last executing test programs: 2.441623475s ago: executing program 2 (id=6542): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x8a1d30483ca7aee3, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x895, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000240)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r10 = signalfd4(r2, &(0x7f00000003c0)={[0x6]}, 0x8, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x12, &(0x7f0000000a40)=ANY=[@ANYBLOB="18330000030000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500801b50dbb4000000181a0000", @ANYRES32=r10, @ANYBLOB="00000000000000005b8616f5186405000000c377d24be297750b3eda09fadf7ff7e197526dd3fc0344a09008ddc2e9f8a4"], &(0x7f0000000640)='GPL\x00', 0x8c3, 0x45, &(0x7f0000000400)=""/69, 0x41100, 0x10, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0xfffffffe, 0xf, 0xa, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r0, r0], &(0x7f0000000900)=[{0x1, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xd, 0xc}, {0x401, 0x3, 0x3, 0x8}, {0x3, 0x4, 0x2}], 0x10, 0x54ea, @void, @value}, 0x94) utimensat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{}, {r7, r8/1000+60000}}, 0x100) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='block_bio_remap\x00', r12}, 0x18) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000a30000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, &(0x7f0000000180)=0x84f05) 2.333107905s ago: executing program 2 (id=6545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1b91, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x1000000) 2.252104392s ago: executing program 2 (id=6547): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000100)=""/158, 0x9e}], 0x2, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FILES_UPDATE={0x14, 0x56, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r1, r0, r1, r1, r1, r0, 0xffffffffffffffff, r1], 0x8, 0x0, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe, &(0x7f0000000500)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000040)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 2.041833472s ago: executing program 0 (id=6555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0xa, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.027493203s ago: executing program 0 (id=6556): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x8a1d30483ca7aee3, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x895, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000240)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r10 = signalfd4(r2, &(0x7f00000003c0)={[0x6]}, 0x8, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x12, &(0x7f0000000a40)=ANY=[@ANYBLOB="18330000030000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500801b50dbb4000000181a0000", @ANYRES32=r10, @ANYBLOB="00000000000000005b8616f5186405000000c377d24be297750b3eda09fadf7ff7e197526dd3fc0344a09008ddc2e9f8a4"], &(0x7f0000000640)='GPL\x00', 0x8c3, 0x45, &(0x7f0000000400)=""/69, 0x41100, 0x10, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0xfffffffe, 0xf, 0xa, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r0, r0], &(0x7f0000000900)=[{0x1, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xd, 0xc}, {0x401, 0x3, 0x3, 0x8}, {0x3, 0x4, 0x2}], 0x10, 0x54ea, @void, @value}, 0x94) utimensat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{}, {r7, r8/1000+60000}}, 0x100) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='block_bio_remap\x00', r12}, 0x18) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000a30000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, &(0x7f0000000180)=0x84f05) 1.992245686s ago: executing program 1 (id=6557): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000400)=""/116, 0x28, 0x74, 0x0, 0x800, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xc, 0x8, 0xe, 0xf, 0x10, 0xffffffffffffffff, 0x5, '\x00', r3, r4, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r5, 0x8004745a, 0x2000000c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) close(r1) 1.958304809s ago: executing program 0 (id=6558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000200)=0xbfb, 0x4a) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1.942748771s ago: executing program 0 (id=6559): timerfd_create(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r1, &(0x7f0000000900)='\x00\x00', 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000b56d010180ffff00009f000000000000000000f2000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x806051, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) sendmsg$nl_route_sched(r9, 0x0, 0x4881) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000040), 0xfffffffffffffef6) sendmsg$tipc(r9, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.937884381s ago: executing program 1 (id=6560): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xc, 0x8, 0xe, 0xf, 0x10, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) 1.894662615s ago: executing program 1 (id=6561): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) 1.483049213s ago: executing program 4 (id=6562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c010000100013ff000000000000000000000000ff01000000000000000000000000000100730000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 1.472438934s ago: executing program 4 (id=6563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xc400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000300)=[{&(0x7f00000002c0)='O', 0x1}], 0x1) fcntl$getownex(r0, 0x5, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c00028006000e000000000014000600fc020000000000000000000000000000080014000800000006000f000900000004001200080005003f00000008000300", @ANYRES32, @ANYBLOB="5d9908b18fcdf9729f1329ae4f9308e19286eccb725bd5ccf1e517f91125415ade0d55fd021264e05fc4f025a8ba486a16d36648b426f7901104df4ab92274a099e3f077a27c4bab465388f7d8f574ad2e1d7ef83b7f6c9148aaf70c170dd5a0f9068e821fdcd8d037c90bf0bf85dbbdadc8276742b7d8a528636455c9eb43fa78b3686fcdb863c0563b26fb4154ba80"], 0x78}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 1.40625562s ago: executing program 2 (id=6564): r0 = socket(0x10, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@remote}, &(0x7f0000000400)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0xffffff7f}, 0x10) 1.40608794s ago: executing program 4 (id=6565): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) 1.40511076s ago: executing program 2 (id=6566): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) mlock(&(0x7f000015f000/0x3000)=nil, 0x3000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000536000/0x4000)=nil, &(0x7f0000536000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc}) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003801a000140000000000800024000"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x20000800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="0000001b000000e5fffffffffff7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.124968987s ago: executing program 3 (id=6568): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xa1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0}, {0xa, 0x4e24, 0xffffffff, @mcast2, 0xf66}, r1, 0x1}}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000600)='\x87\x86@\x00\x00\x00\x00\x00\x00\x00\x00+\xafM\x01\x00\x00\x00\x00\x00') syz_read_part_table(0x610, &(0x7f0000001cc0)="$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") 1.074458831s ago: executing program 3 (id=6569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000200)=0xbfb, 0x4a) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1.062042612s ago: executing program 0 (id=6570): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x8a1d30483ca7aee3, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x895, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000240)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r10 = signalfd4(r2, &(0x7f00000003c0)={[0x6]}, 0x8, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x12, &(0x7f0000000a40)=ANY=[@ANYBLOB="18330000030000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500801b50dbb4000000181a0000", @ANYRES32=r10, @ANYBLOB="00000000000000005b8616f5186405000000c377d24be297750b3eda09fadf7ff7e197526dd3fc0344a09008ddc2e9f8a4"], &(0x7f0000000640)='GPL\x00', 0x8c3, 0x45, &(0x7f0000000400)=""/69, 0x41100, 0x10, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0xfffffffe, 0xf, 0xa, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r0, r0], &(0x7f0000000900)=[{0x1, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xd, 0xc}, {0x401, 0x3, 0x3, 0x8}, {0x3, 0x4, 0x2}], 0x10, 0x54ea, @void, @value}, 0x94) utimensat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{}, {r7, r8/1000+60000}}, 0x100) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='block_bio_remap\x00', r12}, 0x18) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000a30000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, &(0x7f0000000180)=0x84f05) 1.043978034s ago: executing program 1 (id=6571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(r1, &(0x7f0000000180)='./bus\x00', 0x1a800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) socket$nl_route(0x10, 0x3, 0x0) 1.039723885s ago: executing program 3 (id=6572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000200)=0xbfb, 0x4a) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 981.36291ms ago: executing program 0 (id=6573): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0xffe0}], 0x1) semop(r1, &(0x7f00000001c0)=[{0x0, 0x8000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@expire={0x120, 0x18, 0x2, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@remote, 0x4e23, 0xb3fd, 0x4e24, 0xfffd, 0x2, 0xa0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x6c28, 0x3c}, @in6=@loopback, {0x5, 0x6, 0x4, 0x2, 0x7f, 0x10000, 0x200, 0xfffffffffffffffe}, {0x4, 0x100000001, 0x1, 0x6b}, {0xd, 0x6, 0x6}, 0x70bd27, 0x0, 0x0, 0x0, 0xf, 0x2b}, 0x7}, [@mark={0xc, 0x15, {0x35075d, 0x5}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2d, 0x70bd28, 0x70bd27, 0xfff}}]}, 0x120}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) semtimedop(r1, &(0x7f0000000180)=[{0x0, 0x4, 0xc00}], 0x1, &(0x7f0000000240)={0x0, 0x989680}) r5 = syz_usbip_server_init(0x4) close(r0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) fsetxattr$security_selinux(r5, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28, 0x1) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000006380)=""/1024, 0x400) 939.707813ms ago: executing program 3 (id=6574): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 816.240835ms ago: executing program 1 (id=6575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 577.000097ms ago: executing program 4 (id=6576): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xc400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000300)=[{&(0x7f00000002c0)='O', 0x1}], 0x1) fcntl$getownex(r0, 0x5, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c00028006000e000000000014000600fc020000000000000000000000000000080014000800000006000f000900000004001200080005003f00000008000300", @ANYRES32, @ANYBLOB="5d9908b18fcdf9729f1329ae4f9308e19286eccb725bd5ccf1e517f91125415ade0d55fd021264e05fc4f025a8ba486a16d36648b426f7901104df4ab92274a099e3f077a27c4bab465388f7d8f574ad2e1d7ef83b7f6c9148aaf70c170dd5a0f9068e821fdcd8d037c90bf0bf85dbbdadc8276742b7d8a528636455c9eb43fa78b3686fcdb863c0563b26fb4154ba80"], 0x78}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 560.969569ms ago: executing program 4 (id=6577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 543.74319ms ago: executing program 4 (id=6578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000010002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(r4, &(0x7f0000000040)='attr/exec\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x200080, &(0x7f0000000280)={[{@discard}, {@noquota}, {@dioread_nolock}]}, 0x3, 0x569, &(0x7f0000000580)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 543.30861ms ago: executing program 2 (id=6579): perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/107) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x4e22, @loopback=0x7f000002}, {0x2, 0x4e21, @remote}, 0x0, 0x0, 0x0, 0x0, 0x7}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000008a000000c9e7000001000000", @ANYRES32, @ANYBLOB="00cb0f2986133fae2600"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x48) 183.875713ms ago: executing program 1 (id=6580): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xa1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0}, {0xa, 0x4e24, 0xffffffff, @mcast2, 0xf66}, r1, 0x1}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000600)='\x87\x86@\x00\x00\x00\x00\x00\x00\x00\x00+\xafM\x01\x00\x00\x00\x00\x00') syz_read_part_table(0x610, &(0x7f0000001cc0)="$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") 50.585855ms ago: executing program 3 (id=6582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000200)=0xbfb, 0x4a) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=6583): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$sock(r3, 0x0, 0x0, 0x4805) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x1}], 0x10b2) fremovexattr(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x56, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='f2fs_gc_begin\x00', r6}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x88, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2202}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{r7, 0xcf9aa395655278ef}], 0x1, 0xe7f1) kernel console output (not intermixed with test programs): _r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 536.039946][ T29] audit: type=1400 audit(2000000319.889:32756): avc: denied { write } for pid=21511 comm="syz.1.6121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 536.042780][T21517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.065979][ T29] audit: type=1326 audit(2000000319.919:32757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21516 comm="syz.2.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 536.092969][T14916] bridge_slave_0: left allmulticast mode [ 536.098757][T14916] bridge_slave_0: left promiscuous mode [ 536.104561][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.112965][T21517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.132759][T21520] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 536.139312][T21520] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 536.143296][T21518] loop1: detected capacity change from 0 to 8192 [ 536.146831][T21520] vhci_hcd vhci_hcd.0: Device attached [ 536.161050][T21520] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.171744][T21520] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 536.178257][T21520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.185911][T21520] vhci_hcd vhci_hcd.0: Device attached [ 536.192422][T21520] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 536.199009][T21520] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 536.206487][T21520] vhci_hcd vhci_hcd.0: Device attached [ 536.212884][T21520] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 536.215510][T21518] loop1: p1 < > p2 p3 < p5 > [ 536.219468][T21520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.224138][T21518] loop1: partition table partially beyond EOD, truncated [ 536.231731][T21520] vhci_hcd vhci_hcd.0: Device attached [ 536.248334][T21518] loop1: p1 start 4177526784 is beyond EOD, truncated [ 536.255219][T21518] loop1: p2 start 163840 is beyond EOD, truncated [ 536.263243][T21518] loop1: p5 start 163840 is beyond EOD, truncated [ 536.289048][T14916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.299396][T14916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.309895][T14916] bond0 (unregistering): Released all slaves [ 536.320431][T21518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6121'. [ 536.339309][T21530] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 536.345963][T21530] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 536.353432][T21530] vhci_hcd vhci_hcd.0: Device attached [ 536.360537][T14916] tipc: Disabling bearer [ 536.365781][T14916] tipc: Left network mode [ 536.373361][T14916] hsr_slave_0: left promiscuous mode [ 536.379085][T14916] hsr_slave_1: left promiscuous mode [ 536.385099][T14916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.392553][T14916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.400266][T14916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.407709][T14916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.417500][T14916] veth1_macvtap: left promiscuous mode [ 536.423034][T14916] veth0_macvtap: left promiscuous mode [ 536.428618][T14916] veth1_vlan: left promiscuous mode [ 536.433914][T14916] veth0_vlan: left promiscuous mode [ 536.522318][T14916] team0 (unregistering): Port device team_slave_1 removed [ 536.533263][T14916] team0 (unregistering): Port device team_slave_0 removed [ 536.698199][T21542] pim6reg1: entered promiscuous mode [ 536.703593][T21542] pim6reg1: entered allmulticast mode [ 536.837608][T21555] pim6reg1: entered promiscuous mode [ 536.842935][T21555] pim6reg1: entered allmulticast mode [ 536.851431][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6132'. [ 536.903368][T21563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.928090][T21563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.965357][T21527] vhci_hcd: connection closed [ 536.965449][T21531] vhci_hcd: connection closed [ 536.965749][T21525] vhci_hcd: connection closed [ 536.970160][ T28] vhci_hcd: stop threads [ 536.975250][T21523] vhci_hcd: connection closed [ 536.979524][ T28] vhci_hcd: release socket [ 536.993743][ T28] vhci_hcd: disconnect device [ 536.994790][T21521] vhci_hcd: connection reset by peer [ 537.009770][ T28] vhci_hcd: stop threads [ 537.014032][ T28] vhci_hcd: release socket [ 537.018593][ T28] vhci_hcd: disconnect device [ 537.027856][ T28] vhci_hcd: stop threads [ 537.032221][ T28] vhci_hcd: release socket [ 537.036758][ T28] vhci_hcd: disconnect device [ 537.041010][T21578] pim6reg1: entered promiscuous mode [ 537.044818][ T28] vhci_hcd: stop threads [ 537.046782][T21578] pim6reg1: entered allmulticast mode [ 537.050973][ T28] vhci_hcd: release socket [ 537.050987][ T28] vhci_hcd: disconnect device [ 537.065758][ T28] vhci_hcd: stop threads [ 537.069991][ T28] vhci_hcd: release socket [ 537.074387][ T28] vhci_hcd: disconnect device [ 537.086985][T21579] loop2: detected capacity change from 0 to 512 [ 537.094735][T21579] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.6143: attempt to clear invalid blocks 1 len 1 [ 537.108076][T21579] EXT4-fs (loop2): Remounting filesystem read-only [ 537.114987][T21579] EXT4-fs (loop2): 1 truncate cleaned up [ 537.120984][T21579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.133116][T21579] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 537.142166][T21579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.151238][ T3347] vhci_hcd: vhci_device speed not set [ 537.162700][T21579] loop2: detected capacity change from 0 to 256 [ 537.169163][T21579] vfat: Unknown parameter 'À' [ 537.379053][T21599] pim6reg1: entered promiscuous mode [ 537.384454][T21599] pim6reg1: entered allmulticast mode [ 537.489939][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6154'. [ 537.532395][T21609] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 537.532395][T21609] program syz.3.6155 not setting count and/or reply_len properly [ 537.570683][T21611] loop4: detected capacity change from 0 to 512 [ 537.572890][T21609] loop3: detected capacity change from 0 to 128 [ 537.577600][T21611] EXT4-fs: Ignoring removed nobh option [ 537.588008][T21609] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.601536][T21609] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 537.635242][T21611] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 537.646070][T21611] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.6156: attempt to clear invalid blocks 2 len 1 [ 537.659129][T21611] EXT4-fs (loop4): Remounting filesystem read-only [ 537.666467][T21611] EXT4-fs (loop4): 1 truncate cleaned up [ 537.672581][T21611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.694528][T21611] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 537.702140][T17947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 537.712429][T21611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.802352][T21611] loop4: detected capacity change from 0 to 1024 [ 537.809709][T21611] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 537.820794][T21611] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 537.828901][T21611] EXT4-fs (loop4): too many log groups per flexible block group [ 537.836627][T21611] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 537.845150][T21633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.853774][T21633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.863567][T21611] EXT4-fs (loop4): mount failed [ 538.161259][T21646] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 538.167804][T21646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.175267][T21646] vhci_hcd vhci_hcd.0: Device attached [ 538.184813][T21646] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.193506][T21646] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 538.200007][T21646] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 538.207613][T21646] vhci_hcd vhci_hcd.0: Device attached [ 538.216031][T21646] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 538.222618][T21646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.230067][T21646] vhci_hcd vhci_hcd.0: Device attached [ 538.236999][T21646] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 538.243668][T21646] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 538.251418][T21646] vhci_hcd vhci_hcd.0: Device attached [ 538.354765][ T8852] vhci_hcd: vhci_device speed not set [ 538.362133][T21656] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18) [ 538.368795][T21656] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.376351][T21656] vhci_hcd vhci_hcd.0: Device attached [ 538.414769][ T8852] usb 3-1: new full-speed USB device number 9 using vhci_hcd [ 538.555453][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 538.663444][T21674] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 538.663444][T21674] program syz.3.6170 not setting count and/or reply_len properly [ 538.706078][T21674] loop3: detected capacity change from 0 to 128 [ 538.715703][T21684] loop2: detected capacity change from 0 to 128 [ 538.724360][T21674] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.736678][T21674] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 538.793492][T17947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 538.812351][T21689] Cannot find del_set index 0 as target [ 538.852541][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 538.862415][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.916131][T21701] loop3: detected capacity change from 0 to 128 [ 538.922977][T21701] FAT-fs (loop3): bogus number of reserved sectors [ 538.929712][T21701] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 538.939135][T21701] FAT-fs (loop3): Can't find a valid FAT filesystem [ 538.991878][T21657] vhci_hcd: connection closed [ 538.992042][ T3377] vhci_hcd: stop threads [ 539.001124][ T3377] vhci_hcd: release socket [ 539.005568][ T3377] vhci_hcd: disconnect device [ 539.010538][T21647] vhci_hcd: connection reset by peer [ 539.010629][T21653] vhci_hcd: connection closed [ 539.018487][T21651] vhci_hcd: connection closed [ 539.018617][T21649] vhci_hcd: connection closed [ 539.034580][ T3377] vhci_hcd: stop threads [ 539.043531][ T3377] vhci_hcd: release socket [ 539.047994][ T3377] vhci_hcd: disconnect device [ 539.052858][ T3377] vhci_hcd: stop threads [ 539.057131][ T3377] vhci_hcd: release socket [ 539.061545][ T3377] vhci_hcd: disconnect device [ 539.066499][ T3377] vhci_hcd: stop threads [ 539.070743][ T3377] vhci_hcd: release socket [ 539.075251][ T3377] vhci_hcd: disconnect device [ 539.080146][ T3377] vhci_hcd: stop threads [ 539.084417][ T3377] vhci_hcd: release socket [ 539.088947][ T3377] vhci_hcd: disconnect device [ 539.281117][T21731] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6185'. [ 539.621083][T21757] loop2: detected capacity change from 0 to 512 [ 539.628172][T21757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 539.646627][T21757] EXT4-fs (loop2): 1 truncate cleaned up [ 539.652527][T21757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.652566][T21765] bpf_get_probe_write_proto: 8 callbacks suppressed [ 539.652576][T21765] syz.1.6198[21765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.671955][T21765] syz.1.6198[21765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.200126][T21776] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 540.217979][T21776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 540.225474][T21776] vhci_hcd vhci_hcd.0: Device attached [ 540.231996][T21776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 540.240654][T21776] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 540.247157][T21776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 540.254871][T21776] vhci_hcd vhci_hcd.0: Device attached [ 540.264789][T21776] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 540.271421][T21776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 540.278951][T21776] vhci_hcd vhci_hcd.0: Device attached [ 540.285631][T21776] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 540.291085][T21788] loop3: detected capacity change from 0 to 128 [ 540.295175][T21776] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 540.309113][T21776] vhci_hcd vhci_hcd.0: Device attached [ 540.401712][T18680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.423421][T21793] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 540.430034][T21793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 540.437477][T21793] vhci_hcd vhci_hcd.0: Device attached [ 540.502400][T21805] syz.2.6209[21805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.502508][T21805] syz.2.6209[21805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.516154][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 540.516168][ T29] audit: type=1326 audit(2000000324.399:33318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.2.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 540.557372][ T29] audit: type=1326 audit(2000000324.399:33319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.2.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 540.581094][ T29] audit: type=1326 audit(2000000324.399:33320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21804 comm="syz.2.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 540.618186][T21809] siw: device registration error -23 [ 541.032015][T21794] vhci_hcd: connection closed [ 541.032118][ T332] vhci_hcd: stop threads [ 541.041099][ T332] vhci_hcd: release socket [ 541.045586][ T332] vhci_hcd: disconnect device [ 541.052819][T21779] vhci_hcd: connection closed [ 541.052896][T21777] vhci_hcd: connection closed [ 541.052908][T21786] vhci_hcd: connection closed [ 541.060291][T21781] vhci_hcd: connection closed [ 541.069679][ T332] vhci_hcd: stop threads [ 541.078737][ T332] vhci_hcd: release socket [ 541.083203][ T332] vhci_hcd: disconnect device [ 541.090308][ T332] vhci_hcd: stop threads [ 541.094574][ T332] vhci_hcd: release socket [ 541.099371][ T332] vhci_hcd: disconnect device [ 541.110145][ T332] vhci_hcd: stop threads [ 541.114423][ T332] vhci_hcd: release socket [ 541.118925][ T332] vhci_hcd: disconnect device [ 541.131098][ T332] vhci_hcd: stop threads [ 541.135412][ T332] vhci_hcd: release socket [ 541.139820][ T332] vhci_hcd: disconnect device [ 541.160118][T21813] loop3: detected capacity change from 0 to 256 [ 541.173610][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6213'. [ 541.241691][T21815] loop3: detected capacity change from 0 to 512 [ 541.251231][T21815] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.6214: iget: bad extended attribute block 1 [ 541.264363][T21815] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.6214: couldn't read orphan inode 15 (err -117) [ 541.279597][T21815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.306096][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.342265][T21818] pim6reg1: entered promiscuous mode [ 541.347622][T21818] pim6reg1: entered allmulticast mode [ 541.390159][T21822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6216'. [ 541.446355][ T29] audit: type=1326 audit(2000000325.329:33321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.1.6221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.469999][ T29] audit: type=1326 audit(2000000325.329:33322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.1.6221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.499770][ T29] audit: type=1326 audit(2000000325.349:33323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.1.6221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.502331][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6222'. [ 541.523447][ T29] audit: type=1326 audit(2000000325.349:33324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.532326][T21836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.555289][ T29] audit: type=1326 audit(2000000325.349:33325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb46e5dc8d0 code=0x7ffc0000 [ 541.562720][T21836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.585696][ T29] audit: type=1326 audit(2000000325.349:33326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.615962][ T29] audit: type=1326 audit(2000000325.349:33327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb46e5ddf39 code=0x7ffc0000 [ 541.641804][T21836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.649306][T21836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.851909][T21850] syz.3.6227[21850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.852005][T21850] syz.3.6227[21850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.870474][T21850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.890529][T21850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.438336][T21858] loop2: detected capacity change from 0 to 256 [ 542.502204][T21860] pim6reg1: entered promiscuous mode [ 542.507723][T21860] pim6reg1: entered allmulticast mode [ 542.578999][T21866] netlink: 'syz.0.6234': attribute type 21 has an invalid length. [ 542.595578][T21866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6234'. [ 542.612080][T21868] loop3: detected capacity change from 0 to 128 [ 542.708670][T21871] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 542.708670][T21871] program syz.0.6236 not setting count and/or reply_len properly [ 542.740664][T21871] loop0: detected capacity change from 0 to 128 [ 542.749197][T21871] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.761530][T21871] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 542.834010][T17494] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.940236][T21886] loop0: detected capacity change from 0 to 256 [ 542.957710][T21886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6240'. [ 543.198120][ T28] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.238073][ T28] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.297348][ T28] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.348938][T21893] chnl_net:caif_netlink_parms(): no params data found [ 543.368015][ T28] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.393959][T21893] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.401044][T21893] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.408347][T21893] bridge_slave_0: entered allmulticast mode [ 543.417855][T21893] bridge_slave_0: entered promiscuous mode [ 543.433343][T21893] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.440514][T21893] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.450201][T21893] bridge_slave_1: entered allmulticast mode [ 543.457089][T21893] bridge_slave_1: entered promiscuous mode [ 543.493168][T21893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.502575][ T28] bridge_slave_1: left allmulticast mode [ 543.505729][ T8852] usb 3-1: enqueue for inactive port 0 [ 543.508265][ T28] bridge_slave_1: left promiscuous mode [ 543.513648][ T8852] usb 3-1: enqueue for inactive port 0 [ 543.519358][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.534460][T21913] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 543.534460][T21913] program syz.1.6245 not setting count and/or reply_len properly [ 543.551889][ T28] bridge_slave_0: left allmulticast mode [ 543.557546][ T28] bridge_slave_0: left promiscuous mode [ 543.563258][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.592148][T21910] loop1: detected capacity change from 0 to 128 [ 543.609980][T21910] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 543.622215][T21910] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 543.648484][ T8852] vhci_hcd: vhci_device speed not set [ 543.783066][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.826364][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.842933][ T28] bond0 (unregistering): Released all slaves [ 543.853713][T21893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.881083][T21893] team0: Port device team_slave_0 added [ 543.893396][T21893] team0: Port device team_slave_1 added [ 543.917575][T21893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.924642][T21893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.950687][T21893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.965482][T21893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.972437][T21893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.998414][T21893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.077575][T20877] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.091913][ T28] tipc: Disabling bearer [ 544.097219][ T28] tipc: Disabling bearer [ 544.102595][ T28] tipc: Left network mode [ 544.112627][ T28] IPVS: stopping master sync thread 18408 ... [ 544.125477][T21932] loop2: detected capacity change from 0 to 512 [ 544.135790][T21932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 544.147976][T21893] hsr_slave_0: entered promiscuous mode [ 544.154201][T21893] hsr_slave_1: entered promiscuous mode [ 544.161092][T21937] loop1: detected capacity change from 0 to 512 [ 544.167778][T21893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.175467][T21893] Cannot create hsr debugfs directory [ 544.177767][T21932] EXT4-fs (loop2): 1 truncate cleaned up [ 544.184894][T21937] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 544.187021][T21932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.208863][ T28] hsr_slave_0: left promiscuous mode [ 544.214503][ T28] hsr_slave_1: left promiscuous mode [ 544.223578][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.231137][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.236258][T21941] loop1: detected capacity change from 0 to 128 [ 544.245056][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.252527][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.262529][ T28] veth1_macvtap: left promiscuous mode [ 544.268095][ T28] veth0_macvtap: left promiscuous mode [ 544.273570][ T28] veth1_vlan: left promiscuous mode [ 544.278881][ T28] veth0_vlan: left promiscuous mode [ 544.366776][ T28] team0 (unregistering): Port device team_slave_1 removed [ 544.377198][ T28] team0 (unregistering): Port device team_slave_0 removed [ 544.477073][T21947] loop3: detected capacity change from 0 to 128 [ 544.731185][T21893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 544.739769][T21893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.748027][T21893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.756967][T21893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.789927][T21893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.803265][T21893] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.812170][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.819278][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.830738][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.837844][T14916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.897718][T21893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.915904][T18680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.966240][T21893] veth0_vlan: entered promiscuous mode [ 544.974560][T21893] veth1_vlan: entered promiscuous mode [ 544.993153][T21893] veth0_macvtap: entered promiscuous mode [ 545.002306][T21893] veth1_macvtap: entered promiscuous mode [ 545.012678][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.023150][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.032992][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.043489][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.053304][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.063878][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.073683][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.084111][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.093978][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.104471][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.114304][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.124766][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.134556][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.145080][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.154970][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.165471][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.175383][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.185960][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.195841][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.208780][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.218575][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.228972][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.241588][T21893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.254087][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.264777][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.274578][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.285017][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.294878][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.305411][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.315351][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.325913][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.325943][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.325972][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.356757][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.367240][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.377113][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.387587][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.397936][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.397952][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.418256][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.428698][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.438496][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.448914][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.458797][T21893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.469344][T21893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.481226][T21893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.491266][T21893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.500198][T21893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.509080][T21893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.517828][T21893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.540184][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 545.540199][ T29] audit: type=1400 audit(2000000329.419:33461): avc: denied { mounton } for pid=21893 comm="syz-executor" path="/root/syzkaller.lUFIJe/syz-tmp" dev="sda1" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 545.571028][ T29] audit: type=1400 audit(2000000329.419:33462): avc: denied { mount } for pid=21893 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 545.594638][ T29] audit: type=1400 audit(2000000329.429:33463): avc: denied { read } for pid=21971 comm="syz.3.6261" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 545.618080][ T29] audit: type=1400 audit(2000000329.429:33464): avc: denied { open } for pid=21971 comm="syz.3.6261" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 545.645899][ T29] audit: type=1400 audit(2000000329.479:33465): avc: denied { mounton } for pid=21893 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 545.669203][ T29] audit: type=1400 audit(2000000329.479:33466): avc: denied { ioctl } for pid=21971 comm="syz.3.6261" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 545.907792][ T29] audit: type=1400 audit(2000000329.789:33467): avc: denied { mount } for pid=21989 comm="syz.2.6266" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 546.014081][ T29] audit: type=1400 audit(2000000329.889:33468): avc: denied { unmount } for pid=18680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 546.022441][T21992] loop2: detected capacity change from 0 to 128 [ 546.111306][T21995] loop1: detected capacity change from 0 to 128 [ 546.550244][ T29] audit: type=1400 audit(2000000330.429:33469): avc: denied { create } for pid=21997 comm="syz.0.6269" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 546.571257][ T29] audit: type=1400 audit(2000000330.429:33470): avc: denied { write } for pid=21997 comm="syz.0.6269" name="file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 546.647633][T22006] vlan2: entered allmulticast mode [ 546.964982][T22023] loop2: detected capacity change from 0 to 512 [ 546.971817][T22023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 546.984425][T22023] EXT4-fs (loop2): 1 truncate cleaned up [ 546.992873][T22023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.623944][T22057] syz.3.6289[22057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.624078][T22057] syz.3.6289[22057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.638708][T22057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6289'. [ 547.663371][T22057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.672015][T22057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.674680][T22059] loop0: detected capacity change from 0 to 256 [ 547.710486][T22062] pim6reg1: entered promiscuous mode [ 547.715868][T22062] pim6reg1: entered allmulticast mode [ 547.734482][T22043] chnl_net:caif_netlink_parms(): no params data found [ 547.753279][T18680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.793758][T22043] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.800901][T22043] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.808295][T22043] bridge_slave_0: entered allmulticast mode [ 547.814836][T22043] bridge_slave_0: entered promiscuous mode [ 547.822348][T22043] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.829422][T22043] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.836754][T22043] bridge_slave_1: entered allmulticast mode [ 547.843156][T22043] bridge_slave_1: entered promiscuous mode [ 547.863702][T22043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.878750][T22043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.903790][T22043] team0: Port device team_slave_0 added [ 547.918619][T22043] team0: Port device team_slave_1 added [ 547.922722][T22075] loop1: detected capacity change from 0 to 512 [ 547.931273][T22075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 547.944128][T22043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.951228][T22043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.964941][T22075] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 547.977488][T22043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.995385][T22075] EXT4-fs (loop1): 1 truncate cleaned up [ 548.003233][T22043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.008186][T22075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.014678][T22043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.053009][T22043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.064358][T20877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.083720][T22043] hsr_slave_0: entered promiscuous mode [ 548.090129][T22043] hsr_slave_1: entered promiscuous mode [ 548.097661][T22043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.105729][T22043] Cannot create hsr debugfs directory [ 548.115099][T22078] loop1: detected capacity change from 0 to 2048 [ 548.158287][T22078] mmap: ‡†@ (22078): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 548.173663][T22043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.240502][T22043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.254323][T22094] loop3: detected capacity change from 0 to 256 [ 548.288188][T22043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.308477][T22097] loop1: detected capacity change from 0 to 512 [ 548.315824][T22097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.329644][T22097] EXT4-fs (loop1): 1 truncate cleaned up [ 548.338508][T22097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.359465][T22043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.382016][T22102] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 548.382016][T22102] program syz.3.6305 not setting count and/or reply_len properly [ 548.413852][T22102] loop3: detected capacity change from 0 to 128 [ 548.421536][T22102] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.435893][T22102] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 548.481952][T22043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.490794][T22043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.499237][T22043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.507909][T22043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.515614][T17947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.539830][T22043] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.548060][T22043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.555391][T22043] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.562430][T22043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.598703][T22043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.606708][T22111] syz.3.6308[22111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.606791][T22111] syz.3.6308[22111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.611305][T22043] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.634017][T22111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6308'. [ 548.650284][T22111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.659178][T22111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.683825][T22043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.694288][T22043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.749076][T22043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.831904][T22133] loop2: detected capacity change from 0 to 256 [ 548.877269][T22043] veth0_vlan: entered promiscuous mode [ 548.890192][T22043] veth1_vlan: entered promiscuous mode [ 548.908914][T22043] veth0_macvtap: entered promiscuous mode [ 548.917216][T22043] veth1_macvtap: entered promiscuous mode [ 548.928856][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.939465][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.949311][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.959738][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.969559][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.980058][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.980073][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.980088][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.010363][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.021192][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.031072][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.041470][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.051287][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.051301][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.051318][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.082122][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.091944][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.102408][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.112210][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.122609][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.132414][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.142828][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.152629][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.163138][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.175792][T22043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.183885][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.194353][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.199370][T20877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.204239][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.223516][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.233320][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.243753][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.253580][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.264094][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.273918][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.284353][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.294251][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.304742][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.314644][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.325066][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.334945][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.345432][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.355251][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.365715][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.375551][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.386016][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.395827][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.406412][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.416376][T22043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.426886][T22043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.439906][T22043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.455963][T22043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.464685][T22043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.473398][T22043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.482152][T22043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.541169][T22157] pim6reg1: entered promiscuous mode [ 549.546578][T22157] pim6reg1: entered allmulticast mode [ 549.656109][T22169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6325'. [ 549.818974][T22180] loop1: detected capacity change from 0 to 2048 [ 549.825685][T22180] EXT4-fs: Ignoring removed orlov option [ 549.847151][T22180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.902667][T20877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.498463][T22195] loop3: detected capacity change from 0 to 512 [ 550.523322][T22195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.543115][T22195] EXT4-fs (loop3): orphan cleanup on readonly fs [ 550.550171][T22195] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6334: bg 0: block 248: padding at end of block bitmap is not set [ 550.568456][T22195] __quota_error: 176 callbacks suppressed [ 550.568469][T22195] Quota error (device loop3): write_blk: dquota write failed [ 550.579748][T22198] pim6reg1: entered promiscuous mode [ 550.581778][T22195] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 550.587187][T22198] pim6reg1: entered allmulticast mode [ 550.602612][T22195] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.6334: Failed to acquire dquot type 1 [ 550.620208][T22195] EXT4-fs (loop3): 1 truncate cleaned up [ 550.638094][T22195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.640920][T22202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6337'. [ 550.661675][T22195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.670227][ T29] audit: type=1400 audit(2000000334.539:33647): avc: denied { remount } for pid=22194 comm="syz.3.6334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 550.695454][T22195] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.6334: Abort forced by user [ 550.715750][T22195] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 550.735925][T22195] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 550.749996][T22195] ext4 filesystem being remounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 550.780005][T22211] loop1: detected capacity change from 0 to 128 [ 550.803159][T22211] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.814378][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.817594][T22211] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 550.877111][ T29] audit: type=1400 audit(2000000334.759:33648): avc: denied { ioctl } for pid=22210 comm="syz.1.6341" path="/101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 550.932618][ T29] audit: type=1326 audit(2000000334.809:33649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 550.958227][ T29] audit: type=1326 audit(2000000334.809:33650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 550.981899][ T29] audit: type=1326 audit(2000000334.819:33651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61e305c8d0 code=0x7ffc0000 [ 551.005522][ T29] audit: type=1326 audit(2000000334.819:33652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61e305c8d0 code=0x7ffc0000 [ 551.017987][T22218] random: crng reseeded on system resumption [ 551.029201][ T29] audit: type=1326 audit(2000000334.819:33653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 551.059072][ T29] audit: type=1326 audit(2000000334.819:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22219 comm="syz.2.6345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f61e305df39 code=0x7ffc0000 [ 551.088287][T22211] dccp_v6_rcv: dropped packet with invalid checksum [ 551.144359][T22226] loop3: detected capacity change from 0 to 128 [ 551.148900][T22228] pim6reg1: entered promiscuous mode [ 551.156070][T22228] pim6reg1: entered allmulticast mode [ 551.178206][T20877] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.181731][T22224] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 551.308839][T22239] loop2: detected capacity change from 0 to 2048 [ 551.399153][T22249] syz.1.6358[22249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.399209][T22249] syz.1.6358[22249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.427182][T22249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.455387][T22249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.546501][T22260] loop2: detected capacity change from 0 to 128 [ 551.729300][T22269] loop2: detected capacity change from 0 to 512 [ 551.749519][T22269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.762347][T22269] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.791454][T22269] 9pnet_fd: Insufficient options for proto=fd [ 551.903724][T18680] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /234/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 552.121733][T22278] siw: device registration error -23 [ 552.165760][T22285] loop3: detected capacity change from 0 to 128 [ 552.304484][T22298] loop3: detected capacity change from 0 to 512 [ 552.311475][T22298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 552.344986][T22298] EXT4-fs (loop3): 1 truncate cleaned up [ 552.351114][T22298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.460247][T22304] loop4: detected capacity change from 0 to 512 [ 552.474660][T22304] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 552.550169][T22304] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 552.560228][T22304] EXT4-fs (loop4): 1 truncate cleaned up [ 552.567026][T22304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.613584][T22304] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm +}[@: Logical block already allocated [ 552.639102][T22304] EXT4-fs (loop4): Remounting filesystem read-only [ 552.796773][T22043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.858008][T22309] loop4: detected capacity change from 0 to 2048 [ 552.929178][T22309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.976818][T22043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.083737][T22322] loop4: detected capacity change from 0 to 128 [ 553.171015][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.194493][T22333] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 553.201110][T22333] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 553.208544][T22333] vhci_hcd vhci_hcd.0: Device attached [ 553.216350][T22333] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 553.227295][T22333] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 553.233894][T22333] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 553.241626][T22333] vhci_hcd vhci_hcd.0: Device attached [ 553.252601][T22333] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 553.259203][T22333] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 553.266844][T22333] vhci_hcd vhci_hcd.0: Device attached [ 553.273667][T22333] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 553.280324][T22333] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 553.287914][T22333] vhci_hcd vhci_hcd.0: Device attached [ 553.393772][T22331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.402286][ T8] vhci_hcd: vhci_device speed not set [ 553.410236][T22331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.427183][T22345] tipc: Started in network mode [ 553.432071][T22345] tipc: Node identity ac14140f, cluster identity 4711 [ 553.447871][T22331] loop3: detected capacity change from 0 to 2048 [ 553.454566][T22345] tipc: New replicast peer: 255.255.255.255 [ 553.460626][T22345] tipc: Enabled bearer , priority 10 [ 553.469186][ T8] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 553.476841][T22331] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 553.496376][T22345] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(17) [ 553.502988][T22345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 553.510397][T22345] vhci_hcd vhci_hcd.0: Device attached [ 553.771513][T22352] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 553.771513][T22352] program syz.0.6390 not setting count and/or reply_len properly [ 553.809684][T22352] loop0: detected capacity change from 0 to 128 [ 553.817711][T22352] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 553.830238][T22352] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 553.899752][T21893] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.022464][T22365] loop0: detected capacity change from 0 to 2048 [ 554.032924][T22347] vhci_hcd: connection closed [ 554.033984][T14916] vhci_hcd: stop threads [ 554.042934][T14916] vhci_hcd: release socket [ 554.047394][T14916] vhci_hcd: disconnect device [ 554.057809][T22342] vhci_hcd: connection closed [ 554.057829][T22336] vhci_hcd: connection closed [ 554.062532][T22334] vhci_hcd: connection reset by peer [ 554.072582][T22338] vhci_hcd: connection closed [ 554.072946][T14916] vhci_hcd: stop threads [ 554.081879][T14916] vhci_hcd: release socket [ 554.086395][T14916] vhci_hcd: disconnect device [ 554.094857][T14916] vhci_hcd: stop threads [ 554.099108][T14916] vhci_hcd: release socket [ 554.103519][T14916] vhci_hcd: disconnect device [ 554.110762][T14916] vhci_hcd: stop threads [ 554.115069][T14916] vhci_hcd: release socket [ 554.119520][T14916] vhci_hcd: disconnect device [ 554.126742][T22371] loop1: detected capacity change from 0 to 512 [ 554.133025][T14916] vhci_hcd: stop threads [ 554.137477][T14916] vhci_hcd: release socket [ 554.141981][T14916] vhci_hcd: disconnect device [ 554.143695][T22371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 554.172709][T22373] loop0: detected capacity change from 0 to 128 [ 554.180157][T22371] EXT4-fs (loop1): 1 truncate cleaned up [ 554.189736][T22371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.243867][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 554.251604][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 554.259278][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.267020][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.274779][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.282586][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.290272][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.297999][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.305705][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.313393][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.321092][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.328794][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.336487][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.344188][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.351834][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.359501][ T3347] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 554.368099][ T3347] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 554.538871][T22383] pim6reg1: entered promiscuous mode [ 554.544291][T22383] pim6reg1: entered allmulticast mode [ 554.594755][ T8852] tipc: Node number set to 2886997007 [ 554.601034][T22385] loop4: detected capacity change from 0 to 2048 [ 554.726468][T22392] loop0: detected capacity change from 0 to 128 [ 554.733551][T22390] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 554.733551][T22390] program syz.4.6404 not setting count and/or reply_len properly [ 554.771034][T22390] loop4: detected capacity change from 0 to 128 [ 554.779031][T22390] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 554.792973][T22390] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 554.837573][T22397] loop0: detected capacity change from 0 to 256 [ 554.857944][T22043] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.891960][T20877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.946488][T22401] loop4: detected capacity change from 0 to 2048 [ 555.037729][T22411] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 555.045978][T22411] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 555.154457][T22399] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 555.162651][T22399] tipc: Enabled bearer , priority 10 [ 555.269778][T22419] loop4: detected capacity change from 0 to 2048 [ 555.590168][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 555.590189][ T29] audit: type=1326 audit(2000000339.469:33943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.4.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1677df39 code=0x7ffc0000 [ 555.652236][ T29] audit: type=1326 audit(2000000339.469:33944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.4.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1677df39 code=0x7ffc0000 [ 555.675870][ T29] audit: type=1326 audit(2000000339.509:33945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.4.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4f1677df39 code=0x7ffc0000 [ 555.699670][ T29] audit: type=1326 audit(2000000339.509:33946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.4.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1677df39 code=0x7ffc0000 [ 555.723366][ T29] audit: type=1326 audit(2000000339.509:33947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.4.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1677df39 code=0x7ffc0000 [ 555.758637][T22441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22441 comm=syz.3.6422 [ 555.813250][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6422'. [ 555.822468][T22441] netlink: 'syz.3.6422': attribute type 15 has an invalid length. [ 555.872421][ T29] audit: type=1400 audit(2000000339.749:33948): avc: denied { create } for pid=22438 comm="syz.3.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 555.897449][T22441] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 555.906187][T22441] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 555.914811][T22441] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 555.923419][T22441] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 555.934123][ T29] audit: type=1400 audit(2000000339.749:33949): avc: denied { ioctl } for pid=22438 comm="syz.3.6422" path="socket:[80905]" dev="sockfs" ino=80905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 555.961494][ T29] audit: type=1400 audit(2000000339.829:33950): avc: denied { bpf } for pid=22438 comm="syz.3.6422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 555.982419][ T29] audit: type=1400 audit(2000000339.829:33951): avc: denied { map_create } for pid=22438 comm="syz.3.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.006079][T22441] vxlan0: entered promiscuous mode [ 556.022923][ T29] audit: type=1400 audit(2000000339.889:33952): avc: denied { map_read map_write } for pid=22451 comm="syz.0.6424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.052704][T22453] pim6reg1: entered promiscuous mode [ 556.058145][T22453] pim6reg1: entered allmulticast mode [ 556.167861][T22457] syz.0.6425[22457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.167915][T22457] syz.0.6425[22457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.208624][T22457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.250298][T22457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.617382][T22466] FAULT_INJECTION: forcing a failure. [ 556.617382][T22466] name failslab, interval 1, probability 0, space 0, times 0 [ 556.630175][T22466] CPU: 1 UID: 0 PID: 22466 Comm: syz.1.6429 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 556.640661][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 556.650706][T22466] Call Trace: [ 556.653984][T22466] [ 556.656909][T22466] dump_stack_lvl+0xf2/0x150 [ 556.661500][T22466] dump_stack+0x15/0x20 [ 556.665650][T22466] should_fail_ex+0x223/0x230 [ 556.670334][T22466] ? sidtab_sid2str_get+0xb8/0x140 [ 556.675501][T22466] should_failslab+0x8f/0xb0 [ 556.680136][T22466] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 556.686591][T22466] ? vsnprintf+0xdd8/0xe30 [ 556.691003][T22466] kmemdup_noprof+0x2a/0x60 [ 556.695503][T22466] sidtab_sid2str_get+0xb8/0x140 [ 556.700442][T22466] security_sid_to_context_core+0x1eb/0x2f0 [ 556.706392][T22466] security_sid_to_context+0x27/0x30 [ 556.711809][T22466] selinux_secid_to_secctx+0x22/0x30 [ 556.717104][T22466] security_secid_to_secctx+0x48/0x90 [ 556.722538][T22466] audit_log_task_context+0x8c/0x1b0 [ 556.728044][T22466] audit_log_task+0xfb/0x180 [ 556.732634][T22466] audit_seccomp+0x68/0x130 [ 556.737242][T22466] __seccomp_filter+0x6fa/0x1180 [ 556.742181][T22466] ? proc_fail_nth_write+0x12a/0x150 [ 556.747474][T22466] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 556.753186][T22466] ? vfs_write+0x580/0x910 [ 556.757675][T22466] ? __fget_files+0x1d4/0x210 [ 556.762403][T22466] __secure_computing+0x9f/0x1c0 [ 556.767382][T22466] syscall_trace_enter+0xd1/0x1f0 [ 556.772411][T22466] ? fpregs_assert_state_consistent+0x83/0xa0 [ 556.778586][T22466] do_syscall_64+0xaa/0x1c0 [ 556.783091][T22466] ? clear_bhb_loop+0x55/0xb0 [ 556.787778][T22466] ? clear_bhb_loop+0x55/0xb0 [ 556.792452][T22466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.798374][T22466] RIP: 0033:0x7fb46e5ddf39 [ 556.802780][T22466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.822425][T22466] RSP: 002b:00007fb46d256e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 556.830913][T22466] RAX: ffffffffffffffda RBX: 00000000000001e9 RCX: 00007fb46e5ddf39 [ 556.838892][T22466] RDX: 00007fb46d256ef0 RSI: 0000000000000000 RDI: 00007fb46e650a09 [ 556.846933][T22466] RBP: 00000000200002c0 R08: 00007fb46d256bb7 R09: 00007fb46d256e40 [ 556.854928][T22466] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000240 [ 556.862895][T22466] R13: 00007fb46d256ef0 R14: 00007fb46d256eb0 R15: 0000000020000080 [ 556.870885][T22466] [ 556.876345][T22466] loop1: detected capacity change from 0 to 128 [ 557.069783][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 557.077565][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 557.087856][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.095829][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.103638][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.111322][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.119022][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.126679][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.134356][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.142008][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.149707][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.157346][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.165100][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.172769][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.180537][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.188191][ T8852] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 557.197636][ T8852] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 557.323733][T22482] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 557.323733][T22482] program syz.4.6435 not setting count and/or reply_len properly [ 557.366252][T22482] loop4: detected capacity change from 0 to 128 [ 557.378474][T22482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.403765][T22482] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 557.482032][T22489] siw: device registration error -23 [ 557.502232][T22043] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.633887][T22513] loop0: detected capacity change from 0 to 256 [ 557.653649][T22511] loop3: detected capacity change from 0 to 2048 [ 557.714808][T22515] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 557.714808][T22515] program syz.0.6450 not setting count and/or reply_len properly [ 557.768356][T22515] loop0: detected capacity change from 0 to 128 [ 557.780255][T22515] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.792798][T22515] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 557.819344][T22525] syz.1.6453[22525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.824854][T22525] syz.1.6453[22525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.836754][T22525] syz.1.6453[22525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.901473][T21893] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.935372][T22529] loop0: detected capacity change from 0 to 164 [ 557.943799][T22529] syz.0.6455: attempt to access beyond end of device [ 557.943799][T22529] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 557.963687][T22529] syz.0.6455: attempt to access beyond end of device [ 557.963687][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 557.977673][T22529] syz.0.6455: attempt to access beyond end of device [ 557.977673][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 557.992287][T22529] syz.0.6455: attempt to access beyond end of device [ 557.992287][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.006252][T22529] syz.0.6455: attempt to access beyond end of device [ 558.006252][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.021759][T22533] syz.0.6455: attempt to access beyond end of device [ 558.021759][T22533] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.036035][T22529] syz.0.6455: attempt to access beyond end of device [ 558.036035][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.049644][T22533] syz.0.6455: attempt to access beyond end of device [ 558.049644][T22533] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.067316][T22529] syz.0.6455: attempt to access beyond end of device [ 558.067316][T22529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.085254][T22534] loop3: detected capacity change from 0 to 512 [ 558.093076][T22534] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 558.093346][T22533] syz.0.6455: attempt to access beyond end of device [ 558.093346][T22533] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 558.127895][T22538] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 558.168103][T22534] EXT4-fs (loop3): 1 truncate cleaned up [ 558.174053][T22534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.293698][T22550] loop1: detected capacity change from 0 to 256 [ 558.536925][ T8] usb 9-1: enqueue for inactive port 0 [ 558.544493][ T8] usb 9-1: enqueue for inactive port 0 [ 558.625601][ T8] vhci_hcd: vhci_device speed not set [ 558.795546][T22558] pim6reg1: entered promiscuous mode [ 558.800863][T22558] pim6reg1: entered allmulticast mode [ 558.855175][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.025557][T22562] netem: change failed [ 559.036492][T22563] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 559.036492][T22563] program syz.3.6465 not setting count and/or reply_len properly [ 559.160177][T22560] loop3: detected capacity change from 0 to 128 [ 559.184961][T22560] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 559.204476][T22560] ext4 filesystem being mounted at /377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 559.344023][T17947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.484352][T22583] loop4: detected capacity change from 0 to 256 [ 559.545864][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 559.553610][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 559.563838][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.571528][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.579252][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.587005][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.594630][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.602312][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.609999][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.617695][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.625443][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.629108][T22589] pim6reg1: entered promiscuous mode [ 559.633083][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.633127][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.638426][T22589] pim6reg1: entered allmulticast mode [ 559.646059][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.667044][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.674680][ T3342] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 559.703474][ T3342] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 559.741533][T22597] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 559.748062][T22597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 559.755567][T22597] vhci_hcd vhci_hcd.0: Device attached [ 559.764335][T22597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.774789][T22597] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 559.781292][T22597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 559.788889][T22597] vhci_hcd vhci_hcd.0: Device attached [ 559.799203][T22597] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 559.805894][T22597] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 559.813301][T22597] vhci_hcd vhci_hcd.0: Device attached [ 559.822131][T22597] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 559.828730][T22597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 559.836455][T22597] vhci_hcd vhci_hcd.0: Device attached [ 559.858187][T22608] loop3: detected capacity change from 0 to 512 [ 559.890205][T22608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.907217][T22608] ext4 filesystem being mounted at /383/control supports timestamps until 2038-01-19 (0x7fffffff) [ 559.957953][T22616] tipc: Enabling of bearer rejected, already enabled [ 559.979510][T22616] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(17) [ 559.986195][T22616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 559.993632][T22616] vhci_hcd vhci_hcd.0: Device attached [ 560.095663][ T8] vhci_hcd: vhci_device speed not set [ 560.156368][ T8] usb 9-5: new full-speed USB device number 9 using vhci_hcd [ 560.272863][T22623] loop1: detected capacity change from 0 to 1024 [ 560.287651][T22623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.303341][T22623] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #2: comm syz.1.6480: corrupted in-inode xattr: bad e_name length [ 560.316939][T22623] EXT4-fs (loop1): Remounting filesystem read-only [ 560.330691][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.339716][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.348743][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.357806][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.366758][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.376135][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.386994][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.395944][T20877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 560.573931][T22617] vhci_hcd: connection closed [ 560.574250][ T50] vhci_hcd: stop threads [ 560.583247][ T50] vhci_hcd: release socket [ 560.587676][ T50] vhci_hcd: disconnect device [ 560.593630][T22606] vhci_hcd: connection reset by peer [ 560.593649][T22600] vhci_hcd: connection closed [ 560.593755][T22604] vhci_hcd: connection closed [ 560.599409][T20877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.604326][T22598] vhci_hcd: connection closed [ 560.610448][ T3377] vhci_hcd: stop threads [ 560.626363][ T3377] vhci_hcd: release socket [ 560.630768][ T3377] vhci_hcd: disconnect device [ 560.642428][T14916] __quota_error: 315 callbacks suppressed [ 560.642498][T14916] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 560.660735][T14916] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 560.673259][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.686401][ T332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.691856][ T3377] vhci_hcd: stop threads [ 560.700967][ T3377] vhci_hcd: release socket [ 560.705402][ T3377] vhci_hcd: disconnect device [ 560.722045][ T3377] vhci_hcd: stop threads [ 560.726333][ T3377] vhci_hcd: release socket [ 560.730739][ T3377] vhci_hcd: disconnect device [ 560.742940][T22626] devtmpfs: Unknown parameter 'dic' [ 560.749630][ T3377] vhci_hcd: stop threads [ 560.753938][ T3377] vhci_hcd: release socket [ 560.758395][ T3377] vhci_hcd: disconnect device [ 560.765774][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 560.798400][ T332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.811582][ T29] audit: type=1400 audit(2000000344.689:34267): avc: denied { read } for pid=22630 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.833293][ T29] audit: type=1400 audit(2000000344.689:34268): avc: denied { open } for pid=22630 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.856944][ T29] audit: type=1400 audit(2000000344.689:34269): avc: denied { mounton } for pid=22630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 560.878617][ T29] audit: type=1326 audit(2000000344.739:34270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8d18df39 code=0x7ffc0000 [ 560.893422][T22631] loop3: detected capacity change from 0 to 1764 [ 560.902165][ T29] audit: type=1326 audit(2000000344.739:34271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b8d18df39 code=0x7ffc0000 [ 560.932161][ T29] audit: type=1326 audit(2000000344.739:34272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8d18df39 code=0x7ffc0000 [ 560.955877][ T29] audit: type=1326 audit(2000000344.739:34273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b8d18df39 code=0x7ffc0000 [ 560.979629][ T29] audit: type=1326 audit(2000000344.739:34274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8d18df39 code=0x7ffc0000 [ 561.039366][ T332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.076543][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 561.098440][ T332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.186874][ T332] bridge_slave_1: left allmulticast mode [ 561.192564][ T332] bridge_slave_1: left promiscuous mode [ 561.198441][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.206988][ T332] bridge_slave_0: left allmulticast mode [ 561.212660][ T332] bridge_slave_0: left promiscuous mode [ 561.218368][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.242973][T22659] syz.0.6492[22659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.243072][T22659] syz.0.6492[22659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.259687][T22659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.284304][T22659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.387526][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.400406][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.411408][ T332] bond0 (unregistering): Released all slaves [ 561.423853][T22630] chnl_net:caif_netlink_parms(): no params data found [ 561.464136][ T332] hsr_slave_0: left promiscuous mode [ 561.469961][ T332] hsr_slave_1: left promiscuous mode [ 561.484951][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.492364][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.503340][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.510879][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.522546][ T332] veth1_macvtap: left promiscuous mode [ 561.528066][ T332] veth0_macvtap: left promiscuous mode [ 561.615182][ T332] team0 (unregistering): Port device team_slave_1 removed [ 561.638393][ T332] team0 (unregistering): Port device team_slave_0 removed [ 561.723284][T22630] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.730386][T22630] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.740204][T22630] bridge_slave_0: entered allmulticast mode [ 561.749538][T22630] bridge_slave_0: entered promiscuous mode [ 561.758842][T22630] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.766015][T22630] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.788586][T22630] bridge_slave_1: entered allmulticast mode [ 561.798862][T22630] bridge_slave_1: entered promiscuous mode [ 561.819389][T22671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6497'. [ 561.850937][T22630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.863748][T22671] loop0: detected capacity change from 0 to 128 [ 561.889774][T22673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22673 comm=syz.4.6498 [ 561.891222][T22630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.021576][T22630] team0: Port device team_slave_0 added [ 562.058301][T22630] team0: Port device team_slave_1 added [ 562.084525][T22630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.091584][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.117731][T22630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.130203][T22630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.137197][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.163107][T22630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.207760][T22697] syz.3.6505[22697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.207869][T22697] syz.3.6505[22697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.266439][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.308721][T22630] hsr_slave_0: entered promiscuous mode [ 562.330775][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.339683][T22630] hsr_slave_1: entered promiscuous mode [ 562.348623][T22630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.358258][T18680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.370998][T22630] Cannot create hsr debugfs directory [ 562.484031][ T332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.512128][T22706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22706 comm=syz.4.6506 [ 562.529506][ T332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.540197][T22706] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6506'. [ 562.549458][T22706] bridge_slave_1: left allmulticast mode [ 562.555184][T22706] bridge_slave_1: left promiscuous mode [ 562.560992][T22706] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.568794][T22706] bridge_slave_0: left allmulticast mode [ 562.574446][T22706] bridge_slave_0: left promiscuous mode [ 562.580168][T22706] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.660978][ T332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.689261][T22679] chnl_net:caif_netlink_parms(): no params data found [ 562.712680][ T332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.747405][T22679] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.754665][T22679] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.761938][T22679] bridge_slave_0: entered allmulticast mode [ 562.770807][T22679] bridge_slave_0: entered promiscuous mode [ 562.778335][T22679] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.785632][T22679] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.807962][T22679] bridge_slave_1: entered allmulticast mode [ 562.814450][T22679] bridge_slave_1: entered promiscuous mode [ 562.844607][T22716] netlink: 'syz.4.6508': attribute type 10 has an invalid length. [ 562.868598][T22716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.880713][T22716] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 562.894372][T22679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.905328][T22679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.937871][T22630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.949286][ T332] bridge_slave_1: left allmulticast mode [ 562.955027][ T332] bridge_slave_1: left promiscuous mode [ 562.960728][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.969247][ T332] bridge_slave_0: left allmulticast mode [ 562.974923][ T332] bridge_slave_0: left promiscuous mode [ 562.980639][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.067503][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.078611][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.090024][ T332] bond0 (unregistering): Released all slaves [ 563.103405][T22630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 563.120410][T22679] team0: Port device team_slave_0 added [ 563.127076][ T332] tipc: Disabling bearer [ 563.132302][ T332] tipc: Left network mode [ 563.135037][T22630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 563.145320][T22630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 563.154401][T22679] team0: Port device team_slave_1 added [ 563.167038][ T332] hsr_slave_0: left promiscuous mode [ 563.172747][ T332] hsr_slave_1: left promiscuous mode [ 563.179466][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.186960][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.194561][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.201969][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.211463][ T332] veth1_macvtap: left promiscuous mode [ 563.216990][ T332] veth0_macvtap: left promiscuous mode [ 563.222579][ T332] veth1_vlan: left promiscuous mode [ 563.227803][ T332] veth0_vlan: left promiscuous mode [ 563.315842][ T332] team0 (unregistering): Port device team_slave_1 removed [ 563.326487][ T332] team0 (unregistering): Port device team_slave_0 removed [ 563.375679][T22679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.382635][T22679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.408564][T22679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.421312][T22679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.428272][T22679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.454165][T22679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.483608][T22679] hsr_slave_0: entered promiscuous mode [ 563.489707][T22679] hsr_slave_1: entered promiscuous mode [ 563.498435][T22679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.506013][T22679] Cannot create hsr debugfs directory [ 563.572186][T22630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.586807][T22630] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.597720][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.604835][T14916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.613461][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.620535][T14916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.692385][T22630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.743990][T22748] pim6reg1: entered promiscuous mode [ 563.749403][T22748] pim6reg1: entered allmulticast mode [ 563.773920][T22630] veth0_vlan: entered promiscuous mode [ 563.782587][T22630] veth1_vlan: entered promiscuous mode [ 563.798094][T22630] veth0_macvtap: entered promiscuous mode [ 563.805602][T22630] veth1_macvtap: entered promiscuous mode [ 563.816217][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.826714][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.836635][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.847115][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.857055][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.867470][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.877328][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.887763][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.897641][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.908105][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.917982][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.928380][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.938167][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.948645][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.958460][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.968858][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.978835][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.989318][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.999132][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.009528][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.019316][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.029742][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.041179][T22630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.049453][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.052015][T22755] grow_buffers: requested out-of-range block 5693957303880122367 for device sda1 [ 564.059995][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.069055][T22755] EXT4-fs warning (device sda1): ext4_resize_fs:2017: can't read last block, resize aborted [ 564.078877][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.099444][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.109413][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.119842][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.129694][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.140252][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.150187][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.160636][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170516][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170568][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170581][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170614][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170629][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170642][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170659][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170670][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170701][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170712][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.170723][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.170735][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.174613][T22630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.308459][T22630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.317317][T22630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.326185][T22630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.334878][T22630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.357905][T22760] syz.4.6520[22760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.357961][T22760] syz.4.6520[22760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.379607][T22760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.383662][T22679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 564.407661][T22760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.416132][T22679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 564.427530][T22679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 564.440608][T22679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 564.456832][T22764] loop3: detected capacity change from 0 to 512 [ 564.467320][T22764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 564.481053][T22679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.493380][T22679] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.507801][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.515001][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.524673][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.531791][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.541858][T22764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 564.550747][T22764] System zones: 1-12 [ 564.556640][T22764] EXT4-fs (loop3): 1 truncate cleaned up [ 564.574066][T22679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.584574][T22679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.598811][T22764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.643047][T22764] team0: Device ipvlan2 is already an upper device of the team interface [ 564.693916][T22679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.710712][T17947] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.824103][T22679] veth0_vlan: entered promiscuous mode [ 564.844386][T22679] veth1_vlan: entered promiscuous mode [ 564.868276][T22679] veth0_macvtap: entered promiscuous mode [ 564.880091][T22679] veth1_macvtap: entered promiscuous mode [ 564.891848][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.902461][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.912268][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.922761][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.932646][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.943141][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.953057][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.963626][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.973592][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.984059][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.993909][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.004330][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.014277][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.024832][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.034625][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.045044][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.054919][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.065362][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.075250][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.075264][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.075322][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.075336][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.075348][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.075359][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.091249][T22679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.097405][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097423][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097433][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097447][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097457][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097527][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097578][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097590][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097600][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097613][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097624][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097635][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097681][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097692][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097703][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097715][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097727][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097737][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097767][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097781][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097790][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097804][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097813][T22679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.097827][T22679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.099107][T22679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.102314][T22679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.102349][T22679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.102381][T22679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.102436][T22679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.133809][T22793] loop4: detected capacity change from 0 to 512 [ 565.142781][T22793] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c11c, mo2=0002] [ 565.142971][T22793] EXT4-fs (loop4): orphan cleanup on readonly fs [ 565.143152][T22793] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 565.143316][T22793] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 565.143392][T22793] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.6525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 565.143613][T22793] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.6525: couldn't read orphan inode 13 (err -117) [ 565.144237][T22793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.167016][T22043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 565.189194][ T8] usb 9-5: enqueue for inactive port 4 [ 565.604888][T22802] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 565.604888][T22802] program syz.2.6499 not setting count and/or reply_len properly [ 565.666401][T22802] loop2: detected capacity change from 0 to 128 [ 565.726612][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 565.726652][ T29] audit: type=1326 audit(2000000349.609:34584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.756542][ T29] audit: type=1326 audit(2000000349.609:34585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.780169][ T29] audit: type=1326 audit(2000000349.609:34586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.804237][ T29] audit: type=1326 audit(2000000349.609:34587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.831158][ T29] audit: type=1326 audit(2000000349.609:34588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.833811][T22802] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 565.854737][ T29] audit: type=1326 audit(2000000349.609:34589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.854785][ T29] audit: type=1326 audit(2000000349.689:34590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.896678][ T8] usb 9-5: enqueue for inactive port 4 [ 565.921099][T22815] loop4: detected capacity change from 0 to 512 [ 565.931535][T22802] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 565.936982][T22815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 565.971204][ T29] audit: type=1326 audit(2000000349.799:34591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f588097df39 code=0x7ffc0000 [ 565.997056][ T29] audit: type=1326 audit(2000000349.799:34592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f588097df73 code=0x7ffc0000 [ 565.997158][ T29] audit: type=1326 audit(2000000349.799:34593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f588097df73 code=0x7ffc0000 [ 566.046347][ T8] vhci_hcd: vhci_device speed not set [ 566.047917][T22815] EXT4-fs (loop4): 1 truncate cleaned up [ 566.057840][T22815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.093745][T22679] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.111193][T22043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.175614][T22832] loop4: detected capacity change from 0 to 2048 [ 566.233256][T22837] loop4: detected capacity change from 0 to 128 [ 566.569087][T22843] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 567.035483][T22854] syz.2.6542[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.035571][T22854] syz.2.6542[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.052144][T22854] syz.2.6542[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.073747][T22855] sg_write: data in/out 54/14 bytes for SCSI command 0x5-- guessing data in; [ 567.073747][T22855] program syz.3.6543 not setting count and/or reply_len properly [ 567.140494][T22855] loop3: detected capacity change from 0 to 128 [ 567.149371][T22855] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.165403][T22855] ext4 filesystem being mounted at /396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.239982][T17947] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 567.401082][T22886] loop3: detected capacity change from 0 to 128 [ 567.433168][T22890] syz.0.6556[22890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.433313][T22890] syz.0.6556[22890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.444933][T22890] syz.0.6556[22890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.251263][T22917] pim6reg1: entered promiscuous mode [ 568.268024][T22917] pim6reg1: entered allmulticast mode [ 568.343700][T22919] loop3: detected capacity change from 0 to 2048 [ 568.402797][T22923] syz.0.6570[22923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.402879][T22923] syz.0.6570[22923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.415389][T22923] syz.0.6570[22923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.421717][T22925] loop1: detected capacity change from 0 to 512 [ 568.447120][T22925] EXT4-fs: Ignoring removed i_version option [ 568.453122][T22925] EXT4-fs: Ignoring removed nobh option [ 568.459911][T22925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 568.477788][T22930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 568.480073][T22925] EXT4-fs (loop1): 1 truncate cleaned up [ 568.484305][T22930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 568.493759][T22925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.497333][T22930] vhci_hcd vhci_hcd.0: Device attached [ 568.520663][T22930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 568.531229][T22930] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 568.537733][T22930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 568.545438][T22930] vhci_hcd vhci_hcd.0: Device attached [ 568.551649][T22930] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 568.558239][T22930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 568.565644][T22930] vhci_hcd vhci_hcd.0: Device attached [ 568.571412][T22925] loop1: detected capacity change from 512 to 0 [ 568.578331][T22930] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 568.584931][T22930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 568.592549][T22930] vhci_hcd vhci_hcd.0: Device attached [ 568.598807][T22630] bio_check_eod: 14084 callbacks suppressed [ 568.598821][T22630] syz-executor: attempt to access beyond end of device [ 568.598821][T22630] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 568.619224][T22630] syz-executor: attempt to access beyond end of device [ 568.619224][T22630] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 568.632777][T22630] syz-executor: attempt to access beyond end of device [ 568.632777][T22630] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 568.646394][T22630] syz-executor: attempt to access beyond end of device [ 568.646394][T22630] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 568.660069][T22630] syz-executor: attempt to access beyond end of device [ 568.660069][T22630] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 568.673618][T22630] syz-executor: attempt to access beyond end of device [ 568.673618][T22630] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 568.687136][T22630] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 568.700619][T22630] syz-executor: attempt to access beyond end of device [ 568.700619][T22630] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 568.714206][T22630] buffer_io_error: 152 callbacks suppressed [ 568.714216][T22630] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 568.728987][T22630] EXT4-fs (loop1): I/O error while writing superblock [ 568.730006][T22945] tipc: Started in network mode [ 568.735752][T22630] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 568.735789][T22630] syz-executor: attempt to access beyond end of device [ 568.735789][T22630] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 568.740700][T22945] tipc: Node identity ac14140f, cluster identity 4711 [ 568.749293][T22630] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 568.749325][T22630] EXT4-fs (loop1): I/O error while writing superblock [ 568.765470][T22945] tipc: New replicast peer: 255.255.255.255 [ 568.769480][T22630] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 568.777884][T22945] tipc: Enabled bearer , priority 10 [ 568.784541][T22630] syz-executor: attempt to access beyond end of device [ 568.784541][T22630] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 568.809101][T22945] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 568.821619][T22630] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 568.828167][T22945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 568.828255][T22945] vhci_hcd vhci_hcd.0: Device attached [ 568.837325][T22630] EXT4-fs (loop1): I/O error while writing superblock [ 568.864306][ T219] kworker/u8:5: attempt to access beyond end of device [ 568.864306][ T219] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 568.880267][ T219] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 568.895190][ T219] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 568.912091][T22956] loop4: detected capacity change from 0 to 128 [ 568.918357][ T219] EXT4-fs (loop1): I/O error while writing superblock [ 568.919028][T22630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.934486][T22630] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 568.943288][T22630] EXT4-fs (loop1): I/O error while writing superblock [ 569.222955][ T332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.271563][ T332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.310777][T22947] vhci_hcd: connection closed [ 569.311126][T22942] vhci_hcd: connection closed [ 569.311221][T22932] vhci_hcd: connection closed [ 569.315842][T22936] vhci_hcd: connection closed [ 569.325581][T22938] vhci_hcd: connection closed [ 569.330650][ T219] vhci_hcd: stop threads [ 569.339770][ T219] vhci_hcd: release socket [ 569.344258][ T219] vhci_hcd: disconnect device [ 569.352733][ T219] vhci_hcd: stop threads [ 569.357046][ T219] vhci_hcd: release socket [ 569.361507][ T219] vhci_hcd: disconnect device [ 569.366810][ T219] vhci_hcd: stop threads [ 569.371068][ T219] vhci_hcd: release socket [ 569.375528][ T219] vhci_hcd: disconnect device [ 569.383984][ T332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.419512][ T219] vhci_hcd: stop threads [ 569.423765][ T219] vhci_hcd: release socket [ 569.428337][ T219] vhci_hcd: disconnect device [ 569.440507][ T219] vhci_hcd: stop threads [ 569.444825][ T219] vhci_hcd: release socket [ 569.449258][ T219] vhci_hcd: disconnect device [ 569.463850][ T332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.485947][ T332] ================================================================== [ 569.494028][ T332] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 569.501222][ T332] [ 569.503536][ T332] race at unknown origin, with assert no writes to 0xffff888111a04268 of 4 bytes by task 332 on cpu 1: [ 569.514552][ T332] dequeue_entities+0x6df/0x760 [ 569.519402][ T332] pick_next_task_fair+0x7d/0x410 [ 569.524426][ T332] __schedule+0x284/0x940 [ 569.528759][ T332] schedule+0x55/0xc0 [ 569.532732][ T332] schedule_timeout+0x55/0x2c0 [ 569.537490][ T332] wait_for_common+0xfb/0x1c0 [ 569.542145][ T332] rcu_barrier+0x425/0x530 [ 569.546539][ T332] netdev_run_todo+0xc8/0x7d0 [ 569.551193][ T332] rtnl_unlock+0xe/0x20 [ 569.555321][ T332] nsim_destroy+0x1aa/0x2f0 [ 569.559805][ T332] __nsim_dev_port_del+0xcd/0x100 [ 569.564806][ T332] nsim_dev_reload_destroy+0x1a6/0x2d0 [ 569.570240][ T332] nsim_dev_reload_down+0x77/0xa0 [ 569.575235][ T332] devlink_reload+0xab/0x5a0 [ 569.579801][ T332] devlink_pernet_pre_exit+0xd7/0x220 [ 569.585147][ T332] cleanup_net+0x32c/0x810 [ 569.589538][ T332] process_scheduled_works+0x483/0x9a0 [ 569.594975][ T332] worker_thread+0x51d/0x6f0 [ 569.599536][ T332] kthread+0x1d1/0x210 [ 569.603576][ T332] ret_from_fork+0x4b/0x60 [ 569.607968][ T332] ret_from_fork_asm+0x1a/0x30 [ 569.612709][ T332] [ 569.615005][ T332] value changed: 0x00000000 -> 0x00000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 569.620692][ T332] [ 569.622995][ T332] Reported by Kernel Concurrency Sanitizer on: [ 569.629114][ T332] CPU: 1 UID: 0 PID: 332 Comm: kworker/u8:6 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 569.639498][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 569.649527][ T332] Workqueue: netns cleanup_net [ 569.654269][ T332] ================================================================== [ 569.699649][T22962] chnl_net:caif_netlink_parms(): no params data found [ 569.798066][ T3342] tipc: Node number set to 2886997007 [ 569.870219][ T332] bridge_slave_1: left allmulticast mode [ 569.875982][ T332] bridge_slave_1: left promiscuous mode [ 569.881685][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.889713][ T332] bridge_slave_0: left allmulticast mode [ 569.895481][ T332] bridge_slave_0: left promiscuous mode [ 569.901207][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.998474][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.009090][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.019528][ T332] bond0 (unregistering): Released all slaves [ 570.128468][ T332] hsr_slave_0: left promiscuous mode [ 570.134041][ T332] hsr_slave_1: left promiscuous mode [ 570.140042][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.147818][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.155654][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.163038][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.172482][ T332] veth1_macvtap: left promiscuous mode [ 570.178314][ T332] veth0_macvtap: left promiscuous mode [ 570.183881][ T332] veth1_vlan: left promiscuous mode [ 570.189306][ T332] veth0_vlan: left promiscuous mode [ 570.275532][ T332] team0 (unregistering): Port device team_slave_1 removed [ 570.286167][ T332] team0 (unregistering): Port device team_slave_0 removed [ 570.670361][ T332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.717431][ T332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.777655][ T332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.828786][ T332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.888031][ T332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.939309][ T332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.978214][ T332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.027689][ T332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.098948][ T332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.137701][ T332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.178497][ T332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.238219][ T332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.289104][ T332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 571.299424][ T332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.367880][ T332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 571.378079][ T332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.437579][ T332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 571.447830][ T332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.477584][ T332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 571.487829][ T332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.527147][ T332] bridge_slave_1: left allmulticast mode [ 571.532837][ T332] bridge_slave_1: left promiscuous mode [ 571.538559][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.546140][ T332] bridge_slave_0: left allmulticast mode [ 571.551793][ T332] bridge_slave_0: left promiscuous mode [ 571.557483][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.565324][ T332] bridge_slave_1: left allmulticast mode [ 571.571143][ T332] bridge_slave_1: left promiscuous mode [ 571.576917][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.584611][ T332] bridge_slave_0: left allmulticast mode [ 571.590272][ T332] bridge_slave_0: left promiscuous mode [ 571.595855][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.603594][ T332] bridge_slave_1: left allmulticast mode [ 571.609318][ T332] bridge_slave_1: left promiscuous mode [ 571.614996][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.622719][ T332] bridge_slave_0: left allmulticast mode [ 571.628548][ T332] bridge_slave_0: left promiscuous mode [ 571.634137][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.076912][ T332] bond0 (unregistering): Released all slaves [ 572.085566][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.096082][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.106482][ T332] bond0 (unregistering): Released all slaves [ 572.116037][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.126535][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.136506][ T332] bond0 (unregistering): Released all slaves [ 572.145800][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.155978][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.166899][ T332] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 572.178382][ T332] bond0 (unregistering): Released all slaves [ 572.187512][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.197687][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.207612][ T332] bond0 (unregistering): Released all slaves [ 572.247988][ T332] tipc: Disabling bearer [ 572.253249][ T332] tipc: Left network mode [ 572.259917][ T332] tipc: Disabling bearer [ 572.265149][ T332] tipc: Left network mode [ 572.269836][ T332] tipc: Disabling bearer [ 572.275095][ T332] tipc: Disabling bearer [ 572.280358][ T332] tipc: Left network mode [ 572.290753][ T332] hsr_slave_0: left promiscuous mode [ 572.296447][ T332] hsr_slave_1: left promiscuous mode [ 572.302109][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.309591][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.317122][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.324487][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.333768][ T332] hsr_slave_0: left promiscuous mode [ 572.339488][ T332] hsr_slave_1: left promiscuous mode [ 572.345192][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.352591][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.360037][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.367509][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.376956][ T332] hsr_slave_0: left promiscuous mode [ 572.382519][ T332] hsr_slave_1: left promiscuous mode [ 572.388284][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.395739][ T332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.403154][ T332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.410667][ T332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.419664][ T332] hsr_slave_0: left promiscuous mode [ 572.426530][ T332] hsr_slave_1: left promiscuous mode [ 572.438624][ T332] veth1_macvtap: left promiscuous mode [ 572.444157][ T332] veth0_macvtap: left promiscuous mode [ 572.449671][ T332] veth1_vlan: left promiscuous mode [ 572.455032][ T332] veth0_vlan: left promiscuous mode [ 572.460697][ T332] veth1_macvtap: left promiscuous mode [ 572.466184][ T332] veth0_macvtap: left promiscuous mode [ 572.471643][ T332] veth1_vlan: left promiscuous mode [ 572.476974][ T332] veth0_vlan: left promiscuous mode [ 572.482611][ T332] veth1_macvtap: left promiscuous mode [ 572.488129][ T332] veth0_macvtap: left promiscuous mode [ 572.493676][ T332] veth1_vlan: left promiscuous mode [ 572.498919][ T332] veth0_vlan: left promiscuous mode [ 572.504528][ T332] veth1_macvtap: left promiscuous mode [ 572.510011][ T332] veth0_macvtap: left promiscuous mode [ 572.515499][ T332] veth1_vlan: left promiscuous mode [ 572.520841][ T332] veth0_vlan: left promiscuous mode [ 572.750386][ T332] team0 (unregistering): Port device team_slave_1 removed [ 572.761034][ T332] team0 (unregistering): Port device team_slave_0 removed [ 572.823399][ T332] team0 (unregistering): Port device team_slave_1 removed [ 572.833426][ T332] team0 (unregistering): Port device team_slave_0 removed [ 572.897713][ T332] team0 (unregistering): Port device team_slave_1 removed [ 572.907764][ T332] team0 (unregistering): Port device team_slave_0 removed [ 572.971550][ T332] team0 (unregistering): Port device team_slave_1 removed [ 572.981966][ T332] team0 (unregistering): Port device team_slave_0 removed