last executing test programs: 47.271817495s ago: executing program 0 (id=233): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_normal', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) close_range(r0, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 47.112712616s ago: executing program 0 (id=239): syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 46.277558208s ago: executing program 2 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 46.244832971s ago: executing program 0 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 46.235313541s ago: executing program 2 (id=269): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) 46.176833136s ago: executing program 0 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 46.169601676s ago: executing program 2 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x0, 0x0, 0xd, 0x100}, '\x00'}}}}}}, 0x0) 46.103484351s ago: executing program 2 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 46.075277813s ago: executing program 0 (id=275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 46.036277096s ago: executing program 2 (id=276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x41) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 45.908197165s ago: executing program 0 (id=280): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 45.692398621s ago: executing program 2 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@can, 0x80, 0x0}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x62200, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 45.692254831s ago: executing program 32 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@can, 0x80, 0x0}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x62200, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 30.726434214s ago: executing program 33 (id=280): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.069837894s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x54}}}]}, 0x78}}, 0x0) 26.911255746s ago: executing program 4 (id=657): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x900}], 0x32b, 0x41, 0x0) 26.677335733s ago: executing program 4 (id=661): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r3 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1}) io_uring_enter(r3, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 26.554827892s ago: executing program 4 (id=665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 26.521872194s ago: executing program 4 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 26.245352085s ago: executing program 4 (id=672): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x10, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x1, 0x34b}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 26.225115566s ago: executing program 34 (id=672): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x10, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x1, 0x34b}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 10.809359253s ago: executing program 3 (id=1106): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 10.788368444s ago: executing program 3 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 9.925860418s ago: executing program 3 (id=1127): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x0, 0x0, 0x7}}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.880751141s ago: executing program 3 (id=1129): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@discard}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x26e1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 9.208697481s ago: executing program 3 (id=1147): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(0x0, 0x1f, 0x101040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) 8.937310841s ago: executing program 3 (id=1149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 8.937163531s ago: executing program 35 (id=1149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 7.201248989s ago: executing program 7 (id=1190): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x800000, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010100009c1100fc020000000000000000000000000000ff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 7.178498171s ago: executing program 7 (id=1191): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 6.904098481s ago: executing program 7 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) 6.323868584s ago: executing program 7 (id=1211): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) 6.282510867s ago: executing program 7 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004) unshare(0x8040600) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 4.454136781s ago: executing program 5 (id=1241): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 4.400352205s ago: executing program 5 (id=1242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 4.229361398s ago: executing program 5 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="89e7ee2c7cdad9b4b473", 0xa}], 0x1) 2.016955311s ago: executing program 7 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x106) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.981821354s ago: executing program 36 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x106) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.031270564s ago: executing program 8 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 878.473205ms ago: executing program 8 (id=1360): socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x2000000000005]}, 0x8) name_to_handle_at(r2, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) 862.783536ms ago: executing program 8 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 842.663227ms ago: executing program 8 (id=1362): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = dup3(r1, r0, 0x0) write$cgroup_int(r0, &(0x7f00000008c0)=0x2, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3}) 705.829138ms ago: executing program 8 (id=1363): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_load(r0, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 568.312918ms ago: executing program 8 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x2c88, 0x0, 0x3, 0x3e0}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) 484.523854ms ago: executing program 1 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) close(r2) 408.669579ms ago: executing program 6 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r3 = dup2(r2, r2) mq_notify(r3, 0x0) 401.82231ms ago: executing program 1 (id=1373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) tkill(r2, 0x14) 379.903981ms ago: executing program 1 (id=1374): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 377.579192ms ago: executing program 6 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 344.530174ms ago: executing program 1 (id=1376): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 339.020535ms ago: executing program 6 (id=1377): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 338.726335ms ago: executing program 5 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e00000000", 0x58}], 0x1) 278.223229ms ago: executing program 5 (id=1379): syz_open_dev$usbfs(0x0, 0x800000001fd, 0x42) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 261.73985ms ago: executing program 1 (id=1380): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4ae8becb5ef51be56009bd6fba560dab0d939e30ff97a32d76f421e8cb37d7b"}, 0x53) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694", 0x2e) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 234.323092ms ago: executing program 6 (id=1381): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 190.908995ms ago: executing program 6 (id=1382): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x7928, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r2}, 0x38) 136.474439ms ago: executing program 1 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) 75.454184ms ago: executing program 5 (id=1384): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 6 (id=1385): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') kernel console output (not intermixed with test programs): (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.830728][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.848804][ T3914] Process accounting resumed [ 38.060203][ T3926] loop1: detected capacity change from 0 to 512 [ 38.090572][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.103365][ T3926] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.205311][ T3922] Set syz1 is full, maxelem 65536 reached [ 38.243482][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.315250][ T35] tipc: Node number set to 2886997007 [ 38.428616][ T3944] pim6reg1: entered promiscuous mode [ 38.433957][ T3944] pim6reg1: entered allmulticast mode [ 38.590153][ T3951] loop3: detected capacity change from 0 to 512 [ 38.659039][ T3951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.674280][ T3951] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.693997][ T3951] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.718998][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.852667][ T3974] ref_ctr increment failed for inode: 0xff offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811794ac00 [ 38.887948][ T3973] uprobe: syz.3.217:3973 failed to unregister, leaking uprobe [ 39.049408][ T3982] netlink: 'syz.0.221': attribute type 39 has an invalid length. [ 39.262520][ T3995] loop0: detected capacity change from 0 to 2048 [ 39.323390][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.367159][ T4007] __nla_validate_parse: 1 callbacks suppressed [ 39.367178][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 39.381658][ T4011] loop1: detected capacity change from 0 to 2048 [ 39.390809][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.405748][ T4007] bond1: entered promiscuous mode [ 39.410840][ T4007] bond1: entered allmulticast mode [ 39.418106][ T4011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.430895][ T4007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.467175][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.590574][ T4028] loop3: detected capacity change from 0 to 8192 [ 39.606659][ T4028] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.660311][ T4040] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 39.743697][ T4044] smc: net device bond0 applied user defined pnetid SYZ0 [ 39.757006][ T4044] smc: net device bond0 erased user defined pnetid SYZ0 [ 39.820789][ T4055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 39.902471][ T4070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.252'. [ 40.045430][ T4075] lo speed is unknown, defaulting to 1000 [ 40.056213][ T4075] lo speed is unknown, defaulting to 1000 [ 40.072464][ T4075] lo speed is unknown, defaulting to 1000 [ 40.115322][ T4075] infiniband syz0: set active [ 40.120119][ T4075] infiniband syz0: added lo [ 40.128808][ T3364] lo speed is unknown, defaulting to 1000 [ 40.152914][ T4075] RDS/IB: syz0: added [ 40.158480][ T4075] smc: adding ib device syz0 with port count 1 [ 40.164754][ T4075] smc: ib device syz0 port 1 has pnetid [ 40.170766][ T3364] lo speed is unknown, defaulting to 1000 [ 40.177965][ T4075] lo speed is unknown, defaulting to 1000 [ 40.228973][ T4107] loop3: detected capacity change from 0 to 512 [ 40.237108][ T4075] lo speed is unknown, defaulting to 1000 [ 40.240168][ T4107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.262: bg 0: block 35: padding at end of block bitmap is not set [ 40.260564][ T4107] EXT4-fs (loop3): Remounting filesystem read-only [ 40.267436][ T4107] EXT4-fs (loop3): 1 truncate cleaned up [ 40.273750][ T4107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.286116][ T4107] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 40.293151][ T4107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.371984][ T4075] lo speed is unknown, defaulting to 1000 [ 40.446798][ T4075] lo speed is unknown, defaulting to 1000 [ 40.529461][ T4075] lo speed is unknown, defaulting to 1000 [ 40.587293][ T4136] loop0: detected capacity change from 0 to 512 [ 40.639747][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.681264][ T4136] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.735183][ T3296] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.020361][ T4156] loop4: detected capacity change from 0 to 512 [ 41.057531][ T4159] policy can only be matched on NF_INET_PRE_ROUTING [ 41.057549][ T4159] unable to load match [ 41.064495][ T4156] EXT4-fs: Ignoring removed orlov option [ 41.098980][ T4156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.151943][ T4156] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.206931][ T4156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.237681][ T4156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.284: bg 0: block 248: padding at end of block bitmap is not set [ 41.252453][ T4157] lo speed is unknown, defaulting to 1000 [ 41.300206][ T4156] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.284: Failed to acquire dquot type 1 [ 41.356353][ T4156] EXT4-fs (loop4): 1 truncate cleaned up [ 41.370713][ T4156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.452969][ T4156] syz.4.284 (4156) used greatest stack depth: 9112 bytes left [ 41.461231][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.514733][ T4179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 41.536529][ T4157] chnl_net:caif_netlink_parms(): no params data found [ 41.664067][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.705699][ T4157] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.712844][ T4157] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.730685][ T4157] bridge_slave_0: entered allmulticast mode [ 41.747560][ T4157] bridge_slave_0: entered promiscuous mode [ 41.757083][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.772129][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.779374][ T4157] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.788154][ T4157] bridge_slave_1: entered allmulticast mode [ 41.796255][ T4157] bridge_slave_1: entered promiscuous mode [ 41.807678][ T4186] pim6reg1: entered promiscuous mode [ 41.813013][ T4186] pim6reg1: entered allmulticast mode [ 41.823634][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.859715][ T4157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.871790][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.884690][ T4157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.915339][ T4157] team0: Port device team_slave_0 added [ 41.922464][ T4157] team0: Port device team_slave_1 added [ 41.941640][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.948668][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.974742][ T4157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.986335][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 41.986351][ T29] audit: type=1400 audit(2000000001.460:610): avc: denied { getopt } for pid=4187 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.987405][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.019214][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.045217][ T4157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.076808][ T28] bridge_slave_1: left allmulticast mode [ 42.082490][ T28] bridge_slave_1: left promiscuous mode [ 42.088227][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.102944][ T28] bridge_slave_0: left allmulticast mode [ 42.108696][ T28] bridge_slave_0: left promiscuous mode [ 42.114436][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.198453][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.216284][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.236195][ T28] bond0 (unregistering): Released all slaves [ 42.253710][ T29] audit: type=1326 audit(2000000001.720:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f431f47cde9 code=0x0 [ 42.290663][ T4157] hsr_slave_0: entered promiscuous mode [ 42.298439][ T4157] hsr_slave_1: entered promiscuous mode [ 42.304419][ T4157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.314433][ T4157] Cannot create hsr debugfs directory [ 42.367008][ T28] hsr_slave_0: left promiscuous mode [ 42.376029][ T28] hsr_slave_1: left promiscuous mode [ 42.381715][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.389234][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.400287][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.407780][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.439165][ T28] veth1_macvtap: left promiscuous mode [ 42.451212][ T28] veth0_macvtap: left promiscuous mode [ 42.464008][ T28] veth1_vlan: left promiscuous mode [ 42.471696][ T28] veth0_vlan: left promiscuous mode [ 42.540991][ T28] team0 (unregistering): Port device team_slave_1 removed [ 42.552142][ T28] team0 (unregistering): Port device team_slave_0 removed [ 42.644623][ T4157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.661087][ T4157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.686678][ T4157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.707380][ T4157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.811315][ T4232] rdma_op ffff888107ad9180 conn xmit_rdma 0000000000000000 [ 42.825556][ T29] audit: type=1400 audit(2000000002.280:612): avc: denied { create } for pid=4231 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.844853][ T29] audit: type=1400 audit(2000000002.280:613): avc: denied { bind } for pid=4231 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.863971][ T29] audit: type=1400 audit(2000000002.280:614): avc: denied { write } for pid=4231 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.890252][ T4157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.920863][ T4157] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.951522][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.958654][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.009688][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.016830][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.051467][ T29] audit: type=1326 audit(2000000002.510:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 43.064518][ T4244] netlink: 31 bytes leftover after parsing attributes in process `syz.1.303'. [ 43.074804][ T29] audit: type=1326 audit(2000000002.510:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 43.074839][ T29] audit: type=1326 audit(2000000002.510:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 43.119217][ T4240] loop4: detected capacity change from 0 to 8192 [ 43.130468][ T29] audit: type=1326 audit(2000000002.510:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 43.160008][ T29] audit: type=1326 audit(2000000002.510:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 43.196119][ T4157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.279274][ T4157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.347360][ T4253] loop4: detected capacity change from 0 to 512 [ 43.395837][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.442650][ T4253] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.488136][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.607990][ T4157] veth0_vlan: entered promiscuous mode [ 43.622329][ T4157] veth1_vlan: entered promiscuous mode [ 43.643501][ T4157] veth0_macvtap: entered promiscuous mode [ 43.659529][ T4157] veth1_macvtap: entered promiscuous mode [ 43.671893][ T4303] mmap: syz.1.313 (4303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.672582][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.694375][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.704272][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.714759][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.724968][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.735445][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.745362][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.755810][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.771238][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.779665][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.790172][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.800128][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.810642][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.820464][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.831281][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.841300][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.851765][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.863329][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.874825][ T4157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.883804][ T4157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.892604][ T4157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.901431][ T4157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.221753][ T4344] SELinux: policydb version 0 does not match my version range 15-34 [ 44.254397][ T4349] netlink: 96 bytes leftover after parsing attributes in process `syz.3.323'. [ 44.259680][ T4344] SELinux: failed to load policy [ 44.375967][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 44.523291][ T4377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 44.621037][ T4384] bridge_slave_0: left allmulticast mode [ 44.626771][ T4384] bridge_slave_0: left promiscuous mode [ 44.632470][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.643190][ T4384] bridge_slave_1: left allmulticast mode [ 44.649052][ T4384] bridge_slave_1: left promiscuous mode [ 44.654840][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.666023][ T4384] bond0: (slave bond_slave_0): Releasing backup interface [ 44.673402][ T4387] syz.1.334 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.684082][ T4384] bond0: (slave bond_slave_1): Releasing backup interface [ 44.702576][ T4384] team0: Port device team_slave_0 removed [ 44.726838][ T4384] team0: Port device team_slave_1 removed [ 44.733929][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.741791][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.752953][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.760708][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.764326][ T4395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'. [ 44.997761][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.035227][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.076814][ T4421] lo speed is unknown, defaulting to 1000 [ 45.619145][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 45.655068][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 45.852133][ T4483] loop4: detected capacity change from 0 to 512 [ 46.384901][ T4518] loop5: detected capacity change from 0 to 4096 [ 46.400625][ T4518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.553004][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.670966][ T4536] netlink: 'syz.5.383': attribute type 1 has an invalid length. [ 46.687254][ T4536] bond1 (unregistering): Released all slaves [ 46.816908][ T4552] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 46.835340][ T4552] SELinux: failed to load policy [ 46.872555][ T4556] loop1: detected capacity change from 0 to 512 [ 46.924410][ T4556] EXT4-fs: Ignoring removed i_version option [ 46.930506][ T4556] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.959821][ T4556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.982530][ T4556] EXT4-fs (loop1): 1 truncate cleaned up [ 46.988824][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.056930][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.335963][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 47.336023][ T29] audit: type=1326 audit(2000000006.810:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.380088][ T29] audit: type=1326 audit(2000000006.840:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.380191][ T29] audit: type=1326 audit(2000000006.840:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.380229][ T29] audit: type=1326 audit(2000000006.840:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.380256][ T29] audit: type=1326 audit(2000000006.840:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.402045][ T29] audit: type=1400 audit(2000000006.870:673): avc: denied { mount } for pid=4593 comm="syz.5.407" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.402080][ T29] audit: type=1400 audit(2000000006.870:674): avc: denied { watch } for pid=4593 comm="syz.5.407" path="/27/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.417904][ T29] audit: type=1400 audit(2000000006.880:675): avc: denied { unmount } for pid=4157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.573606][ T29] audit: type=1326 audit(2000000006.920:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.573643][ T29] audit: type=1326 audit(2000000006.920:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.5.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 47.773191][ T4609] loop3: detected capacity change from 0 to 2048 [ 47.780193][ T4609] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.797712][ T4609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.946400][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.060504][ T4635] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.421'. [ 48.069732][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 48.325696][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 48.503688][ T4665] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.438'. [ 48.535648][ T4662] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.438'. [ 49.007173][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.022407][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.415682][ T4708] lo speed is unknown, defaulting to 1000 [ 49.623339][ T4718] loop4: detected capacity change from 0 to 1024 [ 49.675574][ T4718] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.877475][ T4718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.968068][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.172575][ T4751] loop3: detected capacity change from 0 to 512 [ 50.184785][ T4751] EXT4-fs: inline encryption not supported [ 50.201227][ T4751] EXT4-fs: Ignoring removed bh option [ 50.228282][ T4751] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.247677][ T4751] loop3: detected capacity change from 0 to 512 [ 50.265446][ T4751] EXT4-fs: Ignoring removed orlov option [ 50.287363][ T4751] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.299033][ T4751] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 50.309251][ T4751] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.475: Corrupt directory, running e2fsck is recommended [ 50.359429][ T4751] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 50.383222][ T4751] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.475: corrupted in-inode xattr: invalid ea_ino [ 50.422920][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.431429][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.444988][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.456356][ T4751] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 50.468506][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.483968][ T4751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.525974][ T4751] EXT4-fs error (device loop3): ext4_xattr_set_entry:1668: inode #2: comm syz.3.475: corrupted xattr entries [ 50.550486][ T4751] EXT4-fs: Ignoring removed bh option [ 50.567471][ T4751] EXT4-fs (loop3): can't disable delalloc during remount [ 50.618445][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.685288][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 50.693073][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 50.702159][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.710033][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.717739][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.725507][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.733271][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.741028][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.748790][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.756515][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.764167][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.771851][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.779545][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.787236][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.794909][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.802618][ T3375] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 50.815311][ T3375] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 51.149321][ T4807] loop3: detected capacity change from 0 to 512 [ 51.203833][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.244880][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.499'. [ 51.258771][ T4813] loop5: detected capacity change from 0 to 512 [ 51.269893][ T4807] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.359706][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.398527][ T4819] loop1: detected capacity change from 0 to 1024 [ 51.434489][ T4819] EXT4-fs: Ignoring removed orlov option [ 51.450214][ T4819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.450872][ T4822] loop4: detected capacity change from 0 to 4096 [ 51.482609][ T4822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.537380][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.555212][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.593821][ T4833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 51.644522][ T4837] loop1: detected capacity change from 0 to 2048 [ 51.688634][ T4841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.510'. [ 51.709067][ T4845] loop3: detected capacity change from 0 to 512 [ 51.749208][ T4845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.767632][ T4845] EXT4-fs (loop3): 1 truncate cleaned up [ 51.788702][ T4845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.868715][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.934590][ T4854] loop3: detected capacity change from 0 to 512 [ 51.957650][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 51.965455][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 51.976940][ T4854] EXT4-fs: Ignoring removed i_version option [ 51.978304][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 51.983040][ T4854] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.990725][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.005006][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.012807][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.020581][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.028278][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.035977][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.039249][ T4854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.043674][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.061215][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.068912][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.076662][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.082769][ T4854] EXT4-fs (loop3): 1 truncate cleaned up [ 52.084309][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.097672][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.105364][ T3375] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 52.109617][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.118397][ T3375] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 52.259491][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.275832][ T4869] loop1: detected capacity change from 0 to 4096 [ 52.289345][ T4873] loop5: detected capacity change from 0 to 1024 [ 52.296273][ T4873] EXT4-fs: Ignoring removed orlov option [ 52.310490][ T4869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.334588][ T4873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.395994][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 52.396014][ T29] audit: type=1326 audit(2000000011.870:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.442201][ T29] audit: type=1326 audit(2000000011.900:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.442936][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.465513][ T29] audit: type=1326 audit(2000000011.900:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.465560][ T29] audit: type=1326 audit(2000000011.900:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.465591][ T29] audit: type=1326 audit(2000000011.900:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.544491][ T29] audit: type=1326 audit(2000000011.900:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.567822][ T29] audit: type=1326 audit(2000000011.900:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.591255][ T29] audit: type=1326 audit(2000000011.900:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.614729][ T29] audit: type=1326 audit(2000000011.900:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.638327][ T29] audit: type=1326 audit(2000000011.900:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 52.676527][ T4888] netlink: 3 bytes leftover after parsing attributes in process `syz.5.525'. [ 52.685874][ T4888] 0ªX¹¦À: renamed from caif0 [ 52.695307][ T4888] 0ªX¹¦À: entered allmulticast mode [ 52.700553][ T4888] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.768151][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.920803][ T4910] loop5: detected capacity change from 0 to 256 [ 52.930823][ T4910] FAT-fs (loop5): bogus number of FAT sectors [ 52.937078][ T4910] FAT-fs (loop5): Can't find a valid FAT filesystem [ 53.021770][ T4913] loop4: detected capacity change from 0 to 512 [ 53.042721][ T4913] EXT4-fs: inline encryption not supported [ 53.048823][ T4913] EXT4-fs: Ignoring removed bh option [ 53.054668][ T4913] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.079391][ T4913] loop4: detected capacity change from 0 to 512 [ 53.093687][ T4913] EXT4-fs: Ignoring removed orlov option [ 53.101551][ T4913] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.113095][ T4913] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 53.123225][ T4913] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.537: Corrupt directory, running e2fsck is recommended [ 53.154233][ T4913] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 53.189238][ T4913] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.537: corrupted in-inode xattr: invalid ea_ino [ 53.206584][ T4920] netlink: 3 bytes leftover after parsing attributes in process `syz.3.538'. [ 53.219267][ T4919] hub 9-0:1.0: USB hub found [ 53.223953][ T4919] hub 9-0:1.0: 8 ports detected [ 53.239942][ T4921] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.539'. [ 53.254952][ T4913] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.537: couldn't read orphan inode 15 (err -117) [ 53.277848][ T4920] 0ªX¹¦À: renamed from caif0 [ 53.286231][ T4920] 0ªX¹¦À: entered allmulticast mode [ 53.291817][ T4920] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 53.293913][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.320221][ T4918] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.539'. [ 53.335686][ T4923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 53.399039][ T4913] EXT4-fs error (device loop4): ext4_xattr_set_entry:1668: inode #2: comm syz.4.537: corrupted xattr entries [ 53.416135][ T4927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.552'. [ 53.433714][ T4929] loop3: detected capacity change from 0 to 4096 [ 53.440256][ T4925] netlink: 56 bytes leftover after parsing attributes in process `syz.5.542'. [ 53.450456][ T4930] EXT4-fs: Ignoring removed bh option [ 53.456184][ T4930] EXT4-fs (loop4): can't disable delalloc during remount [ 53.497810][ T4929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.530697][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.621674][ T4941] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 53.704674][ T4946] loop5: detected capacity change from 0 to 1024 [ 53.715669][ T4949] 0ªX¹¦À: renamed from caif0 [ 53.737315][ T4949] 0ªX¹¦À: entered allmulticast mode [ 53.742587][ T4949] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 53.768039][ T4946] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 53.779043][ T4946] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 53.844881][ T4946] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.874247][ T4952] loop4: detected capacity change from 0 to 2048 [ 53.881225][ T4946] EXT4-fs (loop5): invalid journal inode [ 53.888219][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.906551][ T4946] EXT4-fs (loop5): can't get journal size [ 53.930066][ T4946] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.551: blocks 2-2 from inode overlap system zone [ 53.958677][ T4946] EXT4-fs (loop5): failed to initialize system zone (-117) [ 53.975219][ T4946] EXT4-fs (loop5): mount failed [ 54.083508][ T4961] loop5: detected capacity change from 0 to 512 [ 54.115389][ T4961] EXT4-fs: inline encryption not supported [ 54.121397][ T4961] EXT4-fs: Ignoring removed bh option [ 54.171415][ T4961] EXT4-fs: Mount option(s) incompatible with ext3 [ 54.190818][ T4961] loop5: detected capacity change from 0 to 512 [ 54.212156][ T4968] hub 2-0:1.0: USB hub found [ 54.219209][ T4968] hub 2-0:1.0: 8 ports detected [ 54.225889][ T4961] EXT4-fs: Ignoring removed orlov option [ 54.257355][ T4961] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 54.269118][ T4961] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 54.279240][ T4961] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.557: Corrupt directory, running e2fsck is recommended [ 54.382980][ T4961] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 54.394140][ T4961] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.557: corrupted in-inode xattr: invalid ea_ino [ 54.437461][ T4961] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.557: couldn't read orphan inode 15 (err -117) [ 54.460078][ T4961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.567068][ T4961] EXT4-fs error (device loop5): ext4_xattr_set_entry:1668: inode #2: comm syz.5.557: corrupted xattr entries [ 54.587341][ T4961] EXT4-fs: Ignoring removed bh option [ 54.594136][ T4961] EXT4-fs (loop5): can't disable delalloc during remount [ 54.634725][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.841268][ T5002] loop5: detected capacity change from 0 to 2048 [ 55.940949][ T5067] loop5: detected capacity change from 0 to 256 [ 55.978967][ T5067] FAT-fs (loop5): bogus number of FAT sectors [ 55.985095][ T5067] FAT-fs (loop5): Can't find a valid FAT filesystem [ 56.084374][ T5077] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.114316][ T5077] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.134865][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.144552][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.202194][ T5071] lo speed is unknown, defaulting to 1000 [ 56.212948][ C0] hrtimer: interrupt took 37784 ns [ 56.223863][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.273308][ T5092] vlan2: entered allmulticast mode [ 56.299191][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.407494][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.443801][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 56.480605][ T5106] __nla_validate_parse: 2 callbacks suppressed [ 56.480624][ T5106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 56.514260][ T5103] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 56.540020][ T5106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.594'. [ 56.584945][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.592215][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.602923][ T5112] loop5: detected capacity change from 0 to 512 [ 56.630373][ T5071] bridge_slave_0: entered allmulticast mode [ 56.637759][ T5071] bridge_slave_0: entered promiscuous mode [ 56.644661][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.651903][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.659511][ T5071] bridge_slave_1: entered allmulticast mode [ 56.668195][ T5071] bridge_slave_1: entered promiscuous mode [ 56.689768][ T5112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.704992][ T38] bridge_slave_1: left allmulticast mode [ 56.710743][ T38] bridge_slave_1: left promiscuous mode [ 56.711382][ T5112] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.716463][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.752311][ T38] bridge_slave_0: left allmulticast mode [ 56.758193][ T38] bridge_slave_0: left promiscuous mode [ 56.763967][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.777335][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.879579][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.890167][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.902389][ T38] bond0 (unregistering): Released all slaves [ 56.942222][ T5131] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.953424][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.960698][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.976725][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.021167][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.030452][ T5133] loop3: detected capacity change from 0 to 2048 [ 57.043656][ T38] hsr_slave_0: left promiscuous mode [ 57.051795][ T38] hsr_slave_1: left promiscuous mode [ 57.065424][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.069485][ T5133] Alternate GPT is invalid, using primary GPT. [ 57.072847][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.079165][ T5133] loop3: p2 p3 p7 [ 57.103057][ T5137] netlink: 'syz.5.606': attribute type 3 has an invalid length. [ 57.113528][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.120983][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.136582][ T38] veth1_macvtap: left promiscuous mode [ 57.178199][ T5139] loop4: detected capacity change from 0 to 256 [ 57.187884][ T38] veth0_macvtap: left promiscuous mode [ 57.195739][ T5139] FAT-fs (loop4): bogus number of FAT sectors [ 57.201960][ T5139] FAT-fs (loop4): Can't find a valid FAT filesystem [ 57.213888][ T38] veth1_vlan: left promiscuous mode [ 57.219675][ T38] veth0_vlan: left promiscuous mode [ 57.442788][ T38] team0 (unregistering): Port device team_slave_1 removed [ 57.474133][ T38] team0 (unregistering): Port device team_slave_0 removed [ 57.563254][ T5071] team0: Port device team_slave_0 added [ 57.569167][ T5157] syzkaller1: entered promiscuous mode [ 57.574706][ T5157] syzkaller1: entered allmulticast mode [ 57.601241][ T5071] team0: Port device team_slave_1 added [ 57.648081][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 57.648098][ T29] audit: type=1326 audit(2000000017.120:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.696256][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.703247][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.729288][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.743156][ T29] audit: type=1326 audit(2000000017.120:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.766515][ T29] audit: type=1326 audit(2000000017.120:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.789938][ T29] audit: type=1326 audit(2000000017.120:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.813435][ T29] audit: type=1326 audit(2000000017.120:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.836696][ T29] audit: type=1326 audit(2000000017.160:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.859944][ T29] audit: type=1326 audit(2000000017.200:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.886840][ T29] audit: type=1326 audit(2000000017.220:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.891785][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.910155][ T29] audit: type=1326 audit(2000000017.220:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.910188][ T29] audit: type=1326 audit(2000000017.220:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5b6acde9 code=0x7ffc0000 [ 57.964869][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.991136][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.008575][ T5185] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 58.008622][ T5184] IPVS: stopping master sync thread 5185 ... [ 58.043727][ T5071] hsr_slave_0: entered promiscuous mode [ 58.051548][ T5071] hsr_slave_1: entered promiscuous mode [ 58.274126][ T5071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 58.306830][ T5071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 58.344386][ T5071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 58.377134][ T5071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 58.490033][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.529569][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.568259][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.575458][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.624219][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.631370][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.700021][ T5071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.700047][ T5071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.749183][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749215][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749308][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749343][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749368][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749424][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749450][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749470][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749491][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749578][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749604][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749630][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749656][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749810][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749848][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749872][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.749974][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750000][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750025][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750051][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750076][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750149][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750172][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750198][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750223][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750244][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750264][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750368][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750388][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750480][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.750911][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.813698][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.124391][ T5071] veth0_vlan: entered promiscuous mode [ 59.138820][ T5071] veth1_vlan: entered promiscuous mode [ 59.186533][ T5071] veth0_macvtap: entered promiscuous mode [ 59.439810][ T5071] veth1_macvtap: entered promiscuous mode [ 59.481013][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.491626][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.501464][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.511924][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.521760][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.532290][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.563434][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.613895][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.624442][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.634452][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.644985][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.654950][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.665472][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.676189][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.689912][ T5071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.698719][ T5071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.707508][ T5071] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.716272][ T5071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.815117][ T5366] pim6reg1: entered promiscuous mode [ 59.820598][ T5366] pim6reg1: entered allmulticast mode [ 59.872532][ T5381] netlink: 3 bytes leftover after parsing attributes in process `syz.6.580'. [ 59.916139][ T5381] 0ªX¹¦À: renamed from caif0 [ 59.939004][ T5381] 0ªX¹¦À: entered allmulticast mode [ 59.944256][ T5381] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.961760][ T5385] netlink: 'syz.1.660': attribute type 16 has an invalid length. [ 59.969629][ T5385] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.660'. [ 59.974388][ T5378] loop5: detected capacity change from 0 to 8192 [ 60.013760][ T3375] kernel write not supported for file /307/attr/exec (pid: 3375 comm: kworker/1:3) [ 60.025611][ T5378] loop5: p1 p2 p3 [ 60.029445][ T5378] loop5: p1 size 67108864 extends beyond EOD, truncated [ 60.068862][ T5378] loop5: p2 start 98631679 is beyond EOD, truncated [ 60.075654][ T5378] loop5: p3 size 423702036 extends beyond EOD, truncated [ 60.241074][ T5420] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 60.253846][ T8] kernel write not supported for file /232/attr/exec (pid: 8 comm: kworker/0:0) [ 60.308277][ T5430] bond1 (unregistering): Released all slaves [ 60.367520][ T5420] bond1: entered promiscuous mode [ 60.387794][ T5420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.620187][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 60.683677][ T5464] loop3: detected capacity change from 0 to 1024 [ 60.693074][ T5451] lo speed is unknown, defaulting to 1000 [ 60.726737][ T5464] EXT4-fs error (device loop3): __ext4_fill_super:5497: inode #2: comm syz.3.676: casefold flag without casefold feature [ 60.763565][ T5464] EXT4-fs (loop3): get root inode failed [ 60.769303][ T5464] EXT4-fs (loop3): mount failed [ 61.053579][ T5451] chnl_net:caif_netlink_parms(): no params data found [ 61.233906][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.241225][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.270263][ T5451] bridge_slave_0: entered allmulticast mode [ 61.276764][ T5451] bridge_slave_0: entered promiscuous mode [ 61.284023][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.291212][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.298622][ T5451] bridge_slave_1: entered allmulticast mode [ 61.305084][ T5451] bridge_slave_1: entered promiscuous mode [ 61.349132][ T5558] loop5: detected capacity change from 0 to 2048 [ 61.366667][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.403940][ T5558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.406621][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.457434][ T5451] team0: Port device team_slave_0 added [ 61.470707][ T5451] team0: Port device team_slave_1 added [ 61.513271][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.520321][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.546833][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.561904][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.568927][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.570425][ T5581] loop3: detected capacity change from 0 to 2048 [ 61.594988][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.613447][ T5581] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.636629][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.652297][ T5451] hsr_slave_0: entered promiscuous mode [ 61.660345][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.674738][ T5451] hsr_slave_1: entered promiscuous mode [ 61.682310][ T5451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.689931][ T5451] Cannot create hsr debugfs directory [ 61.724308][ T5581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.710: bg 0: block 234: padding at end of block bitmap is not set [ 61.738805][ T5581] EXT4-fs (loop3): Remounting filesystem read-only [ 61.745775][ T5581] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -5) [ 61.773319][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.793329][ T5597] netlink: 'syz.5.713': attribute type 16 has an invalid length. [ 61.801148][ T5597] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.713'. [ 61.878917][ T5451] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 61.890596][ T5451] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 61.904223][ T5451] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 61.922258][ T5451] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 61.955360][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.962494][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.969894][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.969932][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.012560][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.024224][ T5618] lo speed is unknown, defaulting to 1000 [ 62.032016][ T2177] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.047690][ T2177] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.069310][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.081721][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.088875][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.113270][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.120479][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.260552][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.407308][ T5664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.726'. [ 62.441023][ T5669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'. [ 62.450297][ T5451] veth0_vlan: entered promiscuous mode [ 62.458842][ T5451] veth1_vlan: entered promiscuous mode [ 62.475592][ T5451] veth0_macvtap: entered promiscuous mode [ 62.482828][ T5451] veth1_macvtap: entered promiscuous mode [ 62.493148][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.503731][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.513592][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.524135][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.534003][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.544525][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.554457][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.564998][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.577428][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.588633][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.599156][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.609023][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.619483][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.629320][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.639764][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.649637][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.660196][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.670981][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.681006][ T5451] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.689776][ T5451] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.698508][ T5451] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.707355][ T5451] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.734717][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.746008][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.829841][ T5684] ref_ctr increment failed for inode: 0x12 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108954780 [ 62.844839][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 62.844857][ T29] audit: type=1326 audit(2000000022.310:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 62.875195][ T29] audit: type=1326 audit(2000000022.310:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 62.898634][ T29] audit: type=1326 audit(2000000022.330:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 62.922204][ T29] audit: type=1326 audit(2000000022.330:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 62.946358][ T29] audit: type=1326 audit(2000000022.350:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5683 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac174acde9 code=0x7ffc0000 [ 62.983484][ T5682] uprobe: syz.7.673:5682 failed to unregister, leaking uprobe [ 63.007930][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 63.134792][ T5706] lo speed is unknown, defaulting to 1000 [ 63.341474][ T5723] lo speed is unknown, defaulting to 1000 [ 63.403440][ T5727] netlink: 96 bytes leftover after parsing attributes in process `syz.3.748'. [ 63.499094][ T5733] loop3: detected capacity change from 0 to 128 [ 63.515022][ T5733] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.527478][ T5733] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.587340][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.609866][ T5737] netlink: 332 bytes leftover after parsing attributes in process `syz.3.751'. [ 64.166114][ T29] audit: type=1326 audit(2000000023.630:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 64.213969][ T29] audit: type=1326 audit(2000000023.670:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 64.227831][ T5789] lo speed is unknown, defaulting to 1000 [ 64.237524][ T29] audit: type=1400 audit(2000000023.670:1158): avc: denied { listen } for pid=5787 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.262879][ T29] audit: type=1326 audit(2000000023.670:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 64.286365][ T29] audit: type=1326 audit(2000000023.670:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 64.609652][ T5817] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.830627][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.838143][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.845598][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.853093][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.860597][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.868197][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.875786][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.883189][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.890707][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.898196][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.905628][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.913065][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.920565][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.927974][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.935474][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.942854][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.950409][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.957996][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.965441][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.972823][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.980225][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.987637][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.995029][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.002450][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.009929][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.017340][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.024733][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.032303][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.039913][ T3364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.053710][ T3364] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.107168][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.784'. [ 65.608167][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.799'. [ 65.612553][ T5876] lo speed is unknown, defaulting to 1000 [ 65.618265][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.799'. [ 65.741298][ T5887] loop6: detected capacity change from 0 to 128 [ 65.814500][ T5887] syz.6.804: attempt to access beyond end of device [ 65.814500][ T5887] loop6: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 66.075490][ T5911] netlink: 'syz.6.815': attribute type 3 has an invalid length. [ 66.102866][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.816'. [ 66.696457][ T5971] lo speed is unknown, defaulting to 1000 [ 67.020526][ T5983] Falling back ldisc for ttyS3. [ 67.415299][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 67.676165][ T6064] loop3: detected capacity change from 0 to 512 [ 67.689768][ T6064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.720960][ T6064] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.785548][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.825931][ T6076] 9pnet_fd: Insufficient options for proto=fd [ 67.833373][ T6074] loop5: detected capacity change from 0 to 128 [ 67.842761][ T6074] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.863634][ T6074] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.925919][ T4157] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.938012][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 67.938029][ T29] audit: type=1400 audit(2000000027.410:1256): avc: denied { create } for pid=6078 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.991770][ T29] audit: type=1400 audit(2000000027.450:1257): avc: denied { write } for pid=6078 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.011934][ T29] audit: type=1400 audit(2000000027.480:1258): avc: denied { setopt } for pid=6059 comm="syz.6.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.033874][ T29] audit: type=1400 audit(2000000027.500:1259): avc: denied { ioctl } for pid=6078 comm="syz.3.863" path="socket:[12605]" dev="sockfs" ino=12605 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.088440][ T6089] loop6: detected capacity change from 0 to 2048 [ 68.124822][ T6089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.154189][ T29] audit: type=1326 audit(2000000027.620:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.177656][ T29] audit: type=1326 audit(2000000027.620:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.201091][ T29] audit: type=1326 audit(2000000027.620:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.224550][ T29] audit: type=1326 audit(2000000027.620:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.248058][ T29] audit: type=1326 audit(2000000027.620:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.271824][ T29] audit: type=1326 audit(2000000027.620:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c99dcde9 code=0x7ffc0000 [ 68.344606][ T6089] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.359646][ T6089] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2036 with error 28 [ 68.362090][ T6105] lo speed is unknown, defaulting to 1000 [ 68.372220][ T6089] EXT4-fs (loop6): This should not happen!! Data will be lost [ 68.372220][ T6089] [ 68.372239][ T6089] EXT4-fs (loop6): Total free blocks count 0 [ 68.372254][ T6089] EXT4-fs (loop6): Free/Dirty block details [ 68.399761][ T6089] EXT4-fs (loop6): free_blocks=2415919104 [ 68.405542][ T6089] EXT4-fs (loop6): dirty_blocks=2048 [ 68.410868][ T6089] EXT4-fs (loop6): Block reservation details [ 68.416958][ T6089] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 68.564398][ T38] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 708 with max blocks 1328 with error 28 [ 68.635776][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 68.643570][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 68.671544][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.679285][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.686988][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.694664][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.702380][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.710145][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.718049][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.725778][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.733591][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.741339][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.749087][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.756776][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.764445][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.772221][ T3372] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x0 [ 68.780685][ T3372] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 68.924860][ T6128] loop5: detected capacity change from 0 to 256 [ 68.932049][ T6128] msdos: Bad value for 'gid' [ 68.936961][ T6128] msdos: Bad value for 'gid' [ 69.022115][ T6134] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 69.028680][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.036465][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 69.053983][ T6138] netlink: 92 bytes leftover after parsing attributes in process `syz.7.883'. [ 69.182707][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.7.890'. [ 69.284400][ T6158] pim6reg1: entered promiscuous mode [ 69.289800][ T6158] pim6reg1: entered allmulticast mode [ 69.295201][ T3372] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 69.422504][ T6163] netlink: 2052 bytes leftover after parsing attributes in process `syz.7.893'. [ 69.431939][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.893'. [ 69.802192][ T6135] vhci_hcd: connection reset by peer [ 69.808433][ T359] vhci_hcd: stop threads [ 69.813535][ T359] vhci_hcd: release socket [ 69.818105][ T359] vhci_hcd: disconnect device [ 69.846846][ T6191] loop3: detected capacity change from 0 to 512 [ 69.853396][ T6191] EXT4-fs: Ignoring removed i_version option [ 69.859592][ T6191] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.867848][ T6191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.879493][ T6191] EXT4-fs (loop3): 1 truncate cleaned up [ 69.885993][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.944353][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.043067][ T6201] loop6: detected capacity change from 0 to 512 [ 70.069028][ T6201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.083598][ T6201] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.155433][ T5071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.209963][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.914'. [ 70.234312][ T6213] loop7: detected capacity change from 0 to 164 [ 70.258807][ T6213] syz.7.915: attempt to access beyond end of device [ 70.258807][ T6213] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.273087][ T6213] syz.7.915: attempt to access beyond end of device [ 70.273087][ T6213] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.354002][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.920'. [ 70.374655][ T6223] batadv0: entered promiscuous mode [ 70.381707][ T6223] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 70.392413][ T6223] team0: Device macvtap1 failed to register rx_handler [ 70.399542][ T6223] batadv0: left promiscuous mode [ 70.537575][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 70.558602][ T6236] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.617708][ T6236] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.670322][ T6236] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.742328][ T6236] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.822707][ T6236] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834440][ T6236] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.872480][ T6236] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.887453][ T6236] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.896577][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 71.107389][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 71.269065][ T6292] veth0_vlan: entered allmulticast mode [ 71.341844][ T6295] ÿÿÿÿÿÿ: renamed from vlan1 [ 71.702655][ T6331] veth0_to_batadv: entered promiscuous mode [ 71.725431][ T6331] veth0_to_batadv: left promiscuous mode [ 72.013136][ T6352] syzkaller0: entered promiscuous mode [ 72.018735][ T6352] syzkaller0: entered allmulticast mode [ 72.244224][ T6377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.344255][ T6393] gtp0: entered promiscuous mode [ 72.368953][ T6394] ref_ctr_offset mismatch. inode: 0x367 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 72.418277][ T6404] dummy0: entered promiscuous mode [ 72.424697][ T6404] dummy0: left promiscuous mode [ 72.598127][ T6427] __nla_validate_parse: 3 callbacks suppressed [ 72.598146][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 72.635299][ T6427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.650553][ T3377] IPVS: starting estimator thread 0... [ 72.689360][ T6427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.703345][ T6438] lo speed is unknown, defaulting to 1000 [ 72.732910][ T6427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.745221][ T6432] IPVS: using max 2304 ests per chain, 115200 per kthread [ 72.781639][ T6427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.820063][ T6444] loop3: detected capacity change from 0 to 2048 [ 72.845366][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.848835][ T6446] dummy0: entered promiscuous mode [ 72.864171][ T6444] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.874910][ T6446] dummy0: left promiscuous mode [ 72.892016][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.893958][ T6427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.923363][ T6427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.947067][ T6427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959879][ T6427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.137829][ T6468] syzkaller0: entered promiscuous mode [ 73.143447][ T6468] syzkaller0: entered allmulticast mode [ 73.150059][ T6473] netem: change failed [ 73.196666][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 73.196685][ T29] audit: type=1400 audit(2000000032.660:1374): avc: denied { cmd } for pid=6480 comm="syz.5.1014" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 73.280706][ T29] audit: type=1326 audit(2000000032.750:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.312315][ T29] audit: type=1326 audit(2000000032.780:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.335919][ T29] audit: type=1326 audit(2000000032.780:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.359685][ T29] audit: type=1326 audit(2000000032.780:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.383205][ T29] audit: type=1326 audit(2000000032.780:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.406740][ T29] audit: type=1326 audit(2000000032.780:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.430296][ T29] audit: type=1326 audit(2000000032.780:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.453803][ T29] audit: type=1326 audit(2000000032.780:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.477421][ T29] audit: type=1326 audit(2000000032.780:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 73.797337][ T6562] loop3: detected capacity change from 0 to 1024 [ 73.811142][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1032'. [ 74.282956][ T6631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1048'. [ 74.346500][ T6639] IPVS: stopping master sync thread 6640 ... [ 74.352592][ T6640] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 74.385330][ T3372] vhci_hcd: vhci_device speed not set [ 74.396515][ T6648] loop5: detected capacity change from 0 to 512 [ 74.423807][ T6648] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1054: casefold flag without casefold feature [ 74.437649][ T6648] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1054: couldn't read orphan inode 15 (err -117) [ 74.450035][ T6648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.481458][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.625383][ T6670] loop5: detected capacity change from 0 to 1024 [ 74.635684][ T6670] EXT4-fs: Ignoring removed orlov option [ 74.641376][ T6670] EXT4-fs: Ignoring removed orlov option [ 74.688982][ T6670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.707725][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.715301][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.723190][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.730702][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.808175][ T6690] vlan1: entered allmulticast mode [ 74.813980][ T6690] bond0: entered allmulticast mode [ 74.814513][ T4157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.819145][ T6690] bond_slave_0: entered allmulticast mode [ 74.819162][ T6690] bond_slave_1: entered allmulticast mode [ 74.847133][ T6689] Cannot find add_set index 0 as target [ 74.849988][ T6690] bond0: left allmulticast mode [ 74.857671][ T6690] bond_slave_0: left allmulticast mode [ 74.863216][ T6690] bond_slave_1: left allmulticast mode [ 74.894446][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 74.904330][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 75.136774][ T6727] loop6: detected capacity change from 0 to 1024 [ 75.157081][ T6727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.187253][ T5071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.826974][ T6762] syzkaller0: entered promiscuous mode [ 75.832501][ T6762] syzkaller0: entered allmulticast mode [ 75.878162][ T6773] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 75.989335][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 76.086944][ T6788] loop7: detected capacity change from 0 to 512 [ 76.118544][ T6788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.145308][ T6788] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.238446][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 76.289501][ T6798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.304590][ T5451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.322826][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1119'. [ 76.377140][ T6798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.449288][ T6798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.478126][ T6811] loop7: detected capacity change from 0 to 512 [ 76.516373][ T6811] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 76.530297][ T6811] EXT4-fs (loop7): orphan cleanup on readonly fs [ 76.537733][ T6798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.548795][ T6811] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.574440][ T6811] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 76.589926][ T6811] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1124: bg 0: block 40: padding at end of block bitmap is not set [ 76.623839][ T6811] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 76.634280][ T6811] EXT4-fs (loop7): 1 truncate cleaned up [ 76.653818][ T6798] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.664154][ T6811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.681720][ T6798] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.694611][ T6798] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.716799][ T6798] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762625][ T5451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.782492][ T6822] loop3: detected capacity change from 0 to 512 [ 76.813496][ T6826] netlink: 'syz.7.1130': attribute type 8 has an invalid length. [ 76.821699][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841711][ T6822] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.964785][ T6842] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1137'. [ 76.986721][ T6822] loop3: detected capacity change from 512 to 0 [ 77.009910][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.009910][ T6822] loop3: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 77.030706][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.030706][ T6822] loop3: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 77.044256][ T6822] EXT4-fs error (device loop3): ext4_write_dquot:6907: comm syz.3.1129: Failed to commit dquot type 1 [ 77.055402][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.055402][ T6822] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 77.068585][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.091634][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.099090][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.099090][ T6822] loop3: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 77.117657][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.117657][ T6822] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 77.132372][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.132372][ T6822] loop3: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 77.163935][ T6822] EXT4-fs error (device loop3): ext4_get_inode_loc:4573: inode #18: block 35: comm syz.3.1129: unable to read itable block [ 77.164039][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1142'. [ 77.187994][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.187994][ T6822] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 77.201218][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.210539][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.217364][ T6822] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: IO failure [ 77.227849][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.227849][ T6822] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 77.241049][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.251550][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.258418][ T6822] EXT4-fs error (device loop3): ext4_ext_truncate:4457: inode #18: comm syz.3.1129: mark_inode_dirty error [ 77.272069][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.272069][ T6822] loop3: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 77.285361][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.295273][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.302256][ T6822] syz.3.1129: attempt to access beyond end of device [ 77.302256][ T6822] loop3: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 77.317354][ T6822] EXT4-fs error (device loop3): ext4_get_inode_loc:4573: inode #18: block 35: comm syz.3.1129: unable to read itable block [ 77.332597][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.343008][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.349840][ T6822] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: IO failure [ 77.360814][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.369182][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.376060][ T6822] EXT4-fs error (device loop3): ext4_truncate:4240: inode #18: comm syz.3.1129: mark_inode_dirty error [ 77.389051][ T6822] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.397548][ T6822] EXT4-fs (loop3): I/O error while writing superblock [ 77.427087][ T3297] EXT4-fs error (device loop3): ext4_get_inode_loc:4573: inode #2: block 34: comm syz-executor: unable to read itable block [ 77.441155][ T3297] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.450031][ T3297] EXT4-fs (loop3): I/O error while writing superblock [ 77.456947][ T3297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: IO failure [ 77.466455][ T3297] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.474739][ T3297] EXT4-fs (loop3): I/O error while writing superblock [ 77.481574][ T3297] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz-executor: mark_inode_dirty error [ 77.493007][ T3297] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 77.772318][ T6870] lo speed is unknown, defaulting to 1000 [ 77.796309][ T6883] vlan2: entered promiscuous mode [ 77.802485][ T6883] bond0: entered promiscuous mode [ 77.809864][ T6883] bond0: left promiscuous mode [ 77.900390][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 77.940274][ T6889] syzkaller0: entered promiscuous mode [ 77.945865][ T6889] syzkaller0: entered allmulticast mode [ 77.952146][ T6891] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1155'. [ 78.008465][ T6895] macvlan0: entered promiscuous mode [ 78.014567][ T6895] ipvlan0: entered promiscuous mode [ 78.020828][ T6895] ipvlan0: left promiscuous mode [ 78.026373][ T6895] macvlan0: left promiscuous mode [ 78.056660][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.063720][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.071169][ T6870] bridge_slave_0: entered allmulticast mode [ 78.077978][ T6870] bridge_slave_0: entered promiscuous mode [ 78.084912][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.092084][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.099630][ T6870] bridge_slave_1: entered allmulticast mode [ 78.108713][ T6870] bridge_slave_1: entered promiscuous mode [ 78.134429][ T6904] bridge0: entered promiscuous mode [ 78.140238][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 78.141615][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.169358][ T6904] bridge0 (unregistering): left promiscuous mode [ 78.217935][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.227507][ T6910] loop6: detected capacity change from 0 to 2048 [ 78.241518][ T6870] team0: Port device team_slave_0 added [ 78.248223][ T6870] team0: Port device team_slave_1 added [ 78.257946][ T6910] loop6: p1 < > p4 [ 78.265720][ T6910] loop6: p4 size 8388608 extends beyond EOD, truncated [ 78.281604][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.288597][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.294993][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1163'. [ 78.314564][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.315507][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.338532][ T3000] loop6: p1 < > p4 [ 78.341552][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.346339][ T3000] loop6: p4 size 8388608 extends beyond EOD, [ 78.371233][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.388183][ T3000] truncated [ 78.449166][ T6870] hsr_slave_0: entered promiscuous mode [ 78.460306][ T3000] loop6: p1 < > p4 [ 78.465735][ T3000] loop6: p4 size 8388608 extends beyond EOD, truncated [ 78.474187][ T6870] hsr_slave_1: entered promiscuous mode [ 78.481292][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.489781][ T6870] Cannot create hsr debugfs directory [ 78.522552][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 78.523583][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 78.556667][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 78.624372][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 78.624391][ T29] audit: type=1400 audit(2000000038.080:1577): avc: denied { write } for pid=6931 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.709538][ T6940] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1174'. [ 78.746064][ T6870] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.758643][ T6870] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.778573][ T6870] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.791202][ T6870] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.814826][ T29] audit: type=1326 audit(2000000038.280:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.838485][ T29] audit: type=1326 audit(2000000038.280:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.849789][ T6950] loop7: detected capacity change from 0 to 2048 [ 78.861989][ T29] audit: type=1326 audit(2000000038.280:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.891747][ T29] audit: type=1326 audit(2000000038.280:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.906190][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.915354][ T29] audit: type=1326 audit(2000000038.280:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.945480][ T29] audit: type=1326 audit(2000000038.280:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.968973][ T29] audit: type=1326 audit(2000000038.280:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 78.992463][ T29] audit: type=1326 audit(2000000038.280:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.6.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde34ccde9 code=0x7ffc0000 [ 79.019754][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 79.027498][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 79.031948][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.035544][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.047018][ T6950] loop7: p3 p4 < > [ 79.049563][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.061083][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.068836][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.076546][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.084263][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.091948][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.099624][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.107302][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.115035][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.122723][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.130466][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.138141][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.145822][ T35] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 79.154572][ T35] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 79.171883][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 79.182900][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 79.196786][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.203933][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.230090][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.237255][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.262960][ T6870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.274033][ T6870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.359742][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.512820][ T6870] veth0_vlan: entered promiscuous mode [ 79.521258][ T6870] veth1_vlan: entered promiscuous mode [ 79.537924][ T6870] veth0_macvtap: entered promiscuous mode [ 79.545574][ T6870] veth1_macvtap: entered promiscuous mode [ 79.556455][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.566957][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.576845][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.587345][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.597221][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.607680][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.617539][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.627999][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.639040][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.650248][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.660791][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.670857][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.681380][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.691259][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.701726][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.711580][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.722012][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.733351][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.746482][ T6870] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755483][ T6870] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.764210][ T6870] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773084][ T6870] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.788897][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1192'. [ 79.821104][ T7000] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.858790][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1195'. [ 79.888406][ T7000] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.906901][ T7015] netlink: 'syz.6.1198': attribute type 3 has an invalid length. [ 79.948486][ T7000] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.981409][ T29] audit: type=1400 audit(2000000039.450:1586): avc: denied { accept } for pid=7020 comm="syz.8.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.037326][ T7000] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.111788][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1204'. [ 80.136924][ T7027] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1204'. [ 80.161152][ T7000] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.191956][ T7000] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.206560][ T7032] bridge0: port 3(batadv1) entered blocking state [ 80.213180][ T7032] bridge0: port 3(batadv1) entered disabled state [ 80.220158][ T7032] batadv1: entered allmulticast mode [ 80.226514][ T7032] batadv1: entered promiscuous mode [ 80.235524][ T7000] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.247411][ T7000] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.255937][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 80.329041][ T7042] wg2: entered promiscuous mode [ 80.333963][ T7042] wg2: entered allmulticast mode [ 80.411360][ T7048] lo speed is unknown, defaulting to 1000 [ 80.705254][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 80.714551][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 81.266385][ T7070] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.300649][ T7075] lo speed is unknown, defaulting to 1000 [ 81.573083][ T7087] ref_ctr_offset mismatch. inode: 0x44f offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 81.661886][ T7092] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.736585][ T7092] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.797381][ T7092] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.856889][ T7092] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.932280][ T7092] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.945790][ T7092] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.959014][ T7092] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.972149][ T7092] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.076592][ T7098] vlan2: entered allmulticast mode [ 82.081959][ T7098] bridge_slave_0: entered allmulticast mode [ 82.095430][ T7098] bridge_slave_0: left allmulticast mode [ 82.374168][ T7129] dummy0: entered promiscuous mode [ 82.381057][ T7129] dummy0: left promiscuous mode [ 82.405663][ T7131] syzkaller0: entered promiscuous mode [ 82.411165][ T7131] syzkaller0: entered allmulticast mode [ 82.500899][ T7143] netlink: 'syz.1.1254': attribute type 21 has an invalid length. [ 82.544070][ T7148] netem: change failed [ 82.700471][ T7174] macvlan0: entered promiscuous mode [ 82.707423][ T7174] ipvlan0: entered promiscuous mode [ 82.713719][ T7174] ipvlan0: left promiscuous mode [ 82.719267][ T7174] macvlan0: left promiscuous mode [ 82.827880][ T7070] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.917763][ T7070] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.018321][ T7070] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.052607][ T7192] hsr_slave_0: left promiscuous mode [ 83.058710][ T7192] hsr_slave_1: left promiscuous mode [ 83.090858][ T7070] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.101799][ T7070] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.113160][ T7070] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124669][ T7070] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.246527][ T7206] lo speed is unknown, defaulting to 1000 [ 83.769779][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 83.769796][ T29] audit: type=1400 audit(2000000043.307:1621): avc: denied { bind } for pid=7267 comm="syz.6.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.787956][ T7264] syzkaller0: entered promiscuous mode [ 83.795263][ T29] audit: type=1400 audit(2000000043.307:1622): avc: denied { name_bind } for pid=7267 comm="syz.6.1308" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 83.800692][ T7264] syzkaller0: entered allmulticast mode [ 83.821466][ T29] audit: type=1400 audit(2000000043.307:1623): avc: denied { node_bind } for pid=7267 comm="syz.6.1308" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 83.825457][ T29] audit: type=1400 audit(2000000043.357:1624): avc: denied { accept } for pid=7267 comm="syz.6.1308" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.869034][ T29] audit: type=1400 audit(2000000043.367:1625): avc: denied { read } for pid=7267 comm="syz.6.1308" laddr=127.0.0.1 lport=40730 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.894003][ T29] audit: type=1400 audit(2000000043.427:1626): avc: denied { write } for pid=7267 comm="syz.6.1308" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=40730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.002332][ T7274] loop8: detected capacity change from 0 to 1024 [ 84.009140][ T7274] EXT4-fs: Ignoring removed oldalloc option [ 84.015339][ T7274] EXT4-fs: Ignoring removed i_version option [ 84.021389][ T7274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.038760][ T7274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.071314][ T6870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.081212][ T7281] xt_policy: too many policy elements [ 84.193602][ T7294] lo speed is unknown, defaulting to 1000 [ 84.317773][ T7303] loop8: detected capacity change from 0 to 128 [ 84.362297][ T7303] bio_check_eod: 30 callbacks suppressed [ 84.362311][ T7303] syz.8.1321: attempt to access beyond end of device [ 84.362311][ T7303] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 84.619371][ T11] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.696812][ T11] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.724720][ T7333] pim6reg1: entered promiscuous mode [ 84.730181][ T7333] pim6reg1: entered allmulticast mode [ 84.766710][ T11] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.801199][ T7334] lo speed is unknown, defaulting to 1000 [ 84.847795][ T11] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.930555][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 84.994489][ T7364] __nla_validate_parse: 5 callbacks suppressed [ 84.994509][ T7364] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1344'. [ 85.049129][ T7372] Process accounting resumed [ 85.055635][ T29] audit: type=1400 audit(2000000044.587:1627): avc: denied { listen } for pid=7369 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.087433][ T11] bridge_slave_1: left allmulticast mode [ 85.093131][ T11] bridge_slave_1: left promiscuous mode [ 85.098908][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.109014][ T11] bridge_slave_0: left allmulticast mode [ 85.114735][ T11] bridge_slave_0: left promiscuous mode [ 85.120680][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.227851][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.238062][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.247662][ T11] bond0 (unregistering): Released all slaves [ 85.256717][ T11] bond1 (unregistering): Released all slaves [ 85.269839][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.277142][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.284640][ T7334] bridge_slave_0: entered allmulticast mode [ 85.293425][ T7334] bridge_slave_0: entered promiscuous mode [ 85.305296][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.312401][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.319725][ T7334] bridge_slave_1: entered allmulticast mode [ 85.328378][ T7334] bridge_slave_1: entered promiscuous mode [ 85.337142][ T11] hsr_slave_0: left promiscuous mode [ 85.343107][ T11] hsr_slave_1: left promiscuous mode [ 85.350289][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.357805][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.368676][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.376188][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.388248][ T11] veth1_macvtap: left promiscuous mode [ 85.394072][ T11] veth0_macvtap: left promiscuous mode [ 85.399693][ T11] veth1_vlan: left promiscuous mode [ 85.404995][ T11] veth0_vlan: left promiscuous mode [ 85.478895][ T11] team0 (unregistering): Port device team_slave_1 removed [ 85.489475][ T11] team0 (unregistering): Port device team_slave_0 removed [ 85.530370][ T7396] pim6reg: entered allmulticast mode [ 85.537331][ T7397] pim6reg: left allmulticast mode [ 85.551164][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.561856][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.581823][ T7334] team0: Port device team_slave_0 added [ 85.589066][ T7334] team0: Port device team_slave_1 added [ 85.610204][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.617295][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.620451][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1359'. [ 85.643397][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.644247][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.670455][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.696587][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.710051][ T7399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 85.730124][ T7334] hsr_slave_0: entered promiscuous mode [ 85.736328][ T7334] hsr_slave_1: entered promiscuous mode [ 85.742273][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.751551][ T7334] Cannot create hsr debugfs directory [ 85.802445][ T7406] loop8: detected capacity change from 0 to 512 [ 85.819037][ T7406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.830611][ T7334] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 85.832383][ T7406] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.851939][ T7334] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 85.861105][ T29] audit: type=1400 audit(2000000045.397:1628): avc: denied { ioctl } for pid=7405 comm="syz.8.1362" path="/59/file1/cgroup.controllers" dev="loop8" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.861344][ T7334] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 85.906302][ T7334] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 85.920674][ T6870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.972467][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.979970][ T7414] SELinux: policydb version 0 does not match my version range 15-34 [ 85.991151][ T7414] SELinux: failed to load policy [ 85.993364][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1366'. [ 86.010910][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.021182][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.028286][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.043004][ T7418] sd 0:0:1:0: device reset [ 86.050634][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.057747][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.100172][ T29] audit: type=1326 audit(2000000045.637:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1969dcde9 code=0x7ffc0000 [ 86.123786][ T29] audit: type=1326 audit(2000000045.637:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.8.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1969dcde9 code=0x7ffc0000 [ 86.180753][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.340157][ T7334] veth0_vlan: entered promiscuous mode [ 86.348520][ T7334] veth1_vlan: entered promiscuous mode [ 86.379947][ T7459] netlink: 'syz.5.1379': attribute type 13 has an invalid length. [ 86.382857][ T7334] veth0_macvtap: entered promiscuous mode [ 86.422075][ T7459] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 86.438517][ T7334] veth1_macvtap: entered promiscuous mode [ 86.458149][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.468764][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.478747][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.489354][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.499366][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.509941][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.519873][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.530345][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.541906][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 86.544719][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.562346][ T7468] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.636689][ T7468] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.672024][ C0] ================================================================== [ 86.674276][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.680167][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 86.680211][ C0] [ 86.680215][ C0] read-write to 0xffff88811c2f0468 of 8 bytes by interrupt on cpu 1: [ 86.680232][ C0] can_receive+0x62/0x1f0 [ 86.690813][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.697389][ C0] canfd_rcv+0xe7/0x180 [ 86.697424][ C0] __netif_receive_skb+0x123/0x280 [ 86.699769][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.707901][ C0] process_backlog+0x22e/0x440 [ 86.707940][ C0] __napi_poll+0x63/0x3c0 [ 86.707968][ C0] net_rx_action+0x3a1/0x7f0 [ 86.708002][ C0] handle_softirqs+0xbf/0x280 [ 86.708027][ C0] do_softirq+0x5e/0x90 [ 86.708051][ C0] __local_bh_enable_ip+0x6e/0x70 [ 86.708074][ C0] addrconf_verify_rtnl+0x97a/0x9d0 [ 86.708101][ C0] inet6_addr_add+0x66b/0x700 [ 86.708123][ C0] inet6_rtm_newaddr+0x631/0x710 [ 86.708158][ C0] rtnetlink_rcv_msg+0x651/0x710 [ 86.708188][ C0] netlink_rcv_skb+0x12c/0x230 [ 86.708223][ C0] rtnetlink_rcv+0x1c/0x30 [ 86.708251][ C0] netlink_unicast+0x599/0x670 [ 86.708279][ C0] netlink_sendmsg+0x5cc/0x6e0 [ 86.708314][ C0] __sock_sendmsg+0x140/0x180 [ 86.708335][ C0] __sys_sendto+0x1a8/0x230 [ 86.712654][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.722441][ C0] __x64_sys_sendto+0x78/0x90 [ 86.722472][ C0] x64_sys_call+0x29fa/0x2dc0 [ 86.722500][ C0] do_syscall_64+0xc9/0x1c0 [ 86.722527][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.726767][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.731766][ C0] [ 86.731774][ C0] read-write to 0xffff88811c2f0468 of 8 bytes by interrupt on cpu 0: [ 86.742321][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.746910][ C0] can_receive+0x62/0x1f0 [ 86.746942][ C0] canfd_rcv+0xe7/0x180 [ 86.746973][ C0] __netif_receive_skb+0x123/0x280 [ 86.751299][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.755865][ C0] process_backlog+0x22e/0x440 [ 86.755904][ C0] __napi_poll+0x63/0x3c0 [ 86.755938][ C0] net_rx_action+0x3a1/0x7f0 [ 86.760680][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.764995][ C0] handle_softirqs+0xbf/0x280 [ 86.909213][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.910990][ C0] run_ksoftirqd+0x1c/0x30 [ 86.911025][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 86.943959][ T7334] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.946805][ C0] kthread+0x4ae/0x520 [ 86.946839][ C0] ret_from_fork+0x4b/0x60 [ 86.946868][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.946896][ C0] [ 86.946901][ C0] value changed: 0x0000000000001541 -> 0x0000000000001542 [ 86.955681][ T7334] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.959610][ C0] [ 86.959615][ C0] Reported by Kernel Concurrency Sanitizer on: [ 86.959629][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 86.964077][ T7334] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.968993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.969009][ C0] ================================================================== [ 87.033919][ T7334] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077299][ T7468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.137027][ T7468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.181901][ T7468] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.193560][ T7468] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.205595][ T7468] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.217182][ T7468] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0