last executing test programs: 6.769293237s ago: executing program 1 (id=1868): unshare(0x62040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) close(r3) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 6.252570105s ago: executing program 1 (id=1874): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7"], 0x1, 0x27a, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x14}], 0x1}, 0x804) mkdirat(r5, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='./bus/file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x0) 6.143110085s ago: executing program 1 (id=1876): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x8044) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500), 0x0) 6.139625505s ago: executing program 1 (id=1877): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="feff000002000000ebd1ea43edb94b33756692e2b88e00"/32, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bfa90000000000003509"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) open(&(0x7f00000006c0)='./file0\x00', 0x9, 0x0) 6.053474953s ago: executing program 1 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 5.905804267s ago: executing program 1 (id=1879): r0 = socket(0x25, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000000c0), 0x80000075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) 1.656165598s ago: executing program 0 (id=1921): r0 = socket$caif_stream(0x25, 0x1, 0x5) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0xe}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/105, 0x45, 0x69, 0x1, 0x2, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) io_uring_setup(0x4759, 0x0) munlockall() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x0, 0x6fe, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004041}, 0x4000) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 1.429485908s ago: executing program 4 (id=1925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x42, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r2, r3, &(0x7f0000000100)=0x8dff, 0x100000000010001) close_range(r1, 0xffffffffffffffff, 0x0) 1.429207658s ago: executing program 0 (id=1937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x301) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) 1.377553293s ago: executing program 0 (id=1926): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 1.245471155s ago: executing program 4 (id=1929): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000e7ff000000000204000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, r7, 0x601, 0x0, 0x8000, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x0) 1.244742945s ago: executing program 2 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000040)={[{@huge_never}, {@size={'size', 0x3d, [0x54]}}]}) 1.212979778s ago: executing program 3 (id=1931): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 1.136518385s ago: executing program 4 (id=1933): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.127709366s ago: executing program 0 (id=1934): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x10c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 986.771669ms ago: executing program 0 (id=1935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 587.870086ms ago: executing program 2 (id=1936): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 587.318066ms ago: executing program 3 (id=1938): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) 564.837918ms ago: executing program 2 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)=r1) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 451.653898ms ago: executing program 3 (id=1940): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x28000000000000, 0x2002) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa1a) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 412.338481ms ago: executing program 3 (id=1941): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 411.826941ms ago: executing program 2 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8000400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) close(r1) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r2, 0x0, 0x0) 186.149112ms ago: executing program 2 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x808, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 185.879862ms ago: executing program 4 (id=1944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 149.589226ms ago: executing program 4 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 95.997611ms ago: executing program 4 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 94.243951ms ago: executing program 2 (id=1957): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x7, 0x4f6, &(0x7f0000004cc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) r1 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x8000000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x4, 0x0, 0x0) 61.558974ms ago: executing program 3 (id=1947): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x74, 0x30, 0x1, 0x3, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 60.862584ms ago: executing program 0 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000006000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3ed7, 0x0) 0s ago: executing program 3 (id=1948): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c010000020701010000000008000000020000070c00034000000000000000080c00034000000000000000094c0007800800014000000003080002"], 0x12c}}, 0x0) kernel console output (not intermixed with test programs): addresses unique to avoid problems! [ 199.711355][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.721874][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.731788][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.742210][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.752052][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.762459][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.773508][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.787701][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.798195][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.808169][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.818683][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.828522][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.838962][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.848870][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.859271][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.869184][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.879604][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.889413][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.899818][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.909611][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.920012][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.929806][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.940230][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.953112][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.964405][ T8412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.973148][ T8412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.981835][ T8412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.990582][ T8412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.057795][ T8461] loop1: detected capacity change from 0 to 2048 [ 200.068734][ T8461] /dev/loop1: Can't open blockdev [ 200.077774][ T8459] tipc: Started in network mode [ 200.082715][ T8459] tipc: Node identity 2699d24c3ee, cluster identity 4711 [ 200.089898][ T8459] tipc: Enabled bearer , priority 7 [ 200.115465][ T8457] tipc: Disabling bearer [ 200.240456][ T8480] loop2: detected capacity change from 0 to 256 [ 200.259125][ T8480] FAT-fs (loop2): IO charset cp1250 not found [ 200.321125][ T8487] pim6reg1: entered promiscuous mode [ 200.326539][ T8487] pim6reg1: entered allmulticast mode [ 200.354453][ T8487] syzkaller0: entered allmulticast mode [ 200.387928][ T8489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1486'. [ 200.436714][ T8493] serio: Serial port ptm0 [ 200.463301][ T8494] loop2: detected capacity change from 0 to 1024 [ 200.485870][ T8494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.488834][ T8498] loop1: detected capacity change from 0 to 512 [ 200.525909][ T8498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.540921][ T8498] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.571424][ T8412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.603874][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.610508][ T8507] loop1: detected capacity change from 0 to 512 [ 200.630414][ T8507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.645407][ T8510] loop0: detected capacity change from 0 to 512 [ 200.651785][ T8507] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.662760][ T8510] EXT4-fs: Ignoring removed oldalloc option [ 200.706445][ T8507] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.1495: corrupted inode contents [ 200.721380][ T8510] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1498: Parent and EA inode have the same ino 15 [ 200.734053][ T8507] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.1495: mark_inode_dirty error [ 200.748418][ T8510] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1498: Parent and EA inode have the same ino 15 [ 200.761190][ T8507] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.1495: corrupted inode contents [ 200.775383][ T8507] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.1495: mark_inode_dirty error [ 200.775456][ T8510] EXT4-fs (loop0): 1 orphan inode deleted [ 200.775786][ T8510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.807270][ T8507] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.1495: mark inode dirty (error -117) [ 200.820160][ T8507] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 200.848717][ T8412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.860463][ T8520] loop2: detected capacity change from 0 to 256 [ 200.868120][ T8520] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.881361][ T8520] syz.2.1501[8520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.881466][ T8520] syz.2.1501[8520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.892968][ T8520] syz.2.1501[8520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.903698][ T8523] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 200.922048][ T8523] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 200.929830][ T8523] vhci_hcd vhci_hcd.0: Device attached [ 200.937410][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 200.946022][ T8520] Process accounting resumed [ 200.946918][ T8524] vhci_hcd: connection closed [ 200.951776][ T3950] vhci_hcd: stop threads [ 200.960767][ T3950] vhci_hcd: release socket [ 200.965224][ T3950] vhci_hcd: disconnect device [ 201.197377][ T8532] loop2: detected capacity change from 0 to 512 [ 201.205318][ T8532] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.218717][ T8532] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 201.236850][ T8532] EXT4-fs (loop2): 1 truncate cleaned up [ 201.242886][ T8532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.436678][ T8561] loop4: detected capacity change from 0 to 128 [ 201.451187][ T8561] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 201.481566][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.606359][ T8575] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 201.639673][ T8575] netlink: 'syz.3.1510': attribute type 4 has an invalid length. [ 201.656568][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.711287][ T8587] random: crng reseeded on system resumption [ 201.788704][ T8587] loop0: detected capacity change from 0 to 512 [ 201.808895][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.843739][ T8587] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.906527][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.923230][ T8596] ALSA: seq fatal error: cannot create timer (-22) [ 202.228586][ T8609] loop3: detected capacity change from 0 to 2048 [ 202.278249][ T8609] netlink: 'syz.3.1522': attribute type 39 has an invalid length. [ 202.437816][ T8617] loop3: detected capacity change from 0 to 512 [ 202.439541][ T8615] syzkaller0: entered promiscuous mode [ 202.446014][ T8617] EXT4-fs error (device loop3): __ext4_iget:4952: inode #11: block 16: comm syz.3.1526: invalid block [ 202.449682][ T8615] syzkaller0: entered allmulticast mode [ 202.462701][ T8617] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1526: couldn't read orphan inode 11 (err -117) [ 202.491822][ T8617] EXT4-fs (loop3): 1 truncate cleaned up [ 202.499541][ T8617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.520983][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 202.600080][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.647487][ T8638] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 202.780323][ T8645] loop3: detected capacity change from 0 to 2048 [ 202.798666][ T8645] EXT4-fs (loop3): Invalid log cluster size: 65541 [ 204.208476][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 204.208492][ T29] audit: type=1326 audit(1728026848.575:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.212065][ T8656] loop0: detected capacity change from 0 to 164 [ 204.214722][ T29] audit: type=1326 audit(1728026848.575:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.274569][ T29] audit: type=1326 audit(1728026848.575:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.298119][ T29] audit: type=1326 audit(1728026848.575:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.321614][ T29] audit: type=1326 audit(1728026848.575:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.345355][ T29] audit: type=1326 audit(1728026848.575:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.368922][ T29] audit: type=1400 audit(1728026848.575:4704): avc: denied { read } for pid=8651 comm="syz.4.1542" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.391936][ T29] audit: type=1400 audit(1728026848.575:4705): avc: denied { open } for pid=8651 comm="syz.4.1542" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.415434][ T29] audit: type=1326 audit(1728026848.575:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.439059][ T29] audit: type=1326 audit(1728026848.575:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 204.440857][ T8656] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 204.470159][ T8660] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 204.620405][ T8671] team0 (unregistering): Port device team_slave_0 removed [ 204.630175][ T8671] team0 (unregistering): Port device team_slave_1 removed [ 205.028898][ T8685] loop2: detected capacity change from 0 to 2048 [ 205.050243][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.126774][ T8691] loop4: detected capacity change from 0 to 2048 [ 205.148815][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 205.157739][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 205.169060][ T8691] loop4: p2 < > [ 205.187329][ C0] blk_print_req_error: 2 callbacks suppressed [ 205.187347][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 205.216176][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.234981][ T5156] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 205.319005][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.327956][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.451767][ T8723] netlink: 'syz.2.1567': attribute type 4 has an invalid length. [ 205.464152][ T8723] netlink: 'syz.2.1567': attribute type 4 has an invalid length. [ 205.551800][ T8727] syz.1.1566[8727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.552055][ T8727] syz.1.1566[8727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.563657][ T8727] syz.1.1566[8727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.712822][ T8732] syz.2.1571[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.740485][ T8732] syz.2.1571[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.752806][ T8732] syz.2.1571[8732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.834020][ T8739] loop2: detected capacity change from 0 to 164 [ 205.852905][ T8739] Unable to read rock-ridge attributes [ 205.859410][ T8739] Unable to read rock-ridge attributes [ 205.865453][ T8739] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 206.262343][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 206.468394][ T8757] loop3: detected capacity change from 0 to 256 [ 206.486472][ T8757] FAT-fs (loop3): Directory bread(block 64) failed [ 206.493306][ T8757] FAT-fs (loop3): Directory bread(block 65) failed [ 206.502017][ T8757] FAT-fs (loop3): Directory bread(block 66) failed [ 206.509008][ T8757] FAT-fs (loop3): Directory bread(block 67) failed [ 206.515816][ T8757] FAT-fs (loop3): Directory bread(block 68) failed [ 206.522579][ T8757] FAT-fs (loop3): Directory bread(block 69) failed [ 206.531857][ T8757] FAT-fs (loop3): Directory bread(block 70) failed [ 206.538702][ T8757] FAT-fs (loop3): Directory bread(block 71) failed [ 206.547299][ T8757] FAT-fs (loop3): Directory bread(block 72) failed [ 206.554278][ T8757] FAT-fs (loop3): Directory bread(block 73) failed [ 206.601673][ T8755] syz.3.1580: attempt to access beyond end of device [ 206.601673][ T8755] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 206.619163][ T8755] syz.3.1580: attempt to access beyond end of device [ 206.619163][ T8755] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 206.720191][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.730723][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.742295][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 207.266024][ T8771] loop3: detected capacity change from 0 to 128 [ 207.272934][ T8771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 207.286360][ T8770] loop2: detected capacity change from 0 to 2048 [ 207.295413][ T8770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.323537][ T8770] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.356023][ T8770] EXT4-fs (loop2): Remounting filesystem read-only [ 207.408893][ T8775] syzkaller0: entered promiscuous mode [ 207.414427][ T8775] syzkaller0: entered allmulticast mode [ 207.441149][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.480262][ T8782] loop2: detected capacity change from 0 to 128 [ 207.511906][ T8782] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.526052][ T8782] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.590638][ T8788] xt_nfacct: accounting object `syz1' does not exists [ 207.624276][ T8782] loop2: detected capacity change from 128 to 0 [ 207.630855][ T8791] syz.2.1589: attempt to access beyond end of device [ 207.630855][ T8791] loop2: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 207.648699][ T8791] EXT4-fs error (device loop2): ext4_get_inode_loc:4541: inode #12: block 36: comm syz.2.1589: unable to read itable block [ 207.663115][ T8791] syz.2.1589: attempt to access beyond end of device [ 207.663115][ T8791] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 207.676449][ T8791] buffer_io_error: 1209 callbacks suppressed [ 207.676459][ T8791] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 207.691532][ T8791] EXT4-fs (loop2): I/O error while writing superblock [ 207.698350][ T8791] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: IO failure [ 207.707310][ T8791] syz.2.1589: attempt to access beyond end of device [ 207.707310][ T8791] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 207.720651][ T8791] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 207.729519][ T8791] EXT4-fs (loop2): I/O error while writing superblock [ 207.736353][ T8791] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1589: mark_inode_dirty error [ 207.747805][ T8791] syz.2.1589: attempt to access beyond end of device [ 207.747805][ T8791] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 207.761047][ T8791] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 207.769624][ T8791] EXT4-fs (loop2): I/O error while writing superblock [ 207.776535][ T8791] EXT4-fs (loop2): Delayed block allocation failed for inode 12 at logical offset 0 with max blocks 4 with error 5 [ 207.788727][ T8791] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.788727][ T8791] [ 207.816132][ T7370] syz-executor: attempt to access beyond end of device [ 207.816132][ T7370] loop2: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 207.829935][ T7370] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 207.843927][ T7370] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 207.894525][ T7370] syz-executor: attempt to access beyond end of device [ 207.894525][ T7370] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 207.907984][ T7370] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 207.983217][ T7370] EXT4-fs (loop2): I/O error while writing superblock [ 208.037476][ T3950] kworker/u8:38: attempt to access beyond end of device [ 208.037476][ T3950] loop2: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 208.071302][ T3950] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #12: block 36: comm kworker/u8:38: unable to read itable block [ 208.164890][ T3950] kworker/u8:38: attempt to access beyond end of device [ 208.164890][ T3950] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 208.178426][ T3950] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 208.204177][ T3950] EXT4-fs (loop2): I/O error while writing superblock [ 208.211469][ T3950] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #13: block 36: comm kworker/u8:38: unable to read itable block [ 208.225767][ T3950] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 208.234109][ T3950] EXT4-fs (loop2): I/O error while writing superblock [ 208.242676][ T7370] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.261681][ T7370] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 208.306870][ T8799] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 208.358315][ T8797] tipc: Started in network mode [ 208.363259][ T8797] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 208.370430][ T8797] tipc: Enabled bearer , priority 10 [ 208.377651][ T8797] tipc: Resetting bearer [ 208.380587][ T8806] loop0: detected capacity change from 0 to 2048 [ 208.392377][ T8797] tipc: Disabling bearer [ 208.400156][ T8806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.419445][ T8806] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.434759][ T8806] EXT4-fs (loop0): Remounting filesystem read-only [ 208.462893][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.525567][ T8813] loop3: detected capacity change from 0 to 1024 [ 208.535930][ T3950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.549512][ T8813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.619978][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.634202][ T8828] loop0: detected capacity change from 0 to 512 [ 208.654543][ T8833] loop1: detected capacity change from 0 to 128 [ 208.667920][ T8833] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.675813][ T8833] FAT-fs (loop1): Filesystem has been set read-only [ 208.687564][ T3950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.698197][ T8828] EXT4-fs: Ignoring removed i_version option [ 208.709120][ T8828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 208.717423][ T8828] System zones: 1-12 [ 208.721693][ T8833] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.729745][ T8833] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 208.746435][ T8828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1608: bg 0: block 131: padding at end of block bitmap is not set [ 208.760874][ T8828] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 208.771621][ T8828] EXT4-fs (loop0): 1 truncate cleaned up [ 208.777706][ T8828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.808390][ T3950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.837323][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 208.847930][ T8828] bridge_slave_1: left allmulticast mode [ 208.849146][ T8846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1614'. [ 208.853586][ T8828] bridge_slave_1: left promiscuous mode [ 208.868404][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.977156][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 208.987441][ T8844] bridge_slave_1: left allmulticast mode [ 208.993093][ T8844] bridge_slave_1: left promiscuous mode [ 208.999002][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.007608][ T8844] bridge_slave_0: left allmulticast mode [ 209.013265][ T8844] bridge_slave_0: left promiscuous mode [ 209.019009][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.026940][ T8856] loop4: detected capacity change from 0 to 2048 [ 209.045601][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.137001][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.152355][ T3950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.246741][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 209.246760][ T29] audit: type=1400 audit(1728026853.615:4874): avc: denied { read } for pid=8855 comm="syz.4.1617" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.490141][ T8857] syzkaller0: entered promiscuous mode [ 209.495696][ T8857] syzkaller0: entered allmulticast mode [ 210.050291][ T8878] vlan2: entered promiscuous mode [ 210.055475][ T8878] vlan2: entered allmulticast mode [ 210.060581][ T8878] hsr_slave_1: entered allmulticast mode [ 210.122543][ T8878] hsr_slave_1: left allmulticast mode [ 210.140286][ T7270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.153090][ T29] audit: type=1326 audit(1728026854.515:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.181273][ T29] audit: type=1326 audit(1728026854.515:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.204886][ T29] audit: type=1326 audit(1728026854.515:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.228429][ T29] audit: type=1326 audit(1728026854.515:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.251893][ T29] audit: type=1326 audit(1728026854.515:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.275391][ T29] audit: type=1326 audit(1728026854.515:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.299054][ T29] audit: type=1326 audit(1728026854.515:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.0.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5a53dff9 code=0x7ffc0000 [ 210.329292][ T3950] bridge_slave_1: left allmulticast mode [ 210.334998][ T3950] bridge_slave_1: left promiscuous mode [ 210.340656][ T3950] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.359180][ T29] audit: type=1326 audit(1728026854.725:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.4.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 210.382997][ T29] audit: type=1326 audit(1728026854.725:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.4.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f486fffdff9 code=0x7ffc0000 [ 210.417328][ T3950] bridge_slave_0: left allmulticast mode [ 210.422983][ T3950] bridge_slave_0: left promiscuous mode [ 210.428797][ T3950] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.485908][ T8894] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 210.599883][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 210.661368][ T3950] tipc: Left network mode [ 210.669148][ T3950] hsr_slave_0: left promiscuous mode [ 210.677767][ T3950] hsr_slave_1: left promiscuous mode [ 210.738271][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.748580][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.940246][ T8906] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.949425][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.956991][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.970689][ T3950] veth1_macvtap: left promiscuous mode [ 210.976249][ T3950] veth0_macvtap: left promiscuous mode [ 210.981756][ T3950] veth1_vlan: left promiscuous mode [ 210.987154][ T3950] veth0_vlan: left promiscuous mode [ 211.198802][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 211.221152][ T8916] block device autoloading is deprecated and will be removed. [ 211.251528][ T8919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 211.301251][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.308482][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.317895][ T8820] bridge_slave_0: entered allmulticast mode [ 211.324647][ T8820] bridge_slave_0: entered promiscuous mode [ 211.332010][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.339234][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.348642][ T8820] bridge_slave_1: entered allmulticast mode [ 211.355147][ T8820] bridge_slave_1: entered promiscuous mode [ 211.370933][ T8928] loop0: detected capacity change from 0 to 1024 [ 211.382479][ T8928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.394129][ T8929] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1634'. [ 211.413422][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.423124][ T8928] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 211.437165][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.469428][ T8820] team0: Port device team_slave_0 added [ 211.476298][ T8820] team0: Port device team_slave_1 added [ 211.488760][ T8928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.509265][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.516336][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.542275][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.568437][ T8928] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 211.626636][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.652972][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.659990][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.685951][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.721669][ T8937] loop0: detected capacity change from 0 to 128 [ 211.776527][ T8937] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.791419][ T8937] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.855595][ T8820] hsr_slave_0: entered promiscuous mode [ 211.874558][ T8820] hsr_slave_1: entered promiscuous mode [ 211.891005][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.908414][ T8820] Cannot create hsr debugfs directory [ 211.956107][ T7347] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.103362][ T8952] loop1: detected capacity change from 0 to 2048 [ 212.113345][ T8949] loop0: detected capacity change from 0 to 2048 [ 212.126328][ T8952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.126395][ T8949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.194327][ T8952] loop1: detected capacity change from 2048 to 2047 [ 212.204100][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.234779][ T8412] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /33/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 212.259123][ T8412] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 212.273960][ T8412] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 212.287568][ T8820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.294906][ T8820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.320915][ T8820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.347210][ T8820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.407580][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.430607][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.442571][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.449741][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.463723][ T3930] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.470858][ T3930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.541034][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.548905][ T8412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.566997][ T3961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.628736][ T3961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.688643][ T3961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.706791][ T8820] veth0_vlan: entered promiscuous mode [ 212.719970][ T8820] veth1_vlan: entered promiscuous mode [ 212.757605][ T3961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.779105][ T8820] veth0_macvtap: entered promiscuous mode [ 212.791322][ T8820] veth1_macvtap: entered promiscuous mode [ 212.816064][ T8972] chnl_net:caif_netlink_parms(): no params data found [ 212.825070][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.835590][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.845424][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.855910][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.865774][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.876282][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.886112][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.896649][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.906502][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.917043][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.926903][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.937323][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.947270][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.957738][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.970417][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.981431][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.991989][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.001839][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.012281][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.022116][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.032640][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.042541][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.052971][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.062791][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.073217][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.083059][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.093476][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.103283][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.113704][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.123515][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.134103][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.145493][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.237974][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.251327][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.267750][ T3961] bond0 (unregistering): Released all slaves [ 213.280402][ T8820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.289268][ T8820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.298045][ T8820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.306992][ T8820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.411528][ T8994] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 213.457661][ T3961] hsr_slave_0: left promiscuous mode [ 213.463815][ T3961] hsr_slave_1: left promiscuous mode [ 213.473136][ T3961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.480619][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.492845][ T3961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.500362][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.510977][ T3961] veth1_macvtap: left promiscuous mode [ 213.516540][ T3961] veth0_macvtap: left promiscuous mode [ 213.522165][ T3961] veth1_vlan: left promiscuous mode [ 213.527596][ T3961] veth0_vlan: left promiscuous mode [ 213.606543][ T3961] team0 (unregistering): Port device team_slave_1 removed [ 213.616786][ T3961] team0 (unregistering): Port device team_slave_0 removed [ 213.654417][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.661947][ T8994] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 213.670523][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.677717][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.686576][ T8972] bridge_slave_0: entered allmulticast mode [ 213.693026][ T8972] bridge_slave_0: entered promiscuous mode [ 213.701203][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.708344][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.715686][ T8972] bridge_slave_1: entered allmulticast mode [ 213.722442][ T8972] bridge_slave_1: entered promiscuous mode [ 213.732279][ T8997] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 213.742579][ T8997] bond1 (unregistering): Released all slaves [ 213.764338][ T8972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.776378][ T8972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.798302][ T8972] team0: Port device team_slave_0 added [ 213.815809][ T8972] team0: Port device team_slave_1 added [ 213.853944][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.861077][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.887092][ T8972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.899154][ T8972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.906138][ T8972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.932073][ T8972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.944076][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.971600][ T9006] sit0: entered allmulticast mode [ 213.980914][ T8972] hsr_slave_0: entered promiscuous mode [ 213.987073][ T8972] hsr_slave_1: entered promiscuous mode [ 213.992975][ T8972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.000597][ T8972] Cannot create hsr debugfs directory [ 214.011845][ T9006] sit0: entered promiscuous mode [ 214.076311][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.086924][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.319014][ T9018] loop3: detected capacity change from 0 to 512 [ 214.338274][ T9018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.352878][ T9018] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.378877][ T9018] Process accounting resumed [ 214.379389][ T8972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.393037][ T8972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.402078][ T8972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.403827][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 214.403839][ T29] audit: type=1400 audit(1728026858.765:4944): avc: denied { sqpoll } for pid=9024 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.438356][ T8972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.462604][ T9018] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 214.491121][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.558551][ T8972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.580504][ T8972] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.590785][ T29] audit: type=1400 audit(1728026858.955:4945): avc: denied { ioctl } for pid=9026 comm="syz.3.1662" path="socket:[31453]" dev="sockfs" ino=31453 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.606765][ T8972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.626371][ T8972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.648298][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.655478][ T3929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.670857][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.677997][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.770763][ T8972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.798684][ T29] audit: type=1326 audit(1728026859.165:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc76d604fa7 code=0x7ffc0000 [ 214.836610][ T29] audit: type=1326 audit(1728026859.165:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc76d5a9959 code=0x7ffc0000 [ 214.860392][ T29] audit: type=1326 audit(1728026859.165:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc76d604fa7 code=0x7ffc0000 [ 214.883748][ T29] audit: type=1326 audit(1728026859.165:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc76d5a9959 code=0x7ffc0000 [ 214.907241][ T29] audit: type=1326 audit(1728026859.165:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 214.930745][ T29] audit: type=1326 audit(1728026859.165:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 214.954518][ T29] audit: type=1326 audit(1728026859.185:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 214.978086][ T29] audit: type=1326 audit(1728026859.195:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc76d604fa7 code=0x7ffc0000 [ 215.027913][ T9042] loop3: detected capacity change from 0 to 256 [ 215.063467][ T9042] FAT-fs (loop3): Directory bread(block 64) failed [ 215.064653][ T8972] veth0_vlan: entered promiscuous mode [ 215.070226][ T9042] FAT-fs (loop3): Directory bread(block 65) failed [ 215.083222][ T9042] FAT-fs (loop3): Directory bread(block 66) failed [ 215.090491][ T9042] FAT-fs (loop3): Directory bread(block 67) failed [ 215.098106][ T9042] FAT-fs (loop3): Directory bread(block 68) failed [ 215.100674][ T8972] veth1_vlan: entered promiscuous mode [ 215.106571][ T9042] FAT-fs (loop3): Directory bread(block 69) failed [ 215.116948][ T9042] FAT-fs (loop3): Directory bread(block 70) failed [ 215.123700][ T9042] FAT-fs (loop3): Directory bread(block 71) failed [ 215.130812][ T9042] FAT-fs (loop3): Directory bread(block 72) failed [ 215.137543][ T9042] FAT-fs (loop3): Directory bread(block 73) failed [ 215.146081][ T8972] veth0_macvtap: entered promiscuous mode [ 215.160611][ T8972] veth1_macvtap: entered promiscuous mode [ 215.173944][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.184437][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.194366][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.204966][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.214923][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.225494][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.235368][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.245852][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.255700][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.266241][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.276067][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.286528][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.296354][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.306903][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.325205][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.335044][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.345605][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.355531][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.365980][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.375882][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.386324][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.396150][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.406611][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.416424][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.427002][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.436903][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.447357][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.457169][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.467594][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.477420][ T8972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.487849][ T8972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.499944][ T8972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.523029][ T8972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.532003][ T8972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.540762][ T8972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.549629][ T8972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.757948][ T9063] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 215.888417][ T9066] vlan2: entered allmulticast mode [ 215.895074][ T9066] bond0: entered allmulticast mode [ 215.900217][ T9066] bond_slave_0: entered allmulticast mode [ 215.905974][ T9066] bond_slave_1: entered allmulticast mode [ 215.912627][ T9066] bond0: left allmulticast mode [ 215.917655][ T9066] bond_slave_0: left allmulticast mode [ 215.923128][ T9066] bond_slave_1: left allmulticast mode [ 216.218169][ T9073] loop3: detected capacity change from 0 to 256 [ 216.348725][ T9075] loop3: detected capacity change from 0 to 512 [ 216.365867][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.378715][ T9075] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.411381][ T9075] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1674: corrupted xattr block 33: invalid header [ 216.424947][ T9075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 216.433962][ T9075] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1674: corrupted xattr block 33: invalid header [ 216.448205][ T9075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 216.459760][ T9075] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1674: corrupted xattr block 33: invalid header [ 216.473396][ T9075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 216.483066][ T9078] SELinux: failed to load policy [ 216.501177][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.526338][ T9082] pim6reg: entered allmulticast mode [ 216.533265][ T9080] pim6reg: left allmulticast mode [ 216.612353][ T9086] loop3: detected capacity change from 0 to 2048 [ 216.635849][ T9086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.652739][ T9085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.668884][ T9085] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 216.681164][ T9085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.681164][ T9085] [ 216.690841][ T9085] EXT4-fs (loop3): Total free blocks count 0 [ 216.697067][ T9085] EXT4-fs (loop3): Free/Dirty block details [ 216.703210][ T9085] EXT4-fs (loop3): free_blocks=2415919104 [ 216.708970][ T9085] EXT4-fs (loop3): dirty_blocks=64 [ 216.714259][ T9085] EXT4-fs (loop3): Block reservation details [ 216.720237][ T9085] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 216.732094][ T3949] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 26 with max blocks 26 with error 28 [ 216.786901][ T9102] loop2: detected capacity change from 0 to 2048 [ 216.815479][ T9104] vlan2: entered promiscuous mode [ 216.815984][ T9102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.851264][ T8820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.872526][ T9109] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 216.880352][ T9109] netlink: 'syz.2.1686': attribute type 2 has an invalid length. [ 216.906431][ T9111] loop2: detected capacity change from 0 to 128 [ 216.981977][ T9119] netlink: 'syz.1.1687': attribute type 4 has an invalid length. [ 217.001825][ T9119] netlink: 'syz.1.1687': attribute type 4 has an invalid length. [ 217.041351][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 217.073781][ T9125] loop3: detected capacity change from 0 to 1024 [ 217.082075][ T9125] EXT4-fs: Ignoring removed oldalloc option [ 217.087977][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 217.099911][ T9130] vlan2: entered promiscuous mode [ 217.105011][ T9130] syz_tun: entered promiscuous mode [ 217.110341][ T9130] vlan2: entered allmulticast mode [ 217.110675][ T9125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.115475][ T9130] syz_tun: entered allmulticast mode [ 217.136926][ T9130] syz_tun: left allmulticast mode [ 217.142011][ T9130] syz_tun: left promiscuous mode [ 217.142346][ T9136] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1698'. [ 217.162308][ T9136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.173310][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.190325][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 217.206363][ T9138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.217507][ T9138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.229461][ T9138] bond0 (unregistering): Released all slaves [ 217.337942][ T9147] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 217.350706][ T9147] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 217.361350][ T9147] team0: Device hsr_slave_0 failed to register rx_handler [ 217.823777][ T9159] loop0: detected capacity change from 0 to 1024 [ 217.832147][ T9159] EXT4-fs: Ignoring removed bh option [ 217.859074][ T9159] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 217.868173][ T9159] System zones: 0-1, 3-12 [ 217.873022][ T9159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.987527][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.163327][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 218.297260][ T9136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.367457][ T9136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.418331][ T9136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.482841][ T9136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.495156][ T9136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.510616][ T9136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.522235][ T9136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.658689][ T9195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 219.135748][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 219.149773][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 219.381009][ T9214] loop3: detected capacity change from 0 to 1024 [ 219.389576][ T9214] EXT4-fs: Ignoring removed orlov option [ 219.395672][ T9214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.476054][ T9214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 219.499420][ T9214] System zones: 0-1, 3-12 [ 219.522158][ T9214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.570340][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 219.570352][ T29] audit: type=1326 audit(1728026863.935:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.621293][ T29] audit: type=1326 audit(1728026863.965:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.644788][ T29] audit: type=1326 audit(1728026863.965:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.668155][ T29] audit: type=1326 audit(1728026863.965:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.691523][ T29] audit: type=1326 audit(1728026863.965:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.715203][ T29] audit: type=1326 audit(1728026863.965:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.738495][ T29] audit: type=1326 audit(1728026863.965:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.762083][ T29] audit: type=1326 audit(1728026863.965:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.785586][ T29] audit: type=1326 audit(1728026863.965:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.808956][ T29] audit: type=1326 audit(1728026863.965:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76d60dff9 code=0x7ffc0000 [ 219.833153][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.848788][ T9222] syz.3.1728[9222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.848862][ T9222] syz.3.1728[9222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.860424][ T9222] syz.3.1728[9222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.879305][ T9222] infiniband ÿÿÿÿ: RDMA CMA: cma_listen_on_dev, error -98 [ 220.010333][ T9227] loop3: detected capacity change from 0 to 1024 [ 220.017263][ T9227] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.028235][ T9227] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.038792][ T9227] JBD2: no valid journal superblock found [ 220.044580][ T9227] EXT4-fs (loop3): Could not load journal inode [ 220.516421][ T9242] loop1: detected capacity change from 0 to 1024 [ 220.547993][ T9242] EXT4-fs: Ignoring removed orlov option [ 220.553782][ T9242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.586455][ T9242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.647734][ T8972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.975351][ T9264] loop1: detected capacity change from 0 to 2048 [ 221.016760][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 221.090339][ T9273] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 221.100396][ T9264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.196791][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.203884][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.213000][ T9250] bridge_slave_0: entered allmulticast mode [ 221.233269][ T9250] bridge_slave_0: entered promiscuous mode [ 221.240545][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.247643][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.254959][ T9250] bridge_slave_1: entered allmulticast mode [ 221.261749][ T9250] bridge_slave_1: entered promiscuous mode [ 221.314979][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.338637][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.350939][ T9283] loop3: detected capacity change from 0 to 512 [ 221.357558][ T9283] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.367280][ T9283] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 221.377896][ T9283] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 221.386023][ T9283] EXT4-fs (loop3): orphan cleanup on readonly fs [ 221.393860][ T9283] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1745: Invalid block bitmap block 0 in block_group 0 [ 221.410442][ T9283] EXT4-fs (loop3): Remounting filesystem read-only [ 221.417055][ T9283] EXT4-fs (loop3): 1 orphan inode deleted [ 221.424517][ T9283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.437018][ T9283] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 221.443783][ T9283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.472373][ T9288] loop3: detected capacity change from 0 to 512 [ 221.485047][ T9288] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.497218][ T9288] EXT4-fs (loop3): 1 orphan inode deleted [ 221.503035][ T9288] EXT4-fs (loop3): 1 truncate cleaned up [ 221.509785][ T9288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.515087][ T9250] team0: Port device team_slave_0 added [ 221.528019][ T9288] syz.3.1746: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 221.535406][ T9250] team0: Port device team_slave_1 added [ 221.542556][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.3.1746 Tainted: G W 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 221.560272][ T9288] Tainted: [W]=WARN [ 221.564068][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.574118][ T9288] Call Trace: [ 221.577435][ T9288] [ 221.580415][ T9288] dump_stack_lvl+0xf2/0x150 [ 221.584996][ T9288] dump_stack+0x15/0x20 [ 221.589140][ T9288] warn_alloc+0x145/0x1b0 [ 221.593517][ T9288] ? trace_event_raw_event_bpf_trace_printk+0xe4/0x160 [ 221.600384][ T9288] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 221.606265][ T9288] ? bpf_trace_printk+0xd3/0x1d0 [ 221.611232][ T9288] __vmalloc_node_range_noprof+0xaa/0xec0 [ 221.616933][ T9288] ? from_kuid+0xf0/0x340 [ 221.621246][ T9288] ? bpf_send_signal_common+0x1fd/0x230 [ 221.626874][ T9288] ? __rcu_read_unlock+0x4e/0x70 [ 221.631796][ T9288] ? bpf_trace_run4+0x133/0x1e0 [ 221.636693][ T9288] ? xskq_create+0x36/0xd0 [ 221.641192][ T9288] vmalloc_user_noprof+0x59/0x70 [ 221.646149][ T9288] ? xskq_create+0x79/0xd0 [ 221.650711][ T9288] xskq_create+0x79/0xd0 [ 221.655008][ T9288] xsk_init_queue+0x82/0xd0 [ 221.659575][ T9288] xsk_setsockopt+0x409/0x520 [ 221.664410][ T9288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.669593][ T9288] __sys_setsockopt+0x1cc/0x240 [ 221.674518][ T9288] __x64_sys_setsockopt+0x66/0x80 [ 221.679529][ T9288] x64_sys_call+0x278d/0x2d60 [ 221.684222][ T9288] do_syscall_64+0xc9/0x1c0 [ 221.688717][ T9288] ? clear_bhb_loop+0x55/0xb0 [ 221.693491][ T9288] ? clear_bhb_loop+0x55/0xb0 [ 221.698168][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.704178][ T9288] RIP: 0033:0x7fc76d60dff9 [ 221.708592][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.728273][ T9288] RSP: 002b:00007fc76c287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.736756][ T9288] RAX: ffffffffffffffda RBX: 00007fc76d7c5f80 RCX: 00007fc76d60dff9 [ 221.744725][ T9288] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 221.752782][ T9288] RBP: 00007fc76d680296 R08: 0000000000000020 R09: 0000000000000000 [ 221.760763][ T9288] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 221.768794][ T9288] R13: 0000000000000000 R14: 00007fc76d7c5f80 R15: 00007fffa5b3f468 [ 221.776752][ T9288] [ 221.780457][ T9288] Mem-Info: [ 221.783726][ T9288] active_anon:18775 inactive_anon:3 isolated_anon:0 [ 221.783726][ T9288] active_file:16371 inactive_file:7863 isolated_file:0 [ 221.783726][ T9288] unevictable:0 dirty:360 writeback:0 [ 221.783726][ T9288] slab_reclaimable:2865 slab_unreclaimable:23004 [ 221.783726][ T9288] mapped:49548 shmem:3420 pagetables:853 [ 221.783726][ T9288] sec_pagetables:0 bounce:0 [ 221.783726][ T9288] kernel_misc_reclaimable:0 [ 221.783726][ T9288] free:1791848 free_pcp:19531 free_cma:0 [ 221.828846][ T9288] Node 0 active_anon:74984kB inactive_anon:12kB active_file:65484kB inactive_file:31452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194132kB dirty:1440kB writeback:0kB shmem:13680kB writeback_tmp:0kB kernel_stack:4544kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no [ 221.856933][ T9288] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.883899][ T9288] lowmem_reserve[]: 0 2866 7844 0 [ 221.889111][ T9288] Node 0 DMA32 free:2950376kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 221.917774][ T9288] lowmem_reserve[]: 0 0 4978 0 [ 221.922574][ T9288] Node 0 Normal free:4201656kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:74984kB inactive_anon:12kB active_file:65484kB inactive_file:31452kB unevictable:0kB writepending:1440kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:74928kB local_pcp:51632kB free_cma:0kB [ 221.953016][ T9288] lowmem_reserve[]: 0 0 0 0 [ 221.957610][ T9288] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 221.970250][ T9288] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950376kB [ 221.986263][ T9288] Node 0 Normal: 16*4kB (UE) 1*8kB (M) 1*16kB (E) 7*32kB (E) 7*64kB (E) 3*128kB (E) 2*256kB (UE) 25*512kB (UME) 19*1024kB (ME) 43*2048kB (UM) 996*4096kB (UME) = 4201592kB [ 222.003578][ T9288] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 222.012889][ T9288] 27681 total pagecache pages [ 222.017619][ T9288] 3 pages in swap cache [ 222.021790][ T9288] Free swap = 124268kB [ 222.025970][ T9288] Total swap = 124996kB [ 222.030118][ T9288] 2097051 pages RAM [ 222.033903][ T9288] 0 pages HighMem/MovableOnly [ 222.038661][ T9288] 80182 pages reserved [ 222.063279][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.070266][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.096166][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.111385][ T8972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.121537][ T7679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.139936][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.146961][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.172996][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.256202][ T9250] hsr_slave_0: entered promiscuous mode [ 222.274782][ T9250] hsr_slave_1: entered promiscuous mode [ 222.280755][ T9250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.298445][ T9250] Cannot create hsr debugfs directory [ 222.390411][ T9250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.407223][ T9314] futex_wake_op: syz.3.1756 tries to shift op by -1; fix this program [ 222.421637][ T9316] tipc: Started in network mode [ 222.426555][ T9316] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 222.435658][ T9316] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:18e7 [ 222.443701][ T9316] tipc: Enabled bearer , priority 10 [ 222.458462][ T9250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.592374][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 222.783061][ T9250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.830055][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 222.880673][ T9250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.990153][ T9250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.999156][ T9250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.007777][ T9250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.017483][ T9250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.036449][ T9343] loop0: detected capacity change from 0 to 1024 [ 223.047755][ T9343] EXT4-fs: Ignoring removed oldalloc option [ 223.056911][ T9343] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 223.070974][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.087396][ T9343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.087528][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.112696][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.119788][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.130363][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.141246][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.148400][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.222687][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.425501][ T9250] veth0_vlan: entered promiscuous mode [ 223.447567][ T9250] veth1_vlan: entered promiscuous mode [ 223.471616][ T9377] loop1: detected capacity change from 0 to 512 [ 223.474045][ T9250] veth0_macvtap: entered promiscuous mode [ 223.486372][ T9377] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1774: casefold flag without casefold feature [ 223.487937][ T9250] veth1_macvtap: entered promiscuous mode [ 223.505325][ T9377] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1774: couldn't read orphan inode 15 (err -117) [ 223.512995][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.527717][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.536033][ T9377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.537588][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.560395][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.570247][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.580741][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.590560][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.601007][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.610976][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.621426][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.633217][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.643771][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.653618][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.664109][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.673963][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.684475][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.694521][ T2948] tipc: Node number set to 1 [ 223.707925][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.722559][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.733066][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.743076][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.753664][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.763609][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.774100][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.783919][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.794345][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.804149][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.814570][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.824385][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.834820][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.844660][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.855118][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.864997][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.875441][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.885294][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.896091][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.906688][ T8972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.908535][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.931851][ T9250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.940708][ T9250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.949522][ T9250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.958406][ T9250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.975643][ T9380] loop1: detected capacity change from 0 to 128 [ 223.991404][ T9380] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.061203][ T9385] bond_slave_1: mtu less than device minimum [ 224.073646][ T9387] can0: slcan on ttyS3. [ 224.115469][ T9393] netlink: 'syz.1.1779': attribute type 4 has an invalid length. [ 224.158148][ T9396] loop0: detected capacity change from 0 to 512 [ 224.167176][ T9396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.176092][ T9387] can0 (unregistered): slcan off ttyS3. [ 224.181735][ T9387] Falling back ldisc for ttyS3. [ 224.190478][ T9396] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.314499][ T9409] loop4: detected capacity change from 0 to 128 [ 224.322423][ T9409] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 224.405134][ T9413] netlink: 'syz.0.1783': attribute type 30 has an invalid length. [ 224.740016][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 224.740030][ T29] audit: type=1326 audit(1728026869.105:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 224.781214][ T29] audit: type=1326 audit(1728026869.115:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 224.804713][ T29] audit: type=1326 audit(1728026869.115:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 224.828037][ T29] audit: type=1326 audit(1728026869.115:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 224.851523][ T29] audit: type=1326 audit(1728026869.115:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 224.923857][ T9420] loop4: detected capacity change from 0 to 512 [ 224.935967][ T9420] EXT4-fs (loop4): too many log groups per flexible block group [ 224.943686][ T9420] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 224.950531][ T9420] EXT4-fs (loop4): mount failed [ 225.005739][ T29] audit: type=1400 audit(1728026869.375:5329): avc: denied { create } for pid=9426 comm="syz.4.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.025564][ T29] audit: type=1400 audit(1728026869.375:5330): avc: denied { lock } for pid=9426 comm="syz.4.1789" path="socket:[33486]" dev="sockfs" ino=33486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 225.075489][ T29] audit: type=1400 audit(1728026869.445:5331): avc: denied { ioctl } for pid=9428 comm="syz.1.1790" path="socket:[33495]" dev="sockfs" ino=33495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.106645][ T9431] loop1: detected capacity change from 0 to 1024 [ 225.113776][ T9431] EXT4-fs: Ignoring removed i_version option [ 225.121415][ T9433] loop0: detected capacity change from 0 to 512 [ 225.128530][ T9433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.158014][ T9433] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.169669][ T29] audit: type=1400 audit(1728026869.535:5332): avc: denied { rmdir } for pid=9432 comm="syz.0.1791" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.170332][ T9433] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 225.203529][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 225.208330][ T9433] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1791: Failed to acquire dquot type 0 [ 225.212482][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.231167][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.238928][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.246438][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.446370][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.455200][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.847880][ T9450] loop4: detected capacity change from 0 to 128 [ 226.220616][ T4087] IPVS: starting estimator thread 0... [ 226.324901][ T9461] IPVS: using max 2928 ests per chain, 146400 per kthread [ 226.574251][ T5745] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 227.238546][ T9496] loop0: detected capacity change from 0 to 512 [ 227.245189][ T9496] EXT4-fs (loop0): Invalid log block size: 7 [ 227.519954][ T9512] netlink: 'syz.1.1820': attribute type 10 has an invalid length. [ 227.530591][ T9512] team0: Failed to send options change via netlink (err -105) [ 227.538093][ T9512] team0: Port device netdevsim1 added [ 227.547723][ T9512] netlink: 'syz.1.1820': attribute type 10 has an invalid length. [ 227.556385][ T9512] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 227.567130][ T9512] team0: Failed to send options change via netlink (err -105) [ 227.574682][ T9512] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 227.584193][ T9512] team0: Port device netdevsim1 removed [ 227.592071][ T9512] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 227.621005][ T9514] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1821'. [ 227.630198][ T9514] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1821'. [ 227.748338][ T9524] GPL: port 1(bond0) entered blocking state [ 227.754452][ T9524] GPL: port 1(bond0) entered disabled state [ 227.760498][ T9524] bond0: entered allmulticast mode [ 227.765756][ T9524] bond_slave_0: entered allmulticast mode [ 227.771476][ T9524] bond_slave_1: entered allmulticast mode [ 227.777248][ T9524] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 227.786312][ T9524] bond0: entered promiscuous mode [ 227.791353][ T9524] bond_slave_0: entered promiscuous mode [ 227.797041][ T9524] bond_slave_1: entered promiscuous mode [ 227.802933][ T9524] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 227.811713][ T9527] netlink: 'syz.4.1827': attribute type 4 has an invalid length. [ 227.827200][ T9527] netlink: 'syz.4.1827': attribute type 4 has an invalid length. [ 227.886854][ T9533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1830'. [ 227.930266][ T9535] loop4: detected capacity change from 0 to 4096 [ 228.109998][ T9542] loop0: detected capacity change from 0 to 128 [ 228.750432][ T9550] loop1: detected capacity change from 0 to 512 [ 228.757717][ T9550] EXT4-fs: Ignoring removed oldalloc option [ 228.765320][ T9550] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1837: Parent and EA inode have the same ino 15 [ 228.777834][ T9550] EXT4-fs (loop1): Remounting filesystem read-only [ 228.784489][ T9550] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 228.794604][ T9550] EXT4-fs (loop1): 1 orphan inode deleted [ 228.800684][ T9550] EXT4-fs mount: 10 callbacks suppressed [ 228.800692][ T9550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.818385][ T9550] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 228.827877][ T9550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.054809][ T9565] ref_ctr increment failed for inode: 0x168 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115b74000 [ 229.069509][ T9565] uprobe: syz.1.1843:9565 failed to unregister, leaking uprobe [ 229.114083][ T9568] loop1: detected capacity change from 0 to 4096 [ 229.127341][ T9568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.295754][ T8972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.487862][ T9595] loop1: detected capacity change from 0 to 512 [ 229.495170][ T9595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.506975][ T9595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 229.513874][ T9595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1846: bg 0: block 248: padding at end of block bitmap is not set [ 229.530666][ T9595] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1846: Failed to acquire dquot type 1 [ 229.546267][ T9595] EXT4-fs (loop1): 1 truncate cleaned up [ 229.552768][ T9595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.105536][ T9602] chnl_net:caif_netlink_parms(): no params data found [ 230.138513][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.145632][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.152895][ T9602] bridge_slave_0: entered allmulticast mode [ 230.159503][ T9602] bridge_slave_0: entered promiscuous mode [ 230.167717][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.174912][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.182130][ T9602] bridge_slave_1: entered allmulticast mode [ 230.182306][ T8972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.188755][ T9602] bridge_slave_1: entered promiscuous mode [ 230.218945][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.230451][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.251260][ T9602] team0: Port device team_slave_0 added [ 230.257826][ T9602] team0: Port device team_slave_1 added [ 230.278418][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.285531][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.311641][ T9602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.336459][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.337530][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.343873][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.350828][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.350854][ T9602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.362161][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.384468][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.410766][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.418257][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.425842][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.433423][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.440941][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.448368][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.451766][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 230.451779][ T29] audit: type=1326 audit(1728026874.815:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 230.455782][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.462562][ T29] audit: type=1326 audit(1728026874.825:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 230.485279][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.494977][ T29] audit: type=1326 audit(1728026874.865:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18e751ff17 code=0x7ffc0000 [ 230.516014][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.516039][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.527195][ T9627] loop4: detected capacity change from 0 to 512 [ 230.546725][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.557597][ T29] audit: type=1326 audit(1728026874.885:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 230.561447][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.567652][ T29] audit: type=1326 audit(1728026874.885:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 230.575035][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.575058][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.598436][ T29] audit: type=1326 audit(1728026874.885:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f18e751dff9 code=0x7ffc0000 [ 230.605803][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.629120][ T29] audit: type=1326 audit(1728026874.885:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18e751e033 code=0x7ffc0000 [ 230.636490][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.643814][ T29] audit: type=1326 audit(1728026874.895:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18e751cadf code=0x7ffc0000 [ 230.667319][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.667367][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.674820][ T29] audit: type=1326 audit(1728026874.895:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f18e751e087 code=0x7ffc0000 [ 230.697916][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.705310][ T29] audit: type=1326 audit(1728026874.895:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18e751c990 code=0x7ffc0000 [ 230.728517][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.738191][ T9627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.743259][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.770326][ T9627] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1857: invalid block [ 230.773899][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.797703][ T9627] EXT4-fs (loop4): Remounting filesystem read-only [ 230.804711][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.804733][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.815631][ T9627] EXT4-fs (loop4): 2 truncates cleaned up [ 230.820772][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.835863][ T9627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.840113][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.847487][ T9627] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 230.853928][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.863326][ T9627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.867012][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.924849][ T1009] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 230.932599][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.960465][ T9602] hsr_slave_0: entered promiscuous mode [ 230.970173][ T9602] hsr_slave_1: entered promiscuous mode [ 230.977871][ T9602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.979561][ T1009] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 230.995285][ T9602] Cannot create hsr debugfs directory [ 231.032008][ T9627] loop4: detected capacity change from 0 to 2048 [ 231.046463][ T9627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.061528][ T9602] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.078391][ T9250] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.120007][ T9602] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.177936][ T9602] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.238231][ T9602] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.328203][ T9602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.344722][ T9602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.353788][ T9602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.364977][ T9602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.412976][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.428475][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.439930][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.447066][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.465954][ T9602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.476358][ T9602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.489641][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.496913][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.573035][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 231.586449][ T9602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.677101][ T9602] veth0_vlan: entered promiscuous mode [ 231.700088][ T9666] syzkaller0: entered promiscuous mode [ 231.705655][ T9666] syzkaller0: entered allmulticast mode [ 231.722470][ T9602] veth1_vlan: entered promiscuous mode [ 231.766008][ T9602] veth0_macvtap: entered promiscuous mode [ 231.774103][ T9602] veth1_macvtap: entered promiscuous mode [ 231.785625][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.796114][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.805930][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.816368][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.826270][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.836693][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.846601][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.857085][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.866953][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.877396][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.887236][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.897672][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.907586][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.918115][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.927970][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.938460][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.950093][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.984788][ T9673] syzkaller0: entered promiscuous mode [ 232.000556][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.011515][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.021396][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.031846][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.041686][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.052223][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.062078][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.072597][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.082408][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.092924][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.103160][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.113740][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.123615][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.134104][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.143928][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.154398][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.164215][ T9602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.174671][ T9602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.185767][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.209613][ T9602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.218376][ T9602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.227178][ T9602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.235923][ T9602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.290828][ T9682] loop0: detected capacity change from 0 to 512 [ 232.300357][ T9685] loop1: detected capacity change from 0 to 128 [ 232.322079][ T9688] loop2: detected capacity change from 0 to 512 [ 232.329693][ T9682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.343230][ T9682] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.358895][ T9688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.376350][ T9688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.389178][ T9688] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.872980][ T3951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.896719][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.958526][ T3951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.986852][ T9720] loop0: detected capacity change from 0 to 512 [ 233.025951][ T9708] chnl_net:caif_netlink_parms(): no params data found [ 233.041282][ T9720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.064629][ T9720] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.084906][ T3951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.171726][ T3951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.217436][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.224723][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.237227][ T9708] bridge_slave_0: entered allmulticast mode [ 233.260628][ T9708] bridge_slave_0: entered promiscuous mode [ 233.261083][ T7347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.279776][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.286967][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.319505][ T9708] bridge_slave_1: entered allmulticast mode [ 233.353510][ T9708] bridge_slave_1: entered promiscuous mode [ 233.456408][ T9708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.494879][ T9688] syz.2.1852 (9688) used greatest stack depth: 7288 bytes left [ 233.504386][ T3951] bridge_slave_1: left allmulticast mode [ 233.510034][ T3951] bridge_slave_1: left promiscuous mode [ 233.515811][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.534573][ T3951] bridge_slave_0: left allmulticast mode [ 233.534793][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.540227][ T3951] bridge_slave_0: left promiscuous mode [ 233.554914][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.640101][ T9741] loop2: detected capacity change from 0 to 512 [ 233.668474][ T9741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.681340][ T9741] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.747900][ T9708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.801476][ T9708] team0: Port device team_slave_0 added [ 233.818770][ T3951] hsr_slave_0: left promiscuous mode [ 233.832631][ T3951] hsr_slave_1: left promiscuous mode [ 233.846914][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.854472][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.892467][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.899996][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.925170][ T3951] veth1_macvtap: left promiscuous mode [ 233.930717][ T3951] veth0_macvtap: left promiscuous mode [ 233.936349][ T3951] veth1_vlan: left promiscuous mode [ 233.941605][ T3951] veth0_vlan: left promiscuous mode [ 234.097604][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 234.118835][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 234.206292][ T9708] team0: Port device team_slave_1 added [ 234.212325][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.244870][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.251853][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.277852][ T9708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.293414][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.300441][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.326413][ T9708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.359378][ T9757] loop2: detected capacity change from 0 to 512 [ 234.371920][ T9708] hsr_slave_0: entered promiscuous mode [ 234.378075][ T9708] hsr_slave_1: entered promiscuous mode [ 234.386275][ T9708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.394280][ T9757] EXT4-fs: inline encryption not supported [ 234.400643][ T9708] Cannot create hsr debugfs directory [ 234.417043][ T9757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.439895][ T9757] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.500693][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.520962][ T9763] syzkaller0: entered promiscuous mode [ 234.526577][ T9763] syzkaller0: entered allmulticast mode [ 234.542329][ T9764] loop0: detected capacity change from 0 to 8192 [ 234.594906][ T9764] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 234.600147][ T9764] loop0: partition table partially beyond EOD, truncated [ 234.613369][ T9764] loop0: p1 start 277760 is beyond EOD, truncated [ 234.619878][ T9764] loop0: p2 start 6684676 is beyond EOD, truncated [ 234.640148][ T9764] loop0: p5 start 6684676 is beyond EOD, truncated [ 234.668774][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 234.931410][ T9708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.957145][ T9708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.976439][ T9708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.013323][ T9708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.097514][ T9708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.120511][ T9708] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.140481][ T3951] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.147597][ T3951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.188279][ T3951] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.195421][ T3951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.258071][ T9798] loop4: detected capacity change from 0 to 512 [ 235.307989][ T9798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.321698][ T9798] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.334374][ T9708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.441107][ T9250] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.482140][ T9708] veth0_vlan: entered promiscuous mode [ 235.494529][ T9708] veth1_vlan: entered promiscuous mode [ 235.513495][ T9708] veth0_macvtap: entered promiscuous mode [ 235.527258][ T9708] veth1_macvtap: entered promiscuous mode [ 235.541148][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.551648][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.561618][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.572155][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.582167][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.592644][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.602485][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.612905][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.622787][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.633228][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.643192][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.653650][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.663539][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.673985][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.683864][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.694313][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.709037][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.715564][ T9820] loop4: detected capacity change from 0 to 128 [ 235.723320][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.733808][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.743656][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.754090][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.764002][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.774455][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.784576][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.795460][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.805327][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.815891][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.825730][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.836176][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.846001][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.856457][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.866356][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.876854][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.886754][ T9708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.897181][ T9708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.909304][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.920359][ T9708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.929362][ T9708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.938220][ T9708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.947068][ T9708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.996544][ T9826] batadv_slave_0: entered promiscuous mode [ 236.458771][ T9848] loop2: detected capacity change from 0 to 2048 [ 236.489187][ T9848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.561123][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.906650][ T9861] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 236.978790][ T9857] syzkaller0: entered promiscuous mode [ 237.128022][ T9867] loop2: detected capacity change from 0 to 512 [ 237.179669][ T9867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.207392][ T9867] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.281665][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.312275][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 237.358771][ T9885] loop2: detected capacity change from 0 to 512 [ 237.368141][ T9881] team1: Mode changed to "activebackup" [ 237.394718][ T9885] EXT4-fs: Ignoring removed oldalloc option [ 237.417669][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1942: Parent and EA inode have the same ino 15 [ 237.457140][ T9891] ref_ctr increment failed for inode: 0x3a6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881163cdf80 [ 237.469830][ T9885] EXT4-fs (loop2): Remounting filesystem read-only [ 237.476443][ T9885] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 237.495017][ T9891] uprobe: syz.0.1934:9891 failed to unregister, leaking uprobe [ 237.514384][ T9885] EXT4-fs (loop2): 1 orphan inode deleted [ 237.520539][ T9885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.585759][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.593173][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.600578][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.608061][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.615466][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.622886][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.630291][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.634971][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 237.634983][ T29] audit: type=1326 audit(1728026882.005:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.4.1933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18e751dff9 code=0x0 [ 237.637815][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.674091][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.681549][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.684277][ T9885] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 237.688948][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.702848][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.711060][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.718574][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.725972][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.733357][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.740803][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.747060][ T9885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.748192][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.764724][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.772134][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.779559][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.787085][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.791053][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.794567][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.794591][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.794614][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.794685][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.832684][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.840100][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.847765][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.855171][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.862559][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.869964][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 237.884347][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.891154][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.031464][ T9904] syzkaller0: entered promiscuous mode [ 238.037059][ T9904] syzkaller0: entered allmulticast mode [ 238.145539][ T29] audit: type=1326 audit(1728026882.515:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.181523][ T29] audit: type=1326 audit(1728026882.515:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.205091][ T29] audit: type=1326 audit(1728026882.535:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.228534][ T29] audit: type=1326 audit(1728026882.545:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.252071][ T29] audit: type=1326 audit(1728026882.545:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.275647][ T29] audit: type=1326 audit(1728026882.545:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.299063][ T29] audit: type=1326 audit(1728026882.545:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.322632][ T29] audit: type=1326 audit(1728026882.545:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.354008][ T29] audit: type=1326 audit(1728026882.545:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f3a8015dff9 code=0x7ffc0000 [ 238.458105][ T9920] loop2: detected capacity change from 0 to 512 [ 238.497461][ T9925] loop4: detected capacity change from 0 to 512 [ 238.499540][ T9928] loop3: detected capacity change from 0 to 128 [ 238.504030][ T9925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.511190][ T9920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.529473][ T9925] /dev/loop4: Can't open blockdev [ 238.542495][ T9920] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.553543][ T9924] ================================================================== [ 238.561639][ T9924] BUG: KCSAN: data-race in do_mq_timedreceive / msg_insert [ 238.568841][ T9924] [ 238.571152][ T9924] write to 0xffff888114787e90 of 8 bytes by task 9929 on cpu 1: [ 238.578769][ T9924] msg_insert+0x10a/0x2e0 [ 238.583091][ T9924] do_mq_timedsend+0x465/0xa00 [ 238.587850][ T9924] __x64_sys_mq_timedsend+0xca/0x150 [ 238.593126][ T9924] x64_sys_call+0x26c5/0x2d60 [ 238.597797][ T9924] do_syscall_64+0xc9/0x1c0 [ 238.602289][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.608183][ T9924] [ 238.610500][ T9924] read to 0xffff888114787e90 of 8 bytes by task 9924 on cpu 0: [ 238.618030][ T9924] do_mq_timedreceive+0x1fb/0x6d0 [ 238.623053][ T9924] __x64_sys_mq_timedreceive+0xca/0x150 [ 238.628592][ T9924] x64_sys_call+0xccf/0x2d60 [ 238.633178][ T9924] do_syscall_64+0xc9/0x1c0 [ 238.637671][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.643561][ T9924] [ 238.645874][ T9924] value changed: 0xffff888134b65740 -> 0x0000000000000000 [ 238.652967][ T9924] [ 238.655277][ T9924] Reported by Kernel Concurrency Sanitizer on: [ 238.661418][ T9924] CPU: 0 UID: 0 PID: 9924 Comm: syz.0.1959 Tainted: G W 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 238.673560][ T9924] Tainted: [W]=WARN [ 238.677439][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.687482][ T9924] ================================================================== [ 238.718402][ T9931] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1948'. [ 238.737304][ T9931] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1948'. [ 238.761293][ T9602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.