last executing test programs: 10.396176473s ago: executing program 2 (id=1869): r0 = socket$inet(0x2, 0x2, 0x1) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc14", 0x3}], 0x2, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 10.340567458s ago: executing program 1 (id=1870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) open(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, 0x0, 0x0, 0x4000040) bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.340126068s ago: executing program 2 (id=1871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="fbc6bada6eabbc54d57dd1cbaa617ec1a599e756707ae7569ebb3076d880eee3ea8825148690ffda9366e5daab284b4b3b03e5d98ceb6d564cde849225329cb87b06a57559ab60", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="44010027b63700000000000000", @ANYRES16=r6, @ANYBLOB="080025bd7000fcdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b0007000000060016007f0000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000700000006001600008000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00070000000600160000b4000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000100000006001600feff00000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000700000006001600030000000500120001000000"], 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r7, &(0x7f0000001300), 0x8f) close(r7) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) eventfd(0x3ff) shutdown(r1, 0x1) 10.336853558s ago: executing program 1 (id=1872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 10.324028349s ago: executing program 1 (id=1873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x113) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES64=r2], 0x5c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000d511aaaad6d4ed729aa1d596bd9ab1f203724431536bd78f4f86bf983e19735bffc4e37c4eb1df8fe5606a4d5a051f300aa951665982b246b955cc34366f02a97cb5ce6fcf438d89336553358e5f2856dd27bc1bda2a1920239de3e3e7a65274c5cc02d55609b8dbf56e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000f80), 0xa4100) 10.31407552s ago: executing program 2 (id=1874): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 10.273597784s ago: executing program 2 (id=1875): socket$inet_udp(0x2, 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x4, 0xffffffff, 0x4f77}}}}]}, 0x4c}}, 0x0) 9.993199268s ago: executing program 2 (id=1877): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/162}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x21, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x1d2) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f0000000280)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r7, 0x0, 0xe066) 9.919927694s ago: executing program 2 (id=1880): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) 9.795285614s ago: executing program 3 (id=1881): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) 9.364452481s ago: executing program 3 (id=1883): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 9.328925025s ago: executing program 3 (id=1884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a01020000000000000000010000000900010073797a30000800000900020073797a300000000008000740000000014000038008000240000000002c0003801400010076657468305f746f5f626f6e640000001400010062617461647630000000000000000000080001"], 0xbc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) timer_create(0x3, &(0x7f000000e780)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}, &(0x7f000000e7c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) fstatfs(0xffffffffffffffff, 0x0) 9.173535017s ago: executing program 1 (id=1886): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000480)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 9.033606269s ago: executing program 1 (id=1890): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/162}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x21, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c", 0x1e2) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f0000000280)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r7, 0x0, 0xe066) 8.716684736s ago: executing program 1 (id=1896): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1f0, 0x108, 0x108, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0xffffff00, 0xff000000], 'ip6gre0\x00', 'vlan0\x00', {0xff}, {}, 0x21, 0x7, 0x1, 0x40}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x3, 0x8000, 0x4db7, {0x8}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xff000000], 'dvmrp0\x00', 'pim6reg1\x00', {}, {0xff}, 0x32, 0xfc, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x1, "a13ff9f3f6136eb4dd63f1dcb8cf9df15146e3d3b5245cb54363059626dd"}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0xff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'veth0_to_team\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x96, 0x28, 0x3, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x7, 0xb4, 0x7, 0x8}, {0x2, 0xb, 0xfe, 0x4}, {0x6, 0x1, 0x2, 0x8}, {0x1, 0x8a, 0xd, 0x10}, {0x401, 0xdf, 0x8, 0x1000079}, {0xcb3, 0x23, 0xc, 0xa4bf}]}) munlockall() 8.453656989s ago: executing program 3 (id=1900): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0x1, 0x7aa, &(0x7f0000000800)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x700, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xf000}], 0x1, 0x7800, 0xf00, 0x3) 7.748654359s ago: executing program 3 (id=1904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x10000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 7.366626291s ago: executing program 3 (id=1911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.925590769s ago: executing program 4 (id=1916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x113) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvTLf8VFoRf4AkVtHY+KOlBZSDHjSaeNBEowc81rYQZKGG1kQI0WIMHg2Jd+PRxL/Akyejnky8eNC7ISFKTAAvrpndmba77lT6cxf380kW3tt5M+99++btvr632wB61lD2TxJxR0T8EhEDjWxzgaHGfzeuXZi8ee3CZBK12hu/J/Vy169dmCyKFuftzDPDaUT6cZJX0mz23PlTE9Xq9Nk8Pzp3+t3R2XPnnzp5euLE9InpM+NHjx4+NPbM0+NHms47sso4s/iu7/tgZv/el9+6/Orksctvf/9V1t40P740jvUylAX+R62u9dij611Zh/1dW4wzqXS6NdyqvojIuqu/Pv4Hoi8WO28gXvqoo40DNlT2mr21/PB8DfgfS6LTLQA6o3ijz37/zR/9mzT16ApXn2/8ApTFfiN/NI5UFtYGNvIHMhQRx+b/+jx7RMs6RK3NugEAwFp9k81/nmya/+XzjzTuXVJuV743NBgRd0XE7oi4OyL2RMQ9EfWy90XE/Susv3Vr6N/7MOmVVQV2i7L537P53lbz/K+Y/cVgX567sx5/f3L8ZHX6YP4zGY7+rVl+rN3Fi0u8+NOnZfUvnf9lj6z+Yi6YX+RKpWWBbmpibmK9JqVXL0bsq7SLP1nYCUgiYm9E7FvZpXcViZOPf7m/rNB/x7+Mddhnqn0R8Vij/+ejJf5Csvz+5Oi2qE4fHG3cFX1t6vjhx0uvldW/pvjXQdb/O5rv/5YSA38mS/drZ1dex6VfPyndW62s8v7fkrxZ39Pdkj/3/sTc3NmxiC3JK/V80/Pji+cW+aJ8Fv/wgfbjf3d+Thb/AxGxP+LnYtg9mPfdQxHxcEQcWCb+71545J2yY93Q/1NtX/8W7v/B5v5feaLv1Ldfl9XfGn+S5xdLZP1/uJ4azp+pv/7ltpdct7w52/ISq72bAQAA4PaT1j8bn6QjC+k0HRlpfIZ/T+xIqzOzc08cn3nvzFTjM/SD0Z8W658DS9ZDx5L5/IqN/Hi+VlwcP5SvG3/Wtz1Jojo9MjlTnepw7NDrdpaM/8xv7RazI+K5TW0hsKF8Xwt6V+v4TzvUDmDzef+H3mX8Q+8y/qF3FeP/9SXPfdhSpmQvALjNef+H3mX8Q+9aGP8XO9sOYPN5/4ee1O5L8sXfOFjDV/7XlKgs8+39Lk0Uq6Pd0p5TSURsbBWRdkekpYnI/4hFt7Rn5YmbtVWeXllmdN9qojOvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvtnwAAAP//aP7lHQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES64=r2], 0x5c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000f80), 0xa4100) 5.965186631s ago: executing program 0 (id=1920): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r2, @ANYBLOB="e2a8e17c1001360827f6198bcd4a0800050009000000"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) ioperm(0x6, 0x1, 0x95d) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) syz_clone(0x0, &(0x7f0000000100)="e54f74e41ffb90260268bb246057d0113686dd712e0fc3711e9ca8a058f106a9c6b7b639fbe7d8056d7e946037783ef25d94d93806461fc61a4589beda49b0e255d3b47bad19f8006b97fab58b5992236f41a336b4b9779d4f116ee04eb7a9397479a58ce2289ba417c5b4b6e4e879", 0x6f, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="f43f9c6126dfd123869cc57e229df6721ea9cad0a1da4fd1c8c50aecaaca2ff9cad240919e40f58b5c3029ad75f236c68f24e2236bb4a869219eb847458f3a8f21cc1b530da547f7b5815e37ce1d6b50191ccef5163c3b66779832f62ad5f4b1c25943393c0f21750271089da156627dcbde6b2d2e7385ac9cd5c4c2584f") 5.964205421s ago: executing program 4 (id=1922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 1.649871319s ago: executing program 0 (id=1923): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"/24], 0x18}, 0xfc00) r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001900010000000000fedbdf251d0100000c000b00000000c0010000c015000400000000dea201000000568cced68c6d928fdccae3"], 0x38}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0xe, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000d40)=0x14) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x151000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000700)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000c40)=""/227, 0x40f00, 0x2b, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000dc0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0x10, 0x1000, 0x9}, 0x10, 0x9596, r1, 0x3, &(0x7f0000000e80)=[r2, r2, r2, r4, r5, r2, r2, r2, r2, r2], &(0x7f0000000ec0), 0x10, 0xb, @void, @value}, 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000540), &(0x7f0000000b00)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c22c13fe80000000000000875a65969ff57b00000000000000000000000000ac1454aa0637"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.649513599s ago: executing program 4 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000500)=0x9) 1.348300964s ago: executing program 4 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978590aa1b88c44306d20"}}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x1, 0x3, 0xa, 0x9c, 0x0, 0x3, 0x480, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x5315, 0x4}, 0x4401, 0x8001, 0x7fff, 0x0, 0x8, 0x7fffffff, 0xcd71, 0x0, 0x3753, 0x0, 0x9}, 0x0, 0x6, r6, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0026435f12806ef84a8b6de52675abd0e24df939a2bd32907c0a618f78d2dafbd7b188c4ba06a2770ea267f12c19a25195c33075e8a6b9e68fd10cd9f3159b45e18a6e2a6d63e0382f8b4121a0c2770000", @ANYRES16=0x0, @ANYBLOB="8b3700000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r7, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, 0x0, "544e6b24af869c8bcb343306faffff1400165fadcc19dc1a4d5b370e4d00", 0x0, 0x0, 0xfffffffd}, 0x3c) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) fsetxattr$security_evm(r3, &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="04019207933af12e59f374a352adbac1479400e0"], 0x14, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) close(r8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x96d2a88d41ecaeb5, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffa3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) socket(0x2, 0x80805, 0x0) 952.653538ms ago: executing program 4 (id=1926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000307"], 0x20) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) 808.987061ms ago: executing program 0 (id=1927): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r4}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r8, @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="007f350cb7"], 0x48) r11 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) truncate(&(0x7f0000000340)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r11) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800004cc478e8213e74856eda8c174f1246691c41bee6a48d6d08d6e323def206", @ANYRES16=r12, @ANYBLOB="02002bbd7000ffdbdf25080000000c00160008000000000000000c001600000000000000000005000d000000000014002000"/66], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) 516.557635ms ago: executing program 4 (id=1928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004a000000000000000000000048301778835630065ea17acdd88ef39a5991c2b56ee7f1f7bbbe214cae1d463053df1c9e4ba1b84beb044b6365be4175e844130c6a273eebaa761205dedce659a79c16ea8160cf9f7a186330595d64e5c6bce543ef449e2330c008ca0086ad"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(r2, 0x3, 0x1001, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 155.313346ms ago: executing program 0 (id=1929): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="63fa3b61d7564a3f2385c1fd6f8807a101c649d092817042256534c863eb3e8b8f8c4fa25857e98f", 0x28}], 0x1}, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x18f9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000100)={0x4, 0x7d6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0"], 0x68}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x60c801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100020000000000d1a2f28cf7046ec3eb2282d523339ce29d81ed0900d3ad4aa91016d289b231a17f62c81342d60e78fcae4c5fab28bcfb8bbbafd5826015667318600b1519381a43b502362dc5bd2eac3003d50d33715097961863027d0bddeadd8074e75db7144cbbc39688e814bab989b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe69) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000003c0)={0x40000000, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES64=r7], 0x10}}, 0x24008004) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x1001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x10000, 0x2}, 0x0, 0x6e6bb4, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x2dc, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb258}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7847}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0fe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400090}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x539}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b1928ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "c456a73d8ff1dc656d783821eb66118f5487c1a72c2d54eaf4640fed33c08a72"}}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "3950e196c15d58b46233ab6f47cd7bbb38d4735240bc3fc230fbbc88f0903e304abe59bf292f9c370e0e44e33a37faca4e647368d38091d026a77ea996a3959a32e5b53b256d677d976f21fd27000f5f58f31b79e88e47ee01f84b058376e48d42ddd92019a033a35291ce8603f1a1aef294f51a1cb94d9a7db3b5a48f1a58faaf75f43822d34df6fcade46dfe643537cf945fa9db746037ad478cdca1b020ac686c3cee3e6c676b7c00703bb67a23647b4c664e290dc0d2b9c649cb4982f5f2afc8270e1881bf12ed977807d66aa2107e19ec8c88908ba06d"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x41dec7f3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4}, 0x60010) socket$nl_generic(0x10, 0x3, 0x10) 89.408652ms ago: executing program 0 (id=1930): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000480)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 0s ago: executing program 0 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xd, 0x3, 0x5}, {0x2, 0x3, 0x6}, {0xc, 0x6, 0x6}]}, @func={0xb, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x10]}}, &(0x7f00000002c0)=""/10, 0x58, 0xa, 0x1, 0x6, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000680), &(0x7f0000000400)='%pS \x00'}, 0x1a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000017c0)=r4, 0x4) sendmsg$AUDIT_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0x3c}}, 0x0) getrusage(0x1, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 8150] EXT4-fs (loop0): Remounting filesystem read-only [ 181.802663][ T8150] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 181.803694][ T8143] EXT4-fs (loop4): Remounting filesystem read-only [ 181.812733][ T8150] EXT4-fs (loop0): 1 orphan inode deleted [ 181.819227][ T8143] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 181.825307][ T8150] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 181.837882][ T8143] EXT4-fs (loop4): 1 orphan inode deleted [ 181.847701][ T8143] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 181.860980][ T3374] veth1_macvtap: left promiscuous mode [ 181.866485][ T3374] veth0_macvtap: left promiscuous mode [ 181.872048][ T3374] veth1_vlan: left promiscuous mode [ 181.877362][ T3374] veth0_vlan: left promiscuous mode [ 182.019009][ T3374] team0 (unregistering): Port device team_slave_1 removed [ 182.026482][ T8156] FAULT_INJECTION: forcing a failure. [ 182.026482][ T8156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.039606][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.4.1430 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 182.050349][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.060453][ T8156] Call Trace: [ 182.063726][ T8156] [ 182.066659][ T8156] dump_stack_lvl+0xf2/0x150 [ 182.071285][ T8156] dump_stack+0x15/0x20 [ 182.075502][ T8156] should_fail_ex+0x223/0x230 [ 182.080283][ T8156] should_fail+0xb/0x10 [ 182.084439][ T8156] should_fail_usercopy+0x1a/0x20 [ 182.089551][ T8156] _copy_to_user+0x1e/0xa0 [ 182.093967][ T8156] simple_read_from_buffer+0xa0/0x110 [ 182.099425][ T8156] proc_fail_nth_read+0xf9/0x140 [ 182.104479][ T8156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.110101][ T8156] vfs_read+0x195/0x720 [ 182.114278][ T8156] ? kmem_cache_free+0x1e8/0x2d0 [ 182.119372][ T8156] ? __rcu_read_unlock+0x4e/0x70 [ 182.124373][ T8156] ? __fget_files+0x1d4/0x210 [ 182.129064][ T8156] ksys_read+0xeb/0x1b0 [ 182.133239][ T8156] __x64_sys_read+0x42/0x50 [ 182.137752][ T8156] x64_sys_call+0x27d3/0x2d60 [ 182.142433][ T8156] do_syscall_64+0xc9/0x1c0 [ 182.146960][ T8156] ? clear_bhb_loop+0x55/0xb0 [ 182.151682][ T8156] ? clear_bhb_loop+0x55/0xb0 [ 182.156579][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.162483][ T8156] RIP: 0033:0x7f757efbca3c [ 182.166910][ T8156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 182.186566][ T8156] RSP: 002b:00007f757dc37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.195010][ T8156] RAX: ffffffffffffffda RBX: 00007f757f175f80 RCX: 00007f757efbca3c [ 182.202990][ T8156] RDX: 000000000000000f RSI: 00007f757dc370a0 RDI: 0000000000000009 [ 182.210961][ T8156] RBP: 00007f757dc37090 R08: 0000000000000000 R09: 0000000000000000 [ 182.218968][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.227028][ T8156] R13: 0000000000000000 R14: 00007f757f175f80 R15: 00007ffd51195618 [ 182.235011][ T8156] [ 182.238644][ T3374] team0 (unregistering): Port device team_slave_0 removed [ 182.350096][ T8167] netlink: 'syz.4.1434': attribute type 4 has an invalid length. [ 182.382862][ T8171] loop1: detected capacity change from 0 to 512 [ 182.391952][ T8171] EXT4-fs: Ignoring removed oldalloc option [ 182.401857][ T8171] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1436: Parent and EA inode have the same ino 15 [ 182.415021][ T8171] EXT4-fs (loop1): Remounting filesystem read-only [ 182.421635][ T8171] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 182.433186][ T8171] EXT4-fs (loop1): 1 orphan inode deleted [ 182.439281][ T8171] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 182.447223][ T8175] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 182.455475][ T8175] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 182.486704][ T8177] loop4: detected capacity change from 0 to 2048 [ 182.517257][ T8179] loop1: detected capacity change from 0 to 512 [ 182.535737][ T8177] loop4: p1 < > p4 [ 182.540037][ T8177] loop4: p4 size 8388608 extends beyond EOD, truncated [ 182.551137][ T8040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.563215][ T8177] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 182.575635][ T8040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.595875][ T8040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.604569][ T8040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.655511][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.667700][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.675184][ T8179] EXT4-fs: Ignoring removed oldalloc option [ 182.709119][ T8040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.719560][ T8040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.734964][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.742018][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.756870][ T8179] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1439: Parent and EA inode have the same ino 15 [ 182.774694][ T8179] EXT4-fs (loop1): Remounting filesystem read-only [ 182.781300][ T8179] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 182.802358][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.809488][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.819991][ T8179] EXT4-fs (loop1): 1 orphan inode deleted [ 182.830251][ T8179] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 182.872071][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.946028][ T8040] veth0_vlan: entered promiscuous mode [ 182.954783][ T8040] veth1_vlan: entered promiscuous mode [ 182.967717][ T8040] veth0_macvtap: entered promiscuous mode [ 182.975108][ T8040] veth1_macvtap: entered promiscuous mode [ 182.985070][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.995512][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.005357][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.015780][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.025661][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.036083][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.045969][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.056525][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.066473][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.076942][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.086782][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.097288][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.107248][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.117698][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.127725][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.138374][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.148210][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.158644][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.179746][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.181532][ T8201] loop0: detected capacity change from 0 to 128 [ 183.188256][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.203917][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.213800][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.224213][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.227965][ T8201] EXT4-fs: Ignoring removed nobh option [ 183.234027][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.234042][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.234053][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.270192][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.280056][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.290916][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.300812][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.311239][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.321061][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.331540][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.341356][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.351784][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.361595][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.372313][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.384646][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.393312][ T8040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.402115][ T8040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.406522][ T8201] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.410834][ T8040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.429659][ T8040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.519119][ T8207] loop0: detected capacity change from 0 to 2048 [ 183.549119][ T8211] loop4: detected capacity change from 0 to 512 [ 183.555738][ T8207] loop0: p1 < > p4 [ 183.559717][ T8211] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 183.560142][ T8207] loop0: p4 size 8388608 extends beyond EOD, truncated [ 183.576225][ T8211] EXT4-fs (loop4): orphan cleanup on readonly fs [ 183.590658][ T8211] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 183.613404][ T8211] ext4_test_bit(bit=14, block=18) = 1 [ 183.614901][ T8218] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1448'. [ 183.618848][ T8211] is_bad_inode(inode)=0 [ 183.631964][ T8211] NEXT_ORPHAN(inode)=1023 [ 183.636315][ T8211] max_ino=32 [ 183.639505][ T8211] i_nlink=0 [ 183.657333][ T8211] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 183.672515][ T8211] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 183.730102][ T8223] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 183.780284][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 183.850866][ T8237] tipc: Started in network mode [ 183.855905][ T8237] tipc: Node identity ac14140f, cluster identity 4711 [ 183.864867][ T8237] tipc: New replicast peer: 255.255.255.255 [ 183.870928][ T8237] tipc: Enabled bearer , priority 10 [ 183.973399][ T8245] loop0: detected capacity change from 0 to 512 [ 183.990773][ T8247] x_tables: unsorted entry at hook 2 [ 184.001043][ T8245] EXT4-fs: Ignoring removed oldalloc option [ 184.015484][ T8245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.040542][ T8245] EXT4-fs (loop0): 1 truncate cleaned up [ 184.133499][ T8252] loop0: detected capacity change from 0 to 512 [ 184.166317][ T8252] EXT4-fs (loop0): 1 truncate cleaned up [ 184.281946][ T8258] loop1: detected capacity change from 0 to 512 [ 184.408024][ T8258] EXT4-fs (loop1): 1 truncate cleaned up [ 184.951732][ T8262] loop4: detected capacity change from 0 to 512 [ 185.009030][ T8262] EXT4-fs: Ignoring removed oldalloc option [ 185.052602][ T8262] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.062209][ T8] tipc: Node number set to 2886997007 [ 185.092382][ T8266] bond1: entered promiscuous mode [ 185.097476][ T8266] bond1: entered allmulticast mode [ 185.143856][ T8266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.169463][ T8262] EXT4-fs (loop4): 1 truncate cleaned up [ 185.178649][ T8266] bond1 (unregistering): Released all slaves [ 185.207960][ T8273] loop1: detected capacity change from 0 to 512 [ 185.214492][ T8273] EXT4-fs: Ignoring removed oldalloc option [ 185.221687][ T8273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.232165][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 185.243347][ T8271] ip6gre1: entered allmulticast mode [ 185.250394][ T8273] EXT4-fs (loop1): 1 truncate cleaned up [ 185.344373][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 185.374149][ T8279] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 185.394333][ T8282] random: crng reseeded on system resumption [ 185.480892][ T8286] loop4: detected capacity change from 0 to 512 [ 185.504617][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 185.504629][ T29] audit: type=1400 audit(1729160842.176:13650): avc: denied { accept } for pid=8287 comm="syz.3.1472" lport=37358 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.507689][ T8286] EXT4-fs: Ignoring removed oldalloc option [ 185.573346][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 185.588047][ T8286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.620130][ T8286] EXT4-fs (loop4): 1 truncate cleaned up [ 185.780444][ T8300] loop1: detected capacity change from 0 to 128 [ 185.853283][ T8300] syz.1.1477: attempt to access beyond end of device [ 185.853283][ T8300] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 185.866846][ T8300] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 186.025013][ T29] audit: type=1400 audit(1729160842.696:13651): avc: denied { ioctl } for pid=8311 comm="syz.1.1482" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.205390][ T8323] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 186.213688][ T8323] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 186.450103][ T8328] loop3: detected capacity change from 0 to 512 [ 186.466929][ T8328] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 186.498752][ T8328] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.513494][ T8328] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 186.525511][ T8328] ext4_test_bit(bit=14, block=18) = 1 [ 186.530911][ T8328] is_bad_inode(inode)=0 [ 186.535168][ T8328] NEXT_ORPHAN(inode)=1023 [ 186.539497][ T8328] max_ino=32 [ 186.542693][ T8328] i_nlink=0 [ 186.576246][ T8328] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 186.606855][ T8328] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 186.631041][ T8328] EXT4-fs mount: 25 callbacks suppressed [ 186.631055][ T8328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 186.813774][ T8337] loop4: detected capacity change from 0 to 512 [ 186.827796][ T8337] EXT4-fs: Ignoring removed oldalloc option [ 186.836447][ T8337] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1490: Parent and EA inode have the same ino 15 [ 186.842134][ T29] audit: type=1326 audit(1729160843.506:13652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 186.850658][ T8337] EXT4-fs (loop4): Remounting filesystem read-only [ 186.879265][ T8337] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 186.891666][ T8337] EXT4-fs (loop4): 1 orphan inode deleted [ 186.897960][ T8337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.910157][ T8337] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 186.917604][ T29] audit: type=1326 audit(1729160843.546:13653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 186.918435][ T8337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.941166][ T29] audit: type=1326 audit(1729160843.546:13654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 186.973775][ T29] audit: type=1326 audit(1729160843.546:13655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 186.997309][ T29] audit: type=1326 audit(1729160843.546:13656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 187.020997][ T29] audit: type=1326 audit(1729160843.546:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 187.044413][ T29] audit: type=1326 audit(1729160843.546:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 187.068053][ T29] audit: type=1326 audit(1729160843.546:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 187.177194][ T8344] @: renamed from bond0 (while UP) [ 187.233237][ T8351] 9pnet: Could not find request transport: fd0x0000000000000003 [ 187.280459][ T8040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.663215][ T8383] loop3: detected capacity change from 0 to 128 [ 187.698181][ T8386] 9pnet: Could not find request transport: fd0x0000000000000003 [ 187.727453][ T8387] loop0: detected capacity change from 0 to 128 [ 187.748088][ T8391] loop3: detected capacity change from 0 to 512 [ 187.780219][ T8391] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 187.793303][ T8387] syz.0.1510: attempt to access beyond end of device [ 187.793303][ T8387] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 187.806790][ T8387] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 187.843900][ T8391] EXT4-fs (loop3): orphan cleanup on readonly fs [ 187.850403][ T8391] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 187.868031][ T8391] ext4_test_bit(bit=14, block=18) = 1 [ 187.873443][ T8391] is_bad_inode(inode)=0 [ 187.877692][ T8391] NEXT_ORPHAN(inode)=1023 [ 187.882119][ T8391] max_ino=32 [ 187.885354][ T8391] i_nlink=0 [ 187.917429][ T8391] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 187.963352][ T8391] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 187.994132][ T8391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 188.102669][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1515'. [ 188.380987][ T8422] netlink: 'syz.4.1516': attribute type 4 has an invalid length. [ 188.595329][ T8040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.777866][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 188.786932][ T8453] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 188.855838][ T8460] loop0: detected capacity change from 0 to 2048 [ 188.875605][ T8463] loop3: detected capacity change from 0 to 512 [ 188.884700][ T8463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.897016][ T8463] EXT4-fs (loop3): 1 truncate cleaned up [ 188.903067][ T8463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.917948][ T8460] loop0: p1 < > p4 [ 188.922318][ T8460] loop0: p4 size 8388608 extends beyond EOD, truncated [ 188.991587][ T8040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.012372][ T8469] loop0: detected capacity change from 0 to 512 [ 189.023979][ T8469] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 189.037817][ T8469] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.048482][ T8469] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 189.060147][ T8469] ext4_test_bit(bit=14, block=18) = 1 [ 189.065575][ T8469] is_bad_inode(inode)=0 [ 189.069755][ T8469] NEXT_ORPHAN(inode)=1023 [ 189.074126][ T8469] max_ino=32 [ 189.077332][ T8469] i_nlink=0 [ 189.082780][ T8469] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 189.098435][ T8469] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 189.107892][ T8469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 189.420335][ T24] IPVS: starting estimator thread 0... [ 189.454127][ T8489] loop4: detected capacity change from 0 to 128 [ 189.476983][ T8489] syz.4.1534: attempt to access beyond end of device [ 189.476983][ T8489] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 189.490417][ T8489] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 189.513514][ T8487] IPVS: using max 3024 ests per chain, 151200 per kthread [ 189.643249][ T8500] loop1: detected capacity change from 0 to 128 [ 189.663125][ T8511] loop4: detected capacity change from 0 to 512 [ 189.669879][ T8511] EXT4-fs (loop4): first meta block group too large: 131072 (group descriptor block count 1) [ 189.764066][ T8513] loop1: detected capacity change from 0 to 512 [ 189.852766][ T7829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.946329][ T8535] loop0: detected capacity change from 0 to 128 [ 189.984986][ T8536] bond0: entered promiscuous mode [ 189.990046][ T8536] bond0: entered allmulticast mode [ 189.995654][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.011043][ T8536] bond0 (unregistering): Released all slaves [ 190.028093][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 190.039057][ T8545] ip6gre1: entered allmulticast mode [ 190.119834][ T8551] loop1: detected capacity change from 0 to 512 [ 190.126781][ T8551] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 190.139555][ T8551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.155021][ T8551] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 190.178976][ T8551] ext4_test_bit(bit=14, block=18) = 1 [ 190.184397][ T8551] is_bad_inode(inode)=0 [ 190.188544][ T8551] NEXT_ORPHAN(inode)=1023 [ 190.192862][ T8551] max_ino=32 [ 190.196132][ T8551] i_nlink=0 [ 190.212525][ T8551] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 190.237948][ T8551] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 190.249580][ T8551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.312159][ T8565] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 190.320431][ T8565] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 190.335661][ T8566] loop3: detected capacity change from 0 to 128 [ 190.350896][ T8566] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 190.433824][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.463790][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.517239][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.530278][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.553587][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 190.954843][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.970040][ T8579] loop4: detected capacity change from 0 to 512 [ 190.991009][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 190.991022][ T29] audit: type=1400 audit(1729160847.656:14009): avc: denied { create } for pid=8580 comm="syz.1.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 191.017799][ T29] audit: type=1326 audit(1729160847.656:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.035572][ T8583] bond1: entered promiscuous mode [ 191.041263][ T29] audit: type=1326 audit(1729160847.656:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.046300][ T8583] bond1: entered allmulticast mode [ 191.047042][ T8583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.069779][ T29] audit: type=1326 audit(1729160847.656:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.105167][ T29] audit: type=1326 audit(1729160847.656:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.128832][ T29] audit: type=1326 audit(1729160847.656:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.152429][ T29] audit: type=1326 audit(1729160847.656:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.175981][ T29] audit: type=1326 audit(1729160847.746:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.199523][ T29] audit: type=1326 audit(1729160847.746:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.223050][ T29] audit: type=1326 audit(1729160847.746:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3777b8dff9 code=0x7ffc0000 [ 191.248398][ T8583] bond1 (unregistering): Released all slaves [ 191.372884][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 191.395613][ T8610] loop0: detected capacity change from 0 to 512 [ 191.402223][ T8604] ip6gre2: entered allmulticast mode [ 191.412765][ T8610] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 191.431401][ T8614] loop3: detected capacity change from 0 to 128 [ 191.438318][ T8610] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.446860][ T8610] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 191.471138][ T8610] ext4_test_bit(bit=14, block=18) = 1 [ 191.476691][ T8610] is_bad_inode(inode)=0 [ 191.480879][ T8610] NEXT_ORPHAN(inode)=1023 [ 191.483089][ T8614] syz.3.1583: attempt to access beyond end of device [ 191.483089][ T8614] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 191.485295][ T8610] max_ino=32 [ 191.485303][ T8610] i_nlink=0 [ 191.505015][ T8614] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 191.515293][ T8610] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 191.529824][ T8610] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 191.539375][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 191.557509][ T426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.591222][ T8624] bond0: entered promiscuous mode [ 191.596353][ T8624] bond0: entered allmulticast mode [ 191.601728][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.614507][ T8624] bond0 (unregistering): Released all slaves [ 191.632984][ T426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.675499][ C1] ------------[ cut here ]------------ [ 191.680999][ C1] refcount_t: underflow; use-after-free. [ 191.686845][ C1] WARNING: CPU: 1 PID: 24 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 191.696088][ C1] Modules linked in: [ 191.699993][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 191.710605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.720704][ C1] Workqueue: mld mld_ifc_work [ 191.720738][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 191.720769][ C1] Code: 72 ff ff ff e8 8b 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 f6 30 f4 04 01 90 48 c7 c7 85 a2 1b 86 e8 8b 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 191.720806][ C1] RSP: 0018:ffffc900000e4b60 EFLAGS: 00010246 [ 191.720826][ C1] RAX: b4992621c0edf500 RBX: ffff88811322cbe4 RCX: ffff888100f93180 [ 191.720841][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.720855][ C1] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 191.720867][ C1] R10: 0001ffffffffffff R11: ffff888100f93180 R12: 0000000000000001 [ 191.720878][ C1] R13: ffff888115f57600 R14: ffff88811322cbe4 R15: 0000000000000000 [ 191.720899][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 191.720919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.720936][ C1] CR2: 000000110c30a0f4 CR3: 0000000113ec4000 CR4: 00000000003506f0 [ 191.720955][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.720970][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.720985][ C1] Call Trace: [ 191.720992][ C1] [ 191.721000][ C1] ? __warn+0x141/0x350 [ 191.721038][ C1] ? report_bug+0x315/0x420 [ 191.721065][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 191.721092][ C1] ? handle_bug+0x60/0x90 [ 191.721115][ C1] ? exc_invalid_op+0x1a/0x50 [ 191.721139][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 191.721171][ C1] ? __warn_printk+0x167/0x1b0 [ 191.721220][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 191.721244][ C1] sk_skb_reason_drop+0xe9/0x290 [ 191.721291][ C1] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 191.721327][ C1] j1939_tp_recv+0x699/0xa80 [ 191.721358][ C1] j1939_can_recv+0x45f/0x550 [ 191.721397][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 191.905699][ C1] can_rcv_filter+0x225/0x4c0 [ 191.910399][ C1] can_receive+0x182/0x1f0 [ 191.914817][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 191.919313][ C1] can_rcv+0xe7/0x180 [ 191.923309][ C1] ? __pfx_can_rcv+0x10/0x10 [ 191.927921][ C1] __netif_receive_skb+0x123/0x280 [ 191.933085][ C1] process_backlog+0x22e/0x440 [ 191.937865][ C1] __napi_poll+0x63/0x3c0 [ 191.942183][ C1] ? net_rx_action+0x376/0x7f0 [ 191.946962][ C1] net_rx_action+0x3a1/0x7f0 [ 191.951538][ C1] handle_softirqs+0xbf/0x280 [ 191.956231][ C1] do_softirq+0x5e/0x90 [ 191.960375][ C1] [ 191.963295][ C1] [ 191.966235][ C1] __local_bh_enable_ip+0x6e/0x70 [ 191.971254][ C1] _raw_read_unlock_bh+0x1b/0x20 [ 191.976199][ C1] ipv6_get_lladdr+0x116/0x150 [ 191.980977][ C1] mld_newpack+0x1eb/0x480 [ 191.985398][ C1] add_grec+0xa07/0xbd0 [ 191.989542][ C1] ? nfc_urelease_event_work+0x140/0x170 [ 191.995205][ C1] mld_ifc_work+0x4cc/0x7e0 [ 191.999717][ C1] ? update_load_avg+0x1f7/0x7c0 [ 192.004664][ C1] ? kick_pool+0xd1/0x2c0 [ 192.008986][ C1] process_scheduled_works+0x483/0x9a0 [ 192.014459][ C1] worker_thread+0x51d/0x6f0 [ 192.019039][ C1] ? __pfx_worker_thread+0x10/0x10 [ 192.024171][ C1] kthread+0x1d1/0x210 [ 192.028242][ C1] ? __pfx_kthread+0x10/0x10 [ 192.032822][ C1] ret_from_fork+0x4b/0x60 [ 192.037243][ C1] ? __pfx_kthread+0x10/0x10 [ 192.041820][ C1] ret_from_fork_asm+0x1a/0x30 [ 192.046630][ C1] [ 192.049630][ C1] ---[ end trace 0000000000000000 ]--- [ 192.062243][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 192.078931][ T8638] team0 (unregistering): Port device team_slave_0 removed [ 192.088623][ T8638] team0 (unregistering): Port device team_slave_1 removed [ 192.102968][ T426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.124699][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 192.159522][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.166757][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.174973][ T8594] bridge_slave_0: entered allmulticast mode [ 192.181301][ T8594] bridge_slave_0: entered promiscuous mode [ 192.188290][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 192.200813][ T8644] ip6gre4: entered allmulticast mode [ 192.234749][ T426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.247956][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.255293][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.262923][ T8594] bridge_slave_1: entered allmulticast mode [ 192.271453][ T8594] bridge_slave_1: entered promiscuous mode [ 192.291763][ T7829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.303553][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.354888][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.414448][ T8654] loop0: detected capacity change from 0 to 2048 [ 192.434869][ T8594] team0: Port device team_slave_0 added [ 192.451971][ T8594] team0: Port device team_slave_1 added [ 192.464583][ T8654] loop0: p1 < > p4 [ 192.468880][ T8654] loop0: p4 size 8388608 extends beyond EOD, truncated [ 192.555893][ T426] bridge_slave_1: left allmulticast mode [ 192.561567][ T426] bridge_slave_1: left promiscuous mode [ 192.567357][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.586004][ T426] bridge_slave_0: left allmulticast mode [ 192.591756][ T426] bridge_slave_0: left promiscuous mode [ 192.597483][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.726377][ T426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.737509][ T426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.748390][ T426] bond0 (unregistering): Released all slaves [ 192.757122][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.764216][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.790308][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.803365][ T8656] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 192.805909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115f57600: rx timeout, send abort [ 192.814605][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.819274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115f57400: rx timeout, send abort [ 192.826205][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.834434][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115f57600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.860177][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.874404][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888115f57400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.938231][ T426] hsr_slave_0: left promiscuous mode [ 192.958321][ T426] hsr_slave_1: left promiscuous mode [ 192.964278][ T426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.967936][ T8659] loop0: detected capacity change from 0 to 128 [ 192.971779][ T426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.986060][ T426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.993641][ T426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.010019][ T8659] syz.0.1595: attempt to access beyond end of device [ 193.010019][ T8659] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 193.023538][ T8659] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 193.057869][ T426] veth1_macvtap: left promiscuous mode [ 193.063348][ T426] veth0_macvtap: left promiscuous mode [ 193.068937][ T426] veth1_vlan: left promiscuous mode [ 193.074271][ T426] veth0_vlan: left promiscuous mode [ 193.090124][ T8667] loop0: detected capacity change from 0 to 1024 [ 193.102521][ T8669] loop3: detected capacity change from 0 to 512 [ 193.109370][ T8667] EXT4-fs: Ignoring removed oldalloc option [ 193.119387][ T8669] EXT4-fs: Ignoring removed oldalloc option [ 193.133046][ T8667] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 193.156483][ T8669] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1601: Parent and EA inode have the same ino 15 [ 193.175830][ T8669] EXT4-fs (loop3): Remounting filesystem read-only [ 193.182379][ T8669] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 193.196048][ T8667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.231268][ T8669] EXT4-fs (loop3): 1 orphan inode deleted [ 193.240694][ T8669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.253165][ T8669] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 193.264086][ T8669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.291383][ T8678] loop4: detected capacity change from 0 to 2048 [ 193.314585][ T426] team0 (unregistering): Port device team_slave_1 removed [ 193.334273][ T426] team0 (unregistering): Port device team_slave_0 removed [ 193.361230][ T8682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1605'. [ 193.364790][ T8678] loop4: p1 < > p4 [ 193.376189][ T8678] loop4: p4 size 8388608 extends beyond EOD, truncated [ 193.428954][ T8594] hsr_slave_0: entered promiscuous mode [ 193.447590][ T8594] hsr_slave_1: entered promiscuous mode [ 193.470170][ T8685] loop4: detected capacity change from 0 to 128 [ 193.510662][ T7829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.538311][ T8685] syz.4.1606: attempt to access beyond end of device [ 193.538311][ T8685] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 193.667904][ T8692] loop0: detected capacity change from 0 to 512 [ 193.676309][ T8694] loop4: detected capacity change from 0 to 512 [ 193.680849][ T8692] EXT4-fs: Ignoring removed oldalloc option [ 193.682783][ T8694] EXT4-fs: Ignoring removed oldalloc option [ 193.704526][ T8692] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.716756][ T8694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.717556][ T8692] EXT4-fs (loop0): 1 truncate cleaned up [ 193.733065][ T8692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.744975][ T8694] EXT4-fs (loop4): 1 truncate cleaned up [ 193.753954][ T8694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.781519][ T7829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.832854][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.877763][ T8705] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 193.891276][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 193.900401][ T8703] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 193.904898][ T8707] loop0: detected capacity change from 0 to 512 [ 193.916744][ T8707] EXT4-fs: Ignoring removed oldalloc option [ 193.924401][ T8707] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1614: Parent and EA inode have the same ino 15 [ 193.934050][ T8594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.938653][ T8707] EXT4-fs (loop0): Remounting filesystem read-only [ 193.949898][ T8707] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 193.961942][ T8707] EXT4-fs (loop0): 1 orphan inode deleted [ 193.968703][ T8594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.975864][ T8707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.977567][ T8594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.994823][ T8707] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 194.002097][ T8707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.003634][ T8594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.048962][ T8713] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 194.057343][ T8713] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 194.065710][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.081981][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.092684][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.097417][ T8715] loop0: detected capacity change from 0 to 128 [ 194.099745][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.116065][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.123140][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.207267][ T8721] loop1: detected capacity change from 0 to 512 [ 194.221968][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.230160][ T8721] EXT4-fs: Ignoring removed oldalloc option [ 194.243257][ T8724] loop3: detected capacity change from 0 to 512 [ 194.263520][ T8721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.284196][ T8724] EXT4-fs (loop3): 1 truncate cleaned up [ 194.284341][ T8721] EXT4-fs (loop1): 1 truncate cleaned up [ 194.290220][ T8724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.309194][ T8721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.431850][ T8594] veth0_vlan: entered promiscuous mode [ 194.438514][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.458013][ T8594] veth1_vlan: entered promiscuous mode [ 194.551876][ T8594] veth0_macvtap: entered promiscuous mode [ 194.606036][ T8594] veth1_macvtap: entered promiscuous mode [ 194.671581][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.682177][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.692026][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.702520][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.712366][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.722791][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.732655][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.743092][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.752908][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.763409][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.773231][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.783664][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.793576][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.804498][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.814530][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.825070][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.834955][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.845444][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.861745][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.886924][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.897386][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.907253][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.917671][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.927516][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.937948][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.947840][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.958271][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.968144][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.978558][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.988430][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.998858][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.008664][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.019090][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.028907][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.039439][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.049264][ T8594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.059794][ T8594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.077950][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.086766][ T8594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.095544][ T8594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.104258][ T8594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.113077][ T8594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.126244][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 195.149856][ T8040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.155717][ T8743] random: crng reseeded on system resumption [ 195.249228][ T8750] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 195.257510][ T8750] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 195.309266][ T8762] loop4: detected capacity change from 0 to 512 [ 195.316579][ T8746] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 195.324807][ T8746] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 195.333844][ T8762] EXT4-fs: Ignoring removed oldalloc option [ 195.343398][ T8760] loop2: detected capacity change from 0 to 2048 [ 195.367852][ T8762] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1630: Parent and EA inode have the same ino 15 [ 195.381068][ T8760] loop2: p1 < > p4 [ 195.384957][ T8762] EXT4-fs (loop4): Remounting filesystem read-only [ 195.391558][ T8762] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 195.402249][ T8762] EXT4-fs (loop4): 1 orphan inode deleted [ 195.408349][ T8762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.420451][ T8762] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 195.427331][ T8760] loop2: p4 size 8388608 extends beyond EOD, truncated [ 195.427841][ T8762] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.444763][ T8760] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 195.540586][ T8783] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 195.605680][ T8791] loop4: detected capacity change from 0 to 512 [ 195.618296][ T8797] loop3: detected capacity change from 0 to 512 [ 195.624940][ T8797] EXT4-fs: Ignoring removed oldalloc option [ 195.631671][ T8797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.641651][ T8791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.657826][ T8797] EXT4-fs (loop3): 1 truncate cleaned up [ 195.670413][ T8797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.697738][ T8791] EXT4-fs (loop4): 1 truncate cleaned up [ 195.708163][ T8791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.794381][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.809652][ T8040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.847213][ T8805] loop3: detected capacity change from 0 to 128 [ 196.128270][ T8811] loop4: detected capacity change from 0 to 512 [ 196.155643][ T8811] EXT4-fs: Ignoring removed oldalloc option [ 196.181032][ T8811] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1650: Parent and EA inode have the same ino 15 [ 196.212349][ T8811] EXT4-fs (loop4): Remounting filesystem read-only [ 196.218990][ T8811] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 196.273643][ T8811] EXT4-fs (loop4): 1 orphan inode deleted [ 196.279833][ T8811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.315669][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 196.315683][ T29] audit: type=1400 audit(1729160852.986:14302): avc: denied { setopt } for pid=8815 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.365277][ T8811] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 196.379685][ T8811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.423930][ T29] audit: type=1400 audit(1729160853.096:14303): avc: denied { create } for pid=8819 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.463544][ T29] audit: type=1400 audit(1729160853.116:14304): avc: denied { connect } for pid=8819 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.495677][ T29] audit: type=1400 audit(1729160853.166:14305): avc: denied { write } for pid=8819 comm="syz.1.1654" path="socket:[35069]" dev="sockfs" ino=35069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.526527][ T8824] loop4: detected capacity change from 0 to 512 [ 196.545440][ T8824] EXT4-fs: Ignoring removed oldalloc option [ 196.595821][ T8824] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1656: Parent and EA inode have the same ino 15 [ 196.608335][ T8824] EXT4-fs (loop4): Remounting filesystem read-only [ 196.614873][ T8824] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 196.626650][ T8824] EXT4-fs (loop4): 1 orphan inode deleted [ 196.638520][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.653345][ T8824] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 196.677322][ T8824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.736456][ T8828] random: crng reseeded on system resumption [ 196.895707][ T29] audit: type=1326 audit(1729160853.566:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 196.919249][ T29] audit: type=1326 audit(1729160853.566:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 196.945291][ T29] audit: type=1326 audit(1729160853.616:14308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 196.968813][ T29] audit: type=1326 audit(1729160853.616:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 196.992353][ T29] audit: type=1326 audit(1729160853.616:14310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 197.019394][ T29] audit: type=1326 audit(1729160853.686:14311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 197.068566][ T8837] loop4: detected capacity change from 0 to 512 [ 197.076741][ T8837] EXT4-fs: Ignoring removed oldalloc option [ 197.084320][ T8837] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1661: Parent and EA inode have the same ino 15 [ 197.098572][ T8837] EXT4-fs (loop4): Remounting filesystem read-only [ 197.105129][ T8837] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 197.116977][ T8837] EXT4-fs (loop4): 1 orphan inode deleted [ 197.123057][ T8837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.137639][ T8837] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 197.144792][ T8837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.232533][ T8842] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 197.240727][ T8842] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 197.292101][ T8846] loop4: detected capacity change from 0 to 512 [ 197.298828][ T8846] EXT4-fs: Ignoring removed oldalloc option [ 197.309506][ T8846] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1665: Parent and EA inode have the same ino 15 [ 197.325874][ T8846] EXT4-fs (loop4): Remounting filesystem read-only [ 197.332553][ T8846] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 197.427497][ T8846] EXT4-fs (loop4): 1 orphan inode deleted [ 197.427828][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.445352][ T8846] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 197.515974][ T8846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.591748][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 197.616125][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 197.627410][ T8855] ip6gre3: entered allmulticast mode [ 198.210927][ T8861] loop1: detected capacity change from 0 to 512 [ 198.217885][ T8861] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 198.243855][ T8861] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.253505][ T8861] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 198.273496][ T8861] ext4_test_bit(bit=14, block=18) = 1 [ 198.278900][ T8861] is_bad_inode(inode)=0 [ 198.283048][ T8861] NEXT_ORPHAN(inode)=1023 [ 198.287468][ T8861] max_ino=32 [ 198.290658][ T8861] i_nlink=0 [ 198.303617][ T8861] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 198.330368][ T8861] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 198.351171][ T8861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 198.764715][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 199.010113][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.549031][ T8894] loop4: detected capacity change from 0 to 512 [ 199.565342][ T8894] EXT4-fs: Ignoring removed oldalloc option [ 199.582449][ T8894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.624342][ T8894] EXT4-fs (loop4): 1 truncate cleaned up [ 199.643410][ T8894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.730876][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 199.739954][ T8897] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 199.834569][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 199.854661][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.997681][ T8903] tipc: Enabling of bearer rejected, already enabled [ 200.106569][ T8908] loop1: detected capacity change from 0 to 512 [ 200.206093][ T8908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.256307][ T8908] EXT4-fs (loop1): 1 truncate cleaned up [ 200.262420][ T8908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.281336][ T8914] loop4: detected capacity change from 0 to 512 [ 200.294035][ T8914] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 200.473945][ T8914] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.516712][ T8914] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 200.542234][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.543487][ T8914] ext4_test_bit(bit=14, block=18) = 1 [ 200.556636][ T8914] is_bad_inode(inode)=0 [ 200.560787][ T8914] NEXT_ORPHAN(inode)=1023 [ 200.565331][ T8914] max_ino=32 [ 200.568523][ T8914] i_nlink=0 [ 200.574274][ T8914] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 200.624779][ T8914] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 200.655146][ T8914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 200.835874][ T8923] rdma_op ffff888111f0d180 conn xmit_rdma 0000000000000000 [ 200.896472][ T8925] loop1: detected capacity change from 0 to 512 [ 200.918864][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 200.965940][ T8925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.981966][ T8925] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.002973][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.058003][ T8933] loop1: detected capacity change from 0 to 512 [ 201.074684][ T8933] EXT4-fs: Ignoring removed oldalloc option [ 201.089813][ T8935] loop2: detected capacity change from 0 to 2048 [ 201.103847][ T8933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.140197][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.149903][ T8933] EXT4-fs (loop1): 1 truncate cleaned up [ 201.153859][ T8935] loop2: p1 < > p4 [ 201.160045][ T8935] loop2: p4 size 8388608 extends beyond EOD, truncated [ 201.163771][ T8933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.221364][ T8938] tipc: Enabling of bearer rejected, failed to enable media [ 201.263642][ T8935] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.364456][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.384677][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 201.411425][ T8943] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 201.419705][ T8943] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 201.446502][ T8946] loop1: detected capacity change from 0 to 512 [ 201.463834][ T8946] EXT4-fs: Ignoring removed oldalloc option [ 201.482532][ T8946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.517162][ T8946] EXT4-fs (loop1): 1 truncate cleaned up [ 201.538763][ T8946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.610146][ T8950] loop2: detected capacity change from 0 to 512 [ 201.637134][ T7320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.682182][ T8950] EXT4-fs: Ignoring removed oldalloc option [ 201.694693][ T8950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.765018][ T8950] EXT4-fs (loop2): 1 truncate cleaned up [ 201.771288][ T8950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.076799][ T8594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.462294][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 202.554896][ T8958] ip6gre4: entered allmulticast mode [ 202.976778][ T8970] loop1: detected capacity change from 0 to 512 [ 202.995313][ T8970] EXT4-fs: Ignoring removed oldalloc option [ 203.006229][ T8970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1705: Parent and EA inode have the same ino 15 [ 203.035272][ T8970] EXT4-fs (loop1): Remounting filesystem read-only [ 203.041803][ T8970] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 203.117405][ T8970] EXT4-fs (loop1): 1 orphan inode deleted [ 203.143657][ T8970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.197388][ T8970] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 203.218608][ T8970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.219623][ T8976] loop4: detected capacity change from 0 to 512 [ 203.266855][ T8976] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.315561][ T8976] EXT4-fs (loop4): 1 truncate cleaned up [ 203.348124][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 203.364722][ T8976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.395841][ T8981] ip6gre5: entered allmulticast mode [ 203.431807][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.885436][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 203.885451][ T29] audit: type=1400 audit(1729160860.556:14353): avc: denied { setopt } for pid=8983 comm="syz.2.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.302360][ T29] audit: type=1326 audit(1729160860.966:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.325936][ T29] audit: type=1326 audit(1729160860.966:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.373028][ T8998] loop2: detected capacity change from 0 to 128 [ 204.407877][ T9002] random: crng reseeded on system resumption [ 204.463792][ T29] audit: type=1326 audit(1729160860.986:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.487372][ T29] audit: type=1326 audit(1729160860.996:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.510920][ T29] audit: type=1326 audit(1729160860.996:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.534412][ T29] audit: type=1326 audit(1729160861.016:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.557954][ T29] audit: type=1326 audit(1729160861.016:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.581601][ T29] audit: type=1326 audit(1729160861.016:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.605138][ T29] audit: type=1326 audit(1729160861.016:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 204.737407][ T3374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.755401][ T9016] random: crng reseeded on system resumption [ 204.766368][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 204.806242][ T3374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.846423][ T9020] loop4: detected capacity change from 0 to 2048 [ 204.873925][ T9020] loop4: p1 < > p4 [ 204.878461][ T9020] loop4: p4 size 8388608 extends beyond EOD, truncated [ 204.900911][ T9022] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 204.909169][ T9022] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 204.942138][ T3374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.969620][ T8993] chnl_net:caif_netlink_parms(): no params data found [ 205.017650][ T3374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.127883][ T3374] bridge_slave_1: left allmulticast mode [ 205.133582][ T3374] bridge_slave_1: left promiscuous mode [ 205.139208][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.147491][ T3374] bridge_slave_0: left allmulticast mode [ 205.153196][ T3374] bridge_slave_0: left promiscuous mode [ 205.158915][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.204352][ T9036] vhci_hcd: invalid port number 157 [ 205.209616][ T9036] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 205.296800][ T3374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.314972][ T3374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.330051][ T3374] bond0 (unregistering): Released all slaves [ 205.365389][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 205.400272][ T9044] ip6gre5: entered allmulticast mode [ 205.483012][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 205.526718][ T9047] ip6gre1: entered allmulticast mode [ 205.604973][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.612090][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.639544][ T8993] bridge_slave_0: entered allmulticast mode [ 205.653983][ T8993] bridge_slave_0: entered promiscuous mode [ 205.674319][ T3374] tipc: Disabling bearer [ 205.679546][ T3374] tipc: Left network mode [ 205.679569][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.692478][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.740034][ T8993] bridge_slave_1: entered allmulticast mode [ 205.751273][ T9057] loop2: detected capacity change from 0 to 2048 [ 205.760550][ T8993] bridge_slave_1: entered promiscuous mode [ 205.778951][ T3374] hsr_slave_0: left promiscuous mode [ 205.785582][ T3374] hsr_slave_1: left promiscuous mode [ 205.795919][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.803315][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.822419][ T9057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.842395][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.849866][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.912917][ T3374] veth1_macvtap: left promiscuous mode [ 205.918451][ T3374] veth0_macvtap: left promiscuous mode [ 205.924035][ T3374] veth1_vlan: left promiscuous mode [ 205.929253][ T3374] veth0_vlan: left promiscuous mode [ 205.951017][ T9061] random: crng reseeded on system resumption [ 206.103940][ T8594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.228799][ T3374] team0 (unregistering): Port device team_slave_1 removed [ 206.252977][ T9075] random: crng reseeded on system resumption [ 206.260036][ T3374] team0 (unregistering): Port device team_slave_0 removed [ 206.346650][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.379690][ T9078] bond0: entered promiscuous mode [ 206.384889][ T9078] bond0: entered allmulticast mode [ 206.395972][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.416116][ T9078] bond0 (unregistering): Released all slaves [ 206.427026][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.450590][ T8993] team0: Port device team_slave_0 added [ 206.483014][ T8993] team0: Port device team_slave_1 added [ 206.539955][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.547049][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.573153][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.586964][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.589600][ T9090] loop1: detected capacity change from 0 to 512 [ 206.593934][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.593960][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.646575][ T9090] EXT4-fs: Ignoring removed bh option [ 206.660120][ T8993] hsr_slave_0: entered promiscuous mode [ 206.670191][ T8993] hsr_slave_1: entered promiscuous mode [ 206.676348][ T8993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.676343][ T9090] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1743: invalid indirect mapped block 32768 (level 0) [ 206.686650][ T8993] Cannot create hsr debugfs directory [ 206.702908][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 206.722541][ T9090] EXT4-fs (loop1): Remounting filesystem read-only [ 206.734020][ T9090] EXT4-fs (loop1): 1 truncate cleaned up [ 206.740194][ T9090] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 206.775255][ T9091] ip6gre6: entered allmulticast mode [ 206.797209][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 206.869809][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'. [ 206.978049][ T9066] chnl_net:caif_netlink_parms(): no params data found [ 207.092873][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.100068][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.109547][ T9066] bridge_slave_0: entered allmulticast mode [ 207.116062][ T9066] bridge_slave_0: entered promiscuous mode [ 207.130518][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.137737][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.147394][ T9066] bridge_slave_1: entered allmulticast mode [ 207.154389][ T9066] bridge_slave_1: entered promiscuous mode [ 207.178952][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.199939][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.241612][ T9066] team0: Port device team_slave_0 added [ 207.256174][ T9066] team0: Port device team_slave_1 added [ 207.279996][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.287023][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.312977][ T9066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.364495][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.371439][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.397404][ T9066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.471678][ T9066] hsr_slave_0: entered promiscuous mode [ 207.485492][ T9066] hsr_slave_1: entered promiscuous mode [ 207.503561][ T9066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.511127][ T9066] Cannot create hsr debugfs directory [ 207.537319][ T9119] bond1: entered promiscuous mode [ 207.542421][ T9119] bond1: entered allmulticast mode [ 207.563525][ T9119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.591134][ T9119] bond1 (unregistering): Released all slaves [ 207.637618][ T8993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.671593][ T8993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.685127][ T8993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.715744][ T8993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.797744][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.815651][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.842233][ T9066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.851117][ T9128] loop4: detected capacity change from 0 to 512 [ 207.859198][ T9128] EXT4-fs: Ignoring removed oldalloc option [ 207.862258][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.866549][ T9128] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1753: Parent and EA inode have the same ino 15 [ 207.872234][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.884939][ T9128] EXT4-fs (loop4): Remounting filesystem read-only [ 207.898170][ T9128] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 207.908381][ T9128] EXT4-fs (loop4): 1 orphan inode deleted [ 207.914573][ T9128] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 207.922116][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.929235][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.947170][ T9066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.999757][ T9066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.020257][ T9137] random: crng reseeded on system resumption [ 208.043366][ T9141] loop1: detected capacity change from 0 to 512 [ 208.051194][ T9141] EXT4-fs: Ignoring removed oldalloc option [ 208.059462][ T9141] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1754: Parent and EA inode have the same ino 15 [ 208.073064][ T9141] EXT4-fs (loop1): Remounting filesystem read-only [ 208.079607][ T9141] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 208.091039][ T9141] EXT4-fs (loop1): 1 orphan inode deleted [ 208.100536][ T9066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.112131][ T9141] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 208.139167][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.157145][ T9150] loop1: detected capacity change from 0 to 2048 [ 208.180997][ T9066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.190512][ T9066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.201825][ T9066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.215513][ T9150] loop1: p1 < > p4 [ 208.215876][ T9066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.234395][ T9150] loop1: p4 size 8388608 extends beyond EOD, truncated [ 208.323033][ T8993] veth0_vlan: entered promiscuous mode [ 208.336944][ T9164] loop1: detected capacity change from 0 to 2048 [ 208.352113][ T8993] veth1_vlan: entered promiscuous mode [ 208.384128][ T9164] loop1: p1 < > p4 [ 208.388458][ T9164] loop1: p4 size 8388608 extends beyond EOD, truncated [ 208.410979][ T8993] veth0_macvtap: entered promiscuous mode [ 208.428740][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.442681][ T8993] veth1_macvtap: entered promiscuous mode [ 208.466897][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.481712][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.492273][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.502153][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.512583][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.522446][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.532948][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.542795][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.553305][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.563134][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.573609][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.583516][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.594018][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.603832][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.611170][ T9174] random: crng reseeded on system resumption [ 208.614233][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.614262][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.640578][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.650454][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.660956][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.674142][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.682610][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.693067][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.703018][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.713503][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.723298][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.733734][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.743546][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.753984][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.763860][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.774284][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.784179][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.794608][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.804417][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.814907][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.824789][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.835273][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.845092][ T8993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.855513][ T8993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.870151][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.891286][ T8993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.900089][ T8993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.909040][ T8993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.917787][ T8993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.928647][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.931480][ T9178] loop1: detected capacity change from 0 to 512 [ 208.935715][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.942123][ T9178] EXT4-fs: Ignoring removed oldalloc option [ 208.952336][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.962150][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.966789][ T9178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1770: Parent and EA inode have the same ino 15 [ 208.982868][ T9178] EXT4-fs (loop1): Remounting filesystem read-only [ 208.987470][ T9066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.989397][ T9178] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 208.999705][ T9066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.020170][ T9178] EXT4-fs (loop1): 1 orphan inode deleted [ 209.027191][ T9178] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 209.092805][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.108587][ T9188] loop0: detected capacity change from 0 to 512 [ 209.123744][ T9188] EXT4-fs: Ignoring removed oldalloc option [ 209.145967][ T9188] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.166011][ T9188] EXT4-fs (loop0): 1 truncate cleaned up [ 209.192169][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 209.192182][ T29] audit: type=1326 audit(1729160865.856:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.221965][ T29] audit: type=1326 audit(1729160865.856:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.228379][ T9066] veth0_vlan: entered promiscuous mode [ 209.245535][ T29] audit: type=1326 audit(1729160865.856:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.254419][ T9066] veth1_vlan: entered promiscuous mode [ 209.274309][ T29] audit: type=1326 audit(1729160865.856:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.300585][ T9066] veth0_macvtap: entered promiscuous mode [ 209.303220][ T29] audit: type=1326 audit(1729160865.856:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.315838][ T9066] veth1_macvtap: entered promiscuous mode [ 209.332511][ T29] audit: type=1326 audit(1729160865.856:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.345922][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.361599][ T29] audit: type=1326 audit(1729160865.856:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.371949][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.371962][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.371973][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.371982][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.395543][ T29] audit: type=1326 audit(1729160865.856:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.395636][ T29] audit: type=1326 audit(1729160865.856:14471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.395786][ T29] audit: type=1326 audit(1729160865.856:14472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.4.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757efbdff9 code=0x7ffc0000 [ 209.507062][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.516916][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.527894][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.537823][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.548241][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.558036][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.568440][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.578330][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.588737][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.598535][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.608936][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.618886][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.629284][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.639074][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.649523][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.661382][ T9066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.669754][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.680207][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.690020][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.700624][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.710477][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.720995][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.730840][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.741274][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.751092][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.761524][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.771369][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.781787][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.791654][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.802069][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.811967][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.822379][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.832181][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.842588][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.852400][ T9066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.862813][ T9066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.877242][ T9066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.890315][ T9066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.899160][ T9066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.907903][ T9066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.916671][ T9066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.939412][ T9218] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 210.025982][ T9233] loop1: detected capacity change from 0 to 512 [ 210.034678][ T9240] netlink: 'syz.0.1785': attribute type 15 has an invalid length. [ 210.044989][ T9233] EXT4-fs (loop1): 1 truncate cleaned up [ 210.135320][ T9243] loop3: detected capacity change from 0 to 512 [ 210.143613][ T9243] EXT4-fs: Ignoring removed oldalloc option [ 210.159877][ T9243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1735: Parent and EA inode have the same ino 15 [ 210.180204][ T9243] EXT4-fs (loop3): Remounting filesystem read-only [ 210.186778][ T9243] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 210.209754][ T9250] loop0: detected capacity change from 0 to 512 [ 210.216886][ T9243] EXT4-fs (loop3): 1 orphan inode deleted [ 210.223333][ T9243] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 210.241207][ T9250] EXT4-fs (loop0): 1 truncate cleaned up [ 211.127714][ T9264] wireguard0: entered promiscuous mode [ 211.133218][ T9264] wireguard0: entered allmulticast mode [ 211.236906][ T9277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.266835][ T9279] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 211.275062][ T9279] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 211.316162][ T9281] loop2: detected capacity change from 0 to 512 [ 211.335876][ T9281] EXT4-fs: Ignoring removed oldalloc option [ 211.362858][ T9281] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1798: Parent and EA inode have the same ino 15 [ 211.384011][ T9281] EXT4-fs (loop2): Remounting filesystem read-only [ 211.390532][ T9281] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 211.419341][ T9281] EXT4-fs (loop2): 1 orphan inode deleted [ 211.450929][ T9281] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 211.462516][ T9292] loop1: detected capacity change from 0 to 512 [ 211.508274][ T9292] EXT4-fs (loop1): 1 truncate cleaned up [ 211.610578][ T9288] loop4: detected capacity change from 0 to 512 [ 211.664400][ T9288] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 1: comm syz.4.1801: invalid block [ 211.899741][ T9288] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1801: couldn't read orphan inode 11 (err -117) [ 212.036736][ T9307] loop2: detected capacity change from 0 to 512 [ 212.053283][ T9307] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 212.070542][ T9307] EXT4-fs (loop2): orphan cleanup on readonly fs [ 212.087212][ T9307] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 212.118063][ T9307] ext4_test_bit(bit=14, block=18) = 1 [ 212.123498][ T9307] is_bad_inode(inode)=0 [ 212.127655][ T9307] NEXT_ORPHAN(inode)=1023 [ 212.132030][ T9307] max_ino=32 [ 212.135254][ T9307] i_nlink=0 [ 212.156298][ T9314] loop3: detected capacity change from 0 to 2048 [ 212.164953][ T9307] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 212.180261][ T9307] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 212.194109][ T9314] loop3: p1 < > p4 [ 212.198571][ T9314] loop3: p4 size 8388608 extends beyond EOD, truncated [ 212.227271][ T9316] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 212.258694][ T9318] netlink: 'syz.3.1812': attribute type 4 has an invalid length. [ 212.284364][ T9320] wireguard0: entered promiscuous mode [ 212.289857][ T9320] wireguard0: entered allmulticast mode [ 212.418810][ T9337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 212.420447][ T9333] bond0: entered promiscuous mode [ 212.433757][ T9333] bond0: entered allmulticast mode [ 212.442798][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.469860][ T9333] bond0 (unregistering): Released all slaves [ 212.548319][ T9348] syz.0.1824[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.548366][ T9348] syz.0.1824[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.573541][ T9348] syz.0.1824[9348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.591669][ T9351] loop1: detected capacity change from 0 to 512 [ 212.612665][ T9351] EXT4-fs: Ignoring removed oldalloc option [ 212.630973][ T9351] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.650167][ T9351] EXT4-fs (loop1): 1 truncate cleaned up [ 212.676004][ T9358] loop0: detected capacity change from 0 to 2048 [ 212.739703][ T9358] random: crng reseeded on system resumption [ 212.749850][ T9362] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 212.916791][ T9376] loop1: detected capacity change from 0 to 512 [ 212.923506][ T9376] EXT4-fs: Ignoring removed oldalloc option [ 212.932120][ T9376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.947156][ T9376] EXT4-fs (loop1): 1 truncate cleaned up [ 212.949368][ T9378] loop2: detected capacity change from 0 to 512 [ 212.961750][ T9378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.978716][ T9378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 212.993421][ T9378] EXT4-fs (loop2): 1 truncate cleaned up [ 213.178908][ T9391] loop1: detected capacity change from 0 to 1024 [ 213.185779][ T9391] journal_path: Lookup failure for './file0' [ 213.191793][ T9391] EXT4-fs: error: could not find journal device path [ 213.391511][ T9397] loop3: detected capacity change from 0 to 2048 [ 213.423817][ T9397] loop3: p1 < > p4 [ 213.428310][ T9397] loop3: p4 size 8388608 extends beyond EOD, truncated [ 213.479623][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 213.489740][ T9407] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 213.758001][ T9424] loop2: detected capacity change from 0 to 2048 [ 213.807610][ T9424] loop2: p1 < > p4 [ 213.813197][ T9424] loop2: p4 size 8388608 extends beyond EOD, truncated [ 213.884354][ T9437] loop2: detected capacity change from 0 to 512 [ 213.895476][ T9437] EXT4-fs: Ignoring removed oldalloc option [ 213.902549][ T9437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.920760][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 213.930171][ T9441] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 213.940534][ T9437] EXT4-fs (loop2): 1 truncate cleaned up [ 214.063385][ T9450] loop1: detected capacity change from 0 to 2048 [ 214.079666][ T9456] loop0: detected capacity change from 0 to 512 [ 214.087536][ T9450] loop1: p1 < > p4 [ 214.091990][ T9450] loop1: p4 size 8388608 extends beyond EOD, truncated [ 214.100905][ T9456] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 214.109830][ T9456] EXT4-fs (loop0): orphan cleanup on readonly fs [ 214.116616][ T9456] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm : bad orphan inode 15 [ 214.126177][ T9456] ext4_test_bit(bit=14, block=18) = 1 [ 214.131570][ T9456] is_bad_inode(inode)=0 [ 214.135823][ T9456] NEXT_ORPHAN(inode)=1023 [ 214.140162][ T9456] max_ino=32 [ 214.143362][ T9456] i_nlink=0 [ 214.146958][ T9456] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm : corrupted xattr block 19: e_value size too large [ 214.162070][ T9456] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 214.207026][ T9467] loop1: detected capacity change from 0 to 512 [ 214.212612][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 214.212624][ T29] audit: type=1326 audit(1729160870.876:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.243152][ T29] audit: type=1326 audit(1729160870.876:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.266854][ T29] audit: type=1326 audit(1729160870.876:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.270238][ T9467] EXT4-fs (loop1): 1 truncate cleaned up [ 214.290384][ T29] audit: type=1326 audit(1729160870.876:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.319525][ T29] audit: type=1326 audit(1729160870.876:14823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.343153][ T29] audit: type=1326 audit(1729160870.876:14824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.366660][ T29] audit: type=1326 audit(1729160870.876:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.390229][ T29] audit: type=1326 audit(1729160870.876:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.414028][ T29] audit: type=1326 audit(1729160870.876:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.437852][ T29] audit: type=1326 audit(1729160870.876:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f036865dff9 code=0x7ffc0000 [ 214.482776][ T9475] loop3: detected capacity change from 0 to 512 [ 214.499655][ T9475] EXT4-fs: Ignoring removed oldalloc option [ 214.506245][ T9475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.556513][ T9478] loop4: detected capacity change from 0 to 1024 [ 214.558379][ T9475] EXT4-fs (loop3): 1 truncate cleaned up [ 214.567126][ T9481] loop2: detected capacity change from 0 to 128 [ 214.574959][ T9478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.602832][ T9478] EXT4-fs (loop4): stripe (2048) is not aligned with cluster size (4096), stripe is disabled [ 214.707226][ T9478] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 214.715241][ T9478] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 214.800808][ T9490] loop3: detected capacity change from 0 to 2048 [ 214.840205][ T9478] System zones: 0-1, 3-12 [ 214.859470][ T9478] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.889672][ T9478] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.1878: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.924342][ T9490] loop3: p1 < > p4 [ 214.951617][ T9478] EXT4-fs (loop4): 1 orphan inode deleted [ 215.003813][ T9490] loop3: p4 size 8388608 extends beyond EOD, truncated [ 215.507876][ T9510] loop0: detected capacity change from 0 to 1768 [ 215.547053][ T9510] 9pnet_fd: Insufficient options for proto=fd [ 215.559345][ T9517] loop1: detected capacity change from 0 to 128 [ 215.782522][ T9530] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 215.868466][ T9532] loop4: detected capacity change from 0 to 512 [ 215.875291][ T9532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.885261][ T9532] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 393219)! [ 215.896145][ T9532] EXT4-fs (loop4): group descriptors corrupted! [ 215.908252][ T9532] loop4: detected capacity change from 0 to 128 [ 216.090186][ T9539] loop3: detected capacity change from 0 to 2048 [ 216.264356][ T9539] loop3: detected capacity change from 2048 to 0 [ 216.271070][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.271070][ T9539] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 216.284481][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.284481][ T9539] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 216.297830][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.297830][ T9539] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 216.311276][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.311276][ T9539] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 216.324672][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.324672][ T9539] loop3: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 216.337971][ T9539] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.1900: unable to read itable block [ 216.350750][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.350750][ T9539] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 216.363987][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.372256][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.379125][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.379125][ T9539] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 216.392516][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.392516][ T9539] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 216.402927][ T9545] netlink: 'syz.0.1901': attribute type 4 has an invalid length. [ 216.405963][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.405963][ T9539] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 216.427053][ T9539] syz.3.1900: attempt to access beyond end of device [ 216.427053][ T9539] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 216.440402][ T9539] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.1900: unable to read itable block [ 216.453299][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.461596][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.468400][ T9539] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 216.477156][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.485528][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.492302][ T9539] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.1900: mark_inode_dirty error [ 216.503719][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.511977][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.518913][ T9539] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.1900: unable to read itable block [ 216.531647][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.539945][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.546733][ T9539] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 216.555511][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.565165][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.572126][ T9539] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.1900: mark_inode_dirty error [ 216.586435][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.595281][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.607270][ T9539] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.1900: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 216.621726][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.630334][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.645191][ T9539] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.1900: unable to read itable block [ 216.660925][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.672325][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.679179][ T9539] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 216.691372][ T9539] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 216.699671][ T9539] EXT4-fs (loop3): I/O error while writing superblock [ 216.736509][ T9066] EXT4-fs unmount: 43 callbacks suppressed [ 216.987050][ T9559] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 216.994893][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1907'. [ 217.037124][ T9559] team0: entered promiscuous mode [ 217.042192][ T9559] team_slave_0: entered promiscuous mode [ 217.047954][ T9559] team_slave_1: entered promiscuous mode [ 217.053655][ T9559] team0: entered allmulticast mode [ 217.058767][ T9559] team_slave_0: entered allmulticast mode [ 217.064516][ T9559] team_slave_1: entered allmulticast mode [ 217.118292][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 217.128263][ T9565] netlink: 'syz.4.1910': attribute type 1 has an invalid length. [ 217.185501][ T9559] bridge0: port 3(team0) entered blocking state [ 217.191812][ T9559] bridge0: port 3(team0) entered disabled state [ 217.249362][ T9559] bridge0: port 3(team0) entered blocking state [ 217.255777][ T9559] bridge0: port 3(team0) entered forwarding state [ 217.341718][ T3374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.416953][ T3374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.434063][ T9576] netlink: 'syz.0.1913': attribute type 4 has an invalid length. [ 217.517772][ T3374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.584241][ T3374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.653024][ T9587] loop4: detected capacity change from 0 to 512 [ 217.702215][ T9587] EXT4-fs (loop4): 1 truncate cleaned up [ 217.708249][ T9587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.831835][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 217.848280][ T9585] veth0_to_bridge: entered promiscuous mode [ 217.900207][ T3374] bridge_slave_1: left allmulticast mode [ 217.905881][ T3374] bridge_slave_1: left promiscuous mode [ 217.911565][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.084614][ T3374] bridge_slave_0: left allmulticast mode [ 218.090321][ T3374] bridge_slave_0: left promiscuous mode [ 218.096121][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.125247][ T9597] loop0: detected capacity change from 0 to 512 [ 218.166116][ T9597] EXT4-fs: Ignoring removed oldalloc option [ 218.196133][ T9597] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1918: Parent and EA inode have the same ino 15 [ 218.240121][ T9597] EXT4-fs (loop0): Remounting filesystem read-only [ 218.246836][ T9597] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 218.273537][ T9597] EXT4-fs (loop0): 1 orphan inode deleted [ 218.279635][ T9597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.291705][ T9597] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 218.308848][ T9597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.361685][ T3374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.374975][ T3374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.415478][ T3374] bond0 (unregistering): Released all slaves [ 218.441707][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 218.567959][ T3374] hsr_slave_0: left promiscuous mode [ 218.574790][ T3374] hsr_slave_1: left promiscuous mode [ 218.594381][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.603848][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.611250][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.658753][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.666257][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.696363][ T3374] veth1_macvtap: left promiscuous mode [ 218.701868][ T3374] veth0_macvtap: left promiscuous mode [ 218.707449][ T3374] veth1_vlan: left promiscuous mode [ 218.712667][ T3374] veth0_vlan: left promiscuous mode [ 222.480610][ T3374] team0 (unregistering): Port device team_slave_1 removed [ 222.494170][ T3374] team0 (unregistering): Port device team_slave_0 removed [ 222.713495][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 222.726567][ T9602] ip6gre1: entered allmulticast mode [ 222.793881][ T9606] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 222.802052][ T9606] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 223.113898][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.120974][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.223867][ T9570] bridge_slave_0: entered allmulticast mode [ 223.230321][ T9570] bridge_slave_0: entered promiscuous mode [ 223.252594][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.259781][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.286250][ T9570] bridge_slave_1: entered allmulticast mode [ 223.302888][ T9570] bridge_slave_1: entered promiscuous mode [ 223.348873][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.359959][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.407712][ T9570] team0: Port device team_slave_0 added [ 223.414506][ T9570] team0: Port device team_slave_1 added [ 223.456077][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1925'. [ 223.467174][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.474136][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.500278][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.514745][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.521750][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.547919][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.578400][ T9570] hsr_slave_0: entered promiscuous mode [ 223.593812][ T9570] hsr_slave_1: entered promiscuous mode [ 223.600015][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.604328][ T9620] FAULT_INJECTION: forcing a failure. [ 223.604328][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.609083][ T9570] Cannot create hsr debugfs directory [ 223.620966][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.4.1926 Tainted: G W 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 223.638165][ T9620] Tainted: [W]=WARN [ 223.641959][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.652063][ T9620] Call Trace: [ 223.655338][ T9620] [ 223.658267][ T9620] dump_stack_lvl+0xf2/0x150 [ 223.662891][ T9620] dump_stack+0x15/0x20 [ 223.667049][ T9620] should_fail_ex+0x223/0x230 [ 223.671754][ T9620] should_fail+0xb/0x10 [ 223.675918][ T9620] should_fail_usercopy+0x1a/0x20 [ 223.680954][ T9620] _copy_from_user+0x1e/0xd0 [ 223.685549][ T9620] move_addr_to_kernel+0x82/0x120 [ 223.690648][ T9620] __sys_connect+0x74/0x1b0 [ 223.695183][ T9620] __x64_sys_connect+0x41/0x50 [ 223.700003][ T9620] x64_sys_call+0x2220/0x2d60 [ 223.704688][ T9620] do_syscall_64+0xc9/0x1c0 [ 223.709198][ T9620] ? clear_bhb_loop+0x55/0xb0 [ 223.713949][ T9620] ? clear_bhb_loop+0x55/0xb0 [ 223.718650][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.724558][ T9620] RIP: 0033:0x7f757efbdff9 [ 223.728967][ T9620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.748632][ T9620] RSP: 002b:00007f757dc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 223.757037][ T9620] RAX: ffffffffffffffda RBX: 00007f757f175f80 RCX: 00007f757efbdff9 [ 223.764999][ T9620] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000006 [ 223.772961][ T9620] RBP: 00007f757dc37090 R08: 0000000000000000 R09: 0000000000000000 [ 223.780924][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.788932][ T9620] R13: 0000000000000000 R14: 00007f757f175f80 R15: 00007ffd51195618 [ 223.796936][ T9620] [ 223.842485][ T9620] loop4: detected capacity change from 0 to 4096 [ 223.944256][ T9620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.974190][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.086179][ T9628] loop4: detected capacity change from 0 to 2048 [ 224.106174][ T9622] loop0: detected capacity change from 0 to 512 [ 224.112621][ T9622] EXT4-fs: Ignoring removed oldalloc option [ 224.125667][ T9622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.238166][ T9628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.251911][ T9622] EXT4-fs (loop0): 1 truncate cleaned up [ 224.258406][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 224.258419][ T29] audit: type=1400 audit(1729160880.926:15085): avc: denied { execute } for pid=9627 comm="syz.4.1928" path="/168/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 224.287891][ T9622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.365812][ T8993] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.397142][ T9570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.435215][ T9570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.459616][ T9570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.495163][ T9570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.533316][ T29] audit: type=1326 audit(1729160881.196:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.568381][ T29] audit: type=1326 audit(1729160881.226:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.592043][ T29] audit: type=1326 audit(1729160881.226:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.615591][ T29] audit: type=1326 audit(1729160881.226:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.628460][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.639035][ T29] audit: type=1326 audit(1729160881.226:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.639063][ T29] audit: type=1326 audit(1729160881.226:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.685943][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.692570][ T29] audit: type=1326 audit(1729160881.226:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.720359][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.722556][ T29] audit: type=1326 audit(1729160881.226:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.729609][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.752985][ T29] audit: type=1326 audit(1729160881.226:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39978dff9 code=0x7ffc0000 [ 224.853837][ T3374] ================================================================== [ 224.861924][ T3374] BUG: KCSAN: data-race in __queue_delayed_work / kvfree_call_rcu [ 224.869744][ T3374] [ 224.872062][ T3374] read to 0xffff888237d1cce8 of 8 bytes by task 7320 on cpu 1: [ 224.879605][ T3374] kvfree_call_rcu+0x3b8/0x510 [ 224.884371][ T3374] kernfs_unlink_open_file+0x205/0x220 [ 224.889840][ T3374] kernfs_fop_release+0x167/0x1b0 [ 224.894870][ T3374] __fput+0x17a/0x6d0 [ 224.898853][ T3374] __fput_sync+0x43/0x60 [ 224.903097][ T3374] __se_sys_close+0xf9/0x1a0 [ 224.907692][ T3374] __x64_sys_close+0x1f/0x30 [ 224.912297][ T3374] x64_sys_call+0x25cb/0x2d60 [ 224.916976][ T3374] do_syscall_64+0xc9/0x1c0 [ 224.921483][ T3374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.927392][ T3374] [ 224.929774][ T3374] write to 0xffff888237d1cce8 of 8 bytes by task 3374 on cpu 0: [ 224.937412][ T3374] __queue_delayed_work+0xc8/0x1a0 [ 224.942534][ T3374] queue_delayed_work_on+0xdf/0x190 [ 224.947741][ T3374] kfree_rcu_monitor+0x5e8/0x660 [ 224.952670][ T3374] process_scheduled_works+0x483/0x9a0 [ 224.958141][ T3374] worker_thread+0x51d/0x6f0 [ 224.962736][ T3374] kthread+0x1d1/0x210 [ 224.966813][ T3374] ret_from_fork+0x4b/0x60 [ 224.971233][ T3374] ret_from_fork_asm+0x1a/0x30 [ 224.976002][ T3374] [ 224.978319][ T3374] Reported by Kernel Concurrency Sanitizer on: [ 224.984465][ T3374] CPU: 0 UID: 0 PID: 3374 Comm: kworker/u8:7 Tainted: G W 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 224.996797][ T3374] Tainted: [W]=WARN [ 225.000595][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.010648][ T3374] Workqueue: events_unbound kfree_rcu_monitor [ 225.016723][ T3374] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.187665][ T7766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.229470][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.236525][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.443063][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.497142][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.556736][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.637489][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.747799][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.836572][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.887631][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.936335][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.995247][ T28] bridge0: port 3(team0) entered disabled state [ 226.002074][ T28] bridge_slave_1: left allmulticast mode [ 226.007713][ T28] bridge_slave_1: left promiscuous mode [ 226.013304][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.021134][ T28] bridge_slave_0: left allmulticast mode [ 226.026790][ T28] bridge_slave_0: left promiscuous mode [ 226.032405][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.040235][ T28] bridge_slave_1: left allmulticast mode [ 226.045878][ T28] bridge_slave_1: left promiscuous mode [ 226.051559][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.059288][ T28] bridge_slave_0: left allmulticast mode [ 226.064969][ T28] bridge_slave_0: left promiscuous mode [ 226.070653][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.375483][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.386021][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.396456][ T28] bond0 (unregistering): Released all slaves [ 226.405559][ T28] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.415371][ T28] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.425487][ T28] @ (unregistering): Released all slaves [ 226.479034][ T28] tipc: Disabling bearer [ 226.484324][ T28] tipc: Left network mode [ 226.492469][ T28] hsr_slave_0: left promiscuous mode [ 226.498114][ T28] hsr_slave_1: left promiscuous mode [ 226.504014][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.511491][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.519004][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.526454][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.535408][ T28] hsr_slave_0: left promiscuous mode [ 226.540916][ T28] hsr_slave_1: left promiscuous mode [ 226.546559][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.553957][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.561454][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.568987][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.581194][ T28] veth0_to_bridge: left promiscuous mode [ 226.586912][ T28] veth1_macvtap: left promiscuous mode [ 226.592366][ T28] veth0_macvtap: left promiscuous mode [ 226.597932][ T28] veth1_vlan: left promiscuous mode [ 226.603166][ T28] veth0_vlan: left promiscuous mode [ 226.608758][ T28] veth1_macvtap: left promiscuous mode [ 226.614300][ T28] veth0_macvtap: left promiscuous mode [ 226.619829][ T28] veth1_vlan: left promiscuous mode [ 226.625041][ T28] veth0_vlan: left promiscuous mode [ 226.745958][ T28] team_slave_1 (unregistering): left promiscuous mode [ 226.752777][ T28] team_slave_1 (unregistering): left allmulticast mode [ 226.760428][ T28] team0 (unregistering): Port device team_slave_1 removed [ 226.769915][ T28] team_slave_0 (unregistering): left promiscuous mode [ 226.776684][ T28] team_slave_0 (unregistering): left allmulticast mode [ 226.784111][ T28] team0 (unregistering): Port device team_slave_0 removed [ 227.647064][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.706867][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.756196][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.826781][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.885537][ T28] bridge_slave_1: left allmulticast mode [ 227.891163][ T28] bridge_slave_1: left promiscuous mode [ 227.896871][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.904758][ T28] bridge_slave_0: left allmulticast mode [ 227.910386][ T28] bridge_slave_0: left promiscuous mode [ 227.916050][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.924107][ T28] bridge_slave_1: left allmulticast mode [ 227.929735][ T28] bridge_slave_1: left promiscuous mode [ 227.935501][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.943284][ T28] bridge_slave_0: left allmulticast mode [ 227.948931][ T28] bridge_slave_0: left promiscuous mode [ 227.954618][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.255831][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.266111][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.276144][ T28] bond0 (unregistering): Released all slaves [ 228.284962][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.295297][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.305614][ T28] bond0 (unregistering): Released all slaves [ 228.358366][ T28] hsr_slave_0: left promiscuous mode [ 228.364071][ T28] hsr_slave_1: left promiscuous mode [ 228.369880][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.377289][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.386622][ T28] hsr_slave_0: left promiscuous mode [ 228.392171][ T28] hsr_slave_1: left promiscuous mode [ 228.397931][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.405426][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.413048][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.420591][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.430432][ T28] veth1_macvtap: left promiscuous mode [ 228.435914][ T28] veth0_macvtap: left promiscuous mode [ 228.441430][ T28] veth1_vlan: left promiscuous mode [ 228.446635][ T28] veth0_vlan: left promiscuous mode [ 228.541892][ T28] team0 (unregistering): Port device team_slave_1 removed [ 228.551717][ T28] team0 (unregistering): Port device team_slave_0 removed [ 228.615258][ T28] team0 (unregistering): Port device team_slave_1 removed [ 228.626495][ T28] team0 (unregistering): Port device team_slave_0 removed [ 229.053175][ T28] IPVS: stop unused estimator thread 0...