last executing test programs: 20.801493329s ago: executing program 1 (id=7974): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000000200000000000000000181900", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 20.710042227s ago: executing program 1 (id=7982): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071122f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.67629213s ago: executing program 1 (id=7983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c) 20.655855742s ago: executing program 1 (id=7985): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 20.647009323s ago: executing program 1 (id=7987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 20.600597527s ago: executing program 1 (id=7990): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 9.058898094s ago: executing program 0 (id=8036): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000800000008000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000eaff000000000ed2eee696adbd8d23c69700f6040000000000500b777c75c12bb39b98dc387127da58b007327e61ac1bf19f59d0f843b7a5a5c9d7bde489403f2e992382df6b65f6003eeb31cb8e64bb6dfe6617ee738bbf68f7f8b2e555099ee6eebccbb0199b9b87f93ba46fe47d837840153debb396d806b71ea1b8258249d7acb0940adb9a51bc422bba08a9020000000000000035e8957673a11e8dbe4a2017b1ea76c5b287628fd115383ea97a9ce4823a176e56158bf2978ca686"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 9.058343283s ago: executing program 2 (id=8037): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = userfaultfd(0x1) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x100) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000200)=""/183, 0x28) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0xfffd, 0x9}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40044581, &(0x7f0000000300)={0x51, 0x8, 0x4d, {}, {0xfffd, 0x1}, @ramp={0x9, 0xb64, {0x101, 0x7f, 0x1, 0x101}}}) 9.058105084s ago: executing program 3 (id=8038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 9.057825294s ago: executing program 4 (id=8039): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8804) 7.447395292s ago: executing program 0 (id=8040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) 7.447034132s ago: executing program 2 (id=8041): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 7.446343463s ago: executing program 3 (id=8042): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 7.446029103s ago: executing program 4 (id=8043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x280) 5.73596245s ago: executing program 0 (id=8044): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xffff, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)='%pI4 \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 5.735406661s ago: executing program 2 (id=8045): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0xfffffffffffffd77, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f0000000780)=""/135}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 5.73467232s ago: executing program 3 (id=8046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.734269421s ago: executing program 4 (id=8047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 3.924325988s ago: executing program 0 (id=8048): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 3.923703338s ago: executing program 2 (id=8049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0xda, 0x61, 0x5f, 0x0]}}, &(0x7f0000000340)=""/134, 0x37, 0x86, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.923344008s ago: executing program 3 (id=8050): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000800000008000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000eaff000000000ed2eee696adbd8d23c69700f6040000000000500b777c75c12bb39b98dc387127da58b007327e61ac1bf19f59d0f843b7a5a5c9d7bde489403f2e992382df6b65f6003eeb31cb8e64bb6dfe6617ee738bbf68f7f8b2e555099ee6eebccbb0199b9b87f93ba46fe47d837840153debb396d806b71ea1b8258249d7acb0940adb9a51bc422bba08a9020000000000000035e8957673a11e8dbe4a2017b1ea76c5b287628fd115383ea97a9ce4823a176e56158bf2978ca686"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 3.922964028s ago: executing program 4 (id=8051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = userfaultfd(0x1) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x100) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000200)=""/183, 0x28) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0xfffd, 0x9}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40044581, &(0x7f0000000300)={0x51, 0x8, 0x4d, {}, {0xfffd, 0x1}, @ramp={0x9, 0xb64, {0x101, 0x7f, 0x1, 0x101}}}) 2.013152024s ago: executing program 0 (id=8052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e563541", 0xff8d}], 0x1}, 0x40) recvmsg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) 2.011839814s ago: executing program 2 (id=8053): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 2.011008914s ago: executing program 3 (id=8054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) 2.010522885s ago: executing program 4 (id=8055): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fd"], 0xfdef) 1.58845ms ago: executing program 0 (id=8056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.04748ms ago: executing program 2 (id=8057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 504.22µs ago: executing program 3 (id=8058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000d", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=8059): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xffff, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)='%pI4 \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): _r:sysadm_t tclass=capability2 permissive=1 [ 1538.923962][T22728] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 1538.965376][T22733] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 1538.992042][ T30] audit: type=1400 audit(1862317660.902:375): avc: denied { mounton } for pid=22732 comm="syz.2.5054" path="/189/file0/bus" dev="loop2" ino=1048987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1539.059257][T22733] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000008) bogus content (0x72bcbcfb) [ 1539.069517][ T30] audit: type=1400 audit(1862317660.972:376): avc: denied { remove_name } for pid=22732 comm="syz.2.5054" name="file1" dev="loop2" ino=1048986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1539.076201][T22733] exFAT-fs (loop2): Filesystem has been set read-only [ 1539.099158][ T30] audit: type=1400 audit(1862317660.972:377): avc: denied { unlink } for pid=22732 comm="syz.2.5054" name="file1" dev="loop2" ino=1048986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1539.156287][ T30] audit: type=1400 audit(1862317661.072:378): avc: denied { mounton } for pid=22748 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1539.177177][T22750] input: syz0 as /devices/virtual/input/input148 [ 1539.184256][T18547] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x1ed91996) [ 1539.203176][T18547] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x1ed91996) [ 1539.229293][T22750] loop4: detected capacity change from 0 to 1024 [ 1539.252309][T22748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.259664][T22748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.267221][T22748] device bridge_slave_0 entered promiscuous mode [ 1539.274112][T22748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.281239][T22748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.289235][T22748] device bridge_slave_1 entered promiscuous mode [ 1539.342920][T22748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.349803][T22748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.356913][T22748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.363777][T22748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.582964][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1539.593407][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.615416][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.721435][ T7781] device veth1_macvtap left promiscuous mode [ 1539.729542][ T7781] device veth0_vlan left promiscuous mode [ 1540.088269][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1540.096439][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.103294][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.111215][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1540.121382][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.128263][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.146017][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1540.153912][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.169196][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1540.177344][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.212076][T22765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.219314][T22765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.226924][T22765] device bridge_slave_0 entered promiscuous mode [ 1540.235790][T22748] device veth0_vlan entered promiscuous mode [ 1540.244460][T22777] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1540.258158][T22777] x_tables: duplicate underflow at hook 2 [ 1540.272977][T22748] device veth1_macvtap entered promiscuous mode [ 1540.280266][T22765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.287620][T22765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.294995][T22765] device bridge_slave_1 entered promiscuous mode [ 1540.327001][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1540.336425][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1540.344703][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1540.352468][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1540.360383][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1540.368636][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1540.376814][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1540.384369][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1540.391743][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1540.414736][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1540.422937][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1540.431460][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1540.439832][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1540.485082][T22779] loop1: detected capacity change from 0 to 512 [ 1540.530396][T22765] device veth0_vlan entered promiscuous mode [ 1540.541861][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1540.557850][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.565894][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1540.574537][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1540.583150][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1540.591978][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1540.600314][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1540.608684][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.615540][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.624529][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1540.628234][T22779] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1540.632636][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.649972][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.657250][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1540.660775][T22779] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 1540.668956][T22765] device veth1_macvtap entered promiscuous mode [ 1540.783858][T22787] loop0: detected capacity change from 0 to 128 [ 1540.918296][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1540.927008][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1540.950349][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1540.978935][ T30] audit: type=1400 audit(1862317662.892:379): avc: denied { setattr } for pid=22778 comm="syz.1.5066" name="NETLINK" dev="sockfs" ino=91725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1540.979890][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1541.043051][ T30] audit: type=1400 audit(1862317662.942:380): avc: denied { mount } for pid=22789 comm="syz.3.5071" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1541.067264][ T30] audit: type=1400 audit(1862317662.952:381): avc: denied { unlink } for pid=22778 comm="syz.1.5066" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1541.229752][T22795] loop2: detected capacity change from 0 to 1024 [ 1541.382123][T22795] EXT4-fs (loop2): Ignoring removed orlov option [ 1541.789755][T22795] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1541.805392][ T30] audit: type=1400 audit(1862317663.712:382): avc: denied { create } for pid=22802 comm="syz.3.5075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1541.836900][T22795] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1541.960707][T22812] loop4: detected capacity change from 0 to 256 [ 1542.017815][T22812] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1542.030155][ T30] audit: type=1400 audit(1862317663.942:383): avc: denied { getopt } for pid=22815 comm="syz.3.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1542.295590][ T7781] device veth1_macvtap left promiscuous mode [ 1542.417228][ T7781] device veth0_vlan left promiscuous mode [ 1542.703745][T22831] usb usb8: usbfs: process 22831 (syz.2.5083) did not claim interface 0 before use [ 1542.951798][T22834] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5081'. [ 1543.001063][T22848] loop2: detected capacity change from 0 to 512 [ 1543.036419][T22859] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1543.056995][T22848] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1543.068605][T22861] loop1: detected capacity change from 0 to 128 [ 1543.075805][T22861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1543.084996][T22861] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1543.089666][T22848] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 1543.113199][T22848] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 1543.128809][T22861] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff) [ 1543.812527][T22884] loop2: detected capacity change from 0 to 512 [ 1543.844266][T22889] input: syz0 as /devices/virtual/input/input149 [ 1543.966731][T22884] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1544.314863][T22902] loop1: detected capacity change from 0 to 16 [ 1544.337447][T22901] loop3: detected capacity change from 0 to 256 [ 1544.346667][T22902] erofs: (device loop1): mounted with root inode @ nid 36. [ 1544.430349][T22904] loop2: detected capacity change from 0 to 512 [ 1544.453751][T22905] attempt to access beyond end of device [ 1544.453751][T22905] loop1: rw=0, want=24, limit=16 [ 1544.589880][T22904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.5107: inode #1: comm syz.2.5107: iget: illegal inode # [ 1545.798288][T22907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5106'. [ 1545.819912][T22904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.5107: error while reading EA inode 1 err=-117 [ 1545.845560][T22904] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1545.858927][T22904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.5107: inode #1: comm syz.2.5107: iget: illegal inode # [ 1545.872434][T22904] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.5107: error while reading EA inode 1 err=-117 [ 1545.892759][T22904] EXT4-fs (loop2): 1 orphan inode deleted [ 1545.925886][T22919] loop0: detected capacity change from 0 to 128 [ 1545.951800][T22904] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 1545.968955][T22919] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1545.988338][T22919] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038 (0x7fffffff) [ 1546.023914][T22922] loop3: detected capacity change from 0 to 512 [ 1546.032024][T22922] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1546.032771][T22919] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1546.294394][T22922] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1546.315888][T22922] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 1546.324063][T22922] System zones: 0-1, 15-15, 18-18, 34-34 [ 1546.330120][T22922] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1546.336392][T22922] __quota_error: 1 callbacks suppressed [ 1546.336408][T22922] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1546.351230][T22922] EXT4-fs warning (device loop3): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1546.365887][T22922] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1546.372804][T15362] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1546.380255][T22922] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5113: bg 0: block 40: padding at end of block bitmap is not set [ 1546.394469][T22922] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 1546.403364][T22922] EXT4-fs (loop3): 1 truncate cleaned up [ 1546.409050][T22922] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 1546.578601][T22936] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1546.586499][ T30] audit: type=1400 audit(1862317668.492:385): avc: denied { read } for pid=22921 comm="syz.3.5113" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1546.606226][ T534] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1546.646033][T15362] usb 5-1: Using ep0 maxpacket: 8 [ 1546.646048][ T26] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1546.786378][T15362] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 1546.796750][T15362] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1546.830348][ T30] audit: type=1400 audit(1862317668.742:386): avc: denied { remount } for pid=22937 comm="syz.1.5117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1546.852650][ T30] audit: type=1400 audit(1862317668.742:387): avc: denied { unmount } for pid=22748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1546.867039][T22941] loop1: detected capacity change from 0 to 512 [ 1546.920218][T22941] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1546.931391][T22941] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 1546.941725][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 1547.026241][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.037220][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.046066][T15362] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1547.047191][ T534] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1547.065519][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.078329][ T534] usb 3-1: config 0 descriptor?? [ 1547.110595][ T26] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1547.163209][ T26] usb 1-1: config 0 has no interface number 0 [ 1547.184887][ T30] audit: type=1400 audit(1862317669.002:388): avc: denied { write } for pid=22940 comm="syz.1.5118" name="hwrng" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1547.222331][T15362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.230182][T15362] usb 5-1: Product: syz [ 1547.234117][T15362] usb 5-1: Manufacturer: syz [ 1547.238571][T15362] usb 5-1: SerialNumber: syz [ 1547.256099][T22917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1547.366038][ T432] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1547.376187][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1547.385066][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.392968][ T26] usb 1-1: Product: syz [ 1547.396974][ T26] usb 1-1: Manufacturer: syz [ 1547.401382][ T26] usb 1-1: SerialNumber: syz [ 1547.406923][ T26] usb 1-1: config 0 descriptor?? [ 1547.446424][ T26] smsc95xx v2.0.0 [ 1547.570585][T15362] usb 5-1: USB disconnect, device number 55 [ 1547.647477][ T534] hid-generic 0003:060B:700A.00CB: item fetching failed at offset 2/5 [ 1547.655626][ T534] hid-generic: probe of 0003:060B:700A.00CB failed with error -22 [ 1547.726093][ T432] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1547.734188][ T432] usb 4-1: config 0 has no interface number 0 [ 1547.740094][ T432] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1547.750492][ T432] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1547.775682][T22951] device pim6reg1 entered promiscuous mode [ 1547.783379][ T30] audit: type=1400 audit(1862317669.692:389): avc: denied { map } for pid=22950 comm="syz.1.5121" path="socket:[92109]" dev="sockfs" ino=92109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1547.806395][ T30] audit: type=1400 audit(1862317669.702:390): avc: denied { write } for pid=22950 comm="syz.1.5121" path="socket:[92114]" dev="sockfs" ino=92114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1547.849810][ T534] usb 3-1: USB disconnect, device number 50 [ 1547.875385][T22956] loop1: detected capacity change from 0 to 256 [ 1547.887295][ T26] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1547.898403][ T26] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1547.916125][ T432] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1547.925093][ T432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.932875][ T432] usb 4-1: Product: syz [ 1547.936813][ T432] usb 4-1: Manufacturer: syz [ 1547.941207][ T432] usb 4-1: SerialNumber: syz [ 1547.946624][ T432] usb 4-1: config 0 descriptor?? [ 1548.028705][T22959] loop4: detected capacity change from 0 to 256 [ 1548.114290][T22959] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1548.184466][ T30] audit: type=1400 audit(1862317670.092:391): avc: denied { getopt } for pid=22961 comm="syz.1.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1548.261233][ T432] usb 4-1: Found UVC 0.00 device syz (05ac:8600) [ 1548.267717][ T432] usb 4-1: No valid video chain found. [ 1548.273998][ T432] usb 4-1: USB disconnect, device number 68 [ 1548.365228][ C0] eth0: bad gso: type: 1, size: 1408 [ 1548.432694][T22970] loop2: detected capacity change from 0 to 2048 [ 1548.520133][T22970] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1548.531584][T22970] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 1548.596435][ T26] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 1548.607366][ T26] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 1548.696640][T22974] loop2: detected capacity change from 0 to 2048 [ 1548.799049][T22974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1548.810177][T22974] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 1549.107417][T22989] loop1: detected capacity change from 0 to 128 [ 1549.111639][T22990] loop2: detected capacity change from 0 to 2048 [ 1549.166936][T22989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1549.196151][T22989] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1550.789756][ T30] audit: type=1400 audit(1862317671.822:392): avc: denied { nlmsg_write } for pid=22991 comm="syz.4.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1550.815522][ T432] usb 1-1: USB disconnect, device number 44 [ 1550.842400][T23007] loop0: detected capacity change from 0 to 16 [ 1550.849013][T22990] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1550.862562][T22990] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 1550.952195][T23007] erofs: (device loop0): mounted with root inode @ nid 36. [ 1551.246598][T23027] xt_bpf: check failed: parse error [ 1551.260989][T23024] loop3: detected capacity change from 0 to 2048 [ 1551.294900][T23022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1551.334077][T23024] EXT4-fs (loop3): Ignoring removed orlov option [ 1551.358110][T23024] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 1552.249308][T23062] loop3: detected capacity change from 0 to 128 [ 1552.265502][ T30] audit: type=1400 audit(1862317674.172:393): avc: denied { getopt } for pid=23063 comm="syz.4.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1552.283267][T23070] loop2: detected capacity change from 0 to 1024 [ 1552.292828][ T30] audit: type=1400 audit(1862317674.212:394): avc: denied { bind } for pid=23064 comm="syz.1.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1552.313104][ T30] audit: type=1400 audit(1862317674.212:395): avc: denied { setopt } for pid=23064 comm="syz.1.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1552.420624][T23070] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1552.434201][ T30] audit: type=1400 audit(1862317674.352:396): avc: denied { execute } for pid=23069 comm="syz.2.5161" path="/20/file1/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1552.952105][T14269] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1552.967608][T14269] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 1552.979998][T14269] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1552.979998][T14269] [ 1552.989771][T14269] EXT4-fs (loop2): Total free blocks count 0 [ 1552.993646][T23086] xt_TCPMSS: Only works on TCP SYN packets [ 1553.002282][T14269] EXT4-fs (loop2): Free/Dirty block details [ 1553.008412][T14269] EXT4-fs (loop2): free_blocks=68451041280 [ 1553.014330][T14269] EXT4-fs (loop2): dirty_blocks=16 [ 1553.019696][T14269] EXT4-fs (loop2): Block reservation details [ 1553.025598][T14269] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1553.250308][T23093] loop1: detected capacity change from 0 to 256 [ 1553.266531][T23093] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1553.313870][T23093] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1553.781645][T23099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1554.517360][T23111] loop2: detected capacity change from 0 to 256 [ 1556.582263][T23119] netlink: 'syz.4.5175': attribute type 7 has an invalid length. [ 1556.592333][T23119] netlink: 'syz.4.5175': attribute type 39 has an invalid length. [ 1556.613702][ T30] audit: type=1400 audit(1862317678.522:397): avc: denied { mounton } for pid=23110 comm="syz.2.5173" path="/23/file2/bus" dev="loop2" ino=1049002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1556.651104][T23120] loop4: detected capacity change from 0 to 512 [ 1556.659651][T22765] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1556.676764][T23120] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1556.679789][ T30] audit: type=1400 audit(1862317678.582:398): avc: denied { rmdir } for pid=22748 comm="syz-executor" name="file0" dev="loop1" ino=1049001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1556.696152][T22765] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1556.734079][T23120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c198, mo2=0002] [ 1556.745086][T23123] loop3: detected capacity change from 0 to 256 [ 1556.751445][T23120] System zones: 1-12 [ 1556.757295][T23120] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.5175: corrupted in-inode xattr [ 1556.787505][T23123] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1556.801014][T23126] syz.1.5176 (23126): attempted to duplicate a private mapping with mremap. This is not supported. [ 1556.811915][T23120] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5175: couldn't read orphan inode 15 (err -117) [ 1556.856312][T23120] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,minixdf,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 1556.923531][T23129] loop0: detected capacity change from 0 to 128 [ 1556.955383][ T30] audit: type=1400 audit(1862317678.862:399): avc: denied { mounton } for pid=23130 comm="syz.1.5181" path="/26/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1556.996091][T23123] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 1557.013898][T23132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.013976][ T30] audit: type=1400 audit(1862317678.922:400): avc: denied { append } for pid=23122 comm="syz.3.5178" path="/296/file2/net_prio.prioidx" dev="loop3" ino=1049018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1557.020778][T23132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.021169][T23132] device bridge_slave_0 entered promiscuous mode [ 1557.063706][T23132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.067691][T23129] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1557.070818][T23132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.088640][T23132] device bridge_slave_1 entered promiscuous mode [ 1557.095389][T23129] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1557.119980][ T30] audit: type=1400 audit(1862317679.002:401): avc: denied { unmount } for pid=16936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1557.284571][T21961] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1557.499381][T23147] loop3: detected capacity change from 0 to 256 [ 1557.586048][T21961] usb 2-1: Using ep0 maxpacket: 16 [ 1557.618778][T23147] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1557.676914][T23132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.683822][T23132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.690964][T23132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.697844][T23132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.716057][T21961] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1557.808558][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.817774][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.896256][T21961] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1557.920110][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1557.934423][T21961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.937687][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1557.942767][T21961] usb 2-1: Product: syz [ 1557.992796][ T8949] device bridge_slave_1 left promiscuous mode [ 1558.006133][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.008978][T21961] usb 2-1: Manufacturer: syz [ 1558.017665][ T8949] device bridge_slave_0 left promiscuous mode [ 1558.023614][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.032204][ T8949] device veth1_macvtap left promiscuous mode [ 1558.038116][T21961] usb 2-1: SerialNumber: syz [ 1558.042474][ T8949] device veth0_vlan left promiscuous mode [ 1558.073714][T21961] usb 2-1: config 0 descriptor?? [ 1558.116678][T21961] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1558.124246][T21961] usb 2-1: Detected FT232RL [ 1558.149958][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1558.166453][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1558.174485][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.181364][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.210206][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1558.218572][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1558.226842][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.233687][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.283123][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1558.296700][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1558.314984][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1558.323717][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1558.344164][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1558.353366][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1558.362330][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1558.373315][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1558.382833][T23132] device veth0_vlan entered promiscuous mode [ 1558.394284][T23168] loop3: detected capacity change from 0 to 2048 [ 1558.546316][T21961] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1558.573181][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1558.582627][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1558.589712][T21961] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1558.595631][T23132] device veth1_macvtap entered promiscuous mode [ 1558.606365][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1558.614942][T21961] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1558.616834][T23174] loop3: p1 < > p2 p3 < p5 > p4 [ 1558.627826][T23174] loop3: partition table partially beyond EOD, truncated [ 1558.629493][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1558.643265][T23174] loop3: p1 start 4278190080 is beyond EOD, truncated [ 1558.653955][T21961] usb 2-1: USB disconnect, device number 35 [ 1558.661029][T23174] loop3: p2 start 16908800 is beyond EOD, truncated [ 1558.666541][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1558.675093][T21961] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1558.688913][T21961] ftdi_sio 2-1:0.0: device disconnected [ 1558.711386][T23174] loop3: p4 start 11326 is beyond EOD, truncated [ 1558.721156][T23174] loop3: p5 start 16908800 is beyond EOD, truncated [ 1558.724523][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1558.737191][T23168] loop3: p1 < > p2 p3 < p5 > p4 [ 1558.737797][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1558.741950][T23168] loop3: partition table partially beyond EOD, truncated [ 1558.752088][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1558.758615][T23168] loop3: p1 start 4278190080 is beyond EOD, truncated [ 1558.766851][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1558.771886][T23168] loop3: p2 start 16908800 is beyond EOD, truncated [ 1558.804857][T23168] loop3: p4 start 11326 is beyond EOD, truncated [ 1558.811278][T23168] loop3: p5 start 16908800 is beyond EOD, truncated [ 1558.817915][ T30] audit: type=1400 audit(1862317680.732:402): avc: denied { mounton } for pid=23175 comm="syz.0.5196" path="/60/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1558.879278][T22161] udevd[22161]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1558.902939][T22161] udevd[22161]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1558.917128][T22161] udevd[22161]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1559.077292][T23190] device pim6reg1 entered promiscuous mode [ 1559.122752][T23192] loop4: detected capacity change from 0 to 256 [ 1559.131289][ C0] eth0: bad gso: type: 1, size: 1408 [ 1559.136851][ C0] eth0: bad gso: type: 1, size: 1408 [ 1559.153231][T23192] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1559.165334][T23192] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1560.053409][T23216] loop1: detected capacity change from 0 to 16 [ 1560.227929][T23216] erofs: (device loop1): mounted with root inode @ nid 36. [ 1560.394595][ T30] audit: type=1400 audit(1862317682.302:403): avc: denied { relabelfrom } for pid=23227 comm="syz.2.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1560.438272][ T30] audit: type=1400 audit(1862317682.332:404): avc: denied { relabelto } for pid=23227 comm="syz.2.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1560.461123][T23232] syz.4.5217[23232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.461269][T23232] syz.4.5217[23232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.567038][T23240] loop0: detected capacity change from 0 to 16 [ 1560.579314][T23241] input: syz1 as /devices/virtual/input/input152 [ 1560.607283][T23242] loop2: detected capacity change from 0 to 16 [ 1560.648594][T23240] erofs: (device loop0): mounted with root inode @ nid 36. [ 1560.670861][T23240] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1560.694580][T23242] erofs: (device loop2): mounted with root inode @ nid 36. [ 1560.704214][T23240] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1560.723663][T23240] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1560.733941][T23242] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1560.746609][T23242] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1560.796163][T23242] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1560.814872][T23246] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1560.829060][T23246] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1560.856005][T23246] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1560.948823][T23255] ªªªªªª: renamed from vlan0 [ 1561.062327][T23268] loop1: detected capacity change from 0 to 512 [ 1561.142153][T23268] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1561.153433][T23268] ext4 filesystem being mounted at /37/bus supports timestamps until 2038 (0x7fffffff) [ 1561.639347][T23327] input: syz1 as /devices/virtual/input/input153 [ 1562.021123][T23354] loop2: detected capacity change from 0 to 512 [ 1562.081326][T23360] loop1: detected capacity change from 0 to 512 [ 1562.092720][T23362] device pim6reg1 entered promiscuous mode [ 1562.118530][T23360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1562.119291][T23354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1562.129641][T23360] ext4 filesystem being mounted at /40/bus supports timestamps until 2038 (0x7fffffff) [ 1562.140191][T23354] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 1562.808352][T23381] device pim6reg1 entered promiscuous mode [ 1562.849622][T23392] syz.4.5284[23392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1562.849695][T23392] syz.4.5284[23392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1563.043247][T23421] loop0: detected capacity change from 0 to 512 [ 1563.116868][T23421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1563.127795][T23421] ext4 filesystem being mounted at /82/bus supports timestamps until 2038 (0x7fffffff) [ 1563.192259][T23435] loop1: detected capacity change from 0 to 512 [ 1563.234131][T23435] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1563.245277][T23435] ext4 filesystem being mounted at /44/bus supports timestamps until 2038 (0x7fffffff) [ 1564.585805][T23513] syz.0.5335[23513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1564.585865][T23513] syz.0.5335[23513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1564.597203][T14861] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1564.640889][T23518] loop0: detected capacity change from 0 to 256 [ 1564.688216][T23521] loop4: detected capacity change from 0 to 512 [ 1564.739792][T23518] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1564.753604][T23518] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1564.763482][T23521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1564.774704][T23521] ext4 filesystem being mounted at /529/bus supports timestamps until 2038 (0x7fffffff) [ 1564.873064][T14861] usb 3-1: Using ep0 maxpacket: 16 [ 1566.878550][T23536] ------------[ cut here ]------------ [ 1566.883921][T23536] trace type BPF program uses run-time allocation [ 1566.890398][T23536] WARNING: CPU: 1 PID: 23536 at kernel/bpf/verifier.c:11698 check_map_prog_compatibility+0x6f1/0x890 [ 1566.901896][T23536] Modules linked in: [ 1566.905659][T23536] CPU: 1 PID: 23536 Comm: syz.1.5342 Not tainted 5.15.165-syzkaller-01568-g80dd36dca275 #0 [ 1566.915506][T23536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1566.925422][T23536] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 1566.926577][T14861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.942185][T14861] usb 3-1: config 0 has no interfaces? [ 1566.942327][T23536] Code: db e9 f9 fc ff ff e8 3e 31 ed ff 31 db e9 ed fc ff ff e8 32 31 ed ff c6 05 fd 49 a3 05 01 48 c7 c7 a0 e7 87 85 e8 4f 6c be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 1567.001531][T23536] RSP: 0018:ffffc90000bb7328 EFLAGS: 00010246 [ 1567.007764][T23536] RAX: 24eae7139b9a2800 RBX: 0000000000000001 RCX: 0000000000040000 [ 1567.016235][T23536] RDX: ffffc900035ab000 RSI: 00000000000009b9 RDI: 00000000000009ba [ 1567.024092][T23536] RBP: ffffc90000bb7370 R08: ffffffff81578e45 R09: ffffed103ee265e8 [ 1567.046012][T23536] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 1567.053965][T23536] R13: ffff8881153e0800 R14: ffffc900000db000 R15: dffffc0000000000 [ 1567.062590][T23536] FS: 00007f34009946c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1567.078978][T23536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1567.085694][T23536] CR2: 00007f3615ccef98 CR3: 0000000129220000 CR4: 00000000003506b0 [ 1567.094022][T23536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1567.102610][T23536] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1567.110728][T23536] Call Trace: [ 1567.120425][T23536] [ 1567.133425][T23536] ? show_regs+0x58/0x60 [ 1567.137838][T14861] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1567.153199][T14861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.161505][T23536] ? __warn+0x160/0x2f0 [ 1567.165580][T14861] usb 3-1: Product: syz [ 1567.170216][T23536] ? check_map_prog_compatibility+0x6f1/0x890 [ 1567.176478][T14861] usb 3-1: Manufacturer: syz [ 1567.180896][T14861] usb 3-1: SerialNumber: syz [ 1567.185617][T23536] ? report_bug+0x3d9/0x5b0 [ 1567.191854][T23536] ? check_map_prog_compatibility+0x6f1/0x890 [ 1567.198747][T14861] usb 3-1: config 0 descriptor?? [ 1567.203716][T23536] ? handle_bug+0x41/0x70 [ 1567.208476][T23536] ? exc_invalid_op+0x1b/0x50 [ 1567.212985][T23536] ? asm_exc_invalid_op+0x1b/0x20 [ 1567.229554][T23536] ? __wake_up_klogd+0xd5/0x110 [ 1567.234265][T23536] ? check_map_prog_compatibility+0x6f1/0x890 [ 1567.244770][T14861] usb 3-1: USB disconnect, device number 51 [ 1567.259411][T23559] loop4: detected capacity change from 0 to 16 [ 1567.270330][T23536] ? check_map_prog_compatibility+0x6f1/0x890 [ 1567.272857][T23562] loop2: detected capacity change from 0 to 512 [ 1567.284060][T23536] resolve_pseudo_ldimm64+0x682/0x1240 [ 1567.289908][T23536] ? check_attach_btf_id+0xef0/0xef0 [ 1567.295079][T23536] ? __mark_reg_known+0x1b0/0x1b0 [ 1567.300305][T23536] ? security_capable+0x87/0xb0 [ 1567.304998][T23536] bpf_check+0x3174/0x12bf0 [ 1567.309608][T23536] ? 0xffffffffa0030000 [ 1567.314015][T23536] ? is_bpf_text_address+0x172/0x190 [ 1567.320149][T23559] erofs: (device loop4): mounted with root inode @ nid 36. [ 1567.321228][T23536] ? stack_trace_save+0x1c0/0x1c0 [ 1567.335129][T23559] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1567.337368][T23536] ? __kernel_text_address+0x9b/0x110 [ 1567.350054][T23536] ? unwind_get_return_address+0x4d/0x90 [ 1567.350324][T23559] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1567.355821][T23536] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1567.371282][T23536] ? arch_stack_walk+0xf3/0x140 [ 1567.375948][T23536] ? stack_trace_save+0x113/0x1c0 [ 1567.380803][T23536] ? stack_trace_snprint+0xf0/0xf0 [ 1567.385751][T23536] ? stack_trace_snprint+0xf0/0xf0 [ 1567.385770][T23536] ? __stack_depot_save+0x34/0x470 [ 1567.385790][T23536] ? ____kasan_kmalloc+0xed/0x110 [ 1567.385809][T23536] ? ____kasan_kmalloc+0xdb/0x110 [ 1567.385826][T23536] ? __kasan_kmalloc+0x9/0x10 [ 1567.385842][T23536] ? kmem_cache_alloc_trace+0x115/0x210 [ 1567.395676][T23536] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1567.405364][T23536] ? security_bpf_prog_alloc+0x62/0x90 [ 1567.419335][T23536] ? bpf_prog_load+0x9ee/0x1b50 [ 1567.426257][T23536] ? __sys_bpf+0x4bc/0x760 [ 1567.438498][T23559] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1567.440350][T23536] ? __x64_sys_bpf+0x7c/0x90 [ 1567.454086][T23536] ? x64_sys_call+0x87f/0x9a0 [ 1567.454162][T23562] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1567.459001][T23536] ? do_syscall_64+0x3b/0xb0 [ 1567.469504][T23562] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff) [ 1567.474180][T23536] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1567.489400][T23536] ? __kasan_kmalloc+0x9/0x10 [ 1567.494174][T23536] ? memset+0x35/0x40 [ 1567.498404][T23536] ? bpf_obj_name_cpy+0x196/0x1e0 [ 1567.503272][T23536] bpf_prog_load+0x12ac/0x1b50 [ 1567.526085][T23536] ? map_freeze+0x370/0x370 [ 1567.530436][T23536] ? selinux_bpf+0xcb/0x100 [ 1567.534933][T23536] ? security_bpf+0x82/0xb0 [ 1567.548259][T23536] __sys_bpf+0x4bc/0x760 [ 1567.552344][T23536] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1567.559065][T23536] ? __kasan_check_write+0x14/0x20 [ 1567.564720][T23536] ? switch_fpu_return+0x15f/0x2e0 [ 1567.570009][T23536] __x64_sys_bpf+0x7c/0x90 [ 1567.576000][T23536] x64_sys_call+0x87f/0x9a0 [ 1567.580322][T23536] do_syscall_64+0x3b/0xb0 [ 1567.584574][T23536] ? clear_bhb_loop+0x35/0x90 [ 1567.596263][T23536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1567.645724][T23536] RIP: 0033:0x7f3401d1aff9 [ 1567.681523][T23536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1567.776413][T23536] RSP: 002b:00007f3400994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1567.785185][T23536] RAX: ffffffffffffffda RBX: 00007f3401ed2f80 RCX: 00007f3401d1aff9 [ 1567.794681][T23536] RDX: 0000000000000090 RSI: 00000000200007c0 RDI: 0000000000000005 [ 1567.806543][T23536] RBP: 00007f3401d8d296 R08: 0000000000000000 R09: 0000000000000000 [ 1567.814395][T23536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.822712][T23536] R13: 0000000000000000 R14: 00007f3401ed2f80 R15: 00007ffdc40ed2c8 [ 1567.835530][T23536] [ 1567.838651][T23536] ---[ end trace 0d1186874f24c4e8 ]--- [ 1567.936579][T23591] loop1: detected capacity change from 0 to 16 [ 1567.960409][T23591] erofs: (device loop1): mounted with root inode @ nid 36. [ 1567.970119][T23591] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1567.982166][T23591] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1568.002989][T23591] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1568.175684][T23629] loop3: detected capacity change from 0 to 16 [ 1568.191459][T23629] erofs: (device loop3): mounted with root inode @ nid 36. [ 1568.205748][T23629] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1568.227903][T23629] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1568.245404][T23629] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1568.311888][T23645] loop2: detected capacity change from 0 to 512 [ 1568.339334][T23652] device pim6reg1 entered promiscuous mode [ 1568.402528][T23645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1568.413781][T23645] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff) [ 1568.994315][T23678] loop3: detected capacity change from 0 to 16 [ 1569.006451][T23678] erofs: (device loop3): mounted with root inode @ nid 36. [ 1569.018981][T23678] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1569.029062][T23678] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1569.052867][T23678] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1569.110579][T23690] device pim6reg1 entered promiscuous mode [ 1569.190530][T23697] loop1: detected capacity change from 0 to 512 [ 1569.248873][T23711] loop4: detected capacity change from 0 to 16 [ 1569.267497][T23697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1569.278403][T23697] ext4 filesystem being mounted at /65/bus supports timestamps until 2038 (0x7fffffff) [ 1569.331307][T23711] erofs: (device loop4): mounted with root inode @ nid 36. [ 1569.585288][T23711] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1569.594715][T23711] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1569.616047][T23711] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1569.620265][T23729] device pim6reg1 entered promiscuous mode [ 1569.786426][T23759] loop2: detected capacity change from 0 to 16 [ 1569.816098][T23765] device pim6reg1 entered promiscuous mode [ 1569.835787][T23769] device pim6reg1 entered promiscuous mode [ 1569.889371][T23759] erofs: (device loop2): mounted with root inode @ nid 36. [ 1569.919373][T23759] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1569.939589][T23759] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1570.168913][T23759] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1570.316931][T23810] loop2: detected capacity change from 0 to 16 [ 1570.377706][T23810] erofs: (device loop2): mounted with root inode @ nid 36. [ 1570.406333][T23810] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1570.435449][T23810] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1570.458072][T23810] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1570.575468][T23862] loop4: detected capacity change from 0 to 16 [ 1570.606527][T23864] device pim6reg1 entered promiscuous mode [ 1570.612785][T23862] erofs: (device loop4): mounted with root inode @ nid 36. [ 1570.621005][T23862] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1570.636283][T23862] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1570.653747][T23862] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1570.794253][T23900] loop2: detected capacity change from 0 to 16 [ 1570.816508][T23900] erofs: (device loop2): mounted with root inode @ nid 36. [ 1570.834361][T23900] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1570.876269][T23900] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1570.919587][T23900] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1571.654071][T23998] ªªªªªª: renamed from vlan0 [ 1571.666822][ T432] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1571.916043][ T432] usb 3-1: Using ep0 maxpacket: 16 [ 1572.036422][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.150981][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.194245][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1572.210083][ T432] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1572.219236][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.229134][ T432] usb 3-1: config 0 descriptor?? [ 1572.285916][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.286476][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.302040][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.313880][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.330284][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.341846][T24072] syz.1.5594[24072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.389073][T24085] syz.4.5599[24085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.400529][T24085] syz.4.5599[24085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.411754][T24090] loop0: detected capacity change from 0 to 512 [ 1572.429292][ C0] eth0: bad gso: type: 1, size: 1408 [ 1572.451228][T24090] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1572.462156][T24090] ext4 filesystem being mounted at /149/bus supports timestamps until 2038 (0x7fffffff) [ 1572.810750][ T432] microsoft 0003:045E:07DA.00CC: unbalanced collection at end of report description [ 1572.847751][ T432] microsoft 0003:045E:07DA.00CC: parse failed [ 1572.881471][ T432] microsoft: probe of 0003:045E:07DA.00CC failed with error -22 [ 1572.899705][T24118] syz.4.5612[24118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1572.899776][T24118] syz.4.5612[24118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1573.496123][ T3124] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1573.606560][T21961] usb 3-1: USB disconnect, device number 52 [ 1573.665711][T24170] device pim6reg1 entered promiscuous mode [ 1573.732260][T24174] loop1: detected capacity change from 0 to 512 [ 1573.786048][ T3124] usb 5-1: Using ep0 maxpacket: 16 [ 1573.827630][T24174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1573.838556][T24174] ext4 filesystem being mounted at /129/bus supports timestamps until 2038 (0x7fffffff) [ 1574.120297][ T3124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.130254][ T3124] usb 5-1: config 0 has no interfaces? [ 1574.286147][ T3124] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1574.295262][ T3124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.306760][ T3124] usb 5-1: Product: syz [ 1574.310907][ T3124] usb 5-1: Manufacturer: syz [ 1574.317333][ T3124] usb 5-1: SerialNumber: syz [ 1574.323003][ T3124] usb 5-1: config 0 descriptor?? [ 1574.622423][ C0] eth0: bad gso: type: 1, size: 1408 [ 1574.645256][T24231] loop2: detected capacity change from 0 to 256 [ 1574.754547][T24231] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1574.766750][T24231] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1574.909097][ T432] usb 5-1: USB disconnect, device number 56 [ 1575.270513][T24266] device pim6reg1 entered promiscuous mode [ 1575.388632][T24273] loop3: detected capacity change from 0 to 16 [ 1575.458642][T24273] erofs: (device loop3): mounted with root inode @ nid 36. [ 1575.480373][T24273] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1575.550288][T24273] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1575.610959][T24291] device pim6reg1 entered promiscuous mode [ 1575.624745][T24273] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1575.735361][T24306] loop3: detected capacity change from 0 to 256 [ 1575.954673][T24306] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1575.996373][T24306] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1576.364014][T24334] loop0: detected capacity change from 0 to 1024 [ 1576.438626][T24336] loop1: detected capacity change from 0 to 1024 [ 1576.576267][T24336] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1576.587618][T24334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1576.609207][T24336] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1576.638570][T24336] EXT4-fs (loop1): invalid journal inode [ 1577.057183][T22055] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /180/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.120397][T22055] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.196545][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.246413][T22055] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /180/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.359227][T22055] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.426678][T24345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.466063][T24345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.473387][T24345] device bridge_slave_0 entered promiscuous mode [ 1577.483330][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.514851][T22055] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /180/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.536994][T24358] input: syz1 as /devices/virtual/input/input154 [ 1577.555185][T24345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.563815][T24345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.578924][T24345] device bridge_slave_1 entered promiscuous mode [ 1577.590956][T22055] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.666225][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.697315][T24341] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1577.712036][T24341] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 1577.715584][T22055] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /180/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.724035][T24341] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1577.724035][T24341] [ 1577.724052][T24341] EXT4-fs (loop0): Total free blocks count 0 [ 1577.760181][T24341] EXT4-fs (loop0): Free/Dirty block details [ 1577.765915][T24341] EXT4-fs (loop0): free_blocks=68451041280 [ 1577.771590][T24341] EXT4-fs (loop0): dirty_blocks=88640 [ 1577.776881][T24341] EXT4-fs (loop0): Block reservation details [ 1577.782880][T24341] EXT4-fs (loop0): i_reserved_data_blocks=4516 [ 1577.796331][T22055] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.822994][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.834874][T22055] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /180/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1577.892725][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.894180][T24368] loop2: detected capacity change from 0 to 256 [ 1577.907074][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.923819][ T8949] device veth1_macvtap left promiscuous mode [ 1577.925315][T24368] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1577.929997][ T8949] device veth0_vlan left promiscuous mode [ 1577.942093][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1577.967233][T24368] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1578.120132][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1578.139584][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1578.163692][T22055] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 1578.205674][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1578.213141][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1578.220618][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1578.229123][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1578.229486][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.229502][T14269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.240115][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1578.240278][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1578.240386][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1578.240463][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.240471][T14269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.240538][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1578.240646][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1578.276524][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1578.364954][ T1618] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 1578.364995][ T1618] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1578.364995][ T1618] [ 1578.371346][T24345] device veth0_vlan entered promiscuous mode [ 1578.608575][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1578.624179][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1578.646781][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1578.695020][T24345] device veth1_macvtap entered promiscuous mode [ 1579.260987][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.270176][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.279069][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1579.327123][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1579.399650][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1579.452680][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1579.465148][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1579.573682][T24408] input: syz1 as /devices/virtual/input/input155 [ 1579.623687][T24416] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1579.623704][T24416] syz.4.5735[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.630286][T24416] syz.4.5735[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.642550][T24416] syz.4.5735[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.654611][T24416] syz.4.5735[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.689974][T24418] loop2: detected capacity change from 0 to 256 [ 1579.770404][T24418] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1579.798240][T24418] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1580.178316][ T8949] device veth1_macvtap left promiscuous mode [ 1580.187492][ T8949] device veth0_vlan left promiscuous mode [ 1580.769843][T24494] loop2: detected capacity change from 0 to 256 [ 1580.829706][T24494] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1580.842135][T24494] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1582.935019][T24558] loop3: detected capacity change from 0 to 16 [ 1582.949148][T24524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.960917][T24524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.969207][T24558] erofs: (device loop3): mounted with root inode @ nid 36. [ 1583.006807][T24558] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1583.019777][T24524] device bridge_slave_0 entered promiscuous mode [ 1583.027118][T24524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.034020][T24524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.041000][T24558] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1583.053588][T24524] device bridge_slave_1 entered promiscuous mode [ 1583.061839][T24558] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1583.115501][T24524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.122412][T24524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.129550][T24524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.136407][T24524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.259893][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1583.268033][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.323071][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.366030][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1583.402289][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.409170][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.437781][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1583.457631][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.464480][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.532853][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1583.570088][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1583.629399][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1583.679127][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1583.690934][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1583.739220][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1583.752851][T24524] device veth0_vlan entered promiscuous mode [ 1583.885050][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1583.899787][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1583.953631][T24524] device veth1_macvtap entered promiscuous mode [ 1584.256137][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1584.340579][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1584.425736][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1584.486667][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1584.535045][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1584.598250][T24633] syz.3.5828[24633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.598321][T24633] syz.3.5828[24633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.656268][T24646] syz.3.5828[24646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.678219][T24646] syz.3.5828[24646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.944252][T24691] loop3: detected capacity change from 0 to 512 [ 1584.963911][T24689] syz.0.5854[24689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.963982][T24689] syz.0.5854[24689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1584.995687][T24689] syz.0.5854[24689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.032551][T24691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1585.033071][T24689] syz.0.5854[24689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.044004][T24691] ext4 filesystem being mounted at /461/bus supports timestamps until 2038 (0x7fffffff) [ 1585.531950][T24723] loop0: detected capacity change from 0 to 16 [ 1585.689826][T24723] erofs: (device loop0): mounted with root inode @ nid 36. [ 1585.729833][T24723] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1585.826355][T24723] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1585.907087][T24723] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1586.159088][T24776] loop2: detected capacity change from 0 to 16 [ 1586.198854][T24783] loop3: detected capacity change from 0 to 256 [ 1586.227012][T24776] erofs: (device loop2): mounted with root inode @ nid 36. [ 1586.236583][T24776] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1586.253984][T24776] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1586.268656][T24783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1586.283120][T24776] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1586.294926][T24783] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1586.428783][ C0] eth0: bad gso: type: 1, size: 1408 [ 1587.007308][T24824] loop2: detected capacity change from 0 to 16 [ 1588.457833][T24824] erofs: (device loop2): mounted with root inode @ nid 36. [ 1588.476778][T24824] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1588.536266][T24824] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1588.563778][T24840] syz.0.5921[24840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.563849][T24840] syz.0.5921[24840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.576203][T24824] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1588.652750][T24852] loop4: detected capacity change from 0 to 512 [ 1588.747580][T24852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1588.758864][T24852] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 1589.596622][T24907] loop3: detected capacity change from 0 to 512 [ 1589.901948][T24907] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1589.912842][T24907] ext4 filesystem being mounted at /469/bus supports timestamps until 2038 (0x7fffffff) [ 1589.929773][T24927] loop2: detected capacity change from 0 to 512 [ 1590.001822][T24927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1590.012953][T24927] ext4 filesystem being mounted at /101/bus supports timestamps until 2038 (0x7fffffff) [ 1590.853134][T24978] loop2: detected capacity change from 0 to 512 [ 1590.928380][T24978] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1590.939528][T24978] ext4 filesystem being mounted at /103/bus supports timestamps until 2038 (0x7fffffff) [ 1591.361309][T24994] loop4: detected capacity change from 0 to 512 [ 1591.463917][T25003] loop0: detected capacity change from 0 to 512 [ 1591.493397][T24994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1591.507010][T24994] ext4 filesystem being mounted at /87/bus supports timestamps until 2038 (0x7fffffff) [ 1591.517774][T25003] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1591.528736][T25003] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff) [ 1592.161493][T25040] loop4: detected capacity change from 0 to 512 [ 1592.214185][T25040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1592.225519][T25040] ext4 filesystem being mounted at /89/bus supports timestamps until 2038 (0x7fffffff) [ 1592.815442][T25059] loop1: detected capacity change from 0 to 512 [ 1592.850761][T25059] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1592.861720][T25059] ext4 filesystem being mounted at /194/bus supports timestamps until 2038 (0x7fffffff) [ 1593.685143][T25079] loop1: detected capacity change from 0 to 16 [ 1593.699012][T25082] loop3: detected capacity change from 0 to 16 [ 1593.717747][T25079] erofs: (device loop1): mounted with root inode @ nid 36. [ 1593.725785][T25079] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1593.740632][T25082] erofs: (device loop3): mounted with root inode @ nid 36. [ 1593.751575][T25079] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1593.785291][T25082] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1593.806043][T25079] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1593.818045][T25082] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1593.840683][T25082] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1594.004131][T25103] loop0: detected capacity change from 0 to 512 [ 1594.012743][T25101] syz.1.6017[25101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.012815][T25101] syz.1.6017[25101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.025261][T25101] syz.1.6017[25101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.074662][T25101] syz.1.6017[25101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.260631][T25103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1594.282856][T25103] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff) [ 1595.178646][T25132] loop0: detected capacity change from 0 to 16 [ 1595.208015][T25132] erofs: (device loop0): mounted with root inode @ nid 36. [ 1595.268931][T25132] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1595.293257][T25132] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1595.305679][T25132] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1595.339413][T25146] loop2: detected capacity change from 0 to 16 [ 1595.368403][T25150] loop0: detected capacity change from 0 to 256 [ 1595.378314][T25156] loop4: detected capacity change from 0 to 512 [ 1595.388577][T25146] erofs: (device loop2): mounted with root inode @ nid 36. [ 1595.406598][T25146] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1595.436797][T25146] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1595.436844][T25156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1595.459377][T25156] ext4 filesystem being mounted at /94/bus supports timestamps until 2038 (0x7fffffff) [ 1595.496082][T25146] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1596.573894][T25179] loop1: detected capacity change from 0 to 16 [ 1596.600546][T25179] erofs: (device loop1): mounted with root inode @ nid 36. [ 1596.610741][T25179] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1596.629204][T25179] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1596.645082][T25179] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1596.756708][T25198] loop3: detected capacity change from 0 to 256 [ 1596.781725][T25200] loop0: detected capacity change from 0 to 512 [ 1596.810434][T25208] loop4: detected capacity change from 0 to 16 [ 1596.859667][T25200] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1596.870750][T25200] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 1596.896816][T25208] erofs: (device loop4): mounted with root inode @ nid 36. [ 1597.371001][T25208] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1597.446210][T25208] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1597.459032][T25208] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1597.692779][T25240] loop4: detected capacity change from 0 to 512 [ 1597.747408][T25240] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1597.758328][T25240] ext4 filesystem being mounted at /103/bus supports timestamps until 2038 (0x7fffffff) [ 1597.810105][T25251] syz.3.6075[25251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.810180][T25251] syz.3.6075[25251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.949682][T25265] loop1: detected capacity change from 0 to 512 [ 1598.014301][T25265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1598.025292][T25265] ext4 filesystem being mounted at /217/bus supports timestamps until 2038 (0x7fffffff) [ 1598.312421][ C0] eth0: bad gso: type: 1, size: 1408 [ 1598.319969][T25294] loop2: detected capacity change from 0 to 16 [ 1598.326658][T25294] erofs: (device loop2): mounted with root inode @ nid 36. [ 1598.334412][T25294] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1598.344220][T25294] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1598.378823][T25294] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1598.559026][T25317] loop2: detected capacity change from 0 to 512 [ 1598.636222][T25317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1598.647350][T25317] ext4 filesystem being mounted at /123/bus supports timestamps until 2038 (0x7fffffff) [ 1599.036830][T25346] loop1: detected capacity change from 0 to 512 [ 1599.282858][T25346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1599.294042][T25346] ext4 filesystem being mounted at /220/bus supports timestamps until 2038 (0x7fffffff) [ 1599.483926][T25368] loop2: detected capacity change from 0 to 512 [ 1599.547350][T25368] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1599.558369][T25368] ext4 filesystem being mounted at /124/bus supports timestamps until 2038 (0x7fffffff) [ 1599.687779][T25389] loop3: detected capacity change from 0 to 16 [ 1599.855603][T25389] erofs: (device loop3): mounted with root inode @ nid 36. [ 1600.038775][T25389] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1600.051562][T25389] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1600.063368][T25389] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1600.154966][T25401] input: syz1 as /devices/virtual/input/input159 [ 1600.199961][T25405] loop3: detected capacity change from 0 to 256 [ 1600.268399][T25405] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1600.288666][T25405] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1601.619249][T25443] input: syz1 as /devices/virtual/input/input160 [ 1601.682052][T25447] loop4: detected capacity change from 0 to 512 [ 1601.779772][T25447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1601.791174][T25447] ext4 filesystem being mounted at /115/bus supports timestamps until 2038 (0x7fffffff) [ 1601.870252][T25456] loop3: detected capacity change from 0 to 256 [ 1601.898857][T25456] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1601.911149][T25456] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1601.927301][T25464] syz.2.6158[25464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1601.927350][T25464] syz.2.6158[25464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1602.097026][T25464] syz.2.6158[25464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1602.119952][T25464] syz.2.6158[25464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1602.419251][T25477] input: syz1 as /devices/virtual/input/input161 [ 1603.053304][T25529] loop4: detected capacity change from 0 to 256 [ 1603.150843][T25529] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1603.163217][T25529] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1603.579717][T25557] loop1: detected capacity change from 0 to 16 [ 1603.589598][T25556] loop3: detected capacity change from 0 to 16 [ 1603.653007][T25557] erofs: (device loop1): mounted with root inode @ nid 36. [ 1603.703472][T25556] erofs: (device loop3): mounted with root inode @ nid 36. [ 1603.731365][T25557] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.750786][T25556] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.760467][T25557] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1603.784915][T25556] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1603.807821][T25557] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1603.838860][T25556] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1603.993865][T25578] syz.3.6211[25578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1603.993929][T25578] syz.3.6211[25578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1604.011893][T25578] syz.3.6211[25578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1604.023977][T25578] syz.3.6211[25578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1604.068011][T25588] loop1: detected capacity change from 0 to 16 [ 1604.086838][T25590] loop2: detected capacity change from 0 to 16 [ 1604.101363][T25596] loop3: detected capacity change from 0 to 256 [ 1604.136149][T25588] erofs: (device loop1): mounted with root inode @ nid 36. [ 1604.158867][T25590] erofs: (device loop2): mounted with root inode @ nid 36. [ 1604.166730][T25590] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1604.176405][T25590] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1604.188470][T25590] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1604.216020][T25596] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1604.246251][T25596] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1604.916354][T25633] loop2: detected capacity change from 0 to 16 [ 1604.986723][T25633] erofs: (device loop2): mounted with root inode @ nid 36. [ 1604.999502][T25633] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1605.017101][T25639] input: syz1 as /devices/virtual/input/input162 [ 1605.028479][T25641] loop1: detected capacity change from 0 to 16 [ 1605.034969][T25633] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1605.066757][T25633] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1605.126621][T25641] erofs: (device loop1): mounted with root inode @ nid 36. [ 1605.495806][T25666] loop2: detected capacity change from 0 to 256 [ 1605.543191][T25666] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1605.556763][T25666] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1607.826616][T25691] loop3: detected capacity change from 0 to 16 [ 1608.076143][T25691] erofs: (device loop3): mounted with root inode @ nid 36. [ 1608.166630][T25691] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1608.599562][T25691] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1608.716742][T25691] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1608.755856][T25717] input: syz1 as /devices/virtual/input/input163 [ 1608.793865][T25724] loop3: detected capacity change from 0 to 256 [ 1608.932546][T25724] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1608.944769][T25724] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1610.388053][T25741] loop0: detected capacity change from 0 to 512 [ 1610.433618][T25741] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1610.445309][T25741] ext4 filesystem being mounted at /104/bus supports timestamps until 2038 (0x7fffffff) [ 1610.610085][T25762] loop2: detected capacity change from 0 to 512 [ 1611.128400][T25762] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1611.129751][T25775] input: syz1 as /devices/virtual/input/input164 [ 1611.238169][T25762] ext4 filesystem being mounted at /155/bus supports timestamps until 2038 (0x7fffffff) [ 1611.316574][T25781] loop4: detected capacity change from 0 to 16 [ 1611.377113][T25792] loop0: detected capacity change from 0 to 256 [ 1611.388626][T25781] erofs: (device loop4): mounted with root inode @ nid 36. [ 1611.416402][T25781] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1611.451707][T25792] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1611.474595][T25781] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1611.492633][T25792] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1611.606141][T25781] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1611.771588][T25803] input: syz1 as /devices/virtual/input/input165 [ 1612.219264][T25813] loop4: detected capacity change from 0 to 512 [ 1612.320661][T25813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1612.337778][T25813] ext4 filesystem being mounted at /135/bus supports timestamps until 2038 (0x7fffffff) [ 1612.339253][T25830] loop3: detected capacity change from 0 to 16 [ 1612.416785][T25830] erofs: (device loop3): mounted with root inode @ nid 36. [ 1612.424500][T25830] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1612.444448][T25830] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1612.496757][T25830] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1612.830561][T25857] loop2: detected capacity change from 0 to 512 [ 1613.054354][T25857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1613.066714][T25875] loop3: detected capacity change from 0 to 16 [ 1613.074641][T25857] ext4 filesystem being mounted at /165/bus supports timestamps until 2038 (0x7fffffff) [ 1613.118212][T25875] erofs: (device loop3): mounted with root inode @ nid 36. [ 1613.228807][T25875] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.396883][T25875] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1613.465196][T25875] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1613.608659][T25904] loop0: detected capacity change from 0 to 512 [ 1613.702972][T25904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1613.725113][T25930] loop4: detected capacity change from 0 to 16 [ 1613.746103][T25904] ext4 filesystem being mounted at /110/bus supports timestamps until 2038 (0x7fffffff) [ 1613.762378][T25930] erofs: (device loop4): mounted with root inode @ nid 36. [ 1613.777406][T25930] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.787882][T25930] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1613.806438][T25930] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1613.928900][T25962] loop3: detected capacity change from 0 to 512 [ 1613.973325][T25967] loop4: detected capacity change from 0 to 16 [ 1614.029471][T25967] erofs: (device loop4): mounted with root inode @ nid 36. [ 1614.060742][T25962] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1614.069411][T25967] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1614.084108][T25967] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1614.107165][T25967] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1614.115589][T25962] ext4 filesystem being mounted at /561/bus supports timestamps until 2038 (0x7fffffff) [ 1614.224712][T25992] loop0: detected capacity change from 0 to 512 [ 1614.277224][T25992] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1614.288321][T25992] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 1614.608323][T26029] device pim6reg1 entered promiscuous mode [ 1614.623744][T26035] loop3: detected capacity change from 0 to 512 [ 1614.672964][T26035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1614.683886][T26035] ext4 filesystem being mounted at /568/bus supports timestamps until 2038 (0x7fffffff) [ 1614.838114][T26067] loop0: detected capacity change from 0 to 16 [ 1614.863608][T26073] device pim6reg1 entered promiscuous mode [ 1614.887346][T26067] erofs: (device loop0): mounted with root inode @ nid 36. [ 1614.900577][T26067] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1614.946564][T26067] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1614.962192][T26087] loop3: detected capacity change from 0 to 512 [ 1614.981743][T26067] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1615.036480][T26087] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1615.047394][T26087] ext4 filesystem being mounted at /572/bus supports timestamps until 2038 (0x7fffffff) [ 1615.095892][T26114] device pim6reg1 entered promiscuous mode [ 1615.158463][T26116] syz.0.6429[26116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1615.158565][T26116] syz.0.6429[26116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1615.286356][T26126] loop0: detected capacity change from 0 to 16 [ 1615.357369][T26126] erofs: (device loop0): mounted with root inode @ nid 36. [ 1615.371214][T26126] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1615.405536][T26126] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1615.422584][T26147] loop4: detected capacity change from 0 to 512 [ 1615.441037][T26126] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1615.492110][T26147] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1615.503119][T26147] ext4 filesystem being mounted at /170/bus supports timestamps until 2038 (0x7fffffff) [ 1615.609505][T26178] loop1: detected capacity change from 0 to 16 [ 1615.627329][T26178] erofs: (device loop1): mounted with root inode @ nid 36. [ 1615.636456][T26178] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1615.647143][T26178] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1615.666057][T26178] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1615.799755][T26213] loop1: detected capacity change from 0 to 16 [ 1616.031221][T26213] erofs: (device loop1): mounted with root inode @ nid 36. [ 1616.092570][T26213] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1616.124573][T26213] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1616.143330][T26213] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1616.412160][T26264] loop1: detected capacity change from 0 to 16 [ 1616.440729][T26267] device pim6reg1 entered promiscuous mode [ 1616.472888][T26264] erofs: (device loop1): mounted with root inode @ nid 36. [ 1616.482936][T26264] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1616.503048][T26264] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1616.515688][T26264] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1616.704928][T26311] loop3: detected capacity change from 0 to 16 [ 1616.717230][T26309] device pim6reg1 entered promiscuous mode [ 1616.767335][T26311] erofs: (device loop3): mounted with root inode @ nid 36. [ 1616.775791][T26311] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1616.786124][T26311] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1616.798841][T26311] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1616.923164][T26353] loop2: detected capacity change from 0 to 16 [ 1616.961035][T26359] syz.3.6537[26359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1616.961102][T26359] syz.3.6537[26359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1616.983877][T26353] erofs: (device loop2): mounted with root inode @ nid 36. [ 1617.025766][T26353] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1617.039044][T26353] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1617.051845][T26353] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1617.103004][T26381] syz.4.6549[26381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1617.103102][T26381] syz.4.6549[26381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1617.237941][T26400] loop2: detected capacity change from 0 to 16 [ 1617.300056][T26411] syz.4.6563[26411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1617.300154][T26411] syz.4.6563[26411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1617.327476][T26400] erofs: (device loop2): mounted with root inode @ nid 36. [ 1617.334062][T26416] loop4: detected capacity change from 0 to 256 [ 1617.339545][T26400] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1617.373341][T26400] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1617.399474][T26416] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1617.404421][T26400] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 1617.427948][T26416] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1617.487795][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.494661][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.526608][T26412] device bridge_slave_0 entered promiscuous mode [ 1617.586078][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.616118][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.642429][T26412] device bridge_slave_1 entered promiscuous mode [ 1618.158110][ T322] device veth1_macvtap left promiscuous mode [ 1618.414779][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1618.422310][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1618.431125][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1618.439872][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1618.447989][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.454868][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.487570][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1618.537203][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1618.556190][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1618.586131][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.592991][T14269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.625838][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1618.646862][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1618.672626][T26473] loop4: detected capacity change from 0 to 512 [ 1618.676836][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1618.707809][T26474] device pim6reg1 entered promiscuous mode [ 1618.728011][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1618.736599][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1618.753893][T26412] device veth0_vlan entered promiscuous mode [ 1618.761704][T26473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1618.773175][T26473] ext4 filesystem being mounted at /201/bus supports timestamps until 2038 (0x7fffffff) [ 1618.776363][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1618.812511][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1618.850839][T26412] device veth1_macvtap entered promiscuous mode [ 1618.886331][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1618.896642][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1618.905875][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1618.919472][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1618.935848][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1618.978757][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1618.995579][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1619.874020][T26555] device pim6reg1 entered promiscuous mode [ 1620.786397][T26644] syz.4.6658[26644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1620.786466][T26644] syz.4.6658[26644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1621.272614][T26672] syz.3.6669[26672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1621.292035][T26671] loop1: detected capacity change from 0 to 16 [ 1621.311153][T26672] syz.3.6669[26672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1621.359516][T26671] erofs: (device loop1): mounted with root inode @ nid 36. [ 1621.520900][T26704] input: syz1 as /devices/virtual/input/input166 [ 1621.524613][T26706] loop3: detected capacity change from 0 to 256 [ 1621.550253][T26706] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1621.577684][T26706] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1622.298716][T26741] device pim6reg1 entered promiscuous mode [ 1622.540049][T26772] device pim6reg1 entered promiscuous mode [ 1622.546702][T26777] input: syz1 as /devices/virtual/input/input167 [ 1622.571010][T26779] loop2: detected capacity change from 0 to 256 [ 1622.638606][T26779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1622.669016][T26779] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1623.420922][T26819] syz.4.6735[26819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1623.422110][T26819] syz.4.6735[26819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.536327][T26854] syz.2.6750[26854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.554629][T26854] syz.2.6750[26854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.638107][T26862] loop2: detected capacity change from 0 to 256 [ 1624.708857][T26862] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1624.721024][T26862] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1625.113951][T26886] syz.4.6761[26886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.119208][T26886] syz.4.6761[26886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.570499][T26901] device pim6reg1 entered promiscuous mode [ 1625.839465][T26924] loop3: detected capacity change from 0 to 256 [ 1625.839691][T26925] syz.1.6776[26925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.845643][T26925] syz.1.6776[26925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.878647][T26924] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1625.913975][T26924] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1625.926758][T26931] device pim6reg1 entered promiscuous mode [ 1626.173121][T26941] input: syz1 as /devices/virtual/input/input168 [ 1626.386492][T26957] syz.2.6792[26957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.386616][T26957] syz.2.6792[26957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.778225][T26993] syz.3.6806[26993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.799973][T26993] syz.3.6806[26993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1626.837368][T27001] loop2: detected capacity change from 0 to 512 [ 1626.881871][T27009] loop1: detected capacity change from 0 to 256 [ 1626.907761][T27001] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1626.918649][T27001] ext4 filesystem being mounted at /252/bus supports timestamps until 2038 (0x7fffffff) [ 1626.951168][T27009] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1626.979760][T27009] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1627.091876][T27026] syz.3.6822[27026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1627.092013][T27026] syz.3.6822[27026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1627.405791][T27043] device pim6reg1 entered promiscuous mode [ 1627.547722][T27046] input: syz1 as /devices/virtual/input/input169 [ 1627.913603][T27080] device pim6reg1 entered promiscuous mode [ 1627.952673][T27088] loop2: detected capacity change from 0 to 256 [ 1627.991854][T27088] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1627.992535][T27095] loop1: detected capacity change from 0 to 256 [ 1628.012852][T27096] loop4: detected capacity change from 0 to 512 [ 1628.012912][T27088] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1628.157398][T27096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1628.168677][T27096] ext4 filesystem being mounted at /274/bus supports timestamps until 2038 (0x7fffffff) [ 1628.939043][T27134] input: syz1 as /devices/virtual/input/input170 [ 1629.094727][T27149] device pim6reg1 entered promiscuous mode [ 1629.164321][T27157] loop0: detected capacity change from 0 to 256 [ 1629.222599][T27157] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1629.237985][T27157] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1630.915429][T27177] loop1: detected capacity change from 0 to 512 [ 1630.967163][T27177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6885: invalid indirect mapped block 10 (level 1) [ 1630.981198][T27177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6885: invalid indirect mapped block 8 (level 1) [ 1630.994579][T27177] EXT4-fs (loop1): 1 truncate cleaned up [ 1631.000065][T27177] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 1631.013139][T27177] EXT4-fs error (device loop1): ext4_lookup:1856: inode #12: comm syz.1.6885: unexpected EA_INODE flag [ 1631.265036][T27219] loop2: detected capacity change from 0 to 256 [ 1631.289416][T27219] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1631.301633][T27219] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1631.519414][T27232] loop0: detected capacity change from 0 to 512 [ 1632.874729][T27232] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.6905: invalid indirect mapped block 10 (level 1) [ 1632.890175][T27232] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.6905: invalid indirect mapped block 8 (level 1) [ 1632.904505][T27232] EXT4-fs (loop0): 1 truncate cleaned up [ 1632.910318][T27232] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 1632.927171][T27231] EXT4-fs error (device loop0): ext4_lookup:1856: inode #12: comm syz.0.6905: unexpected EA_INODE flag [ 1633.016572][T27245] syz.3.6913[27245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.016644][T27245] syz.3.6913[27245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.164165][T27262] loop0: detected capacity change from 0 to 256 [ 1633.205263][T27267] syz.3.6924[27267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.205361][T27267] syz.3.6924[27267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1633.232849][T27272] loop2: detected capacity change from 0 to 256 [ 1633.255098][T27273] loop1: detected capacity change from 0 to 512 [ 1633.274025][T27276] device pim6reg1 entered promiscuous mode [ 1633.310195][T27272] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1633.333002][T27272] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1633.338762][T27273] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1633.352728][T27273] ext4 filesystem being mounted at /382/bus supports timestamps until 2038 (0x7fffffff) [ 1633.895777][T27308] loop2: detected capacity change from 0 to 256 [ 1633.913549][T27308] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1633.925727][T27308] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1634.180200][T27337] input: syz1 as /devices/virtual/input/input171 [ 1634.188853][T27339] loop3: detected capacity change from 0 to 256 [ 1634.221298][T27339] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1634.240826][T27339] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1634.277078][T27348] loop2: detected capacity change from 0 to 512 [ 1634.307668][T27348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1634.318582][T27348] ext4 filesystem being mounted at /287/bus supports timestamps until 2038 (0x7fffffff) [ 1634.645079][T27360] device pim6reg1 entered promiscuous mode [ 1634.767187][T27374] loop3: detected capacity change from 0 to 256 [ 1634.851731][T27374] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1634.863797][T27374] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1635.518695][T27409] device pim6reg1 entered promiscuous mode [ 1635.530974][T27410] device pim6reg1 entered promiscuous mode [ 1635.663459][T27418] loop4: detected capacity change from 0 to 512 [ 1635.685002][T27425] input: syz1 as /devices/virtual/input/input172 [ 1635.717888][T27418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1635.729223][T27418] ext4 filesystem being mounted at /294/bus supports timestamps until 2038 (0x7fffffff) [ 1636.190707][T27454] loop3: detected capacity change from 0 to 256 [ 1636.230690][T27454] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1636.243026][T27454] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1637.030288][T27489] device pim6reg1 entered promiscuous mode [ 1637.065895][T27493] syz.4.7019[27493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.066136][T27493] syz.4.7019[27493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.098550][T27497] loop4: detected capacity change from 0 to 512 [ 1637.178897][T27507] device pim6reg1 entered promiscuous mode [ 1637.187759][T27497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1637.198703][T27497] ext4 filesystem being mounted at /299/bus supports timestamps until 2038 (0x7fffffff) [ 1637.288789][T27517] syz.0.7030[27517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.288863][T27517] syz.0.7030[27517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1637.527576][T27523] loop3: detected capacity change from 0 to 256 [ 1637.574769][T27529] device pim6reg1 entered promiscuous mode [ 1637.612478][T27523] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1637.626893][T27523] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1637.907621][T27541] device pim6reg1 entered promiscuous mode [ 1638.302514][T27563] device pim6reg1 entered promiscuous mode [ 1638.543800][T27577] device pim6reg1 entered promiscuous mode [ 1638.621720][T27597] device pim6reg1 entered promiscuous mode [ 1638.649248][T27600] syz.3.7067[27600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.649323][T27600] syz.3.7067[27600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.841410][T27628] loop2: detected capacity change from 0 to 512 [ 1639.061869][T27628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1639.133000][T27628] ext4 filesystem being mounted at /310/bus supports timestamps until 2038 (0x7fffffff) [ 1639.188615][T27646] syz.3.7085[27646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.188691][T27646] syz.3.7085[27646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.454140][T27672] syz.0.7096[27672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.482875][T27672] syz.0.7096[27672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.508311][T27674] device pim6reg1 entered promiscuous mode [ 1639.756828][T27703] syz.3.7110[27703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.756896][T27703] syz.3.7110[27703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1639.894281][ C0] eth0: bad gso: type: 1, size: 1408 [ 1639.929649][T27714] device pim6reg1 entered promiscuous mode [ 1640.084334][T27736] loop3: detected capacity change from 0 to 512 [ 1640.173465][T27736] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1640.184572][T27736] ext4 filesystem being mounted at /115/bus supports timestamps until 2038 (0x7fffffff) [ 1640.248953][T27754] device pim6reg1 entered promiscuous mode [ 1640.567861][T27772] syz.1.7139[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1640.567933][T27772] syz.1.7139[27772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1640.822651][T27780] device pim6reg1 entered promiscuous mode [ 1641.076437][T27788] device pim6reg1 entered promiscuous mode [ 1641.243891][T27801] loop2: detected capacity change from 0 to 512 [ 1641.321565][T27801] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1641.337244][T27801] ext4 filesystem being mounted at /318/bus supports timestamps until 2038 (0x7fffffff) [ 1641.483595][T27828] device pim6reg1 entered promiscuous mode [ 1641.493410][T27830] device pim6reg1 entered promiscuous mode [ 1641.799488][T27857] device pim6reg1 entered promiscuous mode [ 1641.835432][T27861] device pim6reg1 entered promiscuous mode [ 1641.864500][T27865] loop1: detected capacity change from 0 to 1024 [ 1641.897010][T27865] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1641.907310][T27865] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.7180: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1641.926559][T27865] EXT4-fs (loop1): get root inode failed [ 1641.932145][T27865] EXT4-fs (loop1): mount failed [ 1642.005234][T27865] loop1: detected capacity change from 0 to 16 [ 1642.036494][T27865] erofs: Unknown parameter 'OFÄ¡èêɶÇ*O[1;ïðû¾®Wùü¿ì‘Õ_š ˜ŸêngÕBÜɉ¹‰Í¹zho‹7#ž+Îÿ' [ 1642.160566][T27888] device pim6reg1 entered promiscuous mode [ 1642.266922][T27904] loop1: detected capacity change from 0 to 512 [ 1642.312423][T27904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1642.324542][T27904] ext4 filesystem being mounted at /439/bus supports timestamps until 2038 (0x7fffffff) [ 1642.702037][T27948] ÿÿÿÿÿÿ: renamed from vlan1 [ 1643.293611][T28038] device pim6reg1 entered promiscuous mode [ 1643.473053][T28072] device pim6reg1 entered promiscuous mode [ 1643.495808][ C0] eth0: bad gso: type: 1, size: 1408 [ 1643.584858][T28084] device syzkaller0 entered promiscuous mode [ 1643.611611][T28094] loop0: detected capacity change from 0 to 256 [ 1643.673960][T28094] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1643.716759][T28094] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1644.169423][T28129] device pim6reg1 entered promiscuous mode [ 1644.373098][T28144] loop4: detected capacity change from 0 to 512 [ 1644.474429][T28144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1644.497311][T28144] ext4 filesystem being mounted at /357/bus supports timestamps until 2038 (0x7fffffff) [ 1644.781027][T28175] loop1: detected capacity change from 0 to 256 [ 1644.881495][T28180] device pim6reg1 entered promiscuous mode [ 1644.893716][T28175] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1644.927424][T28175] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1645.959702][T28219] device pim6reg1 entered promiscuous mode [ 1646.111756][T28226] loop1: detected capacity change from 0 to 512 [ 1646.139992][T28235] loop3: detected capacity change from 0 to 256 [ 1646.158553][T28238] device pim6reg1 entered promiscuous mode [ 1646.166785][T28243] bpf_get_probe_write_proto: 6 callbacks suppressed [ 1646.166802][T28243] syz.4.7348[28243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1646.173419][T28243] syz.4.7348[28243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1646.189585][T28226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1646.211752][T28226] ext4 filesystem being mounted at /457/bus supports timestamps until 2038 (0x7fffffff) [ 1646.244746][T28235] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1646.282393][T28235] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1646.733297][T28296] device pim6reg1 entered promiscuous mode [ 1646.871102][T28308] ÿÿÿÿÿÿ: renamed from vlan1 [ 1647.057546][T28332] loop2: detected capacity change from 0 to 512 [ 1647.141916][T28332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1647.169723][T28332] ext4 filesystem being mounted at /349/bus supports timestamps until 2038 (0x7fffffff) [ 1647.172973][T28358] loop1: detected capacity change from 0 to 256 [ 1647.211529][T28358] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1647.246555][T28358] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1647.465900][T28367] device pim6reg1 entered promiscuous mode [ 1647.642728][T28380] ÿÿÿÿÿÿ: renamed from vlan1 [ 1648.034343][T28394] device pim6reg1 entered promiscuous mode [ 1648.134313][T28406] device pim6reg1 entered promiscuous mode [ 1648.230549][T28422] loop3: detected capacity change from 0 to 256 [ 1648.299876][T28422] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1648.315476][T28422] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1648.364130][T28443] loop2: detected capacity change from 0 to 512 [ 1648.480772][T28443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1648.503726][T28443] ext4 filesystem being mounted at /354/bus supports timestamps until 2038 (0x7fffffff) [ 1648.759648][T28468] device pim6reg1 entered promiscuous mode [ 1649.165053][T28502] device pim6reg1 entered promiscuous mode [ 1649.352394][T28526] loop0: detected capacity change from 0 to 256 [ 1649.421575][T28526] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1649.436460][T28526] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1649.495219][T28533] device pim6reg1 entered promiscuous mode [ 1650.252348][T28569] device pim6reg1 entered promiscuous mode [ 1650.354462][T28587] device pim6reg1 entered promiscuous mode [ 1650.431976][T28598] loop3: detected capacity change from 0 to 256 [ 1650.486071][T28598] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1650.498994][T28598] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1652.126829][T28626] loop2: detected capacity change from 0 to 512 [ 1652.191383][T28626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1652.222829][T28626] ext4 filesystem being mounted at /364/bus supports timestamps until 2038 (0x7fffffff) [ 1653.073045][T28710] loop4: detected capacity change from 0 to 512 [ 1653.168474][T28710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1653.179418][T28710] ext4 filesystem being mounted at /425/bus supports timestamps until 2038 (0x7fffffff) [ 1653.794392][T28737] loop3: detected capacity change from 0 to 512 [ 1653.847193][T28737] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1653.874729][T28737] ext4 filesystem being mounted at /187/bus supports timestamps until 2038 (0x7fffffff) [ 1654.253166][T28786] loop2: detected capacity change from 0 to 512 [ 1654.265740][T28788] loop4: detected capacity change from 0 to 256 [ 1654.290934][T28788] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1654.312957][T28788] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1654.337109][T28786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1654.348093][T28786] ext4 filesystem being mounted at /373/bus supports timestamps until 2038 (0x7fffffff) [ 1656.156483][T28797] ÿÿÿÿÿÿ: renamed from vlan1 [ 1656.448005][T28815] device pim6reg1 entered promiscuous mode [ 1656.518313][T28820] loop0: detected capacity change from 0 to 512 [ 1656.587394][T28820] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1656.598312][T28820] ext4 filesystem being mounted at /403/bus supports timestamps until 2038 (0x7fffffff) [ 1656.660370][T28828] device pim6reg1 entered promiscuous mode [ 1656.685525][T28838] loop3: detected capacity change from 0 to 512 [ 1656.978245][T28838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1656.990578][T28838] ext4 filesystem being mounted at /192/bus supports timestamps until 2038 (0x7fffffff) [ 1657.110333][T28857] device pim6reg1 entered promiscuous mode [ 1658.436152][T28951] device pim6reg1 entered promiscuous mode [ 1658.577427][ T30] audit: type=1400 audit(1862317780.492:405): avc: denied { write } for pid=28966 comm="syz.3.7658" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1658.931125][T28987] device pim6reg1 entered promiscuous mode [ 1659.458211][ C0] eth0: bad gso: type: 1, size: 1408 [ 1659.526468][T29064] device pim6reg1 entered promiscuous mode [ 1659.603634][T29075] loop1: detected capacity change from 0 to 256 [ 1659.694115][T29075] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1659.716263][T29075] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1660.187703][T29123] device pim6reg1 entered promiscuous mode [ 1660.253417][T29129] device pim6reg1 entered promiscuous mode [ 1660.391673][T29149] device pim6reg1 entered promiscuous mode [ 1660.874106][T29190] device pim6reg1 entered promiscuous mode [ 1660.953961][T29208] syz.0.7764[29208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.954056][T29208] syz.0.7764[29208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.097716][T29235] device pim6reg1 entered promiscuous mode [ 1661.857842][T29343] loop3: detected capacity change from 0 to 256 [ 1661.898585][T29343] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1661.911956][T29343] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1662.497136][T29377] device syzkaller0 entered promiscuous mode [ 1662.725360][T29410] Â: renamed from pim6reg1 [ 1662.951154][T29457] device pim6reg1 entered promiscuous mode [ 1663.159818][T29507] device pim6reg1 entered promiscuous mode [ 1663.647962][T29611] device pim6reg1 entered promiscuous mode [ 1663.860655][T29651] device pim6reg1 entered promiscuous mode [ 1664.736678][ T1618] device bridge_slave_1 left promiscuous mode [ 1664.742645][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.750083][ T1618] device bridge_slave_0 left promiscuous mode [ 1664.756103][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.763743][ T1618] device veth1_macvtap left promiscuous mode [ 1671.450559][T29793] device pim6reg1 entered promiscuous mode [ 1672.755925][T29806] device pim6reg1 entered promiscuous mode [ 1675.672012][T29828] device pim6reg1 entered promiscuous mode [ 1675.735928][T29831] input: syz1 as /devices/virtual/input/input173 [ 1679.000440][T29848] device pim6reg1 entered promiscuous mode [ 1680.856916][T29867] input: syz1 as /devices/virtual/input/input174 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=7991 state=1 status=67 (errno 9: Bad file descriptor) [ 1684.741906][T29892] device pim6reg1 entered promiscuous mode [ 1685.886991][T20856] device bridge_slave_1 left promiscuous mode [ 1685.892940][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.900299][T20856] device bridge_slave_0 left promiscuous mode [ 1685.906307][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.913939][T20856] device veth1_macvtap left promiscuous mode [ 1687.327165][T20856] device bridge_slave_1 left promiscuous mode [ 1687.333189][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.340507][T20856] device bridge_slave_0 left promiscuous mode [ 1687.346522][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.354023][T20856] device bridge_slave_1 left promiscuous mode [ 1687.360016][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.367347][T20856] device bridge_slave_0 left promiscuous mode [ 1687.373258][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.381123][T20856] device bridge_slave_1 left promiscuous mode [ 1687.387106][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.394184][T20856] device bridge_slave_0 left promiscuous mode [ 1687.400274][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.408105][T20856] device veth1_macvtap left promiscuous mode [ 1687.413894][T20856] device veth0_vlan left promiscuous mode [ 1687.419724][T20856] device veth1_macvtap left promiscuous mode [ 1687.425735][T20856] device veth1_macvtap left promiscuous mode