last executing test programs: 14.787087792s ago: executing program 4 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 14.747596236s ago: executing program 4 (id=225): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket(0x2, 0x3, 0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r1, 0xffffffffffffffff, 0x0) 14.667616962s ago: executing program 4 (id=227): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffff7, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 14.534513923s ago: executing program 4 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f00000002c0), &(0x7f0000000300)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r0, 0x3) 14.45079845s ago: executing program 4 (id=230): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13.961353042s ago: executing program 4 (id=243): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 3.866913156s ago: executing program 2 (id=389): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) 3.415899824s ago: executing program 2 (id=391): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000640)=ANY=[], 0x0, 0x571, &(0x7f0000000780)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 3.150406397s ago: executing program 2 (id=392): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.098482831s ago: executing program 2 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffc, 0x4000000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff1}, {0x0, 0xfff2}, {0x4, 0xdc2dcfa30d387875}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c0c0}, 0x4c810) 1.109561047s ago: executing program 2 (id=403): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x4031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d0e, 0x0) 1.106817057s ago: executing program 0 (id=412): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x806, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) 875.763047ms ago: executing program 0 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 860.045908ms ago: executing program 1 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 855.732409ms ago: executing program 3 (id=406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 828.870081ms ago: executing program 3 (id=407): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @multicast1, 0x0}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0), 0x3, 0x42f, &(0x7f0000000940)="$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") syz_open_dev$loop(&(0x7f00000000c0), 0x7fff, 0x40380) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$TCSETS(r1, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d22360780000004ff98023dffffffff00"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x5}) 776.971655ms ago: executing program 1 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2, 0x14, 0x0) write$P9_RLERRORu(r0, &(0x7f00000003c0)=ANY=[], 0x14) 690.610402ms ago: executing program 1 (id=409): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 690.113822ms ago: executing program 3 (id=410): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r2 = open(&(0x7f0000000040)='./file1\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x41, 0x7a00, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000050000001800"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sync() 689.582052ms ago: executing program 0 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 556.796543ms ago: executing program 0 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) 459.007812ms ago: executing program 1 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801279a756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) close(r0) 447.083263ms ago: executing program 3 (id=417): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x806, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) 434.762044ms ago: executing program 0 (id=418): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 404.233676ms ago: executing program 1 (id=419): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000640)=ANY=[], 0x0, 0x571, &(0x7f0000000780)="$eJzs3U1v09gawPHHpS0lV0Lo3iuEqgKHchetVIKTQFDE4uLrnKQHEjuyHdSuUEVTVJHCFWWkaTejbpgZaeZDsJ0PMev5MmhWs87IdtL3JAx9ScX8f9WMT+zjc55jLD9yFB8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQyy3bds6SmvGaS6o/txz49b2P3b2PrJD5A4sB/YpY8X9ybXfVjX/vbb4e/29WZtJPMzIVL6Zk+x/Xrz3+1/hYb/8BAZ+CyQMjTDw5+HFza/v1Srvdene2gYzUzcv9t1W1Z0Lf1J2qVib0ValYtO8vVkJVMTUdLofRtbpyA+1EfqDm3HmVK5UKSmeX/aZXLTs13Vv56F7etovqabahnSD0vftPs6G7aGo141WTOvHmuM6j+ER8ZiIVaaeu1Np6u1UYNoC4Uu5zKuWHVcrb+Xwul8/nig9LDx/Z9viRFfYhktSIT6RejbM+aXHRndalGzixsW7+l5oY8aQpS6KO/XOlLIH4Uu+zvWv+v93CfT2w3938PzW1m+Vv7G2eliT/30o/3eqX//vEcn5/m7Il2/JaVqQtbWnJu9HFMnnaR0PGhrdYFS2eGAk/PhEjdXGSNSpeI74oKUlRimLLC1mUioSipCJGaqIllGUJJRKdnFGuBKLFkUh8CUTJnLgyL0pyUpKSFESJlqwsiy9N8aQqZXGSVtZkPTnuhUHj6FXK9a2S6Z13LckPaOlL8//+GuT/v7vTvHwDJ9Lp5X8AAAAAAPDVspJv3+P7/wm5mZQqpqbtUYcFAAAAAABOUafT6ciMWPH9v4jcFIv7fwAAAAAAvjZW8oydJSIZuZ2W1sRKHpfiSwAAAAAAAL4SyZP/t+JFMgfKbbF2p0s5dP9/aTQBAgAAAACAE/uh/xz7U90qjcvWr79LEExYO42l/1gbTrzS2eh+H3Dka4GoMm1d7TaSLIrj3U+unrG6s1/uTYKZ9vJpbdhc/9YpBCA/yZ20zp3VdLna25L2kqmYms66fu1xThzn6likl6Jv3qx/K8nwf/TqVy1ZW2+3si/ftleTWHbiVnY2uhMoHplHcUAs75P5FpJnLo4d8UTyIEa330zar90b/xNxNsbS3cf+Qp8fZDatM9ud8TZzcPxTcZ+5bL/Rd6PInXDkH+RuWufu3N10cUwU+cNRXDkURX5/FF90LD4jisKwY1E4YRQAMCprQ7KQdTTxf8FV7nyy+weZS+vMTScX1vHpA1f0neSKbg+7otsnzG6/HHkHUr8cG/f786Gs+jHe4WPffsNa3ooP4aX3G/+X65tb2/fWN1ZetV613uTzhaL9wLYf5mUiGUZ3Qe4BABxj+Dt2htawHnQupzX63FX/c/cnBVl5KW+lLauykDxtkPzi4NhWM/t+hrAg3fZnM9KRo3etmSRNpm94WRhwVzeZPOXQazc/sO7BGArn8U8BAMC5mR2Shz8n/y8Mvu8+lMsH3x1n9r2tDQAAnA0dfLIy0fdWEJjGi1yplHOiRa0C332mAlOuamW8SAfuouNVtWoEfuS7fi0uPDdlHaqw2Wj4QaQqfqAafmiWkje/q3A5jHRdhbrueJFxw0ZNO6FWru9Fjhupsgld1Wj+r2bCRR0kO4cN7ZqKcZ3I+J4K/Wbg6qxSodb7Kpqy9iJTMXHRU43A1J1gWT33a826VmUduoFpRH7aYK8v41X8oJ40mx31wQYA4ILY3Np+vdJut96dYWHUYwQAAAeRpQEAAAAAAAAAAAAAAAAAAAAAuPjO4/k/CmdeWPqt0xlpGH9cGf1B2C1MyoUI4/wKlnX6LQ+9dHx3LhcoAGfmzwAAAP//z85WvQ==") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 258.175239ms ago: executing program 3 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 249.15682ms ago: executing program 0 (id=429): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 188.863364ms ago: executing program 1 (id=421): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3, &(0x7f0000000000), 0x1, 0x614, &(0x7f0000000ac0)="$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") 128.11128ms ago: executing program 2 (id=422): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=423): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8c700, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, @perf_config_ext={0x0, 0x3}, 0x12011, 0x0, 0x7}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x3) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=ANY=[@ANYBLOB="34000000100000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f4ff"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000020000000c00000017016566001b0767a0000000002d31bb6ac5faa7119f9a61af50d0bc2eaadfb06433721a7e9780496b94173647ce9c2a7b73404cc18136af4844ccc7fd398801439581b807e429ed2d958b8ffa44bdf8c2a5e0ee69d6c1fd0bed1e83f3aef7629af5cbfadfa517c45d1782666ff45a54bc1976914dccc432e773ee355c764a1452730001cf7ce05c3443d56a31ca3443b4477e781c7c38550c25196a291754983aa611df00fc6aa0762f6ed15110317e51e6b75ab86724a25a8b198f36eaa91fddccfe9ea67f4112a0ff0f825dc6e801a1b6b2cac5928b9ad2ff261ef14f8f757d654dddcff8ae11f5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): 00-0000-0000-0000-000000000000. [ 37.159882][ T3627] EXT4-fs (loop3): Remounting filesystem read-only [ 37.219090][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.289018][ T3545] veth0_vlan: entered promiscuous mode [ 37.305526][ T3545] veth1_vlan: entered promiscuous mode [ 37.338986][ T3758] loop1: detected capacity change from 0 to 512 [ 37.348666][ T3545] veth0_macvtap: entered promiscuous mode [ 37.367258][ T3545] veth1_macvtap: entered promiscuous mode [ 37.380057][ T3765] dccp_close: ABORT with 20 bytes unread [ 37.388186][ T3758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.392116][ T3769] loop3: detected capacity change from 0 to 256 [ 37.431477][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.442118][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.450368][ T3758] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.451963][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.472817][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.482688][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.493317][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.503182][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.513669][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.524840][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.533566][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.544029][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.553926][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.564468][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.574301][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.584799][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.594659][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.605182][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.615925][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.616023][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.637941][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.646786][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.656099][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.664966][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.680363][ T3769] loop3: detected capacity change from 256 to 11 [ 37.688982][ T3780] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 37.702353][ T3782] loop1: detected capacity change from 0 to 512 [ 37.708969][ T3782] EXT4-fs: Ignoring removed bh option [ 37.715172][ T3778] syz.3.97: attempt to access beyond end of device [ 37.715172][ T3778] loop3: rw=2049, sector=12, nr_sectors = 4 limit=11 [ 37.728336][ T3778] Buffer I/O error on dev loop3, logical block 3, lost sync page write [ 37.738176][ T3671] udevd: attempt to access beyond end of device [ 37.738176][ T3671] loop3: rw=0, sector=12, nr_sectors = 4 limit=11 [ 37.750847][ T3671] Buffer I/O error on dev loop3, logical block 3, async page read [ 37.754083][ T3782] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.99: invalid block [ 37.779098][ T3778] syz.3.97: attempt to access beyond end of device [ 37.779098][ T3778] loop3: rw=0, sector=12, nr_sectors = 4 limit=11 [ 37.793170][ T3778] FAT-fs (loop3): Directory bread(block 3) failed [ 37.796207][ T3787] loop0: detected capacity change from 0 to 2048 [ 37.815063][ T3782] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.99: couldn't read orphan inode 15 (err -117) [ 37.829069][ T3782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.851157][ T3787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.884102][ T3792] syz.2.51[3792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.884291][ T3792] syz.2.51[3792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.897787][ T3792] syz.2.51[3792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.898189][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.947052][ T3794] loop4: detected capacity change from 0 to 2048 [ 37.975111][ T3787] loop0: detected capacity change from 2048 to 2047 [ 37.996613][ T3265] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /22/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 38.023799][ T3265] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 38.036181][ T3265] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 38.040360][ T3794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.070082][ T3794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.100812][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.120094][ T3808] loop2: detected capacity change from 0 to 128 [ 38.127322][ T3808] FAT-fs (loop2): Directory bread(block 162) failed [ 38.134278][ T3808] FAT-fs (loop2): Directory bread(block 163) failed [ 38.141172][ T3808] FAT-fs (loop2): Directory bread(block 164) failed [ 38.147814][ T3808] FAT-fs (loop2): Directory bread(block 165) failed [ 38.154828][ T3808] FAT-fs (loop2): Directory bread(block 166) failed [ 38.164831][ T3808] FAT-fs (loop2): Directory bread(block 167) failed [ 38.180448][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.200677][ T3808] FAT-fs (loop2): Directory bread(block 168) failed [ 38.207373][ T3808] FAT-fs (loop2): Directory bread(block 169) failed [ 38.216313][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.240548][ T3808] FAT-fs (loop2): Directory bread(block 162) failed [ 38.247267][ T3808] FAT-fs (loop2): Directory bread(block 163) failed [ 38.272092][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.292462][ T3808] syz.2.110: attempt to access beyond end of device [ 38.292462][ T3808] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 38.310564][ T3821] syz.1.117[3821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.310629][ T3821] syz.1.117[3821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.340689][ T3821] syz.1.117[3821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.372814][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.446042][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.515112][ T56] bridge_slave_1: left allmulticast mode [ 38.520901][ T56] bridge_slave_1: left promiscuous mode [ 38.526583][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.545895][ T56] bridge_slave_0: left allmulticast mode [ 38.551626][ T56] bridge_slave_0: left promiscuous mode [ 38.557303][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.683297][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.693992][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.704483][ T56] bond0 (unregistering): Released all slaves [ 38.745580][ T56] IPVS: stopping backup sync thread 3471 ... [ 38.765908][ T56] hsr_slave_0: left promiscuous mode [ 38.771862][ T56] hsr_slave_1: left promiscuous mode [ 38.777486][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.784996][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.794316][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.801930][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.812775][ T56] veth1_macvtap: left promiscuous mode [ 38.818345][ T56] veth0_macvtap: left promiscuous mode [ 38.823888][ T56] veth1_vlan: left promiscuous mode [ 38.829124][ T56] veth0_vlan: left promiscuous mode [ 38.925840][ T56] team0 (unregistering): Port device team_slave_1 removed [ 38.935882][ T56] team0 (unregistering): Port device team_slave_0 removed [ 38.982232][ T3853] netlink: 'syz.1.122': attribute type 39 has an invalid length. [ 39.001686][ T3861] loop2: detected capacity change from 0 to 512 [ 39.020079][ T3861] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 39.032064][ T3861] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 39.032792][ T3859] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 39.046584][ T3861] EXT4-fs (loop2): 1 truncate cleaned up [ 39.054925][ T3861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.108208][ T3545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.179137][ T3883] loop4: detected capacity change from 0 to 512 [ 39.185972][ T3883] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.193001][ T3883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.233494][ T3883] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.128: corrupted in-inode xattr: e_value out of bounds [ 39.247898][ T3883] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.128: couldn't read orphan inode 15 (err -117) [ 39.270486][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.286183][ T3818] chnl_net:caif_netlink_parms(): no params data found [ 39.322362][ T3824] chnl_net:caif_netlink_parms(): no params data found [ 39.399202][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.406497][ T3818] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.413703][ T3818] bridge_slave_0: entered allmulticast mode [ 39.420558][ T3818] bridge_slave_0: entered promiscuous mode [ 39.427630][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.434794][ T3818] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.442127][ T3818] bridge_slave_1: entered allmulticast mode [ 39.448589][ T3818] bridge_slave_1: entered promiscuous mode [ 39.484029][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.517150][ T3918] No such timeout policy "syz0" [ 39.577368][ T3818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.619378][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.626662][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.640897][ T3824] bridge_slave_0: entered allmulticast mode [ 39.647840][ T3824] bridge_slave_0: entered promiscuous mode [ 39.663589][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.670730][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.678089][ T3824] bridge_slave_1: entered allmulticast mode [ 39.687372][ T3824] bridge_slave_1: entered promiscuous mode [ 39.710068][ T3818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.754542][ T3824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.765013][ T3818] team0: Port device team_slave_0 added [ 39.775767][ T3824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.793824][ T3818] team0: Port device team_slave_1 added [ 39.812849][ T3942] loop2: detected capacity change from 0 to 1024 [ 39.833700][ T3942] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 64256 [ 39.855693][ T3824] team0: Port device team_slave_0 added [ 39.865107][ T3818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.872152][ T3818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.898114][ T3818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.912029][ T3818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.918989][ T3818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.945273][ T3818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.964443][ T3824] team0: Port device team_slave_1 added [ 40.009609][ T3824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.016721][ T3824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.043070][ T3824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.068501][ T3818] hsr_slave_0: entered promiscuous mode [ 40.074660][ T3818] hsr_slave_1: entered promiscuous mode [ 40.083743][ T3818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.094591][ T3962] loop1: detected capacity change from 0 to 1024 [ 40.100392][ T3818] Cannot create hsr debugfs directory [ 40.106748][ T3824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.107302][ T3962] EXT4-fs: Ignoring removed oldalloc option [ 40.113737][ T3824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.145592][ T3824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.158041][ T3967] loop4: detected capacity change from 0 to 128 [ 40.166917][ T3967] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 40.169437][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.207249][ T3967] bio_check_eod: 1 callbacks suppressed [ 40.207262][ T3967] syz.4.148: attempt to access beyond end of device [ 40.207262][ T3967] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 40.226399][ T3967] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 40.256117][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 40.265337][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 40.265349][ T29] audit: type=1400 audit(1729385377.101:569): avc: denied { bind } for pid=3961 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.294508][ T3824] hsr_slave_0: entered promiscuous mode [ 40.301798][ T3824] hsr_slave_1: entered promiscuous mode [ 40.303973][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 40.318819][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.321377][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 40.336627][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 40.345907][ T3824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.368321][ T3824] Cannot create hsr debugfs directory [ 40.392096][ T3977] serio: Serial port pts0 [ 40.392951][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.433415][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.444922][ T29] audit: type=1400 audit(1729385377.291:570): avc: denied { ioctl } for pid=3976 comm="syz.4.151" path="socket:[6221]" dev="sockfs" ino=6221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.534976][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.614236][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.723028][ T50] bridge_slave_1: left allmulticast mode [ 40.728708][ T50] bridge_slave_1: left promiscuous mode [ 40.734430][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.744131][ T50] bridge_slave_0: left allmulticast mode [ 40.749809][ T50] bridge_slave_0: left promiscuous mode [ 40.755581][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.843985][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.863440][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.874515][ T50] bond0 (unregistering): Released all slaves [ 40.909372][ T29] audit: type=1400 audit(1729385377.751:571): avc: denied { create } for pid=4014 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.939012][ T29] audit: type=1400 audit(1729385377.751:572): avc: denied { write } for pid=4014 comm="syz.2.153" name="task" dev="proc" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 40.960398][ T29] audit: type=1400 audit(1729385377.751:573): avc: denied { add_name } for pid=4014 comm="syz.2.153" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 40.981081][ T29] audit: type=1400 audit(1729385377.751:574): avc: denied { create } for pid=4014 comm="syz.2.153" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 41.001820][ T29] audit: type=1400 audit(1729385377.751:575): avc: denied { associate } for pid=4014 comm="syz.2.153" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.023359][ T29] audit: type=1400 audit(1729385377.751:576): avc: denied { connect } for pid=4014 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 41.054764][ T50] hsr_slave_0: left promiscuous mode [ 41.067833][ T50] hsr_slave_1: left promiscuous mode [ 41.075193][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.082660][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.092412][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.099932][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.111197][ T50] veth1_macvtap: left promiscuous mode [ 41.116772][ T50] veth0_macvtap: left promiscuous mode [ 41.122362][ T50] veth1_vlan: left promiscuous mode [ 41.127678][ T50] veth0_vlan: left promiscuous mode [ 41.262614][ T29] audit: type=1400 audit(1729385378.101:577): avc: denied { name_bind } for pid=4035 comm="syz.4.157" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.392595][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 41.413169][ T3818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.422111][ T29] audit: type=1400 audit(1729385378.271:578): avc: denied { ioctl } for pid=4044 comm="syz.1.160" path="socket:[6556]" dev="sockfs" ino=6556 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.432326][ T3818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.462902][ T3818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.477196][ T3818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.528707][ T4056] ALSA: seq fatal error: cannot create timer (-22) [ 41.576275][ T3818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.606701][ T3818] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.634919][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.642053][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.703364][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.710550][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.764269][ T4076] kernel profiling enabled (shift: 0) [ 41.768943][ T3824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.805131][ T3824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.840742][ T3824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.859545][ T3824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.906470][ T3818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.024359][ T3824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.073552][ T3824] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.102023][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.109197][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.133040][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.140177][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.172460][ T3818] veth0_vlan: entered promiscuous mode [ 42.195998][ T3818] veth1_vlan: entered promiscuous mode [ 42.225518][ T3824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.248071][ T4112] capability: warning: `syz.4.167' uses 32-bit capabilities (legacy support in use) [ 42.321578][ T3818] veth0_macvtap: entered promiscuous mode [ 42.330460][ T4120] syz.1.168[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.330577][ T4120] syz.1.168[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.340650][ T3818] veth1_macvtap: entered promiscuous mode [ 42.390341][ T4120] syz.1.168[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.426579][ T3824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.475330][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.485821][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.495672][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.506197][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.516118][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.526636][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.590551][ T4136] loop4: detected capacity change from 0 to 128 [ 42.842087][ T3818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.022488][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.033159][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.043051][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.053581][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.063431][ T3818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.073903][ T3818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.093380][ T3818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.124725][ T3818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.133620][ T3818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.139020][ T4164] tmpfs: Unknown parameter 'huways' [ 43.142374][ T3818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.156389][ T3818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.199073][ T3824] veth0_vlan: entered promiscuous mode [ 43.208825][ T3824] veth1_vlan: entered promiscuous mode [ 43.280139][ T3824] veth0_macvtap: entered promiscuous mode [ 43.306250][ T3824] veth1_macvtap: entered promiscuous mode [ 43.320813][ C0] ------------[ cut here ]------------ [ 43.326322][ C0] refcount_t: underflow; use-after-free. [ 43.332227][ C0] WARNING: CPU: 0 PID: 15 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 43.341487][ C0] Modules linked in: [ 43.345387][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 43.356003][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.366128][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 43.372360][ C0] Code: 72 ff ff ff e8 0b 84 71 ff 48 c7 c7 7e d7 b2 86 e8 7f 6a 8a ff c6 05 36 2d f4 04 01 90 48 c7 c7 24 a4 1b 86 e8 8b 49 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 dc 83 71 ff 48 c7 c7 7b d7 b2 86 e8 [ 43.392016][ C0] RSP: 0018:ffffc900000879e8 EFLAGS: 00010246 [ 43.398093][ C0] RAX: 51d57a1d2c0f6700 RBX: ffff8881117d6de4 RCX: ffff8881001c8000 [ 43.406103][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.414120][ C0] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 43.422140][ C0] R10: 0001ffffffffffff R11: ffff8881001c8000 R12: 0000000000000001 [ 43.430136][ C0] R13: ffff888115969e00 R14: ffff8881117d6de4 R15: 0000000000000000 [ 43.438145][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 43.447112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.453756][ C0] CR2: 00007fbe1d871440 CR3: 000000011396c000 CR4: 00000000003506f0 [ 43.461772][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.469788][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.477786][ C0] Call Trace: [ 43.481092][ C0] [ 43.484035][ C0] ? __warn+0x141/0x350 [ 43.488203][ C0] ? report_bug+0x315/0x420 [ 43.492754][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 43.498353][ C0] ? handle_bug+0x60/0x90 [ 43.502719][ C0] ? exc_invalid_op+0x1a/0x50 [ 43.507430][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 43.512519][ C0] ? __warn_printk+0x167/0x1b0 [ 43.517327][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 43.522941][ C0] ? refcount_warn_saturate+0x1c5/0x230 [ 43.528518][ C0] sk_skb_reason_drop+0xe9/0x290 [ 43.533493][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 43.538391][ C0] j1939_tp_recv+0x699/0xa80 [ 43.543026][ C0] j1939_can_recv+0x45f/0x550 [ 43.547732][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 43.552960][ C0] can_rcv_filter+0x225/0x4c0 [ 43.557669][ C0] can_receive+0x182/0x1f0 [ 43.562156][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 43.566713][ C0] can_rcv+0xe7/0x180 [ 43.570735][ C0] ? __pfx_can_rcv+0x10/0x10 [ 43.575370][ C0] __netif_receive_skb+0x123/0x280 [ 43.580526][ C0] process_backlog+0x22e/0x440 [ 43.585314][ C0] __napi_poll+0x63/0x3c0 [ 43.589675][ C0] ? net_rx_action+0x376/0x7f0 [ 43.594488][ C0] net_rx_action+0x3a1/0x7f0 [ 43.599110][ C0] handle_softirqs+0xbf/0x280 [ 43.603831][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 43.608981][ C0] run_ksoftirqd+0x1c/0x30 [ 43.613427][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 43.618415][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 43.623913][ C0] kthread+0x1d1/0x210 [ 43.628049][ C0] ? __pfx_kthread+0x10/0x10 [ 43.632665][ C0] ret_from_fork+0x4b/0x60 [ 43.637120][ C0] ? __pfx_kthread+0x10/0x10 [ 43.641751][ C0] ret_from_fork_asm+0x1a/0x30 [ 43.646576][ C0] [ 43.649616][ C0] ---[ end trace 0000000000000000 ]--- [ 43.665514][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.676090][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.685975][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.696426][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.706300][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.716789][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.726640][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.737110][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.750576][ T3824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.789386][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.799966][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.809846][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.821222][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.831521][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.842084][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.851975][ T3824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.856277][ T4191] loop2: detected capacity change from 0 to 4096 [ 43.862440][ T3824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.864319][ T3824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.888187][ T3824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.897105][ T3824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.905893][ T3824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.914679][ T3824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.950971][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.134940][ T4205] loop3: detected capacity change from 0 to 2048 [ 44.208007][ T3545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.231691][ T4205] loop3: p2 p3 p7 [ 44.289612][ T4205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.181'. [ 44.299131][ T4205] netem: invalid attributes len -16 [ 44.304434][ T4205] netem: change failed [ 44.404813][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 44.405726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115969e00: rx timeout, send abort [ 44.416703][ T4222] loop3: detected capacity change from 0 to 512 [ 44.422812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115b79600: rx timeout, send abort [ 44.433087][ T3671] udevd[3671]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 44.437368][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115969e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.449787][ T3844] udevd[3844]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 44.461145][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115b79600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.497485][ T4224] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 44.524763][ T4224] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 44.560388][ T4222] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.187: corrupted in-inode xattr: invalid ea_ino [ 44.575519][ T4222] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.187: couldn't read orphan inode 12 (err -117) [ 44.588105][ T4222] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.608343][ T4222] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.187: Directory hole found for htree leaf block 0 [ 44.633118][ T3818] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 45.076264][ T4236] loop3: detected capacity change from 0 to 2048 [ 45.158680][ T4236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.362017][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.457810][ T4248] xt_connbytes: Forcing CT accounting to be enabled [ 45.459310][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 45.459327][ T29] audit: type=1400 audit(1729385382.301:615): avc: denied { mounton } for pid=4249 comm="syz.3.196" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 45.486965][ T4248] Cannot find add_set index 0 as target [ 45.667704][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.697849][ T4255] syzkaller0: entered promiscuous mode [ 45.703384][ T4255] syzkaller0: entered allmulticast mode [ 45.722105][ T29] audit: type=1400 audit(1729385382.571:616): avc: denied { create } for pid=4259 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.790377][ T29] audit: type=1400 audit(1729385382.601:617): avc: denied { write } for pid=4259 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.809607][ T29] audit: type=1400 audit(1729385382.601:618): avc: denied { ioctl } for pid=4259 comm="syz.3.202" path="socket:[7311]" dev="sockfs" ino=7311 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.865185][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 45.906534][ T29] audit: type=1400 audit(1729385382.711:619): avc: denied { write } for pid=4262 comm="syz.4.204" name="igmp" dev="proc" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.048622][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 46.049275][ T29] audit: type=1400 audit(1729385382.891:620): avc: denied { setopt } for pid=4272 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.080143][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 46.131567][ T4279] loop4: detected capacity change from 0 to 1024 [ 46.154637][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.170338][ T4279] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.188837][ T29] audit: type=1400 audit(1729385383.031:621): avc: denied { ioctl } for pid=4278 comm="syz.4.210" path="/61/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.223036][ T4279] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 46.235449][ T4279] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.235449][ T4279] [ 46.245251][ T4279] EXT4-fs (loop4): Total free blocks count 0 [ 46.251276][ T4279] EXT4-fs (loop4): Free/Dirty block details [ 46.257200][ T4279] EXT4-fs (loop4): free_blocks=0 [ 46.262177][ T4279] EXT4-fs (loop4): dirty_blocks=0 [ 46.262592][ T29] audit: type=1400 audit(1729385383.061:622): avc: denied { unmount } for pid=3545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.267200][ T4279] EXT4-fs (loop4): Block reservation details [ 46.293127][ T4279] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 46.311206][ T29] audit: type=1400 audit(1729385383.151:623): avc: denied { read } for pid=4284 comm="syz.3.212" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.334234][ T29] audit: type=1400 audit(1729385383.151:624): avc: denied { open } for pid=4284 comm="syz.3.212" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.361730][ T4286] team0: Device ipvlan2 failed to register rx_handler [ 46.369998][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.404685][ T4292] loop3: detected capacity change from 0 to 2048 [ 46.413105][ T4290] pim6reg1: entered promiscuous mode [ 46.418505][ T4290] pim6reg1: entered allmulticast mode [ 46.429823][ T4296] batadv0: entered promiscuous mode [ 46.436536][ T4296] batadv_slave_0: entered promiscuous mode [ 46.442552][ T4296] batadv_slave_0: left promiscuous mode [ 46.443291][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.460344][ T4296] batadv0: left promiscuous mode [ 46.492756][ T4292] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒ”ÅÚóá' [ 46.515070][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.552545][ T4302] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 46.561034][ T4306] syz.3.219[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.561133][ T4306] syz.3.219[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.573081][ T4306] syz.3.219[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.587714][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.610068][ T4302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 46.642308][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 46.689622][ T4312] loop3: detected capacity change from 0 to 2048 [ 46.712394][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.843570][ T4328] loop4: detected capacity change from 0 to 512 [ 46.865831][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.882960][ T4328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.900637][ T4328] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.921970][ T4333] loop3: detected capacity change from 0 to 512 [ 46.956633][ T4333] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.228: Invalid inode bitmap blk 4 in block_group 0 [ 46.970885][ T4333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.973270][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.002363][ T4333] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.228: Invalid inode bitmap blk 4 in block_group 0 [ 47.026917][ T4333] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 47.060908][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.123292][ T4345] Illegal XDP return value 4294967274 on prog (id 195) dev syz_tun, expect packet loss! [ 47.283257][ T4363] loop1: detected capacity change from 0 to 8192 [ 47.289856][ T4363] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000006' [ 47.493738][ T4392] loop0: detected capacity change from 0 to 4096 [ 47.514754][ T4392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.533363][ T4399] sd 0:0:1:0: device reset [ 47.560432][ T4392] tipc: Started in network mode [ 47.565339][ T4392] tipc: Node identity ac14140f, cluster identity 4711 [ 47.586186][ T4392] tipc: New replicast peer: 255.255.255.255 [ 47.592342][ T4392] tipc: Enabled bearer , priority 10 [ 47.605453][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 47.618754][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.671147][ T4416] tipc: Started in network mode [ 47.676201][ T4416] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 47.685452][ T4416] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 47.693644][ T4416] tipc: Enabled bearer , priority 10 [ 48.118880][ T4430] loop3: detected capacity change from 0 to 256 [ 48.250407][ T4432] loop1: detected capacity change from 0 to 512 [ 48.280955][ T4432] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.253: casefold flag without casefold feature [ 48.294949][ T4432] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.253: couldn't read orphan inode 15 (err -117) [ 48.311500][ T4432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.337906][ T4437] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 48.346387][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.353865][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.361424][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.368862][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.382684][ T4432] loop1: detected capacity change from 512 to 64 [ 48.392703][ T4432] syz.1.253: attempt to access beyond end of device [ 48.392703][ T4432] loop1: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 48.406042][ T4432] EXT4-fs (loop1): discard request in group:0 block:42 count:1 failed with -5 [ 48.415075][ T4432] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: IO failure [ 48.423441][ T4432] syz.1.253: attempt to access beyond end of device [ 48.423441][ T4432] loop1: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 48.437000][ T4432] EXT4-fs (loop1): discard request in group:0 block:41 count:1 failed with -5 [ 48.446480][ T4432] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: IO failure [ 48.454920][ T4432] syz.1.253: attempt to access beyond end of device [ 48.454920][ T4432] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 48.468319][ T4432] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 48.479705][ T4432] Buffer I/O error on device loop1, logical block 255 [ 48.520281][ T4432] syz.1.253: attempt to access beyond end of device [ 48.520281][ T4432] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 48.533621][ T4432] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 48.545248][ T4432] Buffer I/O error on device loop1, logical block 253 [ 48.552025][ T4432] Buffer I/O error on device loop1, logical block 254 [ 48.559529][ T4432] syz.1.253: attempt to access beyond end of device [ 48.559529][ T4432] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 48.572810][ T4432] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 48.584135][ T4432] Buffer I/O error on device loop1, logical block 37 [ 48.585549][ T4443] tipc: Cannot configure node identity twice [ 48.590980][ T4432] Buffer I/O error on device loop1, logical block 38 [ 48.603513][ T4432] Buffer I/O error on device loop1, logical block 39 [ 48.610199][ T4432] Buffer I/O error on device loop1, logical block 40 [ 48.617107][ T4432] syz.1.253: attempt to access beyond end of device [ 48.617107][ T4432] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 48.630583][ T4432] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 48.636190][ T4440] ªªªªªª: renamed from vlan0 (while UP) [ 48.641857][ T4432] Buffer I/O error on device loop1, logical block 249 [ 48.641881][ T4432] Buffer I/O error on device loop1, logical block 250 [ 48.641894][ T4432] Buffer I/O error on device loop1, logical block 251 [ 48.642023][ T4432] syz.1.253: attempt to access beyond end of device [ 48.642023][ T4432] loop1: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 48.677785][ T4445] loop0: detected capacity change from 0 to 512 [ 48.681440][ T4432] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 48.706118][ T4445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.718767][ T9] tipc: Node number set to 2886997007 [ 48.720390][ T4445] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.776207][ T3275] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 48.794939][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.810412][ T9] tipc: Node number set to 1 [ 48.818667][ T3499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.991264][ C1] hrtimer: interrupt took 38854 ns [ 49.014186][ T4473] dccp_close: ABORT with 1 bytes unread [ 49.038303][ T4455] chnl_net:caif_netlink_parms(): no params data found [ 49.072127][ T4481] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 49.092125][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.099212][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.106556][ T4455] bridge_slave_0: entered allmulticast mode [ 49.113228][ T4455] bridge_slave_0: entered promiscuous mode [ 49.120122][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.127336][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.134590][ T4455] bridge_slave_1: entered allmulticast mode [ 49.141036][ T4455] bridge_slave_1: entered promiscuous mode [ 49.157589][ T4455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.168034][ T4455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.187805][ T4455] team0: Port device team_slave_0 added [ 49.194274][ T4455] team0: Port device team_slave_1 added [ 49.210978][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.217917][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.243869][ T4455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.256350][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.263437][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.289465][ T4455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.326565][ T4455] hsr_slave_0: entered promiscuous mode [ 49.333729][ T4455] hsr_slave_1: entered promiscuous mode [ 49.405971][ T4455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.443209][ T4455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.448111][ T4493] syz.0.274[4493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.453167][ T4493] syz.0.274[4493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.464554][ T4493] syz.0.274[4493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.533243][ T4455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.621977][ T4455] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.686138][ T4455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.700484][ T4455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.709607][ T4455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.718116][ T4455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.753309][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.806595][ T4511] tipc: Enabled bearer , priority 0 [ 49.816188][ T4455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.825103][ T4511] ªªªªªª: renamed from syzkaller0 [ 49.833355][ T4511] tipc: Disabling bearer [ 49.848103][ T4507] loop2: detected capacity change from 0 to 8192 [ 49.854368][ T4455] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.865370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.872483][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.888593][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.895663][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.902871][ T4507] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 49.911625][ T4507] FAT-fs (loop2): Filesystem has been set read-only [ 49.967170][ T4518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.283'. [ 49.997292][ T4455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.015162][ T4525] Cannot find del_set index 0 as target [ 50.039791][ T4530] loop0: detected capacity change from 0 to 512 [ 50.047281][ T4530] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 50.057579][ T4530] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.286: iget: bad i_size value: -67835469387268086 [ 50.071424][ T4530] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.286: couldn't read orphan inode 15 (err -117) [ 50.084458][ T4530] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.100420][ T4530] ext2 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.103691][ T4455] veth0_vlan: entered promiscuous mode [ 50.122978][ T4530] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 50.123102][ T4455] veth1_vlan: entered promiscuous mode [ 50.145303][ T3824] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 50.147501][ T4455] veth0_macvtap: entered promiscuous mode [ 50.161674][ T4455] veth1_macvtap: entered promiscuous mode [ 50.178573][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.189177][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.199074][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.209648][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.219592][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.230275][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.240213][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.250720][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.261585][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.271777][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.282262][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.292216][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.302686][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.312539][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.323033][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.332872][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.343424][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.354392][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.364590][ T4455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.373483][ T4455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.382307][ T4455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.391079][ T4455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.470370][ T4545] lo: entered allmulticast mode [ 50.491180][ T4547] bridge0: port 3(veth0_to_bond) entered blocking state [ 50.498319][ T4547] bridge0: port 3(veth0_to_bond) entered disabled state [ 50.506434][ T4547] veth0_to_bond: entered allmulticast mode [ 50.513113][ T4547] veth0_to_bond: entered promiscuous mode [ 50.519020][ T4547] bridge0: port 3(veth0_to_bond) entered blocking state [ 50.526055][ T4547] bridge0: port 3(veth0_to_bond) entered forwarding state [ 50.533481][ T4545] lo: entered promiscuous mode [ 50.538355][ T4545] lo: left allmulticast mode [ 50.563548][ T4549] syz.0.292[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.563600][ T4549] syz.0.292[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.575065][ T4549] syz.0.292[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.596776][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 50.596795][ T29] audit: type=1400 audit(1729385387.441:918): avc: denied { watch watch_reads } for pid=4550 comm="syz.1.293" path="/2" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.709411][ T29] audit: type=1400 audit(1729385387.551:919): avc: denied { setopt } for pid=4558 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.740103][ T4562] netlink: 64 bytes leftover after parsing attributes in process `syz.1.298'. [ 50.744573][ T29] audit: type=1400 audit(1729385387.581:920): avc: denied { read } for pid=4558 comm="syz.0.297" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.751366][ T4562] netlink: 408 bytes leftover after parsing attributes in process `syz.1.298'. [ 50.772298][ T29] audit: type=1400 audit(1729385387.581:921): avc: denied { open } for pid=4558 comm="syz.0.297" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.805088][ T29] audit: type=1400 audit(1729385387.581:922): avc: denied { ioctl } for pid=4558 comm="syz.0.297" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.837872][ T29] audit: type=1400 audit(1729385387.601:923): avc: denied { getopt } for pid=4560 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.891747][ T4571] loop1: detected capacity change from 0 to 2048 [ 50.947126][ T4571] Alternate GPT is invalid, using primary GPT. [ 50.953450][ T4571] loop1: p1 p2 p3 [ 50.961801][ T4581] sd 0:0:1:0: device reset [ 50.994384][ T29] audit: type=1400 audit(1729385387.831:924): avc: denied { create } for pid=4584 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.013808][ T29] audit: type=1400 audit(1729385387.831:925): avc: denied { ioctl } for pid=4584 comm="syz.3.309" path="socket:[8615]" dev="sockfs" ino=8615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.047934][ T4588] netlink: 'syz.1.311': attribute type 4 has an invalid length. [ 51.064650][ T4588] netlink: 'syz.1.311': attribute type 4 has an invalid length. [ 51.093683][ T4595] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 51.156038][ T4603] loop0: detected capacity change from 0 to 2048 [ 51.164355][ T4597] syzkaller0: entered promiscuous mode [ 51.170062][ T4597] syzkaller0: entered allmulticast mode [ 51.177592][ T4601] netlink: 'syz.1.316': attribute type 3 has an invalid length. [ 51.186848][ T4603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.186959][ T29] audit: type=1400 audit(1729385388.031:926): avc: denied { connect } for pid=4600 comm="syz.1.316" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.280898][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.300521][ T4613] loop0: detected capacity change from 0 to 512 [ 51.307408][ T4613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.318764][ T4613] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.332081][ T4613] EXT4-fs (loop0): 1 truncate cleaned up [ 51.338197][ T4613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.356576][ T29] audit: type=1400 audit(1729385388.201:927): avc: denied { module_load } for pid=4612 comm="syz.0.321" path="/32/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 51.365681][ T4613] Invalid ELF header magic: != ELF [ 51.400300][ T4616] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 51.409401][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.437921][ T4618] loop0: detected capacity change from 0 to 2048 [ 51.480867][ T4618] loop0: p1 < > p4 [ 51.485138][ T4618] loop0: p4 size 8388608 extends beyond EOD, truncated [ 51.520781][ T4623] loop2: detected capacity change from 0 to 512 [ 51.527983][ T4623] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.551848][ T4623] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.325: iget: bad i_size value: -6917529027641081756 [ 51.565244][ T4623] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.325: couldn't read orphan inode 17 (err -117) [ 51.577790][ T4623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.592747][ T4627] syz.0.326 uses obsolete (PF_INET,SOCK_PACKET) [ 51.763202][ T4631] usb usb8: usbfs: process 4631 (syz.0.328) did not claim interface 0 before use [ 51.839222][ T4635] loop0: detected capacity change from 0 to 128 [ 51.851377][ T4635] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.859241][ T4635] FAT-fs (loop0): Filesystem has been set read-only [ 51.867160][ T4635] syz.0.330: attempt to access beyond end of device [ 51.867160][ T4635] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.882013][ T4635] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.889950][ T4635] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.898048][ T4635] syz.0.330: attempt to access beyond end of device [ 51.898048][ T4635] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.915651][ T4635] syz.0.330: attempt to access beyond end of device [ 51.915651][ T4635] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 52.228635][ T4623] syz.2.325 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 52.242739][ T4623] CPU: 0 UID: 0 PID: 4623 Comm: syz.2.325 Tainted: G W 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 52.254828][ T4623] Tainted: [W]=WARN [ 52.258648][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.268769][ T4623] Call Trace: [ 52.272066][ T4623] [ 52.275016][ T4623] dump_stack_lvl+0xf2/0x150 [ 52.279632][ T4623] dump_stack+0x15/0x20 [ 52.283811][ T4623] dump_header+0x83/0x2d0 [ 52.288213][ T4623] oom_kill_process+0x341/0x4c0 [ 52.293150][ T4623] out_of_memory+0x9af/0xbe0 [ 52.297865][ T4623] ? css_next_descendant_pre+0x11c/0x140 [ 52.303527][ T4623] mem_cgroup_out_of_memory+0x13e/0x190 [ 52.309176][ T4623] try_charge_memcg+0x51b/0x810 [ 52.314136][ T4623] obj_cgroup_charge_pages+0xbd/0x1a0 [ 52.319595][ T4623] __memcg_kmem_charge_page+0x9d/0x170 [ 52.325245][ T4623] __alloc_pages_noprof+0x1bc/0x340 [ 52.330475][ T4623] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 52.335918][ T4623] alloc_pages_noprof+0xe1/0x100 [ 52.341003][ T4623] __vmalloc_node_range_noprof+0x72e/0xec0 [ 52.346850][ T4623] __kvmalloc_node_noprof+0x121/0x170 [ 52.352244][ T4623] ? ip_set_alloc+0x1f/0x30 [ 52.356762][ T4623] ip_set_alloc+0x1f/0x30 [ 52.361150][ T4623] hash_netiface_create+0x273/0x730 [ 52.366377][ T4623] ? __pfx_hash_netiface_create+0x10/0x10 [ 52.372111][ T4623] ip_set_create+0x359/0x8a0 [ 52.376795][ T4623] ? memchr+0x11/0x50 [ 52.380927][ T4623] ? __nla_parse+0x40/0x60 [ 52.385408][ T4623] nfnetlink_rcv_msg+0x4a9/0x570 [ 52.390395][ T4623] netlink_rcv_skb+0x12c/0x230 [ 52.395221][ T4623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.400708][ T4623] nfnetlink_rcv+0x16c/0x15c0 [ 52.405449][ T4623] ? kmem_cache_free+0xdc/0x2d0 [ 52.410337][ T4623] ? nlmon_xmit+0x51/0x60 [ 52.414757][ T4623] ? __kfree_skb+0x102/0x150 [ 52.419427][ T4623] ? consume_skb+0x49/0x160 [ 52.423947][ T4623] ? nlmon_xmit+0x51/0x60 [ 52.428292][ T4623] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 52.433673][ T4623] ? __dev_queue_xmit+0xb4c/0x2040 [ 52.438812][ T4623] ? ref_tracker_free+0x3a5/0x410 [ 52.443852][ T4623] ? __dev_queue_xmit+0x161/0x2040 [ 52.448989][ T4623] ? ref_tracker_alloc+0x1f5/0x2f0 [ 52.454177][ T4623] ? __netlink_deliver_tap+0x495/0x4c0 [ 52.459661][ T4623] netlink_unicast+0x599/0x670 [ 52.464459][ T4623] netlink_sendmsg+0x5cc/0x6e0 [ 52.469386][ T4623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.474675][ T4623] __sock_sendmsg+0x140/0x180 [ 52.479405][ T4623] ____sys_sendmsg+0x312/0x410 [ 52.484230][ T4623] __sys_sendmsg+0x1d9/0x270 [ 52.488849][ T4623] ? futex_wait+0x18e/0x1c0 [ 52.493441][ T4623] __x64_sys_sendmsg+0x46/0x50 [ 52.498293][ T4623] x64_sys_call+0x2689/0x2d60 [ 52.502991][ T4623] do_syscall_64+0xc9/0x1c0 [ 52.507600][ T4623] ? clear_bhb_loop+0x55/0xb0 [ 52.512423][ T4623] ? clear_bhb_loop+0x55/0xb0 [ 52.517127][ T4623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.523039][ T4623] RIP: 0033:0x7f2a3c37dff9 [ 52.527467][ T4623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.547129][ T4623] RSP: 002b:00007f2a3aff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.555547][ T4623] RAX: ffffffffffffffda RBX: 00007f2a3c535f80 RCX: 00007f2a3c37dff9 [ 52.563525][ T4623] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 52.571576][ T4623] RBP: 00007f2a3c3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 52.579612][ T4623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.587608][ T4623] R13: 0000000000000000 R14: 00007f2a3c535f80 R15: 00007fffcee903f8 [ 52.595649][ T4623] [ 52.598908][ T4623] memory: usage 307196kB, limit 307200kB, failcnt 162 [ 52.605809][ T4623] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 52.613719][ T4623] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 52.621178][ T4623] Memory cgroup stats for /syz2: [ 52.621414][ T4623] cache 143360 [ 52.629716][ T4623] rss 4096 [ 52.632817][ T4623] shmem 0 [ 52.635757][ T4623] mapped_file 131072 [ 52.639660][ T4623] dirty 131072 [ 52.643053][ T4623] writeback 0 [ 52.646342][ T4623] workingset_refault_anon 56 [ 52.650963][ T4623] workingset_refault_file 0 [ 52.655463][ T4623] swap 450560 [ 52.658793][ T4623] swapcached 8192 [ 52.662440][ T4623] pgpgin 36601 [ 52.665823][ T4623] pgpgout 36564 [ 52.669371][ T4623] pgfault 39904 [ 52.672918][ T4623] pgmajfault 24 [ 52.676385][ T4623] inactive_anon 4096 [ 52.680303][ T4623] active_anon 4096 [ 52.684032][ T4623] inactive_file 131072 [ 52.688103][ T4623] active_file 12288 [ 52.691929][ T4623] unevictable 0 [ 52.695394][ T4623] hierarchical_memory_limit 314572800 [ 52.700866][ T4623] hierarchical_memsw_limit 9223372036854771712 [ 52.707019][ T4623] total_cache 143360 [ 52.710950][ T4623] total_rss 4096 [ 52.714505][ T4623] total_shmem 0 [ 52.717978][ T4623] total_mapped_file 131072 [ 52.722518][ T4623] total_dirty 131072 [ 52.726419][ T4623] total_writeback 0 [ 52.730297][ T4623] total_workingset_refault_anon 56 [ 52.735405][ T4623] total_workingset_refault_file 0 [ 52.740459][ T4623] total_swap 450560 [ 52.744263][ T4623] total_swapcached 8192 [ 52.748499][ T4623] total_pgpgin 36601 [ 52.752434][ T4623] total_pgpgout 36564 [ 52.756437][ T4623] total_pgfault 39904 [ 52.760435][ T4623] total_pgmajfault 24 [ 52.764487][ T4623] total_inactive_anon 4096 [ 52.768931][ T4623] total_active_anon 4096 [ 52.773201][ T4623] total_inactive_file 131072 [ 52.777794][ T4623] total_active_file 12288 [ 52.782270][ T4623] total_unevictable 0 [ 52.786260][ T4623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.325,pid=4621,uid=0 [ 52.800903][ T4623] Memory cgroup out of memory: Killed process 4621 (syz.2.325) total-vm:89032kB, anon-rss:612kB, file-rss:15984kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 52.940975][ T4621] syz.2.325 (4621) used greatest stack depth: 9064 bytes left [ 53.071787][ T4623] syz.2.325 (4623) used greatest stack depth: 7288 bytes left [ 53.079933][ T3545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.171877][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 53.181146][ T4657] netlink: 'syz.3.333': attribute type 18 has an invalid length. [ 53.192151][ T4657] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.200905][ T4657] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.209750][ T4657] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.218489][ T4657] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.227273][ T4657] vxlan0: entered promiscuous mode [ 53.373283][ T4669] serio: Serial port pts0 [ 53.612721][ T4678] loop2: detected capacity change from 0 to 128 [ 53.653503][ T4678] syz.2.344: attempt to access beyond end of device [ 53.653503][ T4678] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 53.711254][ T4678] syz.2.344: attempt to access beyond end of device [ 53.711254][ T4678] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 53.726134][ T4678] syz.2.344: attempt to access beyond end of device [ 53.726134][ T4678] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.739494][ T4678] syz.2.344: attempt to access beyond end of device [ 53.739494][ T4678] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.753186][ T4678] syz.2.344: attempt to access beyond end of device [ 53.753186][ T4678] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.766517][ T4678] syz.2.344: attempt to access beyond end of device [ 53.766517][ T4678] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.803861][ T4688] loop2: detected capacity change from 0 to 2048 [ 53.823585][ T4688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.892956][ T4691] loop0: detected capacity change from 0 to 1024 [ 53.899985][ T4691] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 53.910164][ T4691] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.947220][ T4691] EXT4-fs (loop0): invalid journal inode [ 53.997295][ T3545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.019091][ T4698] loop2: detected capacity change from 0 to 512 [ 54.026817][ T4698] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.351: casefold flag without casefold feature [ 54.039800][ T4698] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.351: couldn't read orphan inode 15 (err -117) [ 54.052720][ T4698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.100299][ T4698] loop2: detected capacity change from 512 to 64 [ 54.108761][ T4698] syz.2.351: attempt to access beyond end of device [ 54.108761][ T4698] loop2: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 54.122036][ T4698] EXT4-fs (loop2): discard request in group:0 block:42 count:1 failed with -5 [ 54.130976][ T4698] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: IO failure [ 54.139141][ T4698] syz.2.351: attempt to access beyond end of device [ 54.139141][ T4698] loop2: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 54.152440][ T4698] EXT4-fs (loop2): discard request in group:0 block:41 count:1 failed with -5 [ 54.161678][ T4698] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: IO failure [ 54.170729][ T4698] syz.2.351: attempt to access beyond end of device [ 54.170729][ T4698] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 54.183995][ T4698] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 54.195244][ T4698] buffer_io_error: 2 callbacks suppressed [ 54.195298][ T4698] Buffer I/O error on device loop2, logical block 255 [ 54.207896][ T4698] syz.2.351: attempt to access beyond end of device [ 54.207896][ T4698] loop2: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 54.221126][ T4698] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 54.232373][ T4698] Buffer I/O error on device loop2, logical block 253 [ 54.239139][ T4698] Buffer I/O error on device loop2, logical block 254 [ 54.252812][ T4698] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 54.263997][ T4698] Buffer I/O error on device loop2, logical block 37 [ 54.270563][ T4706] loop1: detected capacity change from 0 to 128 [ 54.270711][ T4698] Buffer I/O error on device loop2, logical block 38 [ 54.283667][ T4698] Buffer I/O error on device loop2, logical block 39 [ 54.290357][ T4698] Buffer I/O error on device loop2, logical block 40 [ 54.297250][ T4698] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 54.308509][ T4698] Buffer I/O error on device loop2, logical block 249 [ 54.315325][ T4698] Buffer I/O error on device loop2, logical block 250 [ 54.322138][ T4698] Buffer I/O error on device loop2, logical block 251 [ 54.329243][ T4698] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 54.378982][ T3545] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 54.404845][ T3545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.429049][ T4711] infiniband syz1: set active [ 54.433823][ T4711] infiniband syz1: added veth0_virt_wifi [ 54.444739][ T4711] RDS/IB: syz1: added [ 54.448758][ T4711] smc: adding ib device syz1 with port count 1 [ 54.460310][ T4711] smc: ib device syz1 port 1 has pnetid [ 54.583196][ T1524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.635329][ T1524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.684648][ T1524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.766275][ T1524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.784399][ T4734] loop3: detected capacity change from 0 to 512 [ 54.793067][ T4734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.814598][ T4736] loop0: detected capacity change from 0 to 2048 [ 54.814634][ T4734] EXT4-fs (loop3): 1 truncate cleaned up [ 54.837921][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.852710][ T4736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.878881][ T1524] bridge_slave_1: left allmulticast mode [ 54.884643][ T1524] bridge_slave_1: left promiscuous mode [ 54.890390][ T1524] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.911754][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.920966][ T1524] bridge_slave_0: left allmulticast mode [ 54.926738][ T1524] bridge_slave_0: left promiscuous mode [ 54.932478][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.071483][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.123178][ T1524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.142288][ T1524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.192117][ T1524] bond0 (unregistering): Released all slaves [ 55.305425][ T1524] hsr_slave_0: left promiscuous mode [ 55.313308][ T1524] hsr_slave_1: left promiscuous mode [ 55.323224][ T1524] veth1_macvtap: left promiscuous mode [ 55.328719][ T1524] veth0_macvtap: left promiscuous mode [ 55.334275][ T1524] veth1_vlan: left promiscuous mode [ 55.339519][ T1524] veth0_vlan: left promiscuous mode [ 55.470118][ T1524] team0 (unregistering): Port device team_slave_1 removed [ 55.484670][ T1524] team0 (unregistering): Port device team_slave_0 removed [ 55.533572][ T4721] chnl_net:caif_netlink_parms(): no params data found [ 55.553202][ T4752] netlink: 'syz.1.370': attribute type 4 has an invalid length. [ 55.601144][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.608291][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.615799][ T4721] bridge_slave_0: entered allmulticast mode [ 55.622296][ T4721] bridge_slave_0: entered promiscuous mode [ 55.628191][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 55.628205][ T29] audit: type=1400 audit(1729385392.471:1009): avc: denied { write } for pid=4760 comm="syz.0.371" path="socket:[9482]" dev="sockfs" ino=9482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.629380][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.664692][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.672639][ T4721] bridge_slave_1: entered allmulticast mode [ 55.682443][ T4721] bridge_slave_1: entered promiscuous mode [ 55.687363][ T4759] loop1: detected capacity change from 0 to 2048 [ 55.706575][ T4759] EXT4-fs error (device loop1): __ext4_fill_super:5458: inode #2: comm syz.1.372: casefold flag without casefold feature [ 55.721838][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.732424][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.750768][ T4759] EXT4-fs (loop1): get root inode failed [ 55.756430][ T4759] EXT4-fs (loop1): mount failed [ 55.767716][ T4759] capability: warning: `syz.1.372' uses deprecated v2 capabilities in a way that may be insecure [ 55.794223][ T4721] team0: Port device team_slave_0 added [ 55.809286][ T4721] team0: Port device team_slave_1 added [ 55.856645][ T29] audit: type=1326 audit(1729385392.691:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.880040][ T29] audit: type=1326 audit(1729385392.691:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.903506][ T29] audit: type=1326 audit(1729385392.691:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.926771][ T29] audit: type=1326 audit(1729385392.691:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.950150][ T29] audit: type=1326 audit(1729385392.691:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.973787][ T29] audit: type=1326 audit(1729385392.691:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 55.997620][ T29] audit: type=1326 audit(1729385392.691:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 56.021461][ T29] audit: type=1326 audit(1729385392.691:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 56.044892][ T29] audit: type=1326 audit(1729385392.691:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9dd19dff9 code=0x7ffc0000 [ 56.110137][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.117151][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.129319][ T4771] loop1: detected capacity change from 0 to 2048 [ 56.143204][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.161921][ T4776] loop0: detected capacity change from 0 to 128 [ 56.161909][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.175167][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.201178][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.228581][ T4775] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 56.241237][ T4771] loop1: p1 < > p4 [ 56.245596][ T4771] loop1: p4 size 8388608 extends beyond EOD, truncated [ 56.255213][ T4775] team0: Failed to send options change via netlink (err -105) [ 56.262785][ T4775] team0: Port device netdevsim1 added [ 56.274142][ T4775] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 56.282561][ T4775] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 56.293966][ T4775] team0: Failed to send options change via netlink (err -105) [ 56.301646][ T4775] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 56.311099][ T4775] team0: Port device netdevsim1 removed [ 56.318992][ T4775] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 56.361956][ T4721] hsr_slave_0: entered promiscuous mode [ 56.370488][ T4721] hsr_slave_1: entered promiscuous mode [ 56.376506][ T4721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.383649][ T4779] loop0: detected capacity change from 0 to 512 [ 56.384564][ T4721] Cannot create hsr debugfs directory [ 56.396338][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 56.407807][ T4779] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 56.415488][ T4780] loop3: detected capacity change from 0 to 512 [ 56.416062][ T4779] ref_ctr increment failed for inode: 0x126 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810d779500 [ 56.425798][ T4780] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 56.441532][ T4779] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 56.441551][ T4779] ref_ctr decrement failed for inode: 0x126 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810d779500 [ 56.452206][ T4780] EXT4-fs (loop3): 1 truncate cleaned up [ 56.461228][ T4779] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 56.467654][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.474706][ T4779] ref_ctr decrement failed for inode: 0x126 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810d779500 [ 56.505414][ T4779] uprobe: syz.0.379:4779 failed to unregister, leaking uprobe [ 56.514670][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.554954][ T4790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=4790 comm=syz.3.382 [ 56.570728][ T4790] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 56.753103][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.761492][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.770182][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.778745][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.817045][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.828622][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.839236][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.846512][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.857618][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.864733][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.930996][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.001138][ T4721] veth0_vlan: entered promiscuous mode [ 57.009488][ T4721] veth1_vlan: entered promiscuous mode [ 57.025419][ T4721] veth0_macvtap: entered promiscuous mode [ 57.033410][ T4721] veth1_macvtap: entered promiscuous mode [ 57.044613][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.055153][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.064996][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.075502][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.085432][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.095895][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.105795][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.116347][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.126320][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.136844][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.149559][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.160540][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.171094][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.180953][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.191387][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.201259][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.211755][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.221631][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.232091][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.241939][ T4721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.252409][ T4721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.263941][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.272744][ T4721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277680][ T4804] loop3: detected capacity change from 0 to 512 [ 57.281549][ T4721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296640][ T4721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.305472][ T4721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.323276][ T4804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.337840][ T4804] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.385443][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.417559][ T4816] loop2: detected capacity change from 0 to 1024 [ 57.453175][ T4812] loop0: detected capacity change from 0 to 2048 [ 57.494292][ T4812] loop0: p2 < > [ 57.498859][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.612337][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.650045][ T4829] loop2: detected capacity change from 0 to 128 [ 58.032310][ T4824] chnl_net:caif_netlink_parms(): no params data found [ 58.092851][ T4842] loop2: detected capacity change from 0 to 164 [ 58.147414][ T4842] ISOFS: Bad logical zone size 4096 [ 58.214172][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.221410][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.236016][ T4824] bridge_slave_0: entered allmulticast mode [ 58.264621][ T4824] bridge_slave_0: entered promiscuous mode [ 58.286338][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.293550][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.329144][ T4824] bridge_slave_1: entered allmulticast mode [ 58.338755][ T4824] bridge_slave_1: entered promiscuous mode [ 58.366241][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.377379][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.409190][ T4824] team0: Port device team_slave_0 added [ 58.416887][ T4824] team0: Port device team_slave_1 added [ 58.463043][ T4853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.487388][ T4853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.504274][ T4853] bond0 (unregistering): Released all slaves [ 58.513341][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.520461][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.546920][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.571179][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.578201][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.604167][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.615260][ T4850] ªªªªªª: renamed from vlan0 (while UP) [ 58.629283][ T4860] loop0: detected capacity change from 0 to 512 [ 58.643473][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.656136][ T4860] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.689753][ T4865] siw: device registration error -23 [ 58.697577][ T4824] hsr_slave_0: entered promiscuous mode [ 58.706550][ T4824] hsr_slave_1: entered promiscuous mode [ 58.713458][ T4824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.721265][ T4824] Cannot create hsr debugfs directory [ 58.727336][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.793763][ T4873] syz.1.400[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.793835][ T4873] syz.1.400[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.810885][ T4824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.822180][ T4873] syz.1.400[4873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.834810][ T4876] loop0: detected capacity change from 0 to 256 [ 58.903484][ T4824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.983757][ T4824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.044558][ T4824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.115373][ T4824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.124156][ T4824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.132938][ T4824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.141818][ T4824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.184082][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.199447][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.209904][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.216977][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.229120][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.236262][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.313586][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.424397][ T4824] veth0_vlan: entered promiscuous mode [ 59.433194][ T4824] veth1_vlan: entered promiscuous mode [ 59.449912][ T4824] veth0_macvtap: entered promiscuous mode [ 59.457264][ T4824] veth1_macvtap: entered promiscuous mode [ 59.468451][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.479067][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.488927][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.499425][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.509357][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.519877][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.529728][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.540298][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.550189][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.560635][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.570469][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.580944][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.592812][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.601431][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.611922][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.621772][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.632217][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.642257][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.652889][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.662813][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.673259][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.683115][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.693549][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.703474][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.713934][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.724931][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.738494][ T4824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747423][ T4824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.756230][ T4824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.764998][ T4824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.384696][ T4897] loop3: detected capacity change from 0 to 164 [ 60.394460][ T4897] ISOFS: Bad logical zone size 4096 [ 60.420672][ T4903] loop0: detected capacity change from 0 to 2048 [ 60.496734][ T4903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.537131][ T4903] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.412: bg 0: block 234: padding at end of block bitmap is not set [ 60.573467][ T4903] EXT4-fs (loop0): Remounting filesystem read-only [ 60.613009][ T3824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.669527][ T4918] loop3: detected capacity change from 0 to 512 [ 60.676801][ T4918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.713806][ T4918] EXT4-fs (loop3): 1 truncate cleaned up [ 60.729029][ T4922] loop1: detected capacity change from 0 to 1024 [ 60.751494][ T4922] EXT4-fs: Ignoring removed orlov option [ 60.757241][ T4922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.837608][ T4929] loop1: detected capacity change from 0 to 2048 [ 60.840402][ T4926] loop3: detected capacity change from 0 to 4096 [ 60.853744][ T4930] siw: device registration error -23 [ 60.869338][ T4926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 60.964983][ T4935] loop0: detected capacity change from 0 to 2048 [ 60.993712][ T4935] Alternate GPT is invalid, using primary GPT. [ 61.000048][ T4935] loop0: p1 p2 p3 [ 61.087519][ T4940] loop3: detected capacity change from 0 to 2048 [ 61.088441][ T4944] loop1: detected capacity change from 0 to 164 [ 61.110861][ T4944] ISOFS: Bad logical zone size 4096 [ 61.143064][ T4940] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.417: bg 0: block 234: padding at end of block bitmap is not set [ 61.174134][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 61.174151][ T29] audit: type=1107 audit(1729385398.021:1324): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 61.179732][ T4940] EXT4-fs (loop3): Remounting filesystem read-only [ 61.251082][ T29] audit: type=1326 audit(1729385398.101:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.274607][ T29] audit: type=1326 audit(1729385398.101:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.309996][ T29] audit: type=1326 audit(1729385398.121:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.333659][ T29] audit: type=1326 audit(1729385398.121:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.357111][ T29] audit: type=1326 audit(1729385398.121:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.380504][ T29] audit: type=1326 audit(1729385398.151:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.404132][ T29] audit: type=1326 audit(1729385398.151:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.427623][ T29] audit: type=1326 audit(1729385398.151:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 61.450987][ T29] audit: type=1326 audit(1729385398.151:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4948 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c8d5fdff9 code=0x7ffc0000 [ 118.103815][ T4967] chnl_net:caif_netlink_parms(): no params data found [ 118.131108][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.153718][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.160991][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.168111][ T4967] bridge_slave_0: entered allmulticast mode [ 118.174643][ T4967] bridge_slave_0: entered promiscuous mode [ 118.181864][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.188918][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.196103][ T4967] bridge_slave_1: entered allmulticast mode [ 118.202740][ T4967] bridge_slave_1: entered promiscuous mode [ 118.211677][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.233865][ T4967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.244560][ T4967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.263649][ T4967] team0: Port device team_slave_0 added [ 118.272401][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.284346][ T4967] team0: Port device team_slave_1 added [ 118.299087][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.306141][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.332164][ T4967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.343409][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.350388][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.376466][ T4967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.389711][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.415236][ T4967] hsr_slave_0: entered promiscuous mode [ 118.421284][ T4967] hsr_slave_1: entered promiscuous mode [ 118.427283][ T4967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.434947][ T4967] Cannot create hsr debugfs directory [ 118.458032][ T56] bridge_slave_1: left allmulticast mode [ 118.463837][ T56] bridge_slave_1: left promiscuous mode [ 118.469449][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.477176][ T56] bridge_slave_0: left allmulticast mode [ 118.482862][ T56] bridge_slave_0: left promiscuous mode [ 118.488538][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.572955][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.584123][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.594658][ T56] bond0 (unregistering): Released all slaves [ 118.658364][ T56] hsr_slave_0: left promiscuous mode [ 118.664206][ T56] hsr_slave_1: left promiscuous mode [ 118.669889][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.677310][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.684852][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.692283][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.703877][ T56] veth1_macvtap: left promiscuous mode [ 118.709437][ T56] veth0_macvtap: left promiscuous mode [ 118.714954][ T56] veth1_vlan: left promiscuous mode [ 118.720278][ T56] veth0_vlan: left promiscuous mode [ 118.802753][ T56] team0 (unregistering): Port device team_slave_1 removed [ 118.813309][ T56] team0 (unregistering): Port device team_slave_0 removed [ 119.093561][ T4967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.102679][ T4967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.110942][ T4967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.119868][ T4967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.160801][ T4967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.176012][ T4967] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.185749][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.192906][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.204657][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.211729][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.277425][ T4967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.388773][ T4967] veth0_vlan: entered promiscuous mode [ 119.397142][ T4967] veth1_vlan: entered promiscuous mode [ 119.413822][ T4967] veth0_macvtap: entered promiscuous mode [ 119.421393][ T4967] veth1_macvtap: entered promiscuous mode [ 119.432885][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.443576][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.453426][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.463876][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.473706][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.484161][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.493965][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.504486][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.514412][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.524958][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.534911][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.545339][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.556137][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.567212][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.577795][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.587803][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.598271][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.608109][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.618572][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.628380][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.638812][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.648713][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.659173][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.669094][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.679670][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.690766][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.700880][ T4967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.709592][ T4967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.718354][ T4967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.727110][ T4967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.104058][ T11] bridge_slave_1: left allmulticast mode [ 157.109721][ T11] bridge_slave_1: left promiscuous mode [ 157.115420][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.123523][ T11] bridge_slave_0: left allmulticast mode [ 157.129199][ T11] bridge_slave_0: left promiscuous mode [ 157.134983][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.223048][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.233660][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.243839][ T11] bond0 (unregistering): Released all slaves [ 157.301303][ T11] tipc: Disabling bearer [ 157.306612][ T11] tipc: Left network mode [ 157.327526][ T11] hsr_slave_0: left promiscuous mode [ 157.333324][ T11] hsr_slave_1: left promiscuous mode [ 157.338964][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.346462][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.354053][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.361503][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.370887][ T11] veth1_macvtap: left promiscuous mode [ 157.376461][ T11] veth0_macvtap: left promiscuous mode [ 157.382053][ T11] veth1_vlan: left promiscuous mode [ 157.387268][ T11] veth0_vlan: left promiscuous mode [ 157.465971][ T11] team0 (unregistering): Port device team_slave_1 removed [ 157.476024][ T11] team0 (unregistering): Port device team_slave_0 removed [ 178.174700][ T5000] chnl_net:caif_netlink_parms(): no params data found [ 178.207380][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.214554][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.222037][ T5000] bridge_slave_0: entered allmulticast mode [ 178.228582][ T5000] bridge_slave_0: entered promiscuous mode [ 178.235434][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.242549][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.249782][ T5000] bridge_slave_1: entered allmulticast mode [ 178.256213][ T5000] bridge_slave_1: entered promiscuous mode [ 178.266149][ T1524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.287492][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.298002][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.314401][ T1524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.330443][ T5000] team0: Port device team_slave_0 added [ 178.337105][ T5000] team0: Port device team_slave_1 added [ 178.352744][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.359685][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.385665][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.398879][ T1524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.410319][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.417280][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.443183][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.468074][ T5000] hsr_slave_0: entered promiscuous mode [ 178.474962][ T5000] hsr_slave_1: entered promiscuous mode [ 178.481250][ T5000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.488804][ T5000] Cannot create hsr debugfs directory [ 178.497236][ T1524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.565968][ T1524] bridge_slave_1: left allmulticast mode [ 178.571793][ T1524] bridge_slave_1: left promiscuous mode [ 178.577579][ T1524] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.585705][ T1524] bridge_slave_0: left allmulticast mode [ 178.591413][ T1524] bridge_slave_0: left promiscuous mode [ 178.597022][ T1524] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.702905][ T1524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.713488][ T1524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.723625][ T1524] bond0 (unregistering): Released all slaves [ 178.809301][ T1524] hsr_slave_0: left promiscuous mode [ 178.815014][ T1524] hsr_slave_1: left promiscuous mode [ 178.820899][ T1524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.828344][ T1524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.836124][ T1524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.843566][ T1524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.853879][ T1524] veth1_macvtap: left promiscuous mode [ 178.859365][ T1524] veth0_macvtap: left promiscuous mode [ 178.865180][ T1524] veth1_vlan: left promiscuous mode [ 178.870530][ T1524] veth0_vlan: left promiscuous mode [ 178.952376][ T1524] team0 (unregistering): Port device team_slave_1 removed [ 178.962342][ T1524] team0 (unregistering): Port device team_slave_0 removed [ 179.074095][ T5000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.082775][ T5000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.091590][ T5000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.100019][ T5000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.135935][ T5000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.148648][ T5000] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.158178][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.165491][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.177273][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.184419][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.247942][ T5000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.359883][ T5000] veth0_vlan: entered promiscuous mode [ 179.368049][ T5000] veth1_vlan: entered promiscuous mode [ 179.383526][ T5000] veth0_macvtap: entered promiscuous mode [ 179.391625][ T5000] veth1_macvtap: entered promiscuous mode [ 179.401705][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.412459][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.422375][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.432813][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.442632][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.453080][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.462903][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.473398][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.483206][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.493615][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.504730][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.516111][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.526615][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.536537][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.546992][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.556789][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.567205][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.577057][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.587548][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.597438][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.607874][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.618719][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.628581][ T5000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.637370][ T5000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.646110][ T5000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.654802][ T5000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.743469][ T5037] chnl_net:caif_netlink_parms(): no params data found [ 238.777764][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.784999][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.792315][ T5037] bridge_slave_0: entered allmulticast mode [ 238.798821][ T5037] bridge_slave_0: entered promiscuous mode [ 238.806007][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.813115][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.820291][ T5037] bridge_slave_1: entered allmulticast mode [ 238.826686][ T5037] bridge_slave_1: entered promiscuous mode [ 238.835177][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.857258][ T5037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.868007][ T5037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.889703][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.901606][ T5037] team0: Port device team_slave_0 added [ 238.908033][ T5037] team0: Port device team_slave_1 added [ 238.923634][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.930614][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.956609][ T5037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.967853][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.974916][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.000944][ T5037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.014297][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.040642][ T5037] hsr_slave_0: entered promiscuous mode [ 239.046733][ T5037] hsr_slave_1: entered promiscuous mode [ 239.052684][ T5037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.060269][ T5037] Cannot create hsr debugfs directory [ 239.073614][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.137483][ T56] bridge_slave_1: left allmulticast mode [ 239.143323][ T56] bridge_slave_1: left promiscuous mode [ 239.149062][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.156990][ T56] bridge_slave_0: left allmulticast mode [ 239.162758][ T56] bridge_slave_0: left promiscuous mode [ 239.168458][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.244502][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.254678][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.264992][ T56] bond0 (unregistering): Released all slaves [ 239.327811][ T56] hsr_slave_0: left promiscuous mode [ 239.333548][ T56] hsr_slave_1: left promiscuous mode [ 239.339425][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.346961][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.355229][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.362733][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.372042][ T56] veth1_macvtap: left promiscuous mode [ 239.377653][ T56] veth0_macvtap: left promiscuous mode [ 239.383187][ T56] veth1_vlan: left promiscuous mode [ 239.388422][ T56] veth0_vlan: left promiscuous mode [ 239.467928][ T56] team0 (unregistering): Port device team_slave_1 removed [ 239.478435][ T56] team0 (unregistering): Port device team_slave_0 removed [ 239.682950][ T5037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.691807][ T5037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.700498][ T5037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.708954][ T5037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.745001][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.756994][ T5037] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.766093][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.773203][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.785148][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.792326][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.861487][ T5037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.971031][ T5037] veth0_vlan: entered promiscuous mode [ 239.979274][ T5037] veth1_vlan: entered promiscuous mode [ 239.994654][ T5037] veth0_macvtap: entered promiscuous mode [ 240.001953][ T5037] veth1_macvtap: entered promiscuous mode [ 240.011914][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.022445][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.032459][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.042994][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.052909][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.063354][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.073210][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.083806][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.093732][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.104210][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.114905][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.125912][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.136444][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.146319][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.156860][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.166712][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.177298][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.187219][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.197697][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.207526][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.217992][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.228645][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.237463][ T5037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.246279][ T5037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.254997][ T5037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.263746][ T5037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.140375][ C1] ================================================================== [ 264.148481][ C1] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 264.156662][ C1] [ 264.158977][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 264.166340][ C1] __tmigr_cpu_activate+0x55/0x200 [ 264.171465][ C1] tmigr_cpu_activate+0x8a/0xc0 [ 264.176311][ C1] timer_clear_idle+0x28/0x100 [ 264.181074][ C1] tick_nohz_restart_sched_tick+0x22/0x110 [ 264.186902][ C1] tick_nohz_idle_exit+0xfe/0x1d0 [ 264.191942][ C1] do_idle+0x1ee/0x230 [ 264.196035][ C1] cpu_startup_entry+0x25/0x30 [ 264.200822][ C1] rest_init+0xef/0xf0 [ 264.204909][ C1] start_kernel+0x586/0x5e0 [ 264.209429][ C1] x86_64_start_reservations+0x2a/0x30 [ 264.214888][ C1] x86_64_start_kernel+0x9a/0xa0 [ 264.219854][ C1] common_startup_64+0x12c/0x137 [ 264.224806][ C1] [ 264.227130][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 264.234662][ C1] tmigr_handle_remote+0x26e/0x940 [ 264.239772][ C1] run_timer_softirq+0x5f/0x70 [ 264.244534][ C1] handle_softirqs+0xbf/0x280 [ 264.249221][ C1] irq_exit_rcu+0x3e/0x90 [ 264.253559][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 264.259312][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 264.265309][ C1] acpi_safe_halt+0x21/0x30 [ 264.269816][ C1] acpi_idle_do_entry+0x1d/0x30 [ 264.274660][ C1] acpi_idle_enter+0x96/0xb0 [ 264.279243][ C1] cpuidle_enter_state+0xc5/0x260 [ 264.284281][ C1] cpuidle_enter+0x40/0x70 [ 264.288697][ C1] do_idle+0x195/0x230 [ 264.292767][ C1] cpu_startup_entry+0x25/0x30 [ 264.297550][ C1] start_secondary+0x96/0xa0 [ 264.302136][ C1] common_startup_64+0x12c/0x137 [ 264.307074][ C1] [ 264.309405][ C1] value changed: 0x00 -> 0x01 [ 264.314075][ C1] [ 264.316421][ C1] Reported by Kernel Concurrency Sanitizer on: [ 264.322567][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 264.334366][ C1] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.338194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.348270][ C1] ================================================================== [ 264.358412][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 264.358506][ T29] audit: type=1400 audit(1729385601.211:1347): avc: denied { write } for pid=3253 comm="syz-executor" path="pipe:[1606]" dev="pipefs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 264.436535][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.446870][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.482749][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.493133][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.562571][ T56] bond0: (slave netdevsim1): Releasing backup interface [ 264.571218][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.581565][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.664263][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.674672][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.722413][ T56] bridge_slave_1: left allmulticast mode [ 264.728076][ T56] bridge_slave_1: left promiscuous mode [ 264.733759][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.741568][ T56] bridge_slave_0: left allmulticast mode [ 264.747230][ T56] bridge_slave_0: left promiscuous mode [ 264.752982][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.824476][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.834988][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.845351][ T56] bond0 (unregistering): Released all slaves [ 264.907997][ T56] hsr_slave_0: left promiscuous mode [ 264.913663][ T56] hsr_slave_1: left promiscuous mode [ 264.919372][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.926854][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.934601][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.942080][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.951358][ T56] veth1_macvtap: left promiscuous mode [ 264.956916][ T56] veth0_macvtap: left promiscuous mode [ 264.962543][ T56] veth1_vlan: left promiscuous mode [ 264.967800][ T56] veth0_vlan: left promiscuous mode [ 264.986248][ T56] infiniband syz1: set down [ 265.034961][ T11] smc: removing ib device syz1 [ 265.049287][ T56] team0 (unregistering): Port device team_slave_1 removed [ 265.059596][ T56] team0 (unregistering): Port device team_slave_0 removed [ 265.394828][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.454095][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.482991][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.522832][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.604574][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.653288][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.693172][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.743132][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.825195][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.863021][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.923201][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.973756][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.025319][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.073313][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.123597][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.172811][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.253241][ T56] bridge_slave_1: left allmulticast mode [ 266.258977][ T56] bridge_slave_1: left promiscuous mode [ 266.264650][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.272412][ T56] bridge_slave_0: left allmulticast mode [ 266.278186][ T56] bridge_slave_0: left promiscuous mode [ 266.283920][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.292146][ T56] bridge_slave_1: left allmulticast mode [ 266.297879][ T56] bridge_slave_1: left promiscuous mode [ 266.303593][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.311348][ T56] bridge_slave_0: left allmulticast mode [ 266.316997][ T56] bridge_slave_0: left promiscuous mode [ 266.322701][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.330802][ T56] veth0_to_bond: left allmulticast mode [ 266.336365][ T56] veth0_to_bond: left promiscuous mode [ 266.342097][ T56] bridge0: port 3(veth0_to_bond) entered disabled state [ 266.349610][ T56] bridge_slave_1: left allmulticast mode [ 266.355343][ T56] bridge_slave_1: left promiscuous mode [ 266.360975][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.368556][ T56] bridge_slave_0: left allmulticast mode [ 266.374256][ T56] bridge_slave_0: left promiscuous mode [ 266.379991][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.388152][ T56] bridge_slave_1: left allmulticast mode [ 266.393844][ T56] bridge_slave_1: left promiscuous mode [ 266.399548][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.407302][ T56] bridge_slave_0: left allmulticast mode [ 266.412996][ T56] bridge_slave_0: left promiscuous mode [ 266.418741][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.802620][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.812907][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.822747][ T56] bond0 (unregistering): Released all slaves [ 266.831752][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.841866][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.851851][ T56] bond0 (unregistering): Released all slaves [ 266.861146][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.871360][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.881533][ T56] bond0 (unregistering): Released all slaves [ 266.933388][ T56] tipc: Disabling bearer [ 266.938737][ T56] tipc: Left network mode [ 266.947196][ T56] hsr_slave_0: left promiscuous mode [ 266.952943][ T56] hsr_slave_1: left promiscuous mode [ 266.958598][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.966076][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.973538][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.980967][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.990114][ T56] hsr_slave_0: left promiscuous mode [ 266.996023][ T56] hsr_slave_1: left promiscuous mode [ 267.001759][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.009182][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.016596][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.024012][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.033151][ T56] hsr_slave_0: left promiscuous mode [ 267.038822][ T56] hsr_slave_1: left promiscuous mode [ 267.044439][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.051846][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.059326][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.066791][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.075770][ T56] hsr_slave_0: left promiscuous mode [ 267.081521][ T56] hsr_slave_1: left promiscuous mode [ 267.087119][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.094521][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.102083][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.109470][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.122628][ T56] veth1_macvtap: left promiscuous mode [ 267.128102][ T56] veth0_macvtap: left promiscuous mode [ 267.133763][ T56] veth1_vlan: left promiscuous mode [ 267.139053][ T56] veth0_vlan: left promiscuous mode [ 267.144667][ T56] veth1_macvtap: left promiscuous mode [ 267.150160][ T56] veth0_macvtap: left promiscuous mode [ 267.155658][ T56] veth1_vlan: left promiscuous mode [ 267.160913][ T56] veth0_vlan: left promiscuous mode [ 267.166608][ T56] veth1_macvtap: left promiscuous mode [ 267.172156][ T56] veth0_macvtap: left promiscuous mode [ 267.177694][ T56] veth1_vlan: left promiscuous mode [ 267.183004][ T56] veth0_vlan: left promiscuous mode [ 267.188772][ T56] veth1_macvtap: left promiscuous mode [ 267.194399][ T56] veth0_macvtap: left promiscuous mode [ 267.199901][ T56] veth1_vlan: left promiscuous mode [ 267.205260][ T56] veth0_vlan: left promiscuous mode [ 267.404679][ T56] team0 (unregistering): Port device team_slave_1 removed [ 267.414494][ T56] team0 (unregistering): Port device team_slave_0 removed [ 267.475740][ T56] team0 (unregistering): Port device team_slave_1 removed [ 267.485793][ T56] team0 (unregistering): Port device team_slave_0 removed [ 267.548576][ T56] team0 (unregistering): Port device team_slave_1 removed [ 267.558815][ T56] team0 (unregistering): Port device team_slave_0 removed [ 267.617673][ T56] team0 (unregistering): Port device team_slave_1 removed [ 267.627747][ T56] team0 (unregistering): Port device team_slave_0 removed