth1_vlan: left promiscuous mode [ 580.230626][ T28] veth0_vlan: left promiscuous mode [ 580.310151][ T28] team0 (unregistering): Port device team_slave_1 removed [ 580.319979][ T28] team0 (unregistering): Port device team_slave_0 removed [ 580.354630][T31481] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 580.361218][T31481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 580.368774][T31481] vhci_hcd vhci_hcd.0: Device attached [ 580.386285][T31482] vhci_hcd: connection closed [ 580.386899][ T342] vhci_hcd: stop threads [ 580.396014][ T342] vhci_hcd: release socket [ 580.400426][ T342] vhci_hcd: disconnect device [ 580.413608][T31487] ip6tnl1: entered promiscuous mode [ 580.515659][T31491] loop4: detected capacity change from 0 to 1024 [ 580.522555][T31491] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 580.532891][T31491] JBD2: no valid journal superblock found [ 580.538642][T31491] EXT4-fs (loop4): Could not load journal inode [ 580.565818][T31493] loop4: detected capacity change from 0 to 128 [ 580.747426][T31411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 580.755960][T31411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.765118][T31411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.773576][T31411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.785059][T31505] loop4: detected capacity change from 0 to 512 [ 580.796274][T31505] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 580.796274][T31505] program syz.4.6940 not setting count and/or reply_len properly [ 580.817116][T31411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.828752][T31411] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.837556][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.844670][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.855833][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.863020][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.867964][T31507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.879142][T31507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.885344][T31411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.897237][T31411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.927159][T31503] loop2: detected capacity change from 0 to 2048 [ 580.945674][T31503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.977477][T31411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.043288][T31411] veth0_vlan: entered promiscuous mode [ 581.051160][T31411] veth1_vlan: entered promiscuous mode [ 581.065105][T31411] veth0_macvtap: entered promiscuous mode [ 581.071975][T31411] veth1_macvtap: entered promiscuous mode [ 581.082050][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.092522][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.102455][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.112927][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.122710][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.133131][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.142955][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.153367][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.163166][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.173575][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.184675][T31411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.194913][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.205392][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.215234][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.225687][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.235521][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.246019][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.255831][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.266322][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.276156][T31411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.286565][T31411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.297181][T31411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.307146][T31411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.316003][T31411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.324752][T31411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.333526][T31411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.389455][T31531] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 581.389636][T31530] IPVS: stopping master sync thread 31531 ... [ 581.583897][T31535] FAULT_INJECTION: forcing a failure. [ 581.583897][T31535] name failslab, interval 1, probability 0, space 0, times 0 [ 581.596583][T31535] CPU: 1 UID: 0 PID: 31535 Comm: syz.1.6945 Not tainted 6.12.0-rc2-syzkaller #0 [ 581.605604][T31535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 581.615690][T31535] Call Trace: [ 581.619140][T31535] [ 581.622070][T31535] dump_stack_lvl+0xf2/0x150 [ 581.626666][T31535] dump_stack+0x15/0x20 [ 581.630831][T31535] should_fail_ex+0x223/0x230 [ 581.635620][T31535] ? vm_area_alloc+0xac/0x130 [ 581.640343][T31535] should_failslab+0x8f/0xb0 [ 581.645009][T31535] kmem_cache_alloc_noprof+0x4c/0x290 [ 581.650395][T31535] vm_area_alloc+0xac/0x130 [ 581.654895][T31535] mmap_region+0x938/0x16e0 [ 581.659420][T31535] do_mmap+0x718/0xb60 [ 581.663493][T31535] vm_mmap_pgoff+0x133/0x290 [ 581.668173][T31535] ksys_mmap_pgoff+0x286/0x330 [ 581.673085][T31535] x64_sys_call+0x1884/0x2d60 [ 581.677895][T31535] do_syscall_64+0xc9/0x1c0 [ 581.682393][T31535] ? clear_bhb_loop+0x55/0xb0 [ 581.687172][T31535] ? clear_bhb_loop+0x55/0xb0 [ 581.691866][T31535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.697766][T31535] RIP: 0033:0x7fd69ba3dff9 [ 581.702172][T31535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.721843][T31535] RSP: 002b:00007fd69a675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 581.730296][T31535] RAX: ffffffffffffffda RBX: 00007fd69bbf6130 RCX: 00007fd69ba3dff9 [ 581.738443][T31535] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020001000 [ 581.746505][T31535] RBP: 00007fd69a675090 R08: 0000000000000009 R09: 0000000000000000 [ 581.754494][T31535] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 581.762547][T31535] R13: 0000000000000000 R14: 00007fd69bbf6130 R15: 00007ffc0616d698 [ 581.770519][T31535] [ 581.775259][T31514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 581.831620][T31537] loop4: detected capacity change from 0 to 1024 [ 581.838630][T31537] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 581.849107][T31537] JBD2: no valid journal superblock found [ 581.854870][T31537] EXT4-fs (loop4): Could not load journal inode [ 582.047003][T31555] FAULT_INJECTION: forcing a failure. [ 582.047003][T31555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.060158][T31555] CPU: 1 UID: 0 PID: 31555 Comm: syz.4.6954 Not tainted 6.12.0-rc2-syzkaller #0 [ 582.069193][T31555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 582.079299][T31555] Call Trace: [ 582.082589][T31555] [ 582.085499][T31555] dump_stack_lvl+0xf2/0x150 [ 582.090099][T31555] dump_stack+0x15/0x20 [ 582.094460][T31555] should_fail_ex+0x223/0x230 [ 582.099264][T31555] should_fail+0xb/0x10 [ 582.103541][T31555] should_fail_usercopy+0x1a/0x20 [ 582.108569][T31555] _copy_to_user+0x1e/0xa0 [ 582.112993][T31555] simple_read_from_buffer+0xa0/0x110 [ 582.118414][T31555] proc_fail_nth_read+0xf9/0x140 [ 582.123405][T31555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 582.129050][T31555] vfs_read+0x195/0x720 [ 582.133284][T31555] ? __rcu_read_unlock+0x4e/0x70 [ 582.138227][T31555] ? __fget_files+0x1d4/0x210 [ 582.142924][T31555] ksys_read+0xeb/0x1b0 [ 582.147081][T31555] __x64_sys_read+0x42/0x50 [ 582.151647][T31555] x64_sys_call+0x27d3/0x2d60 [ 582.156395][T31555] do_syscall_64+0xc9/0x1c0 [ 582.160909][T31555] ? clear_bhb_loop+0x55/0xb0 [ 582.165661][T31555] ? clear_bhb_loop+0x55/0xb0 [ 582.170334][T31555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.176291][T31555] RIP: 0033:0x7efd3fdaca3c [ 582.180691][T31555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 582.200360][T31555] RSP: 002b:00007efd3ea21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 582.208806][T31555] RAX: ffffffffffffffda RBX: 00007efd3ff65f80 RCX: 00007efd3fdaca3c [ 582.216816][T31555] RDX: 000000000000000f RSI: 00007efd3ea210a0 RDI: 0000000000000006 [ 582.224832][T31555] RBP: 00007efd3ea21090 R08: 0000000000000000 R09: 0000000000000000 [ 582.232845][T31555] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 582.240815][T31555] R13: 0000000000000000 R14: 00007efd3ff65f80 R15: 00007ffc5f372688 [ 582.248861][T31555] [ 582.286001][ T1683] bridge_slave_1: left allmulticast mode [ 582.291669][ T1683] bridge_slave_1: left promiscuous mode [ 582.297325][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.309445][ T1683] bridge_slave_0: left allmulticast mode [ 582.315172][ T1683] bridge_slave_0: left promiscuous mode [ 582.321002][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.374423][ T1683] dvmrp0 (unregistering): left allmulticast mode [ 582.376629][T31571] syz.4.6960[31571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.380965][T31571] syz.4.6960[31571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.416508][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.436719][ T1683] bond_slave_0: left promiscuous mode [ 582.443539][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.452215][ T1683] bond_slave_1: left promiscuous mode [ 582.459383][ T1683] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 582.467861][ T1683] macvlan2: left promiscuous mode [ 582.472898][ T1683] vlan0: left promiscuous mode [ 582.477911][ T1683] vlan0: left allmulticast mode [ 582.482754][ T1683] veth0_vlan: left allmulticast mode [ 582.489970][ T1683] bond0 (unregistering): Released all slaves [ 582.525448][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.533294][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.541023][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.548775][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.556586][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.560160][T31580] sctp: [Deprecated]: syz.0.6964 (pid 31580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.560160][T31580] Use struct sctp_sack_info instead [ 582.564396][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.583914][T31575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.588424][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.604531][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.612302][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.620056][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.627859][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.635661][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.643424][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.651256][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.659000][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.666827][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.674565][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.682267][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.689998][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: unknown main item tag 0x0 [ 582.697926][T31575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.706526][ T24] hid-generic FFFC:0000:FFFFFFFF.0076: hidraw0: HID v0.01 Device [syz0] on syz0 [ 582.719541][ T1683] hsr_slave_0: left promiscuous mode [ 582.725416][ T1683] hsr_slave_1: left promiscuous mode [ 582.731197][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.738646][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.746405][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.753881][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.762870][ T1683] veth0_macvtap: left promiscuous mode [ 582.768797][ T1683] veth1_vlan: left promiscuous mode [ 582.774045][ T1683] veth0_vlan: left promiscuous mode [ 582.866157][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 582.877692][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 583.265245][T31298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.280120][ T1683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.451473][ T29] kauditd_printk_skb: 816 callbacks suppressed [ 583.451488][ T29] audit: type=1326 audit(1728288640.403:55622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.499528][ T29] audit: type=1326 audit(1728288640.403:55623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.523177][ T29] audit: type=1326 audit(1728288640.443:55624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.546749][ T29] audit: type=1326 audit(1728288640.443:55625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.570372][ T29] audit: type=1326 audit(1728288640.443:55626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.593985][ T29] audit: type=1326 audit(1728288640.443:55627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.617593][ T29] audit: type=1326 audit(1728288640.443:55628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.641220][ T29] audit: type=1326 audit(1728288640.443:55629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.664843][ T29] audit: type=1326 audit(1728288640.443:55630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.688347][ T29] audit: type=1326 audit(1728288640.443:55631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31630 comm="syz.4.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3fdadff9 code=0x7ffc0000 [ 583.716018][T31638] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 583.724268][T31638] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 583.749563][T31619] chnl_net:caif_netlink_parms(): no params data found [ 583.789321][T31619] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.796435][T31619] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.805355][T31619] bridge_slave_0: entered allmulticast mode [ 583.814661][T31619] bridge_slave_0: entered promiscuous mode [ 583.821522][T31665] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 583.829846][T31665] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 583.840264][T31619] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.847532][T31619] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.857496][T31619] bridge_slave_1: entered allmulticast mode [ 583.864025][T31619] bridge_slave_1: entered promiscuous mode [ 583.922681][T31619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.938360][ T1683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.960968][T31619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.999753][ T1683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.024918][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.025190][T31619] team0: Port device team_slave_0 added [ 584.032648][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.046001][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.049935][T31619] team0: Port device team_slave_1 added [ 584.053751][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.067039][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.074790][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.082594][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.090358][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.098184][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.106053][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.113815][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.121598][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.129455][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.137200][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.144960][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.152769][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.160530][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.168295][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.173448][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.176079][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: unknown main item tag 0x0 [ 584.194611][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.200423][ T6340] hid-generic FFFC:0000:FFFFFFFF.0077: hidraw0: HID v0.01 Device [syz0] on syz0 [ 584.214585][T31619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.221618][T31619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.247568][T31619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.263533][ T1683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.276025][T31619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.283078][T31619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.309169][T31619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.352011][T31619] hsr_slave_0: entered promiscuous mode [ 584.364948][T31619] hsr_slave_1: entered promiscuous mode [ 584.377472][T31619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.385372][T31619] Cannot create hsr debugfs directory [ 584.411792][ T1683] bridge_slave_1: left allmulticast mode [ 584.417476][ T1683] bridge_slave_1: left promiscuous mode [ 584.423213][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.431335][ T1683] bridge_slave_0: left allmulticast mode [ 584.437051][ T1683] bridge_slave_0: left promiscuous mode [ 584.442667][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.483512][T31728] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6999'. [ 584.545291][ T1683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.555753][ T1683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.566626][ T1683] bond0 (unregistering): Released all slaves [ 584.601731][T31738] ip6tnl1: entered promiscuous mode [ 584.614699][ T1683] hsr_slave_0: left promiscuous mode [ 584.620514][ T1683] hsr_slave_1: left promiscuous mode [ 584.626479][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.633938][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.641474][ T1683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.648956][ T1683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.657766][ T1683] veth1_macvtap: left promiscuous mode [ 584.663293][ T1683] veth0_macvtap: left promiscuous mode [ 584.668756][ T1683] veth1_vlan: left promiscuous mode [ 584.674118][ T1683] veth0_vlan: left promiscuous mode [ 584.746111][T31742] xt_hashlimit: max too large, truncated to 1048576 [ 584.754025][ T1683] team0 (unregistering): Port device team_slave_1 removed [ 584.764636][ T1683] team0 (unregistering): Port device team_slave_0 removed [ 584.889911][T31755] FAULT_INJECTION: forcing a failure. [ 584.889911][T31755] name failslab, interval 1, probability 0, space 0, times 0 [ 584.902613][T31755] CPU: 1 UID: 0 PID: 31755 Comm: syz.4.7008 Not tainted 6.12.0-rc2-syzkaller #0 [ 584.911633][T31755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 584.921756][T31755] Call Trace: [ 584.925023][T31755] [ 584.927939][T31755] dump_stack_lvl+0xf2/0x150 [ 584.932545][T31755] dump_stack+0x15/0x20 [ 584.936705][T31755] should_fail_ex+0x223/0x230 [ 584.941394][T31755] ? selinux_bpf_prog_load+0x35/0xe0 [ 584.946776][T31755] should_failslab+0x8f/0xb0 [ 584.951385][T31755] __kmalloc_cache_noprof+0x4b/0x2a0 [ 584.956667][T31755] ? should_fail+0xb/0x10 [ 584.960993][T31755] selinux_bpf_prog_load+0x35/0xe0 [ 584.966219][T31755] security_bpf_prog_load+0x47/0x80 [ 584.971438][T31755] bpf_prog_load+0xe81/0x1070 [ 584.976173][T31755] ? __rcu_read_unlock+0x4e/0x70 [ 584.981184][T31755] __sys_bpf+0x463/0x7a0 [ 584.985421][T31755] __x64_sys_bpf+0x43/0x50 [ 584.989889][T31755] x64_sys_call+0x2625/0x2d60 [ 584.994583][T31755] do_syscall_64+0xc9/0x1c0 [ 584.999094][T31755] ? clear_bhb_loop+0x55/0xb0 [ 585.003835][T31755] ? clear_bhb_loop+0x55/0xb0 [ 585.008504][T31755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.014436][T31755] RIP: 0033:0x7efd3fdadff9 [ 585.018912][T31755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.038647][T31755] RSP: 002b:00007efd3ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.047055][T31755] RAX: ffffffffffffffda RBX: 00007efd3ff65f80 RCX: 00007efd3fdadff9 [ 585.055030][T31755] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 585.063051][T31755] RBP: 00007efd3ea21090 R08: 0000000000000000 R09: 0000000000000000 [ 585.071064][T31755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.079025][T31755] R13: 0000000000000000 R14: 00007efd3ff65f80 R15: 00007ffc5f372688 [ 585.087016][T31755] [ 585.140335][T31759] loop4: detected capacity change from 0 to 512 [ 585.163059][T31757] ================================================================== [ 585.171133][T31757] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 585.179265][T31757] [ 585.181568][T31757] read to 0xffff8881158c83dc of 4 bytes by task 31756 on cpu 1: [ 585.189173][T31757] file_update_time+0x92/0x2b0 [ 585.193921][T31757] fault_dirty_shared_page+0xde/0x340 [ 585.199283][T31757] handle_mm_fault+0x1370/0x2a80 [ 585.204203][T31757] exc_page_fault+0x3b9/0x650 [ 585.208859][T31757] asm_exc_page_fault+0x26/0x30 [ 585.213743][T31757] [ 585.216051][T31757] write to 0xffff8881158c83dc of 4 bytes by task 31757 on cpu 0: [ 585.223741][T31757] inode_update_timestamps+0x166/0x280 [ 585.229184][T31757] file_update_time+0x220/0x2b0 [ 585.234014][T31757] fault_dirty_shared_page+0xde/0x340 [ 585.239369][T31757] handle_mm_fault+0x1370/0x2a80 [ 585.244291][T31757] __get_user_pages+0xf2c/0x2670 [ 585.249209][T31757] faultin_page_range+0x352/0x5d0 [ 585.254222][T31757] do_madvise+0x3dc/0x2660 [ 585.258623][T31757] __x64_sys_madvise+0x61/0x70 [ 585.263393][T31757] x64_sys_call+0x2320/0x2d60 [ 585.268054][T31757] do_syscall_64+0xc9/0x1c0 [ 585.272536][T31757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.278439][T31757] [ 585.280740][T31757] value changed: 0x06bd406c -> 0x0755d6eb [ 585.286431][T31757] [ 585.288732][T31757] Reported by Kernel Concurrency Sanitizer on: [ 585.294856][T31757] CPU: 0 UID: 0 PID: 31757 Comm: syz.1.7009 Not tainted 6.12.0-rc2-syzkaller #0 [ 585.303854][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 585.313889][T31757] ================================================================== [ 585.325403][T31759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.330133][T31757] syz.1.7009[31757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.338049][T31757] syz.1.7009[31757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.338530][T31759] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.360980][T31757] syz.1.7009[31757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.375536][T31757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31757 comm=syz.1.7009 [ 585.378135][T31759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 585.425939][T31087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.426006][T31763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31763 comm=syz.1.7009 [ 585.504782][T31619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 585.513448][T31619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 585.521737][T31619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 585.531321][T31619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.565447][T31619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.576838][T31619] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.586088][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.593139][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.603241][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.610354][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.666053][T31619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.724743][T31619] veth0_vlan: entered promiscuous mode [ 585.732843][T31619] veth1_vlan: entered promiscuous mode [ 585.746702][T31619] veth0_macvtap: entered promiscuous mode [ 585.754746][T31619] veth1_macvtap: entered promiscuous mode [ 585.766349][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.776855][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.786724][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.797197][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.807016][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.817414][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.827248][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.837682][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.848250][T31619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.859353][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.869830][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.879640][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.890131][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.899941][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.910360][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.920156][T31619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.930555][T31619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.941292][T31619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.951105][T31619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.959831][T31619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.968572][T31619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.977299][T31619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0