last executing test programs: 6m29.87927222s ago: executing program 32 (id=2134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x6e22, 0x4, @mcast1, 0x803}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4m27.231812134s ago: executing program 33 (id=6743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 4m24.588506834s ago: executing program 34 (id=6841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001540), 0x4, r2}, 0x38) 3m50.08099347s ago: executing program 35 (id=8333): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x99) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 3m31.450070748s ago: executing program 36 (id=8972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) 2m29.641010809s ago: executing program 37 (id=10804): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2000006, 0x6}, 0x0, 0x3, 0x4, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) 2m27.694736042s ago: executing program 38 (id=10849): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2m6.358108459s ago: executing program 39 (id=11376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x6, 0x6, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 1m42.828458838s ago: executing program 40 (id=11965): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 1m20.558019781s ago: executing program 41 (id=12538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001a0a01"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m19.535907168s ago: executing program 42 (id=12559): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f0000000080)) 1m19.236786026s ago: executing program 43 (id=12567): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 1m18.904596385s ago: executing program 44 (id=12573): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 57.548717002s ago: executing program 45 (id=13038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') statx(r2, &(0x7f0000001d80)='./file0/../file0\x00', 0x4000, 0x0, 0x0) 52.954099514s ago: executing program 4 (id=13168): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000500)='./file0/file0\x00', 0xb) 52.936746944s ago: executing program 4 (id=13169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) io_setup(0x4, &(0x7f00000001c0)=0x0) r3 = eventfd2(0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x20f41, 0x90) io_submit(r2, 0x1, &(0x7f0000002200)=[&(0x7f0000001b00)={0x0, 0x0, 0x20, 0x8, 0x1a0, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r3}]) 52.592953993s ago: executing program 4 (id=13176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001500)='kfree\x00', r0}, 0x10) unshare(0x2040600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 52.592792283s ago: executing program 46 (id=13176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001500)='kfree\x00', r0}, 0x10) unshare(0x2040600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 30.401651467s ago: executing program 0 (id=13688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa921}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 30.325851997s ago: executing program 0 (id=13694): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x670, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 30.092128556s ago: executing program 0 (id=13699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 29.926833725s ago: executing program 0 (id=13701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) 29.882090995s ago: executing program 0 (id=13702): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x2, 0x0, @dev}}, [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, &(0x7f0000000000)=0x100) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 29.645072314s ago: executing program 0 (id=13711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0xd8af}, 0x18) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x20) 29.597528134s ago: executing program 47 (id=13711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0xd8af}, 0x18) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x20) 20.412488728s ago: executing program 1 (id=13959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}}, 0x0) 20.374550808s ago: executing program 1 (id=13963): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r2, 0x0, 0x0) 20.320630538s ago: executing program 1 (id=13965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff, r3}, 0x38) 20.255910538s ago: executing program 1 (id=13970): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 20.251546608s ago: executing program 1 (id=13971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 19.349029054s ago: executing program 1 (id=13998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100004000000000000ec000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 19.348772914s ago: executing program 48 (id=13998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100004000000000000ec000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 18.18312812s ago: executing program 6 (id=14036): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) 18.15898651s ago: executing program 6 (id=14037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 17.985001949s ago: executing program 6 (id=14038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r1, 0x1, 0x200000, 0x0, {0x54}}, 0x14}}, 0x0) 17.984582049s ago: executing program 6 (id=14039): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) 17.980386269s ago: executing program 6 (id=14040): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 17.876735229s ago: executing program 6 (id=14045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 17.876570618s ago: executing program 49 (id=14045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 6.623260875s ago: executing program 3 (id=14324): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000b3180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8120036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 6.594870545s ago: executing program 3 (id=14326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) close_range(r2, r3, 0x0) 6.497284275s ago: executing program 3 (id=14329): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.313345424s ago: executing program 3 (id=14333): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x2000410, &(0x7f0000000140), 0x1, 0x7b1, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 6.021529183s ago: executing program 3 (id=14338): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 5.806869062s ago: executing program 3 (id=14346): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 5.783523452s ago: executing program 50 (id=14346): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 4.136702556s ago: executing program 5 (id=14378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.053070986s ago: executing program 5 (id=14380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/36, 0x24}], 0x1}, 0x9}], 0x1, 0x40010121, 0x0) 3.191617092s ago: executing program 5 (id=14406): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) 3.156948572s ago: executing program 5 (id=14408): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x2000410, &(0x7f0000000140), 0x1, 0x7b1, &(0x7f0000000f80)="$eJzs3ctrXFUYAPDvTl5N2poIgtZVQNBA6cTU2Cq4qLgQwUJB17ZhMg01k0zJTEoTAm0VwY2g4kLQTdc+6s6tj63+Fy6kpWparLiQkTuPJmlm0qTNzBTy+8HNPec+5jtf7uvM3MtMAHvWaPonE3EoIj5OIobr05OI6KuWeiNO1Ja7s7qSS4ckKpW3/kyqy9xeXcnFunXS19pfrzwVET99EHE4szluaWl5dqp/rT5enjs/XlpaPnJubmomP5OfPzYxOXn0+IvHj+1ern//unzgxievP/ftiX/ff/LaRz8ncSIO1Oetz2O3jMZo7X8Sfem/cIPXdjtYNx3sdgN4UOmh2VM7yuNQDEdPtdTCYCdbBgC0y6WIqAAAe0zi+g8Ae0zjc4Dbqyu5xtDdTyQ66+arEbGvln/j/mZtTm/9nt2+6n3QodvJhjsjSUSM7EL80Yj48vt3vk6HaNN9SIBmLl+JiDMjo5vP/8mmZxZ26vmtZlYGqqPReyY7/0Hn/JD2f15q1v/L3O3/RJP+z0CTY/dB3P/4z1zfhTAtpf2/V9Y923ZnXf51Iz312sFqn68vOXuukE/PbY9FxFj0DaT1ieqiSdMYY7f+u9Uqfpr/e1Hr//316btfpfHT8doSmeu9AxvXmZ4qTz1s3g03r0Q83dss/+Tu9k9a9H9PbTPGGy9/+EWreWn+ab6NYXP+7VW5GvFs0+2/ti2TLZ9PHK/uDuONnaKJ7377fKhV/LX+/0B1nMZvvBfohHT7D22d/0jSeF6zUMgvlHYe45erwz+2mrf+/U/z/Jvv//3J29Vy4xHSi1Pl8sJERH/y5ubpR9fWbdQby6f5jz3T/Phvtf9nemrPxp6pL3c/vTf++Kb+Uk3zr7rcKv/2SvOf3tH236JQqa9zz6xrd2Z7WsXf3vafrJbG6lO2c/67T0sfYm8GAAAAAAAAAAAAAAAAAAAAAAAAgJ3LRMSBSDLZu+VMJput/Yb3EzGUKRRL5cNni4vz01H9reyR6Ms0vupyeN33oU7Uvw+/UT96T/2FiHg8Ij4bGKzWs7liYbrbyQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f6Nv/9/KR1ls7V5vw90u3UAQNvs63YDAICOc/0HgL1nZ9f/wba1AwDonB2//68k7WkIANAx277+n2lvOwCAznH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDY7dfJkOlT+WV3JpfXpC0uLs8ULR6bzpdns3GIumysunM/OFIszhXw2V5xr+UKXa6NCsXh+MuYXL46X86XyeGlp+fRccXG+fPrc3NRM/nS+r2OZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD2lZaWZ6cKhfyCwpaFwbaG6ImIRyXT7RV645FoRtsLmehuM/q7Fn39WWKweycoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfc/wEAAP//isogVQ==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2.886808871s ago: executing program 5 (id=14412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.66503193s ago: executing program 5 (id=14415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.6648687s ago: executing program 51 (id=14415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.173817898s ago: executing program 2 (id=14443): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000840)={[{@orlov}, {@grpjquota}, {@errors_remount}]}, 0x1, 0x4af, &(0x7f00000012c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') 1.786927486s ago: executing program 2 (id=14444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}], [], 0x6b}}) 1.492369546s ago: executing program 2 (id=14450): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08"], 0x0) 1.430977805s ago: executing program 7 (id=14452): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r1, 0x0, 0x18) 803.781243ms ago: executing program 9 (id=14456): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/138, 0x8a}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/196, 0xc4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 644.523512ms ago: executing program 8 (id=14459): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0xa0889a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c2, &(0x7f0000000d00)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./bus\x00') 576.707062ms ago: executing program 8 (id=14460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x408c5333, &(0x7f0000000080)) 576.384412ms ago: executing program 9 (id=14461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 529.004542ms ago: executing program 7 (id=14462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 528.611692ms ago: executing program 8 (id=14463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 528.396782ms ago: executing program 7 (id=14464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 464.661132ms ago: executing program 9 (id=14465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 423.056611ms ago: executing program 2 (id=14466): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) 354.358811ms ago: executing program 8 (id=14467): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000045) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 303.272791ms ago: executing program 7 (id=14468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x80) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 270.609271ms ago: executing program 9 (id=14469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r3, r2) 262.177611ms ago: executing program 7 (id=14470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x1, 0x0) 248.891871ms ago: executing program 2 (id=14471): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)) 246.56826ms ago: executing program 8 (id=14472): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t>0&&\t') 175.066561ms ago: executing program 7 (id=14473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) 143.340181ms ago: executing program 2 (id=14474): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 140.072781ms ago: executing program 9 (id=14475): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20008081) 116.34669ms ago: executing program 4 (id=14416): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x0) 81.20427ms ago: executing program 4 (id=14476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f00000005c0)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) 80.775ms ago: executing program 4 (id=14477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10001) open(0x0, 0x14d27e, 0x0) 38.86198ms ago: executing program 8 (id=14478): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 0s ago: executing program 9 (id=14479): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="9e01", 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @local}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): XT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.477697][ T2952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.609972][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.723165][ T2986] loop1: detected capacity change from 0 to 512 [ 427.730669][ T2986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 427.746177][ T2986] EXT4-fs (loop1): 1 truncate cleaned up [ 427.757157][ T2986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.799538][ T2997] loop7: detected capacity change from 0 to 512 [ 427.807545][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.822282][ T2997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.835713][ T2997] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.846331][ T3001] loop1: detected capacity change from 0 to 512 [ 427.857747][ T3001] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 427.865824][ T3001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 427.872935][ T3001] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 427.887948][ T3001] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 427.895270][ T3001] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13589: bg 0: block 40: padding at end of block bitmap is not set [ 427.910532][ T3001] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 427.919605][ T3001] EXT4-fs (loop1): 1 truncate cleaned up [ 427.920642][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.925849][ T3001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.983696][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.002711][ T3012] loop2: detected capacity change from 0 to 128 [ 428.022708][ T3015] loop1: detected capacity change from 0 to 512 [ 428.031271][ T3012] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.043786][ T3012] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.059708][ T3015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.088969][ T3015] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.113540][ T445] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.126040][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.226057][ T3038] loop1: detected capacity change from 0 to 512 [ 428.228410][ T3037] loop2: detected capacity change from 0 to 512 [ 428.236291][ T3038] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 428.250610][ T3038] EXT4-fs (loop1): 1 truncate cleaned up [ 428.257223][ T3038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.268967][ T3037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.282527][ T3037] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.303621][ T3038] SELinux: security_context_str_to_sid (u&@YмЗђ­vЄ/вМLгќЖ“†#тЬв?_e[lЯ}) failed with errno=-22 [ 428.327974][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.339609][ T445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.353363][ T3044] syzkaller0: entered allmulticast mode [ 428.428924][ T3052] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 428.466012][ T3056] netlink: 'syz.0.13609': attribute type 3 has an invalid length. [ 428.593922][ T3066] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 428.657504][ T3072] syz.0.13616[3072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.657634][ T3072] syz.0.13616[3072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.669466][ T3072] syz.0.13616[3072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.718075][ T3077] loop0: detected capacity change from 0 to 2048 [ 428.726482][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13619'. [ 428.759200][ T3077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.780462][ T3077] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.13618: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 428.793777][ T3085] loop5: detected capacity change from 0 to 512 [ 428.801589][ T3077] EXT4-fs (loop0): Remounting filesystem read-only [ 428.818283][ T3085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.831023][ T3085] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.831364][ T465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.911322][ T394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.921803][ T3096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13627'. [ 428.993878][ T3108] tipc: Enabling of bearer rejected, failed to enable media [ 429.232565][ T3127] rdma_op ffff88810236bd80 conn xmit_rdma 0000000000000000 [ 429.518375][ T3146] vlan3: entered promiscuous mode [ 429.524009][ T3146] bond0: (slave vlan3): Opening slave failed [ 429.534176][ T3157] loop1: detected capacity change from 0 to 128 [ 429.556501][ T3157] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13650'. [ 429.616758][ T3162] syz.1.13652[3162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.683804][ T3172] xt_hashlimit: max too large, truncated to 1048576 [ 429.690861][ T3173] loop5: detected capacity change from 0 to 164 [ 429.713902][ T3172] Cannot find set identified by id 0 to match [ 429.757553][ T3175] loop1: detected capacity change from 0 to 1024 [ 429.803105][ T3175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.815777][ T3184] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13659'. [ 429.825018][ T3177] ALSA: seq fatal error: cannot create timer (-19) [ 429.876424][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.886204][ T3189] loop0: detected capacity change from 0 to 512 [ 429.945915][ T3189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.968019][ T3189] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.980925][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 429.988508][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 429.996046][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.003528][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.011040][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.018761][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.026185][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.033679][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.040859][ T3202] loop1: detected capacity change from 0 to 256 [ 430.041150][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.054858][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.062319][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.069799][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.077298][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.084713][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.092221][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.099671][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.100146][ T3202] FAT-fs (loop1): Directory bread(block 64) failed [ 430.107085][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.107116][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.107140][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.107182][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.132999][ T3202] FAT-fs (loop1): Directory bread(block 65) failed [ 430.135893][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.157273][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.164774][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.172272][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.172730][ T3202] FAT-fs (loop1): Directory bread(block 66) failed [ 430.179776][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.187038][ T3204] gretap0: left promiscuous mode [ 430.193700][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.203735][ T3202] FAT-fs (loop1): Directory bread(block 67) failed [ 430.206298][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.213103][ T3204] bridge_slave_0: left allmulticast mode [ 430.220283][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.220313][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.225941][ T3204] bridge_slave_0: left promiscuous mode [ 430.233367][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.240897][ T3204] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.246344][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.257505][ T3202] FAT-fs (loop1): Directory bread(block 68) failed [ 430.260785][T13016] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.271266][ T3202] FAT-fs (loop1): Directory bread(block 69) failed [ 430.284155][T13016] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 430.293671][ T465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.298569][ T3202] FAT-fs (loop1): Directory bread(block 70) failed [ 430.314119][ T3202] FAT-fs (loop1): Directory bread(block 71) failed [ 430.320864][ T3202] FAT-fs (loop1): Directory bread(block 72) failed [ 430.327551][ T3202] FAT-fs (loop1): Directory bread(block 73) failed [ 430.348163][ T3204] bridge_slave_1: left allmulticast mode [ 430.353918][ T3204] bridge_slave_1: left promiscuous mode [ 430.359773][ T3204] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.378229][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 430.378247][ T29] audit: type=1400 audit(2000000073.860:17332): avc: denied { create } for pid=3209 comm="syz.7.13671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 430.435338][ T3204] bond0: (slave bond_slave_0): Releasing backup interface [ 430.444450][ T3204] bond0: (slave bond_slave_1): Releasing backup interface [ 430.454170][ T3204] team0: Port device team_slave_0 removed [ 430.457588][ T3214] syz.1.13667: attempt to access beyond end of device [ 430.457588][ T3214] loop1: rw=2049, sector=1800, nr_sectors = 2048 limit=256 [ 430.477080][ T3204] team0: Port device team_slave_1 removed [ 430.480497][ T3214] syz.1.13667: attempt to access beyond end of device [ 430.480497][ T3214] loop1: rw=2049, sector=3848, nr_sectors = 2048 limit=256 [ 430.483460][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.500205][ T3214] syz.1.13667: attempt to access beyond end of device [ 430.500205][ T3214] loop1: rw=2049, sector=5896, nr_sectors = 2048 limit=256 [ 430.520308][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.529414][ T3214] syz.1.13667: attempt to access beyond end of device [ 430.529414][ T3214] loop1: rw=2049, sector=7944, nr_sectors = 2048 limit=256 [ 430.549717][ T3214] syz.1.13667: attempt to access beyond end of device [ 430.549717][ T3214] loop1: rw=2049, sector=9992, nr_sectors = 2016 limit=256 [ 430.637548][ T3219] loop0: detected capacity change from 0 to 1024 [ 430.664431][ T3229] loop2: detected capacity change from 0 to 128 [ 430.679419][ T29] audit: type=1400 audit(2000000074.150:17333): avc: denied { getopt } for pid=3224 comm="syz.5.13677" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.703739][ T3219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.726811][ T3229] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13678'. [ 430.809590][ T3235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13680'. [ 430.818917][ T29] audit: type=1326 audit(2000000074.280:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.819406][ T465] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.842587][ T29] audit: type=1326 audit(2000000074.280:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.875208][ T29] audit: type=1326 audit(2000000074.280:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.898865][ T29] audit: type=1326 audit(2000000074.280:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.922467][ T29] audit: type=1326 audit(2000000074.280:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.946297][ T29] audit: type=1326 audit(2000000074.280:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.969955][ T29] audit: type=1326 audit(2000000074.290:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 430.993545][ T29] audit: type=1326 audit(2000000074.290:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3234 comm="syz.7.13692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 431.021143][T24035] kworker/u8:52: attempt to access beyond end of device [ 431.021143][T24035] loop1: rw=1, sector=12008, nr_sectors = 2064 limit=256 [ 431.038525][T24035] kworker/u8:52: attempt to access beyond end of device [ 431.038525][T24035] loop1: rw=1, sector=14072, nr_sectors = 2048 limit=256 [ 431.055576][T24035] kworker/u8:52: attempt to access beyond end of device [ 431.055576][T24035] loop1: rw=1, sector=16120, nr_sectors = 2048 limit=256 [ 431.072923][T24035] kworker/u8:52: attempt to access beyond end of device [ 431.072923][T24035] loop1: rw=1, sector=18168, nr_sectors = 2048 limit=256 [ 431.094194][T24035] kworker/u8:52: attempt to access beyond end of device [ 431.094194][T24035] loop1: rw=1, sector=20216, nr_sectors = 5736 limit=256 [ 431.203449][ T3252] loop7: detected capacity change from 0 to 128 [ 431.248379][ T3252] buffer_io_error: 762 callbacks suppressed [ 431.248399][ T3252] Buffer I/O error on dev loop7, logical block 148, lost async page write [ 431.272042][ T3256] loop5: detected capacity change from 0 to 128 [ 431.279806][ T3260] loop0: detected capacity change from 0 to 164 [ 431.296939][ T3252] Buffer I/O error on dev loop7, logical block 149, lost async page write [ 431.305498][ T3252] Buffer I/O error on dev loop7, logical block 150, lost async page write [ 431.320982][ T3260] Unable to read rock-ridge attributes [ 431.331238][ T3252] Buffer I/O error on dev loop7, logical block 151, lost async page write [ 431.340084][ T3252] Buffer I/O error on dev loop7, logical block 152, lost async page write [ 431.355237][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.362751][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.370488][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.377967][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.385476][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.393092][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.400539][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.408085][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.415498][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.423085][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.430585][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.438009][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.445459][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.452982][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.460429][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.467892][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.475345][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.482838][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.490366][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.497858][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.505638][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.513038][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.520502][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.527928][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.535350][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.542785][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.550243][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.557819][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.565210][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.572663][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.580285][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.587979][ T3376] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 431.596159][ T3376] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 431.655060][ T3272] bpf_get_probe_write_proto: 2 callbacks suppressed [ 431.655076][ T3272] syz.5.13697[3272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.666934][ T3272] syz.5.13697[3272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.692681][ T3272] syz.5.13697[3272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.783673][ T3287] loop2: detected capacity change from 0 to 2048 [ 431.827194][ T3287] loop2: p1 < > p4 [ 431.832109][ T3287] loop2: p4 size 8388608 extends beyond EOD, truncated [ 431.883655][ T3297] loop7: detected capacity change from 0 to 164 [ 431.923606][T24035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.998909][T24035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.112153][ T3307] loop7: detected capacity change from 0 to 1024 [ 432.119608][T24035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.205103][ T3307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.233648][ T3307] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.7.13714: corrupted in-inode xattr: bad magic number in in-inode xattr [ 432.286341][ T3300] Set syz1 is full, maxelem 65536 reached [ 432.288313][T24035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.331460][ T3324] loop1: detected capacity change from 0 to 2048 [ 432.372777][ T3308] lo speed is unknown, defaulting to 1000 [ 432.377308][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.398398][ T3330] loop5: detected capacity change from 0 to 128 [ 432.411633][ T3330] syz.5.13719[3330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.411732][ T3330] syz.5.13719[3330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.434748][ T3330] syz.5.13719[3330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.447039][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 432.461698][ T3324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.572659][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.579808][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.587260][ T3308] bridge_slave_0: entered allmulticast mode [ 432.593777][ T3308] bridge_slave_0: entered promiscuous mode [ 432.600573][T24035] bridge_slave_1: left allmulticast mode [ 432.606373][T24035] bridge_slave_1: left promiscuous mode [ 432.612212][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.620767][T24035] bridge_slave_0: left allmulticast mode [ 432.626446][T24035] bridge_slave_0: left promiscuous mode [ 432.632257][T24035] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.666415][ T1692] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.780936][T24035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.803305][T24035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.824813][T24035] bond0 (unregistering): Released all slaves [ 432.836027][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.843218][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.855634][ T3308] bridge_slave_1: entered allmulticast mode [ 432.864321][ T3308] bridge_slave_1: entered promiscuous mode [ 432.867313][ T3354] syz.7.13724[3354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.870472][ T3354] syz.7.13724[3354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.882136][ T3354] syz.7.13724[3354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.944366][ T3362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3362 comm=syz.1.13727 [ 432.959064][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.979663][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.992595][ T3362] netlink: 'syz.1.13727': attribute type 1 has an invalid length. [ 433.002820][T24035] hsr_slave_0: left promiscuous mode [ 433.010017][T24035] hsr_slave_1: left promiscuous mode [ 433.016035][T24035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.023622][T24035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.031586][T24035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.039160][T24035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.051461][T24035] veth1_macvtap: left promiscuous mode [ 433.057027][T24035] veth0_macvtap: left promiscuous mode [ 433.062665][T24035] veth1_vlan: left promiscuous mode [ 433.067948][T24035] veth0_vlan: left promiscuous mode [ 433.084426][ T3369] __nla_validate_parse: 1 callbacks suppressed [ 433.084440][ T3369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13729'. [ 433.100774][ T3369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13729'. [ 433.154086][T24035] team0 (unregistering): Port device team_slave_1 removed [ 433.164828][T24035] team0 (unregistering): Port device team_slave_0 removed [ 433.229564][ T3362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.243790][ T3367] bond1: (slave ip6gretap2): making interface the new active one [ 433.256060][ T3367] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.263942][ T3367] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.274703][ T3367] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 433.288001][ T3308] team0: Port device team_slave_0 added [ 433.300263][ T3308] team0: Port device team_slave_1 added [ 433.326878][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.345781][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.352812][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.378840][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.390617][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.397688][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.423635][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.459247][ T3308] hsr_slave_0: entered promiscuous mode [ 433.467126][ T3308] hsr_slave_1: entered promiscuous mode [ 433.497845][ T1817] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.666189][ T3407] loop7: detected capacity change from 0 to 1024 [ 433.707859][ T3411] xt_hashlimit: max too large, truncated to 1048576 [ 433.707989][ T3407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.759180][ T3414] xt_hashlimit: size too large, truncated to 1048576 [ 433.781767][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.836149][ T3419] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13746'. [ 433.952332][ T3308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.976976][ T3426] loop7: detected capacity change from 0 to 256 [ 433.980554][ T3308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.012865][ T3308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.032378][ T3308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.042444][ T3426] FAT-fs (loop7): Directory bread(block 64) failed [ 434.059591][ T3426] FAT-fs (loop7): Directory bread(block 65) failed [ 434.087061][ T3426] FAT-fs (loop7): Directory bread(block 66) failed [ 434.100265][ T3426] FAT-fs (loop7): Directory bread(block 67) failed [ 434.121431][T24024] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.136091][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.137021][ T3426] FAT-fs (loop7): Directory bread(block 68) failed [ 434.156682][ T3426] FAT-fs (loop7): Directory bread(block 69) failed [ 434.170380][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.177502][ T3426] FAT-fs (loop7): Directory bread(block 70) failed [ 434.193916][T24035] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.196685][ T3426] FAT-fs (loop7): Directory bread(block 71) failed [ 434.201090][T24035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.218547][T24035] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.225694][T24035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.230669][ T3426] FAT-fs (loop7): Directory bread(block 72) failed [ 434.252842][ T3426] FAT-fs (loop7): Directory bread(block 73) failed [ 434.275948][ T3436] loop2: detected capacity change from 0 to 1024 [ 434.285766][ T3436] EXT4-fs: Ignoring removed bh option [ 434.318305][ T3436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.357339][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.365166][T24027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.387704][ T445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.429926][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.471577][ T3449] syz.2.13755[3449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.658232][ T3308] veth0_vlan: entered promiscuous mode [ 434.703459][ T3308] veth1_vlan: entered promiscuous mode [ 434.741324][ T3308] veth0_macvtap: entered promiscuous mode [ 434.767711][ T3308] veth1_macvtap: entered promiscuous mode [ 434.789923][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.800738][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.810652][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.821195][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.831287][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.836756][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13766'. [ 434.842597][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.861235][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.871902][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.889350][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.891081][ T3482] loop2: detected capacity change from 0 to 1024 [ 434.899483][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.913673][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.923580][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.934192][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.944096][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.954601][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.964499][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.974953][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.977791][ T3482] EXT4-fs: Ignoring removed orlov option [ 434.986007][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.024438][ T3308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.033248][ T3308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.042027][ T3308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.051008][ T3308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.062119][ T3482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.187573][T24027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.195435][T24027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.423887][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 435.423902][ T29] audit: type=1400 audit(2000000078.870:17475): avc: denied { read write } for pid=3500 comm="syz.6.13772" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.453862][ T29] audit: type=1400 audit(2000000078.870:17476): avc: denied { open } for pid=3500 comm="syz.6.13772" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.478228][ T29] audit: type=1400 audit(2000000078.900:17477): avc: denied { read } for pid=3502 comm="syz.7.13773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.595795][ T3486] Set syz1 is full, maxelem 65536 reached [ 435.607230][T24027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.716286][ T29] audit: type=1400 audit(2000000079.190:17478): avc: denied { create } for pid=3514 comm="syz.6.13779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 435.769085][ T29] audit: type=1400 audit(2000000079.250:17479): avc: denied { create } for pid=3518 comm="syz.6.13781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 435.794495][ T29] audit: type=1400 audit(2000000079.270:17480): avc: denied { write } for pid=3518 comm="syz.6.13781" path="socket:[115265]" dev="sockfs" ino=115265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 435.795533][ T445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.819258][ T29] audit: type=1400 audit(2000000079.270:17481): avc: denied { nlmsg_read } for pid=3518 comm="syz.6.13781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 435.854301][ T29] audit: type=1400 audit(2000000079.330:17482): avc: denied { write } for pid=3520 comm="syz.1.13783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.892521][ T29] audit: type=1400 audit(2000000079.360:17483): avc: denied { create } for pid=3522 comm="syz.5.13784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.912236][ T29] audit: type=1400 audit(2000000079.360:17484): avc: denied { bind } for pid=3522 comm="syz.5.13784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 436.083953][ T3541] syzkaller0: entered allmulticast mode [ 436.453666][ T3550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13795'. [ 436.493313][ T3544] Set syz1 is full, maxelem 65536 reached [ 436.568004][ T3564] bridge0: entered promiscuous mode [ 436.573548][ T3564] macvlan2: entered promiscuous mode [ 436.583086][ T3564] bridge0: port 3(macvlan2) entered blocking state [ 436.589822][ T3564] bridge0: port 3(macvlan2) entered disabled state [ 436.599720][ T3564] macvlan2: entered allmulticast mode [ 436.605155][ T3564] bridge0: entered allmulticast mode [ 436.614512][ T3564] macvlan2: left allmulticast mode [ 436.619815][ T3564] bridge0: left allmulticast mode [ 436.629001][ T3564] bridge0: left promiscuous mode [ 436.862603][ T3597] msdos: Unknown parameter '18446744073709551615џџџџџџџџ01777777777777777777777џџ|ох‡-' [ 436.926987][ T3605] loop7: detected capacity change from 0 to 512 [ 436.937930][ T3607] rdma_op ffff888102d97d80 conn xmit_rdma 0000000000000000 [ 436.945780][ T3605] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.13818: corrupted in-inode xattr: invalid ea_ino [ 436.962574][ T3605] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.13818: couldn't read orphan inode 15 (err -117) [ 436.975565][ T3605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.011971][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.036825][ T3612] loop7: detected capacity change from 0 to 512 [ 437.073358][ T3612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.097133][ T3612] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.133356][ T3620] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 437.208811][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.263880][ T3634] loop7: detected capacity change from 0 to 256 [ 437.274796][ T3634] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.285047][ T3634] FAT-fs (loop7): Filesystem has been set read-only [ 437.294480][ T3634] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.304878][ T3634] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.316610][ T3638] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13831'. [ 437.383932][ T3647] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 437.464367][ T3661] bpf_get_probe_write_proto: 5 callbacks suppressed [ 437.464382][ T3661] syz.5.13841[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.471127][ T3661] syz.5.13841[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.482928][ T3661] syz.5.13841[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.592394][ T3676] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 437.693498][ T3692] netlink: 'syz.5.13856': attribute type 27 has an invalid length. [ 437.858289][ T3721] netlink: 'syz.2.13869': attribute type 27 has an invalid length. [ 437.914896][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.922188][ T3721] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.926065][ T3726] ebtables: ebtables: counters copy to user failed while replacing table [ 437.941567][ T3730] loop5: detected capacity change from 0 to 1024 [ 437.957649][ T3730] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 437.976585][ T3730] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 437.985500][ T3730] EXT4-fs (loop5): orphan cleanup on readonly fs [ 437.992952][ T3730] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 438.004754][ T3730] EXT4-fs (loop5): Remounting filesystem read-only [ 438.011892][ T3730] EXT4-fs (loop5): 1 orphan inode deleted [ 438.019702][ T3730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 438.031818][ T3730] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 438.039120][ T3730] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.054172][T12163] IPVS: starting estimator thread 0... [ 438.068590][ T3721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.078806][ T3721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.106549][ T3721] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.115732][ T3721] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.124761][ T3721] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.133774][ T3721] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.146705][ T3736] IPVS: using max 2064 ests per chain, 103200 per kthread [ 438.173271][ T3721] bond1: left promiscuous mode [ 438.178388][ T3721] bond1: left allmulticast mode [ 438.191514][ T3724] lo speed is unknown, defaulting to 1000 [ 438.314178][ T3752] netlink: 'syz.5.13882': attribute type 13 has an invalid length. [ 438.337965][ T3752] gretap0: refused to change device tx_queue_len [ 438.344449][ T3752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 438.363611][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.371174][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.378785][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.396956][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.404519][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.412136][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.420392][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.427832][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.435273][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.442717][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.450186][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.457649][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.465065][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.472564][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.480263][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.487783][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.495318][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.502762][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.510694][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.518559][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.525974][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.533444][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.540899][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.548411][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.555870][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.563349][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.566034][ T3770] random: crng reseeded on system resumption [ 438.570781][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.570827][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.591687][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 438.618848][ T35] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 438.715012][ T3781] loop5: detected capacity change from 0 to 1764 [ 438.740573][ T3777] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.839263][ T3788] netlink: 'syz.6.13896': attribute type 27 has an invalid length. [ 438.901727][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.909151][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.977430][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.000151][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.051931][ T3788] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.060963][ T3788] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.069931][ T3788] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.076763][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 439.076783][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.079009][ T3788] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.088305][T24027] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.116323][ T3793] bond_slave_1: entered promiscuous mode [ 439.125915][ T3793] bond_slave_1: left promiscuous mode [ 439.200513][ T3816] loop6: detected capacity change from 0 to 256 [ 439.221626][ T3816] FAT-fs (loop6): Directory bread(block 64) failed [ 439.228481][ T3816] FAT-fs (loop6): Directory bread(block 65) failed [ 439.235105][ T3816] FAT-fs (loop6): Directory bread(block 66) failed [ 439.241939][ T3816] FAT-fs (loop6): Directory bread(block 67) failed [ 439.248744][ T3816] FAT-fs (loop6): Directory bread(block 68) failed [ 439.255578][ T3816] FAT-fs (loop6): Directory bread(block 69) failed [ 439.262331][ T3816] FAT-fs (loop6): Directory bread(block 70) failed [ 439.269340][ T3816] FAT-fs (loop6): Directory bread(block 71) failed [ 439.275968][ T3816] FAT-fs (loop6): Directory bread(block 72) failed [ 439.282530][ T3816] FAT-fs (loop6): Directory bread(block 73) failed [ 439.410905][ T3834] bio_check_eod: 21 callbacks suppressed [ 439.410928][ T3834] syz.6.13909: attempt to access beyond end of device [ 439.410928][ T3834] loop6: rw=2049, sector=1800, nr_sectors = 2048 limit=256 [ 439.459928][ T3834] syz.6.13909: attempt to access beyond end of device [ 439.459928][ T3834] loop6: rw=2049, sector=3848, nr_sectors = 2048 limit=256 [ 439.478379][ T3838] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13929'. [ 439.488454][ T3834] syz.6.13909: attempt to access beyond end of device [ 439.488454][ T3834] loop6: rw=2049, sector=5896, nr_sectors = 1168 limit=256 [ 439.506354][ T3840] loop5: detected capacity change from 0 to 512 [ 439.517134][ T3840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.533905][ T3840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 439.542151][ T3840] System zones: 1-12 [ 439.550442][ T3840] EXT4-fs (loop5): 1 truncate cleaned up [ 439.556459][ T3840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.583422][ T394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.676749][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.676749][T24027] loop6: rw=1, sector=7064, nr_sectors = 2048 limit=256 [ 439.693336][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.693336][T24027] loop6: rw=1, sector=9112, nr_sectors = 2048 limit=256 [ 439.711473][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.711473][T24027] loop6: rw=1, sector=11160, nr_sectors = 3312 limit=256 [ 439.731323][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.731323][T24027] loop6: rw=1, sector=14472, nr_sectors = 3744 limit=256 [ 439.750712][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.750712][T24027] loop6: rw=1, sector=18216, nr_sectors = 4040 limit=256 [ 439.771703][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.771703][T24027] loop6: rw=1, sector=22256, nr_sectors = 5040 limit=256 [ 439.794956][T24027] kworker/u8:45: attempt to access beyond end of device [ 439.794956][T24027] loop6: rw=1, sector=27296, nr_sectors = 7080 limit=256 [ 440.080239][ T3844] tipc: Started in network mode [ 440.085232][ T3844] tipc: Node identity ac1414aa, cluster identity 4711 [ 440.100772][ T3844] tipc: New replicast peer: 100.1.1.1 [ 440.106248][ T3844] tipc: Enabled bearer , priority 10 [ 440.110421][ T3852] netlink: 'syz.1.13920': attribute type 27 has an invalid length. [ 440.126206][ T3850] loop2: detected capacity change from 0 to 128 [ 440.133623][ T3850] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.145855][ T3850] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 440.194631][T24024] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 440.207008][T24024] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.290396][ T3870] netlink: 8 bytes leftover after parsing attributes in process `\'. [ 440.315213][ T3852] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.322545][ T3852] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.389668][ T3852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.403558][ T3852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.453625][ T3852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.462684][ T3852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.471744][ T3852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.480674][ T3852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.636397][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 440.636412][ T29] audit: type=1326 audit(2000000084.110:17689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.6.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.679658][ T29] audit: type=1326 audit(2000000084.110:17690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.6.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.703477][ T29] audit: type=1326 audit(2000000084.130:17691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.6.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.727374][ T29] audit: type=1326 audit(2000000084.130:17692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.6.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.751100][ T29] audit: type=1326 audit(2000000084.130:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3892 comm="syz.6.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.781712][ T29] audit: type=1400 audit(2000000084.260:17694): avc: denied { read write } for pid=3901 comm="syz.2.13949" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.805709][ T29] audit: type=1400 audit(2000000084.260:17695): avc: denied { open } for pid=3901 comm="syz.2.13949" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.854948][ T29] audit: type=1400 audit(2000000084.310:17696): avc: denied { ioctl } for pid=3901 comm="syz.2.13949" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.880300][ T29] audit: type=1326 audit(2000000084.320:17697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.6.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.904218][ T29] audit: type=1326 audit(2000000084.320:17698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.6.13950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fd1c2f85d29 code=0x7ffc0000 [ 440.951613][ T3906] loop6: detected capacity change from 0 to 512 [ 440.963051][ T3906] EXT4-fs: Ignoring removed oldalloc option [ 440.974647][ T3906] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.13951: Parent and EA inode have the same ino 15 [ 440.987542][ T3906] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.13951: Parent and EA inode have the same ino 15 [ 441.006884][ T3906] EXT4-fs (loop6): 1 orphan inode deleted [ 441.045461][ T3906] lo speed is unknown, defaulting to 1000 [ 441.124905][ T3919] netlink: 'syz.7.13958': attribute type 27 has an invalid length. [ 441.183013][ T3926] loop5: detected capacity change from 0 to 1024 [ 441.216767][ T3377] tipc: Node number set to 2886997162 [ 441.219545][ T3930] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 441.384637][ T3958] loop2: detected capacity change from 0 to 512 [ 441.395546][ T3958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 441.415890][ T3958] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 441.431184][ T3958] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 441.439181][ T3958] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.13975: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 441.457657][ T3958] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.13975: couldn't read orphan inode 13 (err -117) [ 441.504973][ T3970] sd 0:0:1:0: device reset [ 441.906214][ T3994] loop6: detected capacity change from 0 to 1024 [ 441.913573][ T3994] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 441.934929][ T3994] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.6.13991: corrupted in-inode xattr: bad magic number in in-inode xattr [ 442.010787][ T4002] xt_hashlimit: max too large, truncated to 1048576 [ 442.060886][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13996'. [ 442.292897][ T4018] loop5: detected capacity change from 0 to 128 [ 442.392012][T24043] bridge_slave_1: left allmulticast mode [ 442.397834][T24043] bridge_slave_1: left promiscuous mode [ 442.403584][T24043] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.416292][T24043] bridge_slave_0: left allmulticast mode [ 442.422032][T24043] bridge_slave_0: left promiscuous mode [ 442.427776][T24043] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.441755][T24043] batman_adv: batadv0: Removing interface: ip6gretap1 [ 442.452092][T24043] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 442.573807][ T4037] netlink: 268 bytes leftover after parsing attributes in process `syz.7.14007'. [ 442.720316][ T4051] loop6: detected capacity change from 0 to 2048 [ 442.727218][T24043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.738003][T24043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.738777][ T4055] netlink: 3 bytes leftover after parsing attributes in process `syz.5.14015'. [ 442.756190][T24043] bond0 (unregistering): Released all slaves [ 442.759231][ T4051] loop6: p1 p2 p3 [ 442.765869][T24043] bond1 (unregistering): Released all slaves [ 442.777573][ T4055] 0ЊXЙІР: renamed from caif0 [ 442.793187][ T4055] 0ЊXЙІР: entered allmulticast mode [ 442.798558][ T4055] A link change request failed with some changes committed already. Interface 60ЊXЙІР may have been left with an inconsistent configuration, please check. [ 442.840622][T24043] hsr_slave_0: left promiscuous mode [ 442.849237][T24043] hsr_slave_1: left promiscuous mode [ 442.857006][T24043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.869046][T24043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.892533][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14019'. [ 442.924822][T24043] team0 (unregistering): Port device team_slave_1 removed [ 442.934667][T24043] team0 (unregistering): Port device team_slave_0 removed [ 442.976139][ T4014] lo speed is unknown, defaulting to 1000 [ 442.983450][ T4066] vlan2: entered allmulticast mode [ 442.988678][ T4066] bridge_slave_0: entered allmulticast mode [ 442.995951][ T4066] bridge_slave_0: left allmulticast mode [ 443.038692][ T4076] pim6reg1: entered promiscuous mode [ 443.044078][ T4076] pim6reg1: entered allmulticast mode [ 443.090554][ T4079] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14025'. [ 443.115918][ T4014] chnl_net:caif_netlink_parms(): no params data found [ 443.172189][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.179469][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.188889][ T4014] bridge_slave_0: entered allmulticast mode [ 443.195484][ T4014] bridge_slave_0: entered promiscuous mode [ 443.202789][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14028'. [ 443.215055][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.222314][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.233969][ T4014] bridge_slave_1: entered allmulticast mode [ 443.244016][ T4014] bridge_slave_1: entered promiscuous mode [ 443.294022][ T4014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.305187][ T4014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.345585][ T4014] team0: Port device team_slave_0 added [ 443.352544][ T4014] team0: Port device team_slave_1 added [ 443.428049][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14037'. [ 443.438983][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.446085][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.472486][ T4014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.485206][ T4014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.492394][ T4014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.518648][ T4014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.532997][ T4109] syzkaller0: entered allmulticast mode [ 443.557420][ T4014] hsr_slave_0: entered promiscuous mode [ 443.564019][ T4014] hsr_slave_1: entered promiscuous mode [ 443.571033][ T4014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.581435][ T4014] Cannot create hsr debugfs directory [ 443.729109][ T4014] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.781151][ T4130] loop7: detected capacity change from 0 to 1024 [ 443.807675][ T4130] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.14049: Failed to acquire dquot type 0 [ 443.808331][ T4014] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.832560][ T4130] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 443.847322][ T4130] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.14049: corrupted inode contents [ 443.872301][ T4130] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #13: comm syz.7.14049: mark_inode_dirty error [ 443.898346][ T4130] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.14049: corrupted inode contents [ 443.912858][ T4014] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.926050][ T4130] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.14049: mark_inode_dirty error [ 443.950097][ T4130] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.14049: corrupted inode contents [ 443.975206][ T4130] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 443.992677][ T4145] team0 (unregistering): Port device team_slave_0 removed [ 444.000976][ T4145] team0 (unregistering): Port device team_slave_1 removed [ 444.012156][ T4130] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #13: comm syz.7.14049: corrupted inode contents [ 444.029364][ T4130] EXT4-fs error (device loop7): ext4_truncate:4240: inode #13: comm syz.7.14049: mark_inode_dirty error [ 444.041060][ T4130] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 444.041630][ T4014] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.050483][ T4130] EXT4-fs (loop7): 1 truncate cleaned up [ 444.099646][T24027] bridge_slave_1: left allmulticast mode [ 444.105390][T24027] bridge_slave_1: left promiscuous mode [ 444.111138][T24027] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.128246][T24027] bridge_slave_0: left allmulticast mode [ 444.133965][T24027] bridge_slave_0: left promiscuous mode [ 444.139773][T24027] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.228137][ T4159] loop5: detected capacity change from 0 to 1024 [ 444.234867][ T4159] EXT4-fs: Ignoring removed nobh option [ 444.235028][T24027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.241190][ T4159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.258739][T24027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.267929][T24027] bond0 (unregistering): Released all slaves [ 444.274087][ T4159] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 444.293849][ T4134] lo speed is unknown, defaulting to 1000 [ 444.321788][ T4163] loop5: detected capacity change from 0 to 256 [ 444.335067][ T4165] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14060'. [ 444.366622][T24027] hsr_slave_0: left promiscuous mode [ 444.373114][T24027] hsr_slave_1: left promiscuous mode [ 444.382070][T24027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.390931][T24027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.427279][T24027] team0 (unregistering): Port device team_slave_1 removed [ 444.441215][T24027] team0 (unregistering): Port device team_slave_0 removed [ 444.475735][ T4174] loop5: detected capacity change from 0 to 512 [ 444.488665][ T4014] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 444.496354][ T4174] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 444.508500][ T4174] System zones: 0-2, 18-18, 34-34 [ 444.514425][ T4174] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.14063: bg 0: block 248: padding at end of block bitmap is not set [ 444.529710][ T4174] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.14063: Failed to acquire dquot type 1 [ 444.541726][ T4174] EXT4-fs (loop5): 1 truncate cleaned up [ 444.547952][ T4174] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.570280][T24024] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:42: Failed to release dquot type 1 [ 444.585925][ T4014] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 444.609817][ T4014] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 444.620778][ T4014] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 444.642113][ T4134] chnl_net:caif_netlink_parms(): no params data found [ 444.775207][ T4134] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.782470][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.804274][ T4134] bridge_slave_0: entered allmulticast mode [ 444.820808][ T4134] bridge_slave_0: entered promiscuous mode [ 444.837157][ T4134] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.844288][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.854994][ T4134] bridge_slave_1: entered allmulticast mode [ 444.883583][ T4134] bridge_slave_1: entered promiscuous mode [ 444.920500][ T4196] loop5: detected capacity change from 0 to 2048 [ 444.929328][ T4134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.940449][ T4134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.977881][ T4134] team0: Port device team_slave_0 added [ 444.984751][ T4134] team0: Port device team_slave_1 added [ 445.007874][ T4134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.014938][ T4134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.041049][ T4134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.078333][ T4134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.085408][ T4134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.111412][ T4134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.132168][ T4014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.144682][ T4014] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.191724][T24043] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.198927][T24043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.213976][T24024] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.221118][T24024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.254172][ T4134] hsr_slave_0: entered promiscuous mode [ 445.270614][ T4134] hsr_slave_1: entered promiscuous mode [ 445.386574][ T4134] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.428091][ T4014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.448616][ T4134] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.550470][ T4134] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.608131][ T4134] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.695739][ T4134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.698912][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 445.698929][ T29] audit: type=1326 audit(2000000089.170:17839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.741842][ T4134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.751996][ T29] audit: type=1326 audit(2000000089.210:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.775758][ T29] audit: type=1326 audit(2000000089.210:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.799525][ T29] audit: type=1326 audit(2000000089.210:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.823229][ T29] audit: type=1326 audit(2000000089.210:17843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.846887][ T29] audit: type=1326 audit(2000000089.210:17844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.870542][ T29] audit: type=1326 audit(2000000089.210:17845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.894246][ T29] audit: type=1326 audit(2000000089.210:17846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.917841][ T29] audit: type=1326 audit(2000000089.210:17847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.942052][ T29] audit: type=1326 audit(2000000089.210:17848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.14090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd1695d29 code=0x7ffc0000 [ 445.968267][ T4134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.980718][ T4014] veth0_vlan: entered promiscuous mode [ 445.991469][ T4134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.006362][ T4261] syz.7.14093[4261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.006519][ T4261] syz.7.14093[4261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.028989][ T4014] veth1_vlan: entered promiscuous mode [ 446.046993][ T4261] syz.7.14093[4261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.058626][ T4263] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.069406][ T4265] loop7: detected capacity change from 0 to 128 [ 446.077948][ T4134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.081390][ T4265] EXT4-fs: Ignoring removed nobh option [ 446.096613][ T4134] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.102854][ T4265] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.116450][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.123545][ T9675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.133189][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.140467][ T9675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.159054][ T4134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.169546][ T4134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.196347][ T4014] veth0_macvtap: entered promiscuous mode [ 446.207983][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.215506][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.223002][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.230711][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.235897][ T4014] veth1_macvtap: entered promiscuous mode [ 446.238219][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.251492][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.255095][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.258927][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.258994][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.259021][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.269475][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.276892][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.284253][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.291649][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.301441][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.308830][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.308855][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.330445][ T4014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.336600][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.366283][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.367730][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.373815][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.384207][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.391574][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.391603][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.401430][ T4014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.401450][ T4014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.408843][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.421049][ T4014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.426672][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.426700][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.426743][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.448216][ T4014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.451301][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.458669][ T4014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.465895][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.473279][ T4014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.481948][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.489329][ T4014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.498073][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.538104][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.545550][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.553135][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.560784][ T3377] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 446.569233][ T3377] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 446.576322][ T4134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.656280][ T4285] loop7: detected capacity change from 0 to 512 [ 446.664405][ T4285] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 446.683788][ T4285] EXT4-fs (loop7): 1 truncate cleaned up [ 446.763833][ T4300] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 446.773385][ T4134] veth0_vlan: entered promiscuous mode [ 446.782624][ T4134] veth1_vlan: entered promiscuous mode [ 446.820719][ T4305] msdos: Unknown parameter '18446744073709551615џџџџџџџџ01777777777777777777777џџ|ох‡-' [ 446.824981][ T4134] veth0_macvtap: entered promiscuous mode [ 446.844725][ T4134] veth1_macvtap: entered promiscuous mode [ 446.852201][ T4309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.857120][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.872376][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.882236][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.892730][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.902676][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.913134][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.926975][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.935590][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.946207][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.956156][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.966680][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.976597][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.987190][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.009964][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.032755][ T4134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.041654][ T4134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.050526][ T4134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.059417][ T4134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.064460][ T4321] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1767554639/1767554641 [ 447.077534][ T4321] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1767554639/1767554641 [ 447.182428][ T4336] msdos: Unknown parameter '18446744073709551615џџџџџџџџ01777777777777777777777џџ|ох‡-' [ 447.509679][ T4387] loop5: detected capacity change from 0 to 2048 [ 447.520345][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14141'. [ 447.532616][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14141'. [ 447.576588][ T4398] syz.7.14144[4398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.576925][ T4398] syz.7.14144[4398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.594234][ T4398] syz.7.14144[4398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.650764][ T4410] loop3: detected capacity change from 0 to 512 [ 447.691937][ T4406] loop7: detected capacity change from 0 to 1024 [ 447.704300][ T4410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 447.707058][ T4406] EXT4-fs: Ignoring removed orlov option [ 447.733608][ T4410] System zones: 0-2, 18-18, 34-34 [ 447.750482][ T4410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14148: bg 0: block 248: padding at end of block bitmap is not set [ 447.797438][ T4425] loop8: detected capacity change from 0 to 1024 [ 447.808363][ T4410] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.14148: Failed to acquire dquot type 1 [ 447.823050][ T4410] EXT4-fs (loop3): 1 truncate cleaned up [ 447.829454][ T4410] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.844685][ T4425] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.14155: Failed to acquire dquot type 0 [ 447.858326][ T4425] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 447.883551][ T9675] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:21: Failed to release dquot type 1 [ 447.883554][ T4425] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #13: comm syz.8.14155: corrupted inode contents [ 447.883717][ T4425] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #13: comm syz.8.14155: mark_inode_dirty error [ 447.919522][ T4425] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #13: comm syz.8.14155: corrupted inode contents [ 447.932029][ T4425] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.14155: mark_inode_dirty error [ 447.946253][ T4425] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #13: comm syz.8.14155: corrupted inode contents [ 447.959772][ T4425] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 447.971524][ T4425] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #13: comm syz.8.14155: corrupted inode contents [ 448.010791][ T4425] EXT4-fs error (device loop8): ext4_truncate:4240: inode #13: comm syz.8.14155: mark_inode_dirty error [ 448.056485][ T4425] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 448.073399][ T4425] EXT4-fs (loop8): 1 truncate cleaned up [ 448.673088][ T4465] loop2: detected capacity change from 0 to 1024 [ 448.690549][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14173'. [ 448.702221][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14173'. [ 448.721422][ T4465] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.14172: Failed to acquire dquot type 0 [ 448.739931][ T4465] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 448.779122][ T4465] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.14172: corrupted inode contents [ 448.799030][ T4465] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.14172: mark_inode_dirty error [ 448.827048][ T4465] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.14172: corrupted inode contents [ 448.842704][ T4465] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.14172: mark_inode_dirty error [ 448.867100][ T4465] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.14172: corrupted inode contents [ 448.890675][ T4465] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 448.909526][ T4465] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.14172: corrupted inode contents [ 448.935420][ T4465] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.14172: mark_inode_dirty error [ 448.968719][ T4465] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 449.002452][ T4465] EXT4-fs (loop2): 1 truncate cleaned up [ 449.203144][ T4487] ebtables: ebtables: counters copy to user failed while replacing table [ 449.230644][ T4491] loop2: detected capacity change from 0 to 2048 [ 449.386207][ T4502] loop5: detected capacity change from 0 to 128 [ 449.402856][ T4504] loop2: detected capacity change from 0 to 512 [ 449.411541][ T4502] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 449.470081][ T4504] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 449.478465][ T4504] System zones: 0-2, 18-18, 34-34 [ 449.485728][ T4504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14186: bg 0: block 248: padding at end of block bitmap is not set [ 449.503610][ T4504] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.14186: Failed to acquire dquot type 1 [ 449.521065][ T4504] EXT4-fs (loop2): 1 truncate cleaned up [ 449.524002][ T4509] loop5: detected capacity change from 0 to 128 [ 449.527561][ T4504] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.565765][ T4509] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 449.603751][T24027] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:45: Failed to release dquot type 1 [ 449.670639][ T4514] macvlan2: entered promiscuous mode [ 449.675994][ T4514] bridge0: entered promiscuous mode [ 449.686117][ T4514] bridge0: port 1(macvlan2) entered blocking state [ 449.692819][ T4514] bridge0: port 1(macvlan2) entered disabled state [ 449.704962][ T4514] macvlan2: entered allmulticast mode [ 449.710438][ T4514] bridge0: entered allmulticast mode [ 449.733165][ T4514] macvlan2: left allmulticast mode [ 449.738447][ T4514] bridge0: left allmulticast mode [ 449.749159][ T4514] bridge0: left promiscuous mode [ 450.130605][ T4538] loop7: detected capacity change from 0 to 1764 [ 450.752222][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 450.752316][ T29] audit: type=1400 audit(2000000094.230:18036): avc: denied { relabelfrom } for pid=4569 comm="syz.7.14214" name="" dev="pipefs" ino=120598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 451.108604][ T29] audit: type=1326 audit(2000000094.590:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.178403][ T29] audit: type=1326 audit(2000000094.610:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.202306][ T29] audit: type=1326 audit(2000000094.610:18039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.225980][ T29] audit: type=1326 audit(2000000094.610:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.250010][ T29] audit: type=1326 audit(2000000094.610:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.273784][ T29] audit: type=1326 audit(2000000094.610:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.297057][ T4602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14228'. [ 451.297408][ T29] audit: type=1326 audit(2000000094.610:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.330381][ T29] audit: type=1326 audit(2000000094.610:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.333817][ T4602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14228'. [ 451.354264][ T29] audit: type=1326 audit(2000000094.610:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.8.14226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd207f55d29 code=0x7ffc0000 [ 451.415248][ T4606] loop5: detected capacity change from 0 to 256 [ 451.453950][ T4606] FAT-fs (loop5): bogus number of FAT sectors [ 451.460094][ T4606] FAT-fs (loop5): Can't find a valid FAT filesystem [ 451.485066][ T4604] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 451.750935][ T4637] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14241'. [ 451.794522][ T4643] loop3: detected capacity change from 0 to 512 [ 451.821755][ T4643] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 451.830943][ T4643] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 451.857654][ T4643] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 451.875406][ T4643] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 451.884014][ T4643] System zones: 0-2, 18-18, 34-34 [ 451.894286][ T4643] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 451.909662][ T4643] EXT4-fs (loop3): 1 truncate cleaned up [ 451.915696][ T4643] EXT4-fs mount: 38 callbacks suppressed [ 451.915713][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.042257][ T4134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.444569][ T4685] loop5: detected capacity change from 0 to 2048 [ 452.484685][ T4690] loop7: detected capacity change from 0 to 512 [ 452.495122][ T4690] EXT4-fs: Ignoring removed oldalloc option [ 452.513321][ T4685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.531253][ T4690] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.14264: Parent and EA inode have the same ino 15 [ 452.553527][ T4690] EXT4-fs (loop7): Remounting filesystem read-only [ 452.561959][ T4690] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -5) [ 452.573967][ T4690] EXT4-fs (loop7): 1 orphan inode deleted [ 452.581712][ T4690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.595273][ T4690] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 452.608530][ T4690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.668395][ T394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.769741][ T4701] loop5: detected capacity change from 0 to 1024 [ 452.777497][ T4702] loop3: detected capacity change from 0 to 128 [ 452.790059][ T4702] bio_check_eod: 1 callbacks suppressed [ 452.790073][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.790073][ T4702] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 452.811204][ T4701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.828248][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.828248][ T4702] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 452.842123][ T4702] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 452.851004][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.851004][ T4702] loop3: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 452.864546][ T4702] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 452.873218][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.873218][ T4702] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 452.886802][ T4702] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 452.895422][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.895422][ T4702] loop3: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 452.904280][ T4708] syz.7.14270[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.908972][ T4702] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 452.909086][ T4708] syz.7.14270[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.923728][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.923728][ T4702] loop3: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 452.929353][ T4708] syz.7.14270[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.940742][ T4702] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 452.944221][ T394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.986385][ T4702] syz.3.14267: attempt to access beyond end of device [ 452.986385][ T4702] loop3: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 452.988653][ T4708] msdos: Unknown parameter '18446744073709551615џџџџџџџџ01777777777777777777777єXю' [ 453.029935][T24024] kworker/u8:42: attempt to access beyond end of device [ 453.029935][T24024] loop3: rw=1, sector=233, nr_sectors = 808 limit=128 [ 453.075664][ T4719] syz.3.14274[4719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.075757][ T4719] syz.3.14274[4719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.090366][ T4719] syz.3.14274[4719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.440211][ T4741] ref_ctr_offset mismatch. inode: 0x4d0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 453.786391][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14295'. [ 453.905711][ T4773] netlink: 'syz.8.14299': attribute type 10 has an invalid length. [ 453.919613][ T4773] syz_tun: entered promiscuous mode [ 453.931447][ T4773] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 453.994381][ T4783] loop8: detected capacity change from 0 to 164 [ 454.021582][ T4783] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 454.041285][ T4783] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 454.289944][ T4790] syz_tun: left promiscuous mode [ 454.306275][ T4790] bond0: (slave syz_tun): Releasing backup interface [ 454.328023][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.335276][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.384871][ T4790] bridge_slave_0: left allmulticast mode [ 454.390866][ T4790] bridge_slave_0: left promiscuous mode [ 454.396528][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.431077][ T4790] bridge_slave_1: left allmulticast mode [ 454.436938][ T4790] bridge_slave_1: left promiscuous mode [ 454.442632][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.469801][ T4790] bond0: (slave bond_slave_0): Releasing backup interface [ 454.484838][ T4790] bond0: (slave bond_slave_1): Releasing backup interface [ 454.500447][ T4790] team0: Port device team_slave_0 removed [ 454.510125][ T4790] team0: Port device team_slave_1 removed [ 454.519170][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.530121][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.540976][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.551832][ T4790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.590080][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14307'. [ 454.605582][ T4790] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.614733][ T4790] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.623909][ T4790] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.633115][ T4790] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.644370][ T4804] loop7: detected capacity change from 0 to 1024 [ 454.669896][ T4812] random: crng reseeded on system resumption [ 454.715239][ T4804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.772766][ T4816] netlink: 'syz.3.14314': attribute type 10 has an invalid length. [ 454.781099][ T4816] syz_tun: entered promiscuous mode [ 454.793478][ T4816] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 454.803203][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.862669][ T4826] gretap0: entered promiscuous mode [ 454.921825][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14323'. [ 455.121220][ T4848] netlink: 'syz.5.14328': attribute type 10 has an invalid length. [ 455.130229][ T4850] netlink: 2 bytes leftover after parsing attributes in process `syz.7.14330'. [ 455.147620][ T4848] syz_tun: entered promiscuous mode [ 455.155093][ T4848] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 455.173717][ T4852] loop7: detected capacity change from 0 to 512 [ 455.181908][ T4852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.193426][ T4852] EXT4-fs (loop7): orphan cleanup on readonly fs [ 455.201501][ T4852] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.14331: Failed to acquire dquot type 1 [ 455.216064][ T4852] EXT4-fs (loop7): 1 truncate cleaned up [ 455.222505][ T4852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.269814][ T2027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.281861][ T4857] loop3: detected capacity change from 0 to 2048 [ 455.313180][ T4857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.328461][ T4864] lo speed is unknown, defaulting to 1000 [ 455.376008][ T4864] loop7: detected capacity change from 0 to 1024 [ 455.382630][ T4857] loop3: detected capacity change from 2048 to 0 [ 455.383872][ T4864] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 455.390030][ T4857] syz.3.14333: attempt to access beyond end of device [ 455.390030][ T4857] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 455.403153][ T4864] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 455.412912][ T4857] EXT4-fs error (device loop3): __ext4_find_entry:1641: inode #2: comm syz.3.14333: reading directory lblock 0 [ 455.424205][ T4864] EXT4-fs (loop7): orphan cleanup on readonly fs [ 455.432595][ T4857] syz.3.14333: attempt to access beyond end of device [ 455.432595][ T4857] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 455.442075][ T4864] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 455.452200][ T4857] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 455.462631][ T4864] EXT4-fs (loop7): Remounting filesystem read-only [ 455.470002][ T4857] EXT4-fs (loop3): I/O error while writing superblock [ 455.479827][ T4864] EXT4-fs (loop7): 1 orphan inode deleted [ 455.490309][ T4864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 455.504683][ T4864] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 455.511778][ T4864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.564237][T12163] IPVS: starting estimator thread 0... [ 455.592907][ T4134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.604057][ T4876] netlink: 'syz.5.14340': attribute type 13 has an invalid length. [ 455.610771][ T4134] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 455.621462][ T4134] EXT4-fs (loop3): I/O error while writing superblock [ 455.623033][ T4876] gretap0: refused to change device tx_queue_len [ 455.635030][ T4876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 455.651286][ T4861] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 455.673437][ T4134] bond0: (slave syz_tun): Releasing backup interface [ 455.686868][ T4872] IPVS: using max 2448 ests per chain, 122400 per kthread [ 455.689962][ T4880] loop5: detected capacity change from 0 to 164 [ 455.705597][ T4880] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 455.715690][ T4880] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 455.809102][T24024] IPVS: stop unused estimator thread 0... [ 455.874166][T24024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.942871][T24024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.955533][ T4890] lo speed is unknown, defaulting to 1000 [ 455.994408][T24024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.082854][T24024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.158235][ T4890] chnl_net:caif_netlink_parms(): no params data found [ 456.183531][T24024] bridge_slave_1: left allmulticast mode [ 456.189264][T24024] bridge_slave_1: left promiscuous mode [ 456.195010][T24024] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.203378][T24024] bridge_slave_0: left allmulticast mode [ 456.209142][T24024] bridge_slave_0: left promiscuous mode [ 456.214815][T24024] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.310056][T24024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.322024][T24024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.331530][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 456.331604][ T29] audit: type=1400 audit(2000000099.810:18199): avc: denied { connect } for pid=4931 comm="syz.8.14359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.358236][ T4933] netlink: 'syz.7.14354': attribute type 10 has an invalid length. [ 456.370555][T24024] bond0 (unregistering): Released all slaves [ 456.386754][ T4933] syz_tun: entered promiscuous mode [ 456.393865][ T4933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 456.446726][T24024] hsr_slave_0: left promiscuous mode [ 456.456229][T24024] hsr_slave_1: left promiscuous mode [ 456.475649][T24024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.483456][T24024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.508931][T24024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.516450][T24024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.542256][T24024] veth1_macvtap: left promiscuous mode [ 456.547931][T24024] veth0_macvtap: left promiscuous mode [ 456.553521][T24024] veth1_vlan: left promiscuous mode [ 456.558935][T24024] veth0_vlan: left promiscuous mode [ 456.577866][ T29] audit: type=1400 audit(2000000100.060:18200): avc: denied { connect } for pid=4956 comm="syz.7.14369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 456.689916][T24024] team0 (unregistering): Port device team_slave_1 removed [ 456.701648][T24024] team0 (unregistering): Port device team_slave_0 removed [ 456.721017][ T29] audit: type=1326 audit(2000000100.200:18201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.7.14372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x0 [ 456.743490][ T4964] loop2: detected capacity change from 0 to 512 [ 456.751222][ T4964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.760748][ T4964] EXT4-fs (loop2): orphan cleanup on readonly fs [ 456.767763][ T4964] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 456.777233][ T4964] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 456.786751][ T4964] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.14371: Failed to acquire dquot type 1 [ 456.798733][ T4964] EXT4-fs (loop2): 1 truncate cleaned up [ 456.804890][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.804968][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.824406][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.832326][ T4890] bridge_slave_0: entered allmulticast mode [ 456.832742][ T445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.839030][ T4890] bridge_slave_0: entered promiscuous mode [ 456.854432][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.861672][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.869032][ T4890] bridge_slave_1: entered allmulticast mode [ 456.875748][ T4890] bridge_slave_1: entered promiscuous mode [ 456.895680][ T4890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.906529][ T4890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.926124][ T4890] team0: Port device team_slave_0 added [ 456.933267][ T4890] team0: Port device team_slave_1 added [ 456.950211][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.957245][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.983221][ T4890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.994773][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.001757][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.027683][ T4890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.054952][ T4890] hsr_slave_0: entered promiscuous mode [ 457.061414][ T4890] hsr_slave_1: entered promiscuous mode [ 457.294752][ T4890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 457.302122][ T29] audit: type=1400 audit(2000000100.790:18202): avc: denied { append } for pid=4970 comm="syz.5.14374" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 457.304483][ T4890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 457.335349][ T4890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 457.347237][ T4890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 457.362804][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.370064][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.377491][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.384556][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.392615][ T29] audit: type=1326 audit(2000000100.860:18203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.14377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e87c5d29 code=0x7ffc0000 [ 457.416341][ T29] audit: type=1326 audit(2000000100.860:18204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.14377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e87c5d29 code=0x7ffc0000 [ 457.440651][ T29] audit: type=1326 audit(2000000100.860:18205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.14377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f95e87c5d29 code=0x7ffc0000 [ 457.464467][ T29] audit: type=1326 audit(2000000100.870:18206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4974 comm="syz.5.14377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95e87c5d63 code=0x7ffc0000 [ 457.472191][ T4890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.516175][T24035] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.528201][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.541354][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14379'. [ 457.544536][ T4890] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.567173][T24024] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.574270][T24024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.585318][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.592435][ T1817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.646113][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.654808][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.685881][ T4890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.815701][ T5015] syz_tun: left promiscuous mode [ 457.822008][ T5015] bond0: (slave syz_tun): Releasing backup interface [ 457.829431][ T5015] bridge_slave_0: left allmulticast mode [ 457.835103][ T5015] bridge_slave_0: left promiscuous mode [ 457.840838][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.849358][ T5015] bridge_slave_1: left allmulticast mode [ 457.855045][ T5015] bridge_slave_1: left promiscuous mode [ 457.860966][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.870836][ T5015] bond0: (slave bond_slave_0): Releasing backup interface [ 457.881091][ T5015] bond0: (slave bond_slave_1): Releasing backup interface [ 457.891759][ T5015] team0: Port device team_slave_0 removed [ 457.899516][ T5015] team0: Port device team_slave_1 removed [ 457.905524][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.915344][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.971099][ T4890] veth0_vlan: entered promiscuous mode [ 457.979481][ T4890] veth1_vlan: entered promiscuous mode [ 457.995837][ T4890] veth0_macvtap: entered promiscuous mode [ 458.003260][ T4890] veth1_macvtap: entered promiscuous mode [ 458.012873][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.023395][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.033259][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.043759][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.054848][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.069488][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.080056][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.089962][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.100555][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.111644][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.121403][ T4890] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.130282][ T4890] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.139100][ T4890] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.147984][ T4890] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.233119][ T5039] ref_ctr_offset mismatch. inode: 0x11 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 458.318848][ T5051] bridge_slave_0: left allmulticast mode [ 458.324567][ T5051] bridge_slave_0: left promiscuous mode [ 458.330417][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.341291][ T5051] bridge_slave_1: left allmulticast mode [ 458.347027][ T5051] bridge_slave_1: left promiscuous mode [ 458.352748][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.371967][ T5051] bond0: (slave bond_slave_0): Releasing backup interface [ 458.400178][ T5051] bond0: (slave bond_slave_1): Releasing backup interface [ 458.414040][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.427364][ T5051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.440016][ T5062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.443889][ T5060] loop5: detected capacity change from 0 to 2048 [ 458.454317][ T5063] loop8: detected capacity change from 0 to 1024 [ 458.462346][ T5062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.464339][ T5051] bond2: (slave batadv1): Releasing active interface [ 458.472684][ T5063] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 458.487950][ T5063] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 458.497720][ T5063] EXT4-fs (loop8): orphan cleanup on readonly fs [ 458.499272][ T5060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.507088][ T5058] lo speed is unknown, defaulting to 1000 [ 458.519703][ T5063] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 458.553498][ T5063] EXT4-fs (loop8): Remounting filesystem read-only [ 458.560513][ T5063] EXT4-fs (loop8): 1 orphan inode deleted [ 458.567041][ T5063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 458.579195][ T5060] loop5: detected capacity change from 2048 to 0 [ 458.586342][ T5060] bio_check_eod: 3 callbacks suppressed [ 458.586359][ T5060] syz.5.14408: attempt to access beyond end of device [ 458.586359][ T5060] loop5: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 458.605990][ T5063] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 458.613301][ T5063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.622674][ T5060] EXT4-fs error (device loop5): __ext4_find_entry:1641: inode #2: comm syz.5.14408: reading directory lblock 0 [ 458.635252][ T5060] syz.5.14408: attempt to access beyond end of device [ 458.635252][ T5060] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 458.648719][ T5060] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 458.659808][ T5060] EXT4-fs (loop5): I/O error while writing superblock [ 458.690231][ T394] syz-executor: attempt to access beyond end of device [ 458.690231][ T394] loop5: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 458.735214][ T2100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.742683][ T5073] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 458.746255][ T2100] syz.5.13202: attempt to access beyond end of device [ 458.746255][ T2100] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 458.764282][ T2100] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 458.772740][ T2100] EXT4-fs (loop5): I/O error while writing superblock [ 458.781084][ T5065] kmmpd-loop5: attempt to access beyond end of device [ 458.781084][ T5065] loop5: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 458.794632][ T5065] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 458.803679][T13020] IPVS: starting estimator thread 0... [ 458.811045][ T2100] bond0: (slave syz_tun): Releasing backup interface [ 458.846777][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14414'. [ 458.855907][ T5076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.896811][ T5074] IPVS: using max 1968 ests per chain, 98400 per kthread [ 458.941383][ T5079] hub 9-0:1.0: USB hub found [ 458.946183][ T5079] hub 9-0:1.0: 8 ports detected [ 458.984338][T24024] IPVS: stop unused estimator thread 0... [ 459.042342][ T5091] vhci_hcd: invalid port number 13 [ 459.047656][ T5091] vhci_hcd: default hub control req: 0305 v1000 i000d l0 [ 459.058836][ T5095] syz.8.14421[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.058912][ T5095] syz.8.14421[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.075649][ T5095] syz.8.14421[5095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.092383][ T5095] Invalid ELF header magic: != ELF [ 459.115836][ T5097] Cannot find del_set index 0 as target [ 459.134013][ T5080] lo speed is unknown, defaulting to 1000 [ 459.178554][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14425'. [ 459.199957][ T5104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.234745][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 459.371349][ T5123] loop8: detected capacity change from 0 to 512 [ 459.470365][ T5131] loop2: detected capacity change from 0 to 512 [ 459.477957][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.485065][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.497373][ T5131] EXT4-fs: Ignoring removed orlov option [ 459.510885][ T5131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.524099][ T5080] bridge_slave_0: entered allmulticast mode [ 459.530840][ T5080] bridge_slave_0: entered promiscuous mode [ 459.537820][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.544882][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.552123][ T5080] bridge_slave_1: entered allmulticast mode [ 459.559073][ T5080] bridge_slave_1: entered promiscuous mode [ 459.618143][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.648496][ T5107] Set syz1 is full, maxelem 65536 reached [ 459.655003][ T5131] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.674121][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.694828][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.703084][ T5131] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.14443: corrupted xattr block 32: invalid header [ 459.718684][ T5131] EXT4-fs (loop2): Remounting filesystem read-only [ 459.725289][ T5131] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 459.748881][ T5131] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 459.791338][ T445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.818909][ T5080] team0: Port device team_slave_0 added [ 459.826783][ T5080] team0: Port device team_slave_1 added [ 459.881256][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.888489][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.915008][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.930233][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.937263][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.963279][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.990363][ T5157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5157 comm=syz.7.14446 [ 460.046804][ T5080] hsr_slave_0: entered promiscuous mode [ 460.053293][ T5080] hsr_slave_1: entered promiscuous mode [ 460.063317][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.076561][ T5080] Cannot create hsr debugfs directory [ 460.131996][ T5165] loop8: detected capacity change from 0 to 1764 [ 460.133626][ T5169] loop9: detected capacity change from 0 to 256 [ 460.183888][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.198866][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.457179][ T5080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.469604][ T5080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.479295][ T5080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.488618][ T5080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.544855][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.558807][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.576772][T24035] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.583882][T24035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.610343][ T5080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.621082][ T5080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.636822][T24035] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.643993][T24035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.719553][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.758583][ T5182] ref_ctr_offset mismatch. inode: 0x1b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 460.906169][ T5201] netlink: 92 bytes leftover after parsing attributes in process `syz.8.14458'. [ 460.942344][ T5080] veth0_vlan: entered promiscuous mode [ 460.946186][ T5204] loop8: detected capacity change from 0 to 256 [ 460.953865][ T5080] veth1_vlan: entered promiscuous mode [ 461.019177][ T5080] veth0_macvtap: entered promiscuous mode [ 461.046537][ T5080] veth1_macvtap: entered promiscuous mode [ 461.063153][ T5214] syz.8.14463[5214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.063224][ T5214] syz.8.14463[5214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.075873][ T5214] syz.8.14463[5214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.094037][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.116242][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.126317][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.136868][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.146823][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.157293][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.168805][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.177150][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.187815][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.190054][ T5217] Cannot find del_set index 0 as target [ 461.197765][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.197788][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.197837][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.234422][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.245162][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.261326][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.270136][ T5080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.278942][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.287675][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.351715][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 461.351741][ T29] audit: type=1326 audit(2000000104.830:18274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.7.14470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 461.412781][ T29] audit: type=1326 audit(2000000104.870:18275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.7.14470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 461.436567][ T29] audit: type=1326 audit(2000000104.870:18276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.7.14470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78f825d29 code=0x7ffc0000 [ 461.474514][ T5236] hub 9-0:1.0: USB hub found [ 461.485056][ T29] audit: type=1400 audit(2000000104.960:18277): avc: denied { relabelfrom } for pid=5241 comm="syz.4.14476" name="NETLINK" dev="sockfs" ino=123977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 461.509868][ T5236] hub 9-0:1.0: 8 ports detected [ 461.509891][ T29] audit: type=1400 audit(2000000104.960:18278): avc: denied { mac_admin } for pid=5241 comm="syz.4.14476" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 461.509943][ T29] audit: type=1400 audit(2000000104.960:18279): avc: denied { relabelto } for pid=5241 comm="syz.4.14476" name="NETLINK" dev="sockfs" ino=123977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 461.510006][ T5236] ================================================================== [ 461.510045][ T5236] BUG: KCSAN: data-race in data_push_tail / number [ 461.510087][ T5236] [ 461.510095][ T5236] write to 0xffffffff88bb0ab0 of 1 bytes by task 29 on cpu 1: [ 461.510112][ T5236] number+0x8b5/0xa90 [ 461.510146][ T5236] vsnprintf+0xa44/0xe30 [ 461.510181][ T5236] vscnprintf+0x42/0x90 [ 461.510224][ T5236] printk_sprint+0x30/0x2d0 [ 461.510255][ T5236] vprintk_store+0x589/0x870 [ 461.510280][ T5236] vprintk_emit+0x15e/0x680 [ 461.510306][ T5236] vprintk_default+0x26/0x30 [ 461.510339][ T5236] vprintk+0x75/0x80 [ 461.510359][ T5236] _printk+0x7a/0xa0 [ 461.510385][ T5236] kauditd_hold_skb+0x1a3/0x1b0 [ 461.510417][ T5236] kauditd_send_queue+0x288/0x2e0 [ 461.510445][ T5236] kauditd_thread+0x42a/0x650 [ 461.510473][ T5236] kthread+0x1d1/0x210 [ 461.510493][ T5236] ret_from_fork+0x4b/0x60 [ 461.510518][ T5236] ret_from_fork_asm+0x1a/0x30 [ 461.510545][ T5236] [ 461.510553][ T5236] read to 0xffffffff88bb0ab0 of 8 bytes by task 5236 on cpu 0: [ 461.510574][ T5236] data_push_tail+0x102/0x430 [ 461.510602][ T5236] data_alloc+0xbe/0x2c0 [ 461.510622][ T5236] prb_reserve+0x85e/0xb60 [ 461.510645][ T5236] vprintk_store+0x558/0x870 [ 461.510677][ T5236] vprintk_emit+0x15e/0x680 [ 461.510709][ T5236] dev_vprintk_emit+0x1df/0x210 [ 461.510755][ T5236] dev_printk_emit+0x82/0xb0 [ 461.510790][ T5236] __dev_printk+0xf6/0x110 [ 461.510812][ T5236] _dev_info+0x99/0xc0 [ 461.510844][ T5236] hub_probe+0xbce/0x15c0 [ 461.510882][ T5236] usb_probe_interface+0x468/0x6b0 [ 461.510906][ T5236] really_probe+0x1cf/0x5d0 [ 461.510927][ T5236] __driver_probe_device+0x12d/0x200 [ 461.510947][ T5236] driver_probe_device+0x38/0x2f0 [ 461.510971][ T5236] __device_attach_driver+0x216/0x320 [ 461.510999][ T5236] bus_for_each_drv+0x1cd/0x240 [ 461.511031][ T5236] __device_attach+0x1c7/0x290 [ 461.511054][ T5236] device_attach+0x17/0x20 [ 461.511077][ T5236] proc_ioctl+0x339/0x400 [ 461.511108][ T5236] usbdev_ioctl+0x1f01/0x3e00 [ 461.511130][ T5236] __se_sys_ioctl+0xc9/0x140 [ 461.511156][ T5236] __x64_sys_ioctl+0x43/0x50 [ 461.511183][ T5236] x64_sys_call+0x1690/0x2dc0 [ 461.511205][ T5236] do_syscall_64+0xc9/0x1c0 [ 461.511236][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.511273][ T5236] [ 461.511279][ T5236] value changed: 0x0000000100000660 -> 0x3228746964756120 [ 461.511296][ T5236] [ 461.511302][ T5236] Reported by Kernel Concurrency Sanitizer on: [ 461.511327][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: syz.2.14474 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 461.511363][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.511382][ T5236] ================================================================== [ 461.711115][ T5254] syz.4.14480[5254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.835133][ T5254] syz.4.14480[5254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.846817][ T5254] syz.4.14480[5254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.863831][ T29] audit: type=1400 audit(2000000105.340:18280): avc: denied { load_policy } for pid=5250 comm="syz.4.14480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 461.890515][ T5254] SELinux: policydb version 0 does not match my version range 15-33 [ 461.906722][ T5254] SELinux: failed to load policy