last executing test programs: 24.165939566s ago: executing program 0 (id=2204): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 24.097900796s ago: executing program 0 (id=2205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 24.081290507s ago: executing program 0 (id=2206): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) 23.996636278s ago: executing program 1 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0}, 0x30) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 23.987257558s ago: executing program 0 (id=2217): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23.967276628s ago: executing program 1 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x40000000}, 0x18) 23.948836709s ago: executing program 1 (id=2209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 23.84663997s ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 23.84601182s ago: executing program 1 (id=2211): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 23.727988622s ago: executing program 3 (id=2212): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x281) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 23.691098542s ago: executing program 3 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) rename(0x0, 0x0) 23.610465594s ago: executing program 3 (id=2218): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1, 0x448, 0x3) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x300, 0x33000, 0x0, 0x3) 23.514080865s ago: executing program 1 (id=2220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002080)=""/4106, &(0x7f0000000040)=0x100a) 23.327938928s ago: executing program 1 (id=2222): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.327037368s ago: executing program 3 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 23.298618649s ago: executing program 32 (id=2222): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.048152902s ago: executing program 0 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) 23.047735712s ago: executing program 3 (id=2227): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 23.047636462s ago: executing program 33 (id=2227): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 22.895474884s ago: executing program 0 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 22.895328624s ago: executing program 34 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.644187675s ago: executing program 6 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 1.570351926s ago: executing program 6 (id=2857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r1) 1.405162999s ago: executing program 6 (id=2861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) timer_gettime(0x0, 0x0) 1.378338419s ago: executing program 6 (id=2862): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='ext4_get_implied_cluster_alloc_exit\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.191764712s ago: executing program 4 (id=2866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_usbip_server_init(0x2) 1.131888823s ago: executing program 6 (id=2869): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 730.617839ms ago: executing program 5 (id=2896): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 696.277549ms ago: executing program 5 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x800, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) 670.92479ms ago: executing program 5 (id=2899): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x0, 0x175, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}], 0x2}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 644.11431ms ago: executing program 5 (id=2901): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 643.88677ms ago: executing program 7 (id=2902): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) 626.309791ms ago: executing program 7 (id=2904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) 604.236921ms ago: executing program 4 (id=2906): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 553.217512ms ago: executing program 7 (id=2907): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) 553.007212ms ago: executing program 2 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") 552.892102ms ago: executing program 4 (id=2909): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3c, @private2, 0x9}}, 0xfffc}, 0x90) 515.113172ms ago: executing program 4 (id=2910): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) 513.445512ms ago: executing program 5 (id=2911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 493.492192ms ago: executing program 2 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x48a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 354.948335ms ago: executing program 7 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 286.097216ms ago: executing program 2 (id=2914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 214.981197ms ago: executing program 6 (id=2915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 204.778687ms ago: executing program 2 (id=2916): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000800142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79826760040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 203.484917ms ago: executing program 7 (id=2917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 43.354019ms ago: executing program 7 (id=2918): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) 43.144799ms ago: executing program 2 (id=2919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x84]}, 0x8) 42.955779ms ago: executing program 4 (id=2920): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendfile(r1, r0, 0x0, 0x8) 22.71519ms ago: executing program 4 (id=2921): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0xd000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0x1, 0x4}, {0x0, 0x0, 0x4}, 0xfe, 0xfe}], 0x20) 472.53µs ago: executing program 2 (id=2922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0x5}, 0x18) unshare(0x68040200) 0s ago: executing program 5 (id=2923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tlink: 'syz.3.1327': attribute type 29 has an invalid length. [ 64.242285][ T6509] program syz.0.1328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.253028][ T6510] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 64.260154][ T6510] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.268861][ T6510] vhci_hcd vhci_hcd.0: Device attached [ 64.276850][ T6511] vhci_hcd: connection closed [ 64.277101][ T3658] vhci_hcd: stop threads [ 64.286513][ T3658] vhci_hcd: release socket [ 64.291198][ T3658] vhci_hcd: disconnect device [ 64.342292][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 64.396514][ T6523] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 64.405210][ T6523] netlink: 'syz.0.1333': attribute type 27 has an invalid length. [ 64.429560][ T6527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.515136][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 64.637352][ T6542] vlan2: entered allmulticast mode [ 64.642737][ T6542] bridge0: port 3(vlan2) entered blocking state [ 64.649267][ T6542] bridge0: port 3(vlan2) entered disabled state [ 64.660180][ T6542] vlan2: entered promiscuous mode [ 64.666241][ T6542] bridge0: mtu less than device minimum [ 64.687933][ T6546] program syz.4.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.800641][ T6561] loop2: detected capacity change from 0 to 512 [ 64.810808][ T6563] loop4: detected capacity change from 0 to 512 [ 64.818461][ T6561] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1353: casefold flag without casefold feature [ 64.832991][ T6561] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1353: couldn't read orphan inode 15 (err -117) [ 64.858314][ T6563] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.878953][ T6563] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 64.963794][ T6584] atomic_op ffff88811a388128 conn xmit_atomic 0000000000000000 [ 65.584075][ T6638] syzkaller1: entered promiscuous mode [ 65.590109][ T6638] syzkaller1: entered allmulticast mode [ 65.649406][ T6640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.718934][ T6640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.743693][ T6646] loop4: detected capacity change from 0 to 1024 [ 65.760904][ T6646] EXT4-fs: Ignoring removed i_version option [ 65.767386][ T6646] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.774179][ T6646] EXT4-fs: Ignoring removed nobh option [ 65.779962][ T6646] EXT4-fs: Ignoring removed bh option [ 65.804666][ T6640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.868596][ T6640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.924022][ T6640] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.936737][ T6640] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.948898][ T6640] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.961989][ T6640] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011597][ T6656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.148230][ T6670] syzkaller1: entered promiscuous mode [ 66.154036][ T6670] syzkaller1: entered allmulticast mode [ 66.177113][ T6672] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 66.177113][ T6672] program syz.4.1402 not setting count and/or reply_len properly [ 66.256767][ T6678] sctp: [Deprecated]: syz.0.1405 (pid 6678) Use of int in max_burst socket option. [ 66.256767][ T6678] Use struct sctp_assoc_value instead [ 66.324615][ T6689] __nla_validate_parse: 3 callbacks suppressed [ 66.324638][ T6689] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1410'. [ 66.673188][ T6719] sctp: [Deprecated]: syz.4.1422 (pid 6719) Use of int in max_burst socket option. [ 66.673188][ T6719] Use struct sctp_assoc_value instead [ 66.688914][ T6730] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1426'. [ 66.707336][ T6728] loop0: detected capacity change from 0 to 1024 [ 66.729454][ T6728] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.838287][ T6755] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 66.838287][ T6755] program syz.3.1439 not setting count and/or reply_len properly [ 67.026347][ T6765] sctp: [Deprecated]: syz.3.1444 (pid 6765) Use of int in max_burst socket option. [ 67.026347][ T6765] Use struct sctp_assoc_value instead [ 67.272559][ T6782] loop0: detected capacity change from 0 to 1024 [ 67.292054][ T6784] loop1: detected capacity change from 0 to 1024 [ 67.306402][ T6782] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.325301][ T6784] EXT4-fs: Ignoring removed i_version option [ 67.331691][ T6784] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.338521][ T6784] EXT4-fs: Ignoring removed nobh option [ 67.344426][ T6784] EXT4-fs: Ignoring removed bh option [ 67.357161][ T6782] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.1452: lblock 3 mapped to illegal pblock 3 (length 13) [ 67.371825][ T6782] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 67.384655][ T6782] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.384655][ T6782] [ 67.459933][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 67.459951][ T29] audit: type=1400 audit(2000000289.071:1430): avc: denied { map } for pid=6804 comm="syz.2.1462" path="socket:[14738]" dev="sockfs" ino=14738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.492184][ T29] audit: type=1400 audit(2000000289.071:1431): avc: denied { read } for pid=6804 comm="syz.2.1462" path="socket:[14738]" dev="sockfs" ino=14738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.602858][ T29] audit: type=1326 audit(2000000289.211:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.626699][ T29] audit: type=1326 audit(2000000289.211:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.650495][ T29] audit: type=1326 audit(2000000289.211:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.746198][ T29] audit: type=1326 audit(2000000289.211:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.770550][ T29] audit: type=1326 audit(2000000289.211:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.794425][ T29] audit: type=1326 audit(2000000289.211:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.818247][ T29] audit: type=1326 audit(2000000289.211:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.841986][ T29] audit: type=1326 audit(2000000289.211:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 67.871335][ T6830] loop1: detected capacity change from 0 to 1024 [ 67.937921][ T6830] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.954651][ T6836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.954812][ T6830] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.1471: lblock 3 mapped to illegal pblock 3 (length 13) [ 67.980056][ T6830] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 67.992578][ T6830] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.992578][ T6830] [ 68.039288][ T6836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.094261][ T6844] loop4: detected capacity change from 0 to 1024 [ 68.105586][ T6836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.118969][ T6844] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.190390][ T6836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.270562][ T6836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291241][ T6836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.322203][ T6836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.340150][ T6836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.627906][ T6915] batadv_slave_1: entered promiscuous mode [ 68.648187][ T6920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.675464][ T6913] batadv_slave_1: left promiscuous mode [ 68.700679][ T6926] loop0: detected capacity change from 0 to 1024 [ 68.717655][ T6920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.722064][ T6926] EXT4-fs: Ignoring removed bh option [ 68.763319][ T6926] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1517'. [ 68.789123][ T6920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.858277][ T6920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.929004][ T6920] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942930][ T6920] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.965372][ T6920] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.986897][ T6920] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.150121][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'. [ 69.201694][ T6993] batadv_slave_1: entered promiscuous mode [ 69.209119][ T6991] batadv_slave_1: left promiscuous mode [ 69.283099][ T7003] loop2: detected capacity change from 0 to 1024 [ 69.295580][ T7003] EXT4-fs: Ignoring removed bh option [ 69.318714][ T7003] EXT4-fs mount: 44 callbacks suppressed [ 69.318733][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.344741][ T7007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.361286][ T7003] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1552'. [ 69.372617][ T7014] netlink: 'syz.1.1556': attribute type 2 has an invalid length. [ 69.380538][ T7014] netlink: 'syz.1.1556': attribute type 1 has an invalid length. [ 69.388551][ T7014] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1556'. [ 69.400182][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.434177][ T7016] openvswitch: netlink: Message has 6 unknown bytes. [ 69.441184][ T7007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.462901][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 69.508125][ T7007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.589801][ T7007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.671715][ T7007] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.684077][ T7007] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696106][ T7007] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.707689][ T7007] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.543622][ T7101] loop2: detected capacity change from 0 to 512 [ 70.567461][ T7101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.588175][ T7101] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.603108][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1597'. [ 70.630594][ T7113] loop1: detected capacity change from 0 to 512 [ 70.640095][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.650668][ T7113] EXT4-fs: Ignoring removed nobh option [ 70.657327][ T7113] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 70.671731][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 70.718020][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 70.841525][ T7133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.898545][ T7133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.961640][ T7146] loop2: detected capacity change from 0 to 512 [ 70.968564][ T7146] EXT4-fs: Ignoring removed nobh option [ 70.977103][ T7146] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 70.990935][ T7133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.108808][ T7133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.154876][ T7133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168256][ T7133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185526][ T7133] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.200932][ T7174] program syz.1.1628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.214831][ T7133] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.357532][ T7198] IPv6: Can't replace route, no match found [ 71.458293][ T7216] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.475891][ T7219] loop0: detected capacity change from 0 to 128 [ 71.484533][ T7219] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.500032][ T7219] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.534647][ T7216] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.545587][ T7219] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1835363691 (only 1 groups) [ 71.561561][ T7226] __nla_validate_parse: 3 callbacks suppressed [ 71.561652][ T7226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1649'. [ 71.578090][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.596776][ T7216] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.636571][ T7216] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.044211][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 74.044229][ T29] audit: type=1400 audit(2000000295.651:1528): avc: denied { name_bind } for pid=7252 comm="syz.1.1662" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.113370][ T29] audit: type=1400 audit(2000000295.721:1529): avc: denied { write } for pid=7258 comm="syz.1.1664" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 74.223339][ T7277] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.239741][ T7277] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 74.274871][ T29] audit: type=1326 audit(2000000295.881:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 74.333013][ T29] audit: type=1326 audit(2000000295.891:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 74.357676][ T29] audit: type=1326 audit(2000000295.891:1532): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 74.382436][ T29] audit: type=1326 audit(2000000295.891:1533): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 74.433527][ T7288] loop0: detected capacity change from 0 to 1024 [ 74.600849][ T7288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.647283][ T29] audit: type=1400 audit(2000000296.261:1534): avc: denied { append } for pid=7287 comm="syz.0.1678" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.696360][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.712124][ T29] audit: type=1400 audit(2000000296.321:1535): avc: denied { create } for pid=7304 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.744302][ T7301] hub 2-0:1.0: USB hub found [ 74.745050][ T29] audit: type=1400 audit(2000000296.321:1536): avc: denied { write } for pid=7304 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.749392][ T7301] hub 2-0:1.0: 8 ports detected [ 74.770455][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.794001][ T29] audit: type=1400 audit(2000000296.401:1537): avc: denied { mounton } for pid=7306 comm="syz.0.1685" path="/proc/696/cgroup" dev="proc" ino=17602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 74.826436][ T7216] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838527][ T7216] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.852042][ T7216] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898092][ T7216] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.926372][ T7321] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.984073][ T7325] netlink: 'syz.3.1693': attribute type 6 has an invalid length. [ 75.040013][ T7333] tracefs: Invalid uid '0x00000000ffffffff' [ 75.187107][ T7349] loop2: detected capacity change from 0 to 512 [ 75.195037][ T7343] loop4: detected capacity change from 0 to 2048 [ 75.207698][ T7349] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 75.224604][ T7349] EXT4-fs: error: could not find journal device path [ 75.242568][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.269843][ T7343] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.286633][ T7343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1702: bg 0: block 345: padding at end of block bitmap is not set [ 75.352036][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.410429][ T7373] loop4: detected capacity change from 0 to 512 [ 75.433722][ T7373] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.457828][ T7373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 75.473441][ T7382] dummy0: entered promiscuous mode [ 75.479220][ T7382] macsec1: entered promiscuous mode [ 75.484534][ T7382] macsec1: entered allmulticast mode [ 75.485577][ T7373] System zones: 0-2, 18-18, 34-34 [ 75.491519][ T7382] dummy0: entered allmulticast mode [ 75.502345][ T7382] dummy0: left allmulticast mode [ 75.507671][ T7382] dummy0: left promiscuous mode [ 75.523179][ T7373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.537550][ T7373] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.576783][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.987769][ T7435] sch_fq: defrate 2048 ignored. [ 76.164368][ T7445] loop2: detected capacity change from 0 to 512 [ 76.312455][ T7445] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.335312][ T7445] EXT4-fs (loop2): mount failed [ 76.640819][ T7464] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.695101][ T7462] loop2: detected capacity change from 0 to 2048 [ 76.731262][ T7462] loop2: p1 < > p4 [ 76.756410][ T7462] loop2: p4 size 8388608 extends beyond EOD, truncated [ 77.027390][ T7481] loop1: detected capacity change from 0 to 512 [ 77.083647][ T7481] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.113719][ T7481] EXT4-fs (loop1): mount failed [ 77.199876][ T7503] IPVS: stopping master sync thread 7506 ... [ 77.206151][ T7506] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 77.289591][ T7514] tipc: Cannot configure node identity twice [ 77.295790][ T7514] tipc: Cannot configure node identity twice [ 77.463883][ T7537] loop1: detected capacity change from 0 to 128 [ 77.527416][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.527416][ T7539] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 77.546097][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.546097][ T7539] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 77.547148][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1786'. [ 77.579371][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.579371][ T7539] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 77.635250][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.635250][ T7539] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 77.688504][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.688504][ T7539] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 77.704902][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.704902][ T7539] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 77.734912][ T7539] syz.1.1785: attempt to access beyond end of device [ 77.734912][ T7539] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 77.752066][ T7537] syz.1.1785: attempt to access beyond end of device [ 77.752066][ T7537] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 77.819204][ T7537] syz.1.1785: attempt to access beyond end of device [ 77.819204][ T7537] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 77.854986][ T7537] syz.1.1785: attempt to access beyond end of device [ 77.854986][ T7537] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 77.987062][ T7555] program syz.4.1795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.047491][ T7550] loop0: detected capacity change from 0 to 8192 [ 78.094446][ T7550] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.160603][ T3450] Process accounting resumed [ 78.177023][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1801'. [ 78.217296][ T7572] loop1: detected capacity change from 0 to 1024 [ 78.239658][ T7572] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.251161][ T7572] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.269682][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1804'. [ 78.297379][ T7572] JBD2: no valid journal superblock found [ 78.303192][ T7572] EXT4-fs (loop1): Could not load journal inode [ 78.329086][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 78.433561][ T7587] loop0: detected capacity change from 0 to 512 [ 78.472187][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.523553][ T7597] syzkaller1: entered promiscuous mode [ 78.527838][ T7587] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.529416][ T7597] syzkaller1: entered allmulticast mode [ 78.662971][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.785674][ T7632] xt_hashlimit: max too large, truncated to 1048576 [ 78.841609][ T7635] tipc: Enabling of bearer rejected, failed to enable media [ 79.113127][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 79.113145][ T29] audit: type=1326 audit(2000000300.721:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 79.165143][ T29] audit: type=1326 audit(2000000300.761:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 79.190047][ T29] audit: type=1326 audit(2000000300.761:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 79.215308][ T29] audit: type=1326 audit(2000000300.771:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 79.239448][ T29] audit: type=1326 audit(2000000300.771:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 79.324750][ T7693] loop2: detected capacity change from 0 to 4096 [ 79.336505][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.354615][ T7693] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.1856: corrupted inode contents [ 79.386606][ T7693] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.1856: mark_inode_dirty error [ 79.417119][ T7693] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.1856: corrupted inode contents [ 79.433822][ T29] audit: type=1400 audit(2000000301.041:1619): avc: denied { mounton } for pid=7704 comm="syz.0.1862" path=2F3336362FE91F7189591E9233614B dev="tmpfs" ino=1892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 79.434691][ T7693] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1856: mark_inode_dirty error [ 79.472043][ T7693] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.1856: corrupted inode contents [ 79.487251][ T7693] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1856: mark_inode_dirty error [ 79.500194][ T7693] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.1856: corrupted inode contents [ 79.514957][ T7693] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.1856: mark_inode_dirty error [ 79.528014][ T7693] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 79.542189][ T7710] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.1856: corrupted inode contents [ 79.558703][ T7716] loop1: detected capacity change from 0 to 512 [ 79.571072][ T7716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.591588][ T7716] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 79.600126][ T7716] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 79.602387][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.611683][ T7716] EXT4-fs (loop1): 1 truncate cleaned up [ 79.623854][ T7716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.636615][ T29] audit: type=1326 audit(2000000301.231:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 79.646013][ T7716] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 4: comm syz.1.1866: lblock 0 mapped to illegal pblock 4 (length 1) [ 79.660464][ T29] audit: type=1326 audit(2000000301.231:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 79.698009][ T29] audit: type=1326 audit(2000000301.231:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 79.721644][ T29] audit: type=1326 audit(2000000301.231:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7720 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 79.768278][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.793453][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.804370][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.986625][ T7754] netlink: 'syz.1.1884': attribute type 21 has an invalid length. [ 80.026424][ T7758] 9pnet: Could not find request transport: 0xffffffffffffffff [ 80.177390][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 80.268766][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 80.286354][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1904'. [ 80.354714][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1907'. [ 80.368864][ T7807] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 80.771068][ T7873] loop0: detected capacity change from 0 to 1024 [ 80.778156][ T7873] EXT4-fs: Ignoring removed nobh option [ 80.784147][ T7873] EXT4-fs: Ignoring removed bh option [ 80.790433][ T7876] netlink: 'syz.3.1942': attribute type 11 has an invalid length. [ 80.798647][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1942'. [ 80.820265][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.865291][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.896950][ T7889] SELinux: syz.3.1948 (7889) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.920861][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 80.939286][ T7892] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 81.080872][ T7916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.167683][ T7925] loop4: detected capacity change from 0 to 256 [ 81.180185][ T7925] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 81.204412][ T7930] program syz.0.1968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.344614][ T7956] program syz.2.1975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.363927][ T7959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7959 comm=syz.4.1976 [ 81.376735][ T7959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7959 comm=syz.4.1976 [ 82.313659][ T8041] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 82.322119][ T8041] team0: entered promiscuous mode [ 82.327778][ T8041] team_slave_0: entered promiscuous mode [ 82.334001][ T8041] team_slave_1: entered promiscuous mode [ 82.341252][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.348688][ T8041] batman_adv: batadv0: Interface activated: team0 [ 82.355571][ T8041] batman_adv: batadv0: Interface deactivated: team0 [ 82.362451][ T8041] batman_adv: batadv0: Removing interface: team0 [ 82.369364][ T8041] bridge0: port 4(team0) entered blocking state [ 82.375737][ T8041] bridge0: port 4(team0) entered disabled state [ 82.382194][ T8041] team0: entered allmulticast mode [ 82.387511][ T8041] team_slave_0: entered allmulticast mode [ 82.393432][ T8041] team_slave_1: entered allmulticast mode [ 82.400368][ T8041] bridge0: port 4(team0) entered blocking state [ 82.406739][ T8041] bridge0: port 4(team0) entered forwarding state [ 82.413585][ T8041] bridge0: mtu less than device minimum [ 82.748911][ T8070] program syz.4.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.896839][ T8094] __nla_validate_parse: 2 callbacks suppressed [ 82.896858][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2039'. [ 82.913245][ T8094] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2039'. [ 82.935911][ T8098] rdma_op ffff88811a0be580 conn xmit_rdma 0000000000000000 [ 82.956104][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2039'. [ 82.971995][ T8094] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2039'. [ 82.981408][ T8094] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2039'. [ 82.991809][ T8096] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2040'. [ 83.008659][ T8096] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2040'. [ 83.018033][ T8096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2040'. [ 83.084401][ T8109] program syz.1.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.400486][ T8151] netlink: 'syz.1.2065': attribute type 10 has an invalid length. [ 83.408670][ T8151] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2065'. [ 83.423196][ T8151] team0: entered promiscuous mode [ 83.434863][ T8151] team_slave_0: entered promiscuous mode [ 83.441589][ T8151] team_slave_1: entered promiscuous mode [ 83.466507][ T8151] bridge0: port 3(team0) entered blocking state [ 83.473373][ T8151] bridge0: port 3(team0) entered disabled state [ 83.494891][ T8151] team0: entered allmulticast mode [ 83.508095][ T8151] team_slave_0: entered allmulticast mode [ 83.514520][ T8151] team_slave_1: entered allmulticast mode [ 83.522405][ T8151] bridge0: port 3(team0) entered blocking state [ 83.529544][ T8151] bridge0: port 3(team0) entered forwarding state [ 83.808601][ T8190] loop4: detected capacity change from 0 to 512 [ 83.816185][ T8190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.831196][ T8190] EXT4-fs (loop4): 1 truncate cleaned up [ 83.837703][ T8190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.953325][ T8200] netlink: 79 bytes leftover after parsing attributes in process `syz.3.2089'. [ 83.985566][ T8203] sctp: [Deprecated]: syz.3.2090 (pid 8203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.985566][ T8203] Use struct sctp_sack_info instead [ 84.103117][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.145643][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 84.145738][ T29] audit: type=1400 audit(2000000305.761:1930): avc: denied { block_suspend } for pid=8216 comm="syz.4.2096" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.212412][ T29] audit: type=1326 audit(2000000305.821:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.237282][ T29] audit: type=1326 audit(2000000305.821:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.261399][ T29] audit: type=1326 audit(2000000305.821:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.285091][ T29] audit: type=1326 audit(2000000305.821:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.309486][ T29] audit: type=1326 audit(2000000305.821:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.349763][ T29] audit: type=1326 audit(2000000305.821:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.373668][ T29] audit: type=1326 audit(2000000305.821:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.397515][ T29] audit: type=1326 audit(2000000305.821:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.4.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1288e969 code=0x7ffc0000 [ 84.421401][ T29] audit: type=1326 audit(2000000305.821:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.0.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538d8e969 code=0x7ffc0000 [ 84.457152][ T8233] netlink: 'syz.3.2105': attribute type 3 has an invalid length. [ 84.582625][ T8249] loop2: detected capacity change from 0 to 1764 [ 84.740005][ T8278] program syz.0.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.753812][ T8276] loop3: detected capacity change from 0 to 512 [ 84.774947][ T8276] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.799978][ T8284] loop0: detected capacity change from 0 to 512 [ 84.802564][ T8276] EXT4-fs (loop3): mount failed [ 84.813319][ T8284] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.834725][ T8284] EXT4-fs (loop0): 1 truncate cleaned up [ 84.854553][ T8284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.148047][ T8314] can0: slcan on pts0. [ 85.184583][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.196540][ T8313] can0 (unregistered): slcan off pts0. [ 85.338716][ T8320] loop2: detected capacity change from 0 to 8192 [ 85.354024][ T8320] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.586505][ T8341] loop2: detected capacity change from 0 to 1024 [ 85.614675][ T8341] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.625710][ T8341] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.653192][ T8341] JBD2: no valid journal superblock found [ 85.659090][ T8341] EXT4-fs (loop2): Could not load journal inode [ 85.734702][ T8351] xt_hashlimit: max too large, truncated to 1048576 [ 85.742170][ T8353] tipc: Enabling of bearer rejected, failed to enable media [ 85.795591][ T8358] loop3: detected capacity change from 0 to 512 [ 85.907975][ T8358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.920936][ T8358] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.982180][ T8372] loop0: detected capacity change from 0 to 128 [ 85.999871][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.058326][ T8372] syz.0.2169: attempt to access beyond end of device [ 86.058326][ T8372] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 86.084760][ T8372] syz.0.2169: attempt to access beyond end of device [ 86.084760][ T8372] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 86.099730][ T8372] syz.0.2169: attempt to access beyond end of device [ 86.099730][ T8372] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 86.114171][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114171][ T8384] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 86.114341][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114341][ T8384] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 86.114395][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114395][ T8384] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 86.114438][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114438][ T8384] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 86.114540][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114540][ T8384] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 86.114656][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114656][ T8384] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 86.114740][ T8384] syz.0.2169: attempt to access beyond end of device [ 86.114740][ T8384] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 86.347150][ T8412] loop2: detected capacity change from 0 to 512 [ 86.369495][ T8410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.393123][ T8412] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.409463][ T8412] EXT4-fs (loop2): mount failed [ 86.508280][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.517092][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.645341][ T8453] loop1: detected capacity change from 0 to 512 [ 86.652453][ T8453] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.666282][ T8453] EXT4-fs (loop1): 1 truncate cleaned up [ 86.672597][ T8453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.753187][ T8462] loop0: detected capacity change from 0 to 512 [ 86.767294][ T8462] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.782584][ T8462] EXT4-fs (loop0): mount failed [ 86.843877][ T8469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.909057][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.307224][ T8506] loop3: detected capacity change from 0 to 512 [ 87.317047][ T8506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.336298][ T8506] EXT4-fs (loop3): 1 truncate cleaned up [ 87.345089][ T8506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.580441][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.591000][ T3714] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.656622][ T3714] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.736463][ T3714] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.836731][ T3714] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.922336][ T3714] team0: left allmulticast mode [ 87.927358][ T3714] team_slave_0: left allmulticast mode [ 87.932954][ T3714] team_slave_1: left allmulticast mode [ 87.938808][ T3714] bridge0: port 3(team0) entered disabled state [ 87.946007][ T3714] bridge_slave_1: left allmulticast mode [ 87.951699][ T3714] bridge_slave_1: left promiscuous mode [ 87.957527][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.965472][ T3714] bridge_slave_0: left allmulticast mode [ 87.971217][ T3714] bridge_slave_0: left promiscuous mode [ 87.976965][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.087196][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.097468][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.107562][ T3714] bond0 (unregistering): Released all slaves [ 88.184691][ T3714] hsr_slave_0: left promiscuous mode [ 88.190632][ T3714] hsr_slave_1: left promiscuous mode [ 88.196345][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.203852][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.217151][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.224603][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.234924][ T3714] veth1_macvtap: left promiscuous mode [ 88.240434][ T3714] veth0_macvtap: left promiscuous mode [ 88.246211][ T3714] veth1_vlan: left promiscuous mode [ 88.251570][ T3714] veth0_vlan: left promiscuous mode [ 88.311169][ T3714] team_slave_1 (unregistering): left promiscuous mode [ 88.318518][ T3714] team0 (unregistering): Port device team_slave_1 removed [ 88.328353][ T3714] team_slave_0 (unregistering): left promiscuous mode [ 88.335701][ T3714] team0 (unregistering): Port device team_slave_0 removed [ 88.688436][ T3714] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.727222][ T3714] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.766822][ T3714] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.806897][ T3714] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.869411][ T3714] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.916173][ T3714] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.956508][ T3714] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.016343][ T3714] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.079921][ T3714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.136565][ T3714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.186239][ T3714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.236574][ T3714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.297542][ T3714] team0: left allmulticast mode [ 89.302420][ T3714] team_slave_0: left allmulticast mode [ 89.307937][ T3714] team_slave_1: left allmulticast mode [ 89.313600][ T3714] bridge0: port 4(team0) entered disabled state [ 89.320774][ T3714] vlan2: left promiscuous mode [ 89.325823][ T3714] bridge0: port 3(vlan2) entered disabled state [ 89.332595][ T3714] bridge_slave_1: left allmulticast mode [ 89.338353][ T3714] bridge_slave_1: left promiscuous mode [ 89.344013][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.351742][ T3714] bridge_slave_0: left promiscuous mode [ 89.357441][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.365798][ T3714] vlan2: left promiscuous mode [ 89.370882][ T3714] bridge0: port 3(vlan2) entered disabled state [ 89.377651][ T3714] bridge_slave_1: left allmulticast mode [ 89.383374][ T3714] bridge_slave_1: left promiscuous mode [ 89.389151][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.396898][ T3714] bridge_slave_0: left promiscuous mode [ 89.402558][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.411059][ T3714] bridge_slave_1: left allmulticast mode [ 89.416822][ T3714] bridge_slave_1: left promiscuous mode [ 89.422690][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.430598][ T3714] bridge_slave_0: left allmulticast mode [ 89.436610][ T3714] bridge_slave_0: left promiscuous mode [ 89.442453][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.577400][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.587280][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.596948][ T3714] bond0 (unregistering): Released all slaves [ 89.667358][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.677221][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.686825][ T3714] bond0 (unregistering): Released all slaves [ 89.747987][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.757746][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.767946][ T3714] bond0 (unregistering): Released all slaves [ 89.887543][ T3714] hsr_slave_0: left promiscuous mode [ 89.893170][ T3714] hsr_slave_1: left promiscuous mode [ 89.898873][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.906347][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.916158][ T3714] hsr_slave_0: left promiscuous mode [ 89.921886][ T3714] hsr_slave_1: left promiscuous mode [ 89.927620][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.935074][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.942626][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.950944][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.960174][ T3714] hsr_slave_0: left promiscuous mode [ 89.965989][ T3714] hsr_slave_1: left promiscuous mode [ 89.971825][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.979425][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.987043][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.994668][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.010008][ T3714] veth1_macvtap: left promiscuous mode [ 90.015703][ T3714] veth0_macvtap: left promiscuous mode [ 90.021323][ T3714] veth1_vlan: left promiscuous mode [ 90.026892][ T3714] veth0_vlan: left promiscuous mode [ 90.032733][ T3714] veth1_macvtap: left promiscuous mode [ 90.038295][ T3714] veth0_macvtap: left promiscuous mode [ 90.044002][ T3714] veth1_vlan: left promiscuous mode [ 90.049688][ T3714] veth0_vlan: left promiscuous mode [ 90.056073][ T3714] veth1_macvtap: left promiscuous mode [ 90.061985][ T3714] veth0_macvtap: left promiscuous mode [ 90.066063][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 90.066089][ T29] audit: type=1400 audit(2000000311.671:2020): avc: denied { mounton } for pid=8553 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.078070][ T3714] veth1_vlan: left promiscuous mode [ 90.100011][ T29] audit: type=1400 audit(2000000311.721:2021): avc: denied { sys_module } for pid=8553 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.106812][ T3714] veth0_vlan: left promiscuous mode [ 90.260794][ T3714] team_slave_1 (unregistering): left promiscuous mode [ 90.268302][ T3714] team0 (unregistering): Port device team_slave_1 removed [ 90.277981][ T3714] team_slave_0 (unregistering): left promiscuous mode [ 90.286908][ T3714] team0 (unregistering): Port device team_slave_0 removed [ 90.348040][ T3714] team0 (unregistering): Port device team_slave_1 removed [ 90.359633][ T3714] team0 (unregistering): Port device team_slave_0 removed [ 90.414978][ T3714] team0 (unregistering): Port device team_slave_1 removed [ 90.424458][ T3714] team0 (unregistering): Port device team_slave_0 removed [ 90.581382][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 90.616028][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.623418][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.630639][ T8553] bridge_slave_0: entered allmulticast mode [ 90.637196][ T8553] bridge_slave_0: entered promiscuous mode [ 90.643858][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.651024][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.658865][ T8553] bridge_slave_1: entered allmulticast mode [ 90.665836][ T8553] bridge_slave_1: entered promiscuous mode [ 90.683135][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.693848][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.713464][ T8553] team0: Port device team_slave_0 added [ 90.720146][ T8553] team0: Port device team_slave_1 added [ 90.745016][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.752159][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.778347][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.790017][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.797179][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.823678][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.887165][ T8553] hsr_slave_0: entered promiscuous mode [ 90.893309][ T8553] hsr_slave_1: entered promiscuous mode [ 90.995817][ T8553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.010569][ T8553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.020574][ T8553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.031200][ T8553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.056876][ T3714] IPVS: stop unused estimator thread 0... [ 91.160565][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 91.192239][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 91.222227][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.229384][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.236683][ T8571] bridge_slave_0: entered allmulticast mode [ 91.243463][ T8571] bridge_slave_0: entered promiscuous mode [ 91.252535][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.259745][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.267065][ T8571] bridge_slave_1: entered allmulticast mode [ 91.273514][ T8571] bridge_slave_1: entered promiscuous mode [ 91.296477][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.313450][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.333166][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.340411][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.347782][ T8572] bridge_slave_0: entered allmulticast mode [ 91.354716][ T8572] bridge_slave_0: entered promiscuous mode [ 91.362590][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.369709][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.376955][ T8572] bridge_slave_1: entered allmulticast mode [ 91.383420][ T8572] bridge_slave_1: entered promiscuous mode [ 91.401050][ T8571] team0: Port device team_slave_0 added [ 91.407823][ T8571] team0: Port device team_slave_1 added [ 91.414977][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.435971][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.455379][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.464898][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.471871][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.498068][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.509507][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.516652][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.542790][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.554560][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.575254][ T8572] team0: Port device team_slave_0 added [ 91.582202][ T8572] team0: Port device team_slave_1 added [ 91.606296][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.613384][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.639568][ T8572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.653332][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.660547][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.675100][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.682092][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.708190][ T8572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.728788][ T8571] hsr_slave_0: entered promiscuous mode [ 91.734992][ T8571] hsr_slave_1: entered promiscuous mode [ 91.741107][ T8571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.754281][ T8571] Cannot create hsr debugfs directory [ 91.778593][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785737][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.813423][ T8572] hsr_slave_0: entered promiscuous mode [ 91.819798][ T8572] hsr_slave_1: entered promiscuous mode [ 91.825867][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.833451][ T8572] Cannot create hsr debugfs directory [ 91.960036][ T8553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.049279][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 92.105552][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.112678][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.120359][ T8603] bridge_slave_0: entered allmulticast mode [ 92.126887][ T8603] bridge_slave_0: entered promiscuous mode [ 92.133639][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.140848][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.148282][ T8603] bridge_slave_1: entered allmulticast mode [ 92.155091][ T8603] bridge_slave_1: entered promiscuous mode [ 92.172781][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.185624][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.206443][ T8603] team0: Port device team_slave_0 added [ 92.213341][ T8603] team0: Port device team_slave_1 added [ 92.220583][ T8571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.231804][ T8571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.258806][ T8571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.273105][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.280239][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.306657][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.317965][ T8553] veth0_vlan: entered promiscuous mode [ 92.328037][ T8572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 92.336988][ T8571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.346535][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.353575][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.379995][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.396025][ T8572] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 92.405008][ T8572] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 92.433124][ T8603] hsr_slave_0: entered promiscuous mode [ 92.439890][ T8603] hsr_slave_1: entered promiscuous mode [ 92.445918][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.453625][ T8603] Cannot create hsr debugfs directory [ 92.459161][ T8572] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 92.469130][ T8553] veth1_vlan: entered promiscuous mode [ 92.517106][ T8553] veth0_macvtap: entered promiscuous mode [ 92.547370][ T8553] veth1_macvtap: entered promiscuous mode [ 92.585133][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.603469][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.621490][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.630697][ T8603] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.639529][ T8603] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.648617][ T8603] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.658273][ T8603] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 92.669200][ T8553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.678004][ T8553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686914][ T8553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.695877][ T8553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.715576][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.729091][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.744287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.746182][ T29] audit: type=1400 audit(2000000314.351:2022): avc: denied { mounton } for pid=8553 comm="syz-executor" path="/root/syzkaller.wH51HI/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 92.751381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.779757][ T29] audit: type=1400 audit(2000000314.391:2023): avc: denied { mount } for pid=8553 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.801397][ T8571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.805545][ T29] audit: type=1400 audit(2000000314.391:2024): avc: denied { mount } for pid=8553 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.816309][ T8571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.849079][ T29] audit: type=1400 audit(2000000314.391:2025): avc: denied { mounton } for pid=8553 comm="syz-executor" path="/root/syzkaller.wH51HI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.869049][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.875906][ T29] audit: type=1400 audit(2000000314.391:2026): avc: denied { mounton } for pid=8553 comm="syz-executor" path="/root/syzkaller.wH51HI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.912405][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.919775][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.920256][ T29] audit: type=1400 audit(2000000314.491:2027): avc: denied { mounton } for pid=8553 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 92.952149][ T29] audit: type=1400 audit(2000000314.491:2028): avc: denied { mount } for pid=8553 comm="syz-executor" name="/" dev="gadgetfs" ino=3768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.954906][ T8572] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.991111][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.998808][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.013049][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.030342][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.038142][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.063539][ T8649] loop2: detected capacity change from 0 to 512 [ 93.076587][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.086877][ T8649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.097334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.104602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.113740][ T8649] EXT4-fs (loop2): 1 truncate cleaned up [ 93.120226][ T8649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.123144][ T8572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.165866][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.173192][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.187719][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.257983][ T8666] loop5: detected capacity change from 0 to 128 [ 93.321468][ T8666] bio_check_eod: 2 callbacks suppressed [ 93.321517][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.321517][ T8666] loop5: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 93.341449][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.341449][ T8666] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 93.343632][ T8571] veth0_vlan: entered promiscuous mode [ 93.360766][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.360766][ T8666] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 93.374413][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.374413][ T8666] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 93.382616][ T8571] veth1_vlan: entered promiscuous mode [ 93.388030][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.388030][ T8666] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 93.399562][ T8572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.407280][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.407280][ T8666] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 93.426550][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.436382][ T8675] syz.5.2232: attempt to access beyond end of device [ 93.436382][ T8675] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.448433][ T8571] veth0_macvtap: entered promiscuous mode [ 93.463076][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.463076][ T8666] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.477008][ T8675] syz.5.2232: attempt to access beyond end of device [ 93.477008][ T8675] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 93.478681][ T8571] veth1_macvtap: entered promiscuous mode [ 93.507356][ T8666] syz.5.2232: attempt to access beyond end of device [ 93.507356][ T8666] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 93.539673][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.575636][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.604409][ T8571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613317][ T8571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.622679][ T8571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.631747][ T8571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677864][ T8691] __nla_validate_parse: 3 callbacks suppressed [ 93.677884][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2239'. [ 93.782361][ T8705] openvswitch: netlink: Message has 6 unknown bytes. [ 93.806033][ T8603] veth0_vlan: entered promiscuous mode [ 93.819126][ T8572] veth0_vlan: entered promiscuous mode [ 93.828601][ T8572] veth1_vlan: entered promiscuous mode [ 93.855586][ T8572] veth0_macvtap: entered promiscuous mode [ 93.876374][ T8603] veth1_vlan: entered promiscuous mode [ 93.890249][ T8572] veth1_macvtap: entered promiscuous mode [ 93.917831][ T8603] veth0_macvtap: entered promiscuous mode [ 93.928543][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.930622][ T8713] program syz.5.2243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.943115][ T8603] veth1_macvtap: entered promiscuous mode [ 93.954073][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.974482][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.986827][ T8572] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.987444][ T29] audit: type=1400 audit(2000000315.601:2029): avc: denied { write } for pid=8716 comm="syz.2.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.995594][ T8572] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995633][ T8572] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995734][ T8572] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.049016][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.064310][ T8603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.073338][ T8603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.082255][ T8603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.091287][ T8603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.302097][ T8749] loop5: detected capacity change from 0 to 2048 [ 94.312383][ T8751] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96 [ 94.327141][ T8755] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2260'. [ 94.337913][ T8749] loop5: p1 < > p4 [ 94.345708][ T8749] loop5: p4 size 8388608 extends beyond EOD, truncated [ 94.367799][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2260'. [ 94.511919][ T8773] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 94.640546][ T8791] loop2: detected capacity change from 0 to 128 [ 94.798094][ T8813] tipc: Started in network mode [ 94.803132][ T8813] tipc: Node identity ac14140f, cluster identity 4711 [ 94.813148][ T8813] tipc: New replicast peer: 255.255.255.255 [ 94.819442][ T8813] tipc: Enabled bearer , priority 10 [ 94.827583][ T8817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8817 comm=syz.5.2291 [ 94.840298][ T8817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8817 comm=syz.5.2291 [ 94.910128][ T8829] loop4: detected capacity change from 0 to 164 [ 94.928354][ T8829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.931235][ T8834] program syz.2.2300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.947070][ T8829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.949820][ T8833] hsr0: entered promiscuous mode [ 94.956904][ T8829] Symlink component flag not implemented [ 94.966212][ T8829] Symlink component flag not implemented [ 94.972424][ T8829] Symlink component flag not implemented (7) [ 94.978689][ T8829] Symlink component flag not implemented (116) [ 95.076962][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 95.076980][ T29] audit: type=1400 audit(2000000316.691:2110): avc: denied { mounton } for pid=8846 comm="syz.6.2306" path="/proc/26/cgroup" dev="proc" ino=23728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 95.118822][ T29] audit: type=1400 audit(2000000316.691:2111): avc: denied { remount } for pid=8846 comm="syz.6.2306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 95.152224][ T29] audit: type=1400 audit(2000000316.761:2112): avc: denied { create } for pid=8851 comm="syz.6.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.195475][ T29] audit: type=1326 audit(2000000316.801:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.219022][ T29] audit: type=1326 audit(2000000316.801:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.243030][ T29] audit: type=1326 audit(2000000316.801:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.266589][ T29] audit: type=1326 audit(2000000316.801:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.290309][ T29] audit: type=1326 audit(2000000316.801:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.317068][ T29] audit: type=1326 audit(2000000316.831:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.340736][ T29] audit: type=1326 audit(2000000316.831:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.7.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 95.505299][ T8887] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 95.516628][ T8887] SELinux: failed to load policy [ 95.528916][ T8889] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2325'. [ 95.541450][ T8889] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2325'. [ 95.550733][ T8889] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2325'. [ 95.703324][ T8911] loop7: detected capacity change from 0 to 512 [ 95.724651][ T8911] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2333: bg 0: block 5: invalid block bitmap [ 95.748548][ T8915] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.771685][ T8911] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 95.789782][ T8911] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2333: invalid indirect mapped block 3 (level 2) [ 95.834864][ T8911] EXT4-fs (loop7): 2 truncates cleaned up [ 95.842023][ T8911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.870729][ T8911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.935031][ T3390] tipc: Node number set to 2886997007 [ 96.032485][ T8938] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.073573][ T8942] tmpfs: Bad value for 'mpol' [ 96.375320][ T8971] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 96.385131][ T8971] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 96.428696][ T8974] veth1_to_bond: entered allmulticast mode [ 96.435928][ T8973] veth1_to_bond: left allmulticast mode [ 96.659376][ T9007] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2 [ 96.714455][ T9015] tipc: Enabling of bearer rejected, failed to enable media [ 96.802685][ T9023] loop2: detected capacity change from 0 to 512 [ 96.827931][ T9023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.841025][ T9023] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.913851][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.994707][ T9041] loop4: detected capacity change from 0 to 512 [ 97.007400][ T9041] EXT4-fs (loop4): 1 orphan inode deleted [ 97.013883][ T9041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.017203][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2393'. [ 97.028189][ T9041] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.035730][ T3667] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 97.087621][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 97.095207][ T3390] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 97.107232][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.118478][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.127730][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 97.135204][ T3390] hid-generic 0000:0000:0000.0001: reserved main item tag 0xd [ 97.144030][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.592733][ T9087] loop6: detected capacity change from 0 to 512 [ 97.600129][ T9087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.616784][ T9087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.630066][ T9087] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.641629][ T9087] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2409: corrupted xattr block 19: overlapping e_value [ 97.657164][ T9087] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 97.666266][ T9087] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2409: corrupted xattr block 19: overlapping e_value [ 97.682305][ T9087] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2409: corrupted xattr block 19: overlapping e_value [ 97.697369][ T9087] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 97.707128][ T9087] EXT4-fs error (device loop6): ext4_get_inode_usage:884: inode #15: comm syz.6.2409: corrupted xattr block 19: overlapping e_value [ 97.737488][ T8603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.042160][ T9108] loop2: detected capacity change from 0 to 512 [ 98.066625][ T9108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.107294][ T9108] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.198133][ T9108] EXT4-fs (loop2): Remounting filesystem read-only [ 98.215984][ T9108] EXT4-fs (loop2): 1 truncate cleaned up [ 98.222106][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.276044][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.354460][ T9130] program syz.2.2430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.363982][ T9131] hub 9-0:1.0: USB hub found [ 98.373508][ T9131] hub 9-0:1.0: 8 ports detected [ 98.543957][ T9139] ipvlan2: entered promiscuous mode [ 98.551092][ T9136] SELinux: ebitmap start bit (3317329373) is not a multiple of the map unit size (64) [ 98.553747][ T9141] loop4: detected capacity change from 0 to 128 [ 98.575221][ T9136] SELinux: failed to load policy [ 98.677484][ T9150] SELinux: failed to load policy [ 98.772623][ T9141] bio_check_eod: 2 callbacks suppressed [ 98.772652][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.772652][ T9141] loop4: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 98.812750][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.812750][ T9141] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 98.845035][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.845035][ T9141] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 98.863078][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.863078][ T9141] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 98.876973][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.876973][ T9141] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 98.914140][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.914140][ T9141] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 98.928549][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.928549][ T9141] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 98.943431][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.943431][ T9141] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 98.959299][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.959299][ T9141] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 98.974650][ T9141] syz.4.2435: attempt to access beyond end of device [ 98.974650][ T9141] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 99.318339][ T9187] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 99.457500][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 99.625837][ T9205] vhci_hcd: invalid port number 23 [ 99.631426][ T9205] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 99.815695][ T9217] loop2: detected capacity change from 0 to 8192 [ 99.960428][ T9240] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 99.968175][ T9240] FAT-fs (loop2): Filesystem has been set read-only [ 100.006890][ T9217] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 100.046785][ T9247] syz.5.2481 (9247): /proc/9246/oom_adj is deprecated, please use /proc/9246/oom_score_adj instead. [ 100.059197][ T9217] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 100.137212][ T9254] loop5: detected capacity change from 0 to 512 [ 100.212083][ T9254] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2484: casefold flag without casefold feature [ 100.226715][ T3319] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 100.236835][ T9256] loop7: detected capacity change from 0 to 1024 [ 100.243576][ T9256] EXT4-fs: Ignoring removed orlov option [ 100.249700][ T9256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.260720][ T9254] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2484: couldn't read orphan inode 15 (err -117) [ 100.273585][ T9254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.273888][ T9259] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 100.304858][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 100.304878][ T29] audit: type=1400 audit(2000000321.911:2299): avc: denied { getopt } for pid=9260 comm="syz.6.2488" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.339828][ T9256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.384890][ T29] audit: type=1400 audit(2000000321.991:2300): avc: denied { ioctl } for pid=9253 comm="syz.5.2484" path="/45/file0/file1" dev="loop5" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.410689][ T29] audit: type=1400 audit(2000000322.021:2301): avc: denied { read } for pid=9270 comm="syz.2.2491" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.438109][ T9256] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 100.447981][ T29] audit: type=1400 audit(2000000322.041:2302): avc: denied { setattr } for pid=9255 comm="syz.7.2485" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.470543][ T29] audit: type=1400 audit(2000000322.061:2303): avc: denied { relabelto } for pid=9255 comm="syz.7.2485" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 100.527429][ T9273] openvswitch: netlink: Message has 6 unknown bytes. [ 100.538529][ T8572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.540425][ T9278] tc_dump_action: action bad kind [ 100.567783][ T8553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.607180][ T9287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9287 comm=syz.5.2497 [ 100.637464][ T9290] loop7: detected capacity change from 0 to 512 [ 100.651513][ T9292] loop4: detected capacity change from 0 to 512 [ 100.663058][ T9290] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 100.696916][ T9290] EXT4-fs (loop7): 1 truncate cleaned up [ 100.702529][ T2970] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.712343][ T2970] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.712842][ T9290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.762610][ T29] audit: type=1326 audit(2000000322.361:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 100.786289][ T29] audit: type=1326 audit(2000000322.361:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 100.809886][ T29] audit: type=1326 audit(2000000322.361:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 100.833596][ T29] audit: type=1326 audit(2000000322.361:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 100.833811][ T9303] loop6: detected capacity change from 0 to 1024 [ 100.857086][ T29] audit: type=1326 audit(2000000322.361:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a234e969 code=0x7ffc0000 [ 100.888672][ T9303] EXT4-fs: Ignoring removed i_version option [ 100.896585][ T8572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.900767][ T9303] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.925294][ T9303] EXT4-fs: Ignoring removed nobh option [ 100.930936][ T9303] EXT4-fs: Ignoring removed bh option [ 100.946468][ T9310] loop7: detected capacity change from 0 to 512 [ 100.954172][ T9303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.966675][ T9310] journal_path: Lookup failure for './file0/../file0' [ 100.973527][ T9310] EXT4-fs: error: could not find journal device path [ 100.986011][ T9316] syz.2.2511: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 101.000673][ T9316] CPU: 1 UID: 0 PID: 9316 Comm: syz.2.2511 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 101.000711][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.000777][ T9316] Call Trace: [ 101.000787][ T9316] [ 101.000796][ T9316] __dump_stack+0x1d/0x30 [ 101.000823][ T9316] dump_stack_lvl+0xe8/0x140 [ 101.000848][ T9316] dump_stack+0x15/0x1b [ 101.000869][ T9316] warn_alloc+0x12b/0x1a0 [ 101.000965][ T9316] __vmalloc_node_range_noprof+0x9c/0xe00 [ 101.001114][ T9316] ? __futex_wait+0x1ff/0x260 [ 101.001159][ T9316] ? __pfx_futex_wake_mark+0x10/0x10 [ 101.001254][ T9316] ? __rcu_read_unlock+0x4f/0x70 [ 101.001278][ T9316] ? avc_has_perm_noaudit+0x1b1/0x200 [ 101.001398][ T9316] ? should_fail_ex+0x30/0x280 [ 101.001427][ T9316] ? xskq_create+0x36/0xe0 [ 101.001455][ T9316] vmalloc_user_noprof+0x7d/0xb0 [ 101.001535][ T9316] ? xskq_create+0x80/0xe0 [ 101.001555][ T9316] xskq_create+0x80/0xe0 [ 101.001610][ T9316] xsk_init_queue+0x95/0xf0 [ 101.001635][ T9316] xsk_setsockopt+0x35c/0x510 [ 101.001685][ T9316] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.001729][ T9316] __sys_setsockopt+0x184/0x200 [ 101.001768][ T9316] __x64_sys_setsockopt+0x64/0x80 [ 101.001848][ T9316] x64_sys_call+0x2bd5/0x2fb0 [ 101.001871][ T9316] do_syscall_64+0xd2/0x200 [ 101.001908][ T9316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.001945][ T9316] ? clear_bhb_loop+0x40/0x90 [ 101.002044][ T9316] ? clear_bhb_loop+0x40/0x90 [ 101.002072][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.002099][ T9316] RIP: 0033:0x7fd3a234e969 [ 101.002128][ T9316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.002164][ T9316] RSP: 002b:00007fd3a09b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.002188][ T9316] RAX: ffffffffffffffda RBX: 00007fd3a2575fa0 RCX: 00007fd3a234e969 [ 101.002204][ T9316] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 101.002220][ T9316] RBP: 00007fd3a23d0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 101.002236][ T9316] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.002251][ T9316] R13: 0000000000000000 R14: 00007fd3a2575fa0 R15: 00007ffe0a97e968 [ 101.002274][ T9316] [ 101.002293][ T9316] Mem-Info: [ 101.233556][ T9316] active_anon:20313 inactive_anon:8 isolated_anon:0 [ 101.233556][ T9316] active_file:18637 inactive_file:2398 isolated_file:0 [ 101.233556][ T9316] unevictable:0 dirty:260 writeback:0 [ 101.233556][ T9316] slab_reclaimable:3200 slab_unreclaimable:15520 [ 101.233556][ T9316] mapped:28834 shmem:16635 pagetables:1173 [ 101.233556][ T9316] sec_pagetables:0 bounce:0 [ 101.233556][ T9316] kernel_misc_reclaimable:0 [ 101.233556][ T9316] free:1858848 free_pcp:25070 free_cma:0 [ 101.279318][ T9316] Node 0 active_anon:81252kB inactive_anon:32kB active_file:74548kB inactive_file:9592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115336kB dirty:1040kB writeback:0kB shmem:66540kB writeback_tmp:0kB kernel_stack:3904kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.308589][ T9316] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.337334][ T9316] lowmem_reserve[]: 0 2882 7861 7861 [ 101.342701][ T9316] Node 0 DMA32 free:2947908kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951436kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 101.372750][ T9316] lowmem_reserve[]: 0 0 4978 4978 [ 101.377929][ T9316] Node 0 Normal free:4472124kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81252kB inactive_anon:32kB active_file:74548kB inactive_file:9592kB unevictable:0kB writepending:1040kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:96752kB local_pcp:60116kB free_cma:0kB [ 101.410593][ T9316] lowmem_reserve[]: 0 0 0 0 [ 101.415221][ T9316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.428053][ T9316] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947908kB [ 101.444308][ T9316] Node 0 Normal: 119*4kB (U) 6*8kB (UM) 7*16kB (UM) 4*32kB (UME) 3*64kB (UM) 3*128kB (U) 6*256kB (UME) 1*512kB (M) 2*1024kB (UM) 25*2048kB (UME) 1078*4096kB (UM) = 4472124kB [ 101.461907][ T9316] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 101.471275][ T9316] 37673 total pagecache pages [ 101.476139][ T9316] 11 pages in swap cache [ 101.480464][ T9316] Free swap = 124952kB [ 101.484635][ T9316] Total swap = 124996kB [ 101.488856][ T9316] 2097051 pages RAM [ 101.492743][ T9316] 0 pages HighMem/MovableOnly [ 101.497704][ T9316] 80794 pages reserved [ 101.506776][ T8603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.603269][ T9333] program syz.4.2520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.684216][ T9342] loop7: detected capacity change from 0 to 1024 [ 101.696344][ T9342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.713484][ T9342] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 101.725899][ T9342] EXT4-fs (loop7): This should not happen!! Data will be lost [ 101.725899][ T9342] [ 101.735682][ T9342] EXT4-fs (loop7): Total free blocks count 0 [ 101.741690][ T9342] EXT4-fs (loop7): Free/Dirty block details [ 101.747952][ T9342] EXT4-fs (loop7): free_blocks=0 [ 101.753059][ T9342] EXT4-fs (loop7): dirty_blocks=0 [ 101.758214][ T9342] EXT4-fs (loop7): Block reservation details [ 101.764700][ T9342] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 101.793700][ T8572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.818539][ T9351] loop2: detected capacity change from 0 to 1024 [ 101.837594][ T9351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.864159][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.883942][ T9362] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2529'. [ 101.894142][ T9354] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2529'. [ 101.916312][ T9366] loop2: detected capacity change from 0 to 1024 [ 101.927698][ T9366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.940356][ T9366] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.956101][ T9366] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.2533: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.971796][ T9366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 101.984409][ T9366] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.984409][ T9366] [ 102.008374][ T9366] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 4: comm syz.2.2533: lblock 4 mapped to illegal pblock 4 (length 12) [ 102.022777][ T9366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 102.035195][ T9366] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.035195][ T9366] [ 102.073992][ T9379] loop4: detected capacity change from 0 to 512 [ 102.082762][ T9379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.103192][ T9379] EXT4-fs (loop4): 1 truncate cleaned up [ 102.103229][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.110752][ T9379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.171439][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.220600][ T9394] loop5: detected capacity change from 0 to 1024 [ 102.255891][ T9394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.286668][ T9407] SELinux: syz.2.2550 (9407) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 102.308430][ T8553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.498893][ T9437] No such timeout policy "syz0" [ 102.604084][ T9456] wireguard0: entered promiscuous mode [ 102.609696][ T9456] wireguard0: entered allmulticast mode [ 102.732084][ T9475] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 102.750447][ T9481] @: renamed from vlan0 (while UP) [ 102.807368][ T9492] vlan2: entered promiscuous mode [ 102.812740][ T9492] gretap0: entered promiscuous mode [ 102.901760][ T9507] loop2: detected capacity change from 0 to 1024 [ 102.932934][ T9512] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2602'. [ 102.955681][ T9507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.962637][ T9507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.987353][ T9507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.996938][ T9507] System zones: 0-1, 3-36 [ 103.002599][ T9507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.059738][ T9530] loop4: detected capacity change from 0 to 512 [ 103.073104][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.098886][ T9530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.147678][ T9530] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.169025][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.184948][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.194337][ T9545] loop6: detected capacity change from 0 to 128 [ 103.207921][ T9543] loop5: detected capacity change from 0 to 512 [ 103.223174][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.229305][ T9543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.249627][ T9543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.273919][ T9543] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.326398][ T8553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.515601][ T9571] SELinux: ebitmap: truncated map [ 103.520695][ T9571] SELinux: failed to load policy [ 103.622868][ T9587] hsr0: entered promiscuous mode [ 103.647566][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 103.655425][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 103.663172][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.670930][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.678738][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.686474][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.694196][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.702053][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.709937][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.717661][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.725688][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.733458][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.741609][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.749456][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.757413][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.765562][ T3390] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 103.775551][ T3390] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 103.877571][ T9612] ipvlan2: entered promiscuous mode [ 103.885652][ T9612] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.989932][ T9618] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2650'. [ 104.012890][ T9622] loop7: detected capacity change from 0 to 1024 [ 104.054507][ T9623] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.069003][ T9623] SELinux: failed to load policy [ 104.095789][ T9622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.174916][ T9631] loop6: detected capacity change from 0 to 512 [ 104.181899][ T9632] wireguard0: entered promiscuous mode [ 104.187584][ T9632] wireguard0: entered allmulticast mode [ 104.202183][ T9631] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2654: bg 0: block 5: invalid block bitmap [ 104.216627][ T8572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.216955][ T9631] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.236176][ T9631] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2654: invalid indirect mapped block 3 (level 2) [ 104.250332][ T9631] EXT4-fs (loop6): 2 truncates cleaned up [ 104.256822][ T9635] vhci_hcd: default hub control req: 6031 v09fa i0008 l0 [ 104.264519][ T9631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.279555][ T9631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.312277][ T9639] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2655'. [ 104.323698][ T9639] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2655'. [ 104.332938][ T9639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2655'. [ 104.405164][ T9647] netlink: 'syz.6.2658': attribute type 1 has an invalid length. [ 104.412999][ T9647] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2658'. [ 104.422026][ T9647] NCSI netlink: No device for ifindex 540032276 [ 104.443462][ T9653] : renamed from bond0 (while UP) [ 104.452961][ T9658] batadv_slave_0: entered promiscuous mode [ 104.487457][ T9658] batadv_slave_0: left promiscuous mode [ 104.493535][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2668'. [ 104.526639][ T9668] ALSA: seq fatal error: cannot create timer (-22) [ 104.551569][ T9671] loop6: detected capacity change from 0 to 512 [ 104.578674][ T9671] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.2672: casefold flag without casefold feature [ 104.593492][ T9677] wireguard0: entered promiscuous mode [ 104.599261][ T9677] wireguard0: entered allmulticast mode [ 104.608692][ T9671] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2672: couldn't read orphan inode 15 (err -117) [ 104.634632][ T9671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.656814][ T9676] bond_slave_0: entered promiscuous mode [ 104.662648][ T9676] bond_slave_1: entered promiscuous mode [ 104.687174][ T9676] macsec1: entered promiscuous mode [ 104.692622][ T9676] bond0: entered promiscuous mode [ 104.698238][ T9676] macsec1: entered allmulticast mode [ 104.703632][ T9676] bond0: entered allmulticast mode [ 104.708893][ T9676] bond_slave_0: entered allmulticast mode [ 104.714674][ T9676] bond_slave_1: entered allmulticast mode [ 104.724417][ T8603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.736933][ T9676] bond0: left allmulticast mode [ 104.741854][ T9676] bond_slave_0: left allmulticast mode [ 104.747394][ T9676] bond_slave_1: left allmulticast mode [ 104.752911][ T9676] bond0: left promiscuous mode [ 104.758167][ T9676] bond_slave_0: left promiscuous mode [ 104.763595][ T9676] bond_slave_1: left promiscuous mode [ 104.899424][ T9689] hub 9-0:1.0: USB hub found [ 104.915262][ T9689] hub 9-0:1.0: 8 ports detected [ 105.026162][ T9705] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 105.187123][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 105.277561][ T9725] loop4: detected capacity change from 0 to 1024 [ 105.310284][ T9725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.369856][ T9725] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.390674][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 105.390693][ T29] audit: type=1326 audit(2000000327.005:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.420511][ T29] audit: type=1326 audit(2000000327.005:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.489627][ T9725] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.2698: lblock 3 mapped to illegal pblock 3 (length 13) [ 105.520936][ T9725] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 105.533623][ T9725] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.533623][ T9725] [ 105.569731][ T29] audit: type=1326 audit(2000000327.075:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.593656][ T29] audit: type=1326 audit(2000000327.075:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.617670][ T29] audit: type=1326 audit(2000000327.075:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.642750][ T29] audit: type=1326 audit(2000000327.075:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.667133][ T29] audit: type=1326 audit(2000000327.075:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e14d2e9a3 code=0x7ffc0000 [ 105.690821][ T29] audit: type=1326 audit(2000000327.075:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e14d2e9a3 code=0x7ffc0000 [ 105.714269][ T29] audit: type=1326 audit(2000000327.075:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.738043][ T29] audit: type=1326 audit(2000000327.075:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.6.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e14d2e969 code=0x7ffc0000 [ 105.770601][ T9745] netdevsim netdevsim7 netdevsim0: Unsupported IPsec algorithm [ 105.771456][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.908656][ T9768] loop6: detected capacity change from 0 to 512 [ 105.913459][ T9765] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2714'. [ 105.945669][ T9768] EXT4-fs (loop6): 1 orphan inode deleted [ 105.951980][ T9768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.967458][ T3714] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 1 [ 105.980217][ T9768] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.022226][ T8603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.054401][ T9782] hub 9-0:1.0: USB hub found [ 106.059356][ T9782] hub 9-0:1.0: 8 ports detected [ 106.169632][ T9798] loop4: detected capacity change from 0 to 1024 [ 106.176923][ T9798] EXT4-fs: Ignoring removed orlov option [ 106.182835][ T9798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.207365][ T9804] loop7: detected capacity change from 0 to 512 [ 106.218633][ T9798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.242686][ T9804] EXT4-fs (loop7): 1 orphan inode deleted [ 106.250207][ T9804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.263118][ T9804] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.273895][ T3712] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 106.303771][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.327774][ T8572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.535033][ T9837] ipvlan2: entered promiscuous mode [ 106.548204][ T9837] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.558458][ T9839] Invalid logical block size (256) [ 106.899027][ T9878] loop2: detected capacity change from 0 to 256 [ 107.027373][ T9885] loop7: detected capacity change from 0 to 128 [ 107.037587][ T9885] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.051860][ T9885] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.108933][ T9892] xt_hashlimit: max too large, truncated to 1048576 [ 107.123701][ T9898] loop2: detected capacity change from 0 to 512 [ 107.162021][ T9898] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2773: corrupted in-inode xattr: invalid ea_ino [ 107.194715][ T9898] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2773: couldn't read orphan inode 15 (err -117) [ 107.216423][ T9909] loop4: detected capacity change from 0 to 256 [ 107.217866][ T9898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.258855][ T9898] EXT4-fs (loop2): shut down requested (0) [ 107.295024][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.311189][ T9909] FAT-fs (loop4): Directory bread(block 64) failed [ 107.327328][ T9909] FAT-fs (loop4): Directory bread(block 65) failed [ 107.334367][ T9909] FAT-fs (loop4): Directory bread(block 66) failed [ 107.342669][ T9909] FAT-fs (loop4): Directory bread(block 67) failed [ 107.350746][ T9909] FAT-fs (loop4): Directory bread(block 68) failed [ 107.357823][ T9909] FAT-fs (loop4): Directory bread(block 69) failed [ 107.364884][ T9909] FAT-fs (loop4): Directory bread(block 70) failed [ 107.371512][ T9909] FAT-fs (loop4): Directory bread(block 71) failed [ 107.379623][ T9909] FAT-fs (loop4): Directory bread(block 72) failed [ 107.386479][ T9909] FAT-fs (loop4): Directory bread(block 73) failed [ 107.478484][ T9932] tap0: tun_chr_ioctl cmd 1074025675 [ 107.484124][ T9932] tap0: persist enabled [ 107.504558][ T9932] tap0: tun_chr_ioctl cmd 1074025675 [ 107.510302][ T9932] tap0: persist disabled [ 107.533307][ T9933] loop2: detected capacity change from 0 to 8192 [ 107.600742][ T9941] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 107.725966][ T9943] loop5: detected capacity change from 0 to 128 [ 107.904248][ T9963] loop4: detected capacity change from 0 to 512 [ 107.921833][ T9943] bio_check_eod: 103 callbacks suppressed [ 107.921853][ T9943] syz.5.2796: attempt to access beyond end of device [ 107.921853][ T9943] loop5: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 107.947947][ T9963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.973570][ T9943] syz.5.2796: attempt to access beyond end of device [ 107.973570][ T9943] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 107.992042][ T9963] EXT4-fs (loop4): 1 truncate cleaned up [ 107.998732][ T9963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.012138][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.012138][ T9943] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 108.044017][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.044017][ T9943] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 108.059622][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.059622][ T9943] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 108.073427][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.073427][ T9943] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 108.087728][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.087728][ T9943] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 108.101705][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.101705][ T9943] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 108.115275][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.115275][ T9943] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 108.129474][ T9943] syz.5.2796: attempt to access beyond end of device [ 108.129474][ T9943] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 108.197096][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.370581][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2812'. [ 108.379696][ T9983] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2812'. [ 108.390259][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2812'. [ 108.413939][ T3450] IPVS: starting estimator thread 0... [ 108.420238][ T9983] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2812'. [ 108.429791][ T9983] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2812'. [ 108.448590][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2815'. [ 108.462496][ T9992] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.505042][ T9987] IPVS: using max 2256 ests per chain, 112800 per kthread [ 108.518873][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2819'. [ 108.641893][T10012] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 108.786658][T10029] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 108.795160][T10029] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 109.117912][T10052] 9pnet_fd: Insufficient options for proto=fd [ 109.174068][T10062] loop4: detected capacity change from 0 to 128 [ 109.195594][T10062] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 109.234120][T10062] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.348217][ T8571] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.415367][T10084] loop5: detected capacity change from 0 to 512 [ 109.442270][T10084] EXT4-fs: Ignoring removed nobh option [ 109.466141][T10084] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 109.498361][T10084] __nla_validate_parse: 2 callbacks suppressed [ 109.498381][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2859'. [ 109.558082][T10094] loop6: detected capacity change from 0 to 1024 [ 109.607695][T10094] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 109.672069][T10094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.738900][T10104] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 109.745470][T10104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.753438][T10104] vhci_hcd vhci_hcd.0: Device attached [ 109.774033][ T8603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.793128][T10105] vhci_hcd: connection closed [ 109.793349][ T3667] vhci_hcd: stop threads [ 109.802520][ T3667] vhci_hcd: release socket [ 109.807172][ T3667] vhci_hcd: disconnect device [ 109.828855][T10118] netlink: 'syz.7.2870': attribute type 298 has an invalid length. [ 109.900376][T10129] loop5: detected capacity change from 0 to 1024 [ 109.908665][T10129] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.919681][T10129] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.935342][T10129] JBD2: no valid journal superblock found [ 109.941259][T10129] EXT4-fs (loop5): Could not load journal inode [ 109.979010][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2882'. [ 109.988652][T10140] IPVS: Error joining to the multicast group [ 109.997775][T10142] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2883'. [ 110.007578][T10142] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2883'. [ 110.016787][T10142] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2883'. [ 110.078978][T10153] netlink: 'syz.7.2888': attribute type 1 has an invalid length. [ 110.218806][ T3393] kernel write not supported for file /316/attr/exec (pid: 3393 comm: kworker/1:6) [ 110.330792][T10197] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2907'. [ 110.344227][T10199] loop2: detected capacity change from 0 to 164 [ 110.354518][T10199] ISOFS: unable to read i-node block [ 110.360159][T10199] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 110.400128][T10197]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.410512][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 110.410531][ T29] audit: type=1400 audit(2000000332.025:2652): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 110.439050][T10197]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.456205][T10197]  (unregistering): Released all slaves [ 110.490812][ T29] audit: type=1400 audit(2000000332.065:2653): avc: denied { execmem } for pid=10202 comm="syz.4.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.564795][T10209] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 110.566086][ T29] audit: type=1400 audit(2000000332.175:2654): avc: denied { mac_admin } for pid=10208 comm="syz.7.2913" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.622024][ T29] audit: type=1400 audit(2000000332.185:2655): avc: denied { relabelto } for pid=10208 comm="syz.7.2913" name="147" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.648433][ T29] audit: type=1400 audit(2000000332.185:2656): avc: denied { associate } for pid=10208 comm="syz.7.2913" name="147" dev="tmpfs" ino=768 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.701260][ T29] audit: type=1400 audit(2000000332.315:2657): avc: denied { remove_name } for pid=8572 comm="syz-executor" name="binderfs" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.729793][ T29] audit: type=1400 audit(2000000332.335:2658): avc: denied { rmdir } for pid=8572 comm="syz-executor" name="147" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.772310][T10215] netlink: 'syz.2.2916': attribute type 21 has an invalid length. [ 110.784815][ T29] audit: type=1326 audit(2000000332.395:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 110.808514][ T29] audit: type=1326 audit(2000000332.395:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 110.832467][ T29] audit: type=1326 audit(2000000332.395:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.7.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8f2fe4e969 code=0x7ffc0000 [ 110.904152][ T3261] ================================================================== [ 110.912391][ T3261] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 110.920881][ T3261] [ 110.923460][ T3261] write to 0xffff888102092f78 of 2 bytes by interrupt on cpu 0: [ 110.931663][ T3261] virtqueue_disable_cb+0x7a/0x150 [ 110.936813][ T3261] skb_xmit_done+0x65/0x140 [ 110.941349][ T3261] vring_interrupt+0x152/0x180 [ 110.946149][ T3261] __handle_irq_event_percpu+0x90/0x440 [ 110.951723][ T3261] handle_irq_event+0x64/0xf0 [ 110.956416][ T3261] handle_edge_irq+0x188/0x4f0 [ 110.961198][ T3261] __common_interrupt+0x60/0x100 [ 110.966321][ T3261] common_interrupt+0x7e/0x90 [ 110.971011][ T3261] asm_common_interrupt+0x26/0x40 [ 110.976046][ T3261] kcsan_setup_watchpoint+0x415/0x430 [ 110.981503][ T3261] mas_state_walk+0x29f/0x650 [ 110.986319][ T3261] mas_walk+0x30/0x120 [ 110.990429][ T3261] lock_vma_under_rcu+0xa2/0x2f0 [ 110.995384][ T3261] do_user_addr_fault+0x233/0x1090 [ 111.000608][ T3261] exc_page_fault+0x62/0xa0 [ 111.005133][ T3261] asm_exc_page_fault+0x26/0x30 [ 111.010025][ T3261] [ 111.012349][ T3261] read to 0xffff888102092f78 of 2 bytes by task 3261 on cpu 1: [ 111.019895][ T3261] virtqueue_disable_cb+0x58/0x150 [ 111.025202][ T3261] start_xmit+0x102/0x12c0 [ 111.029651][ T3261] dev_hard_start_xmit+0x125/0x3e0 [ 111.034797][ T3261] sch_direct_xmit+0x192/0x550 [ 111.039606][ T3261] __dev_queue_xmit+0xe4f/0x1fb0 [ 111.044649][ T3261] ip_finish_output2+0x77f/0x8b0 [ 111.049598][ T3261] ip_finish_output+0x112/0x290 [ 111.054456][ T3261] ip_output+0xad/0x170 [ 111.058615][ T3261] __ip_queue_xmit+0xb25/0xb40 [ 111.063545][ T3261] ip_queue_xmit+0x39/0x50 [ 111.067983][ T3261] __tcp_transmit_skb+0x1641/0x1a60 [ 111.073203][ T3261] tcp_write_xmit+0x1210/0x2fd0 [ 111.078082][ T3261] __tcp_push_pending_frames+0x6d/0x1b0 [ 111.083648][ T3261] tcp_push+0x311/0x330 [ 111.087808][ T3261] tcp_sendmsg_locked+0x2510/0x2cc0 [ 111.093025][ T3261] tcp_sendmsg+0x2f/0x50 [ 111.097288][ T3261] inet_sendmsg+0x76/0xd0 [ 111.101661][ T3261] __sock_sendmsg+0x102/0x180 [ 111.106376][ T3261] sock_write_iter+0x165/0x1b0 [ 111.111158][ T3261] vfs_write+0x4a0/0x8e0 [ 111.115410][ T3261] ksys_write+0xda/0x1a0 [ 111.119666][ T3261] __x64_sys_write+0x40/0x50 [ 111.124403][ T3261] x64_sys_call+0x2cdd/0x2fb0 [ 111.129135][ T3261] do_syscall_64+0xd2/0x200 [ 111.134130][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.140073][ T3261] [ 111.143098][ T3261] value changed: 0x0000 -> 0x0001 [ 111.148139][ T3261] [ 111.150462][ T3261] Reported by Kernel Concurrency Sanitizer on: [ 111.156660][ T3261] CPU: 1 UID: 0 PID: 3261 Comm: syz-executor Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) [ 111.168951][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.179238][ T3261] ================================================================== SYZFAIL: failed to send rpc fd=3 want=24152 sent=0 n=-1 (errno 32: Broken pipe) [ 111.305233][ T3261] syz-executor (3261) used greatest stack depth: 9480 bytes left [ 111.763765][ T3651] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.827955][ T3651] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.887506][ T3651] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.937539][ T3651] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.000252][ T3651] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.056301][ T3651] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.116434][ T3651] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.166492][ T3651] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.230549][ T3651] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.277677][ T3651] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.327612][ T3651] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.387157][ T3651] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.441351][ T3651] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.507459][ T3651] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.547742][ T3651] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.607401][ T3651] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.661869][ T3651] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.708295][ T3651] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.757470][ T3651] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.807717][ T3651] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.859786][ T3651] bridge_slave_1: left allmulticast mode [ 112.865650][ T3651] bridge_slave_1: left promiscuous mode [ 112.871506][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.879485][ T3651] bridge_slave_0: left allmulticast mode [ 112.885349][ T3651] bridge_slave_0: left promiscuous mode [ 112.891159][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.899902][ T3651] bridge_slave_1: left allmulticast mode [ 112.905858][ T3651] bridge_slave_1: left promiscuous mode [ 112.911550][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.919565][ T3651] bridge_slave_0: left allmulticast mode [ 112.925441][ T3651] bridge_slave_0: left promiscuous mode [ 112.931365][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.939926][ T3651] bridge_slave_1: left allmulticast mode [ 112.945822][ T3651] bridge_slave_1: left promiscuous mode [ 112.951546][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.959298][ T3651] bridge_slave_0: left allmulticast mode [ 112.965042][ T3651] bridge_slave_0: left promiscuous mode [ 112.970725][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.979519][ T3651] bridge_slave_1: left allmulticast mode [ 112.985287][ T3651] bridge_slave_1: left promiscuous mode [ 112.991158][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.999185][ T3651] bridge_slave_0: left allmulticast mode [ 113.005101][ T3651] bridge_slave_0: left promiscuous mode [ 113.010878][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.019425][ T3651] bridge_slave_1: left allmulticast mode [ 113.025673][ T3651] bridge_slave_1: left promiscuous mode [ 113.031386][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.039133][ T3651] bridge_slave_0: left allmulticast mode [ 113.044912][ T3651] bridge_slave_0: left promiscuous mode [ 113.050613][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.219445][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.229704][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.239296][ T3651] bond0 (unregistering): Released all slaves [ 113.298303][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.308469][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.318091][ T3651] bond0 (unregistering): Released all slaves [ 113.407211][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.417254][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.427102][ T3651] bond0 (unregistering): Released all slaves [ 113.559918][ T3651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.569714][ T3651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.579432][ T3651] bond0 (unregistering): Released all slaves [ 113.708976][ T3651] tipc: Left network mode [ 113.713602][ T3651] tipc: Disabling bearer [ 113.718946][ T3651] tipc: Left network mode [ 113.804851][ T3651] hsr_slave_0: left promiscuous mode [ 113.810519][ T3651] hsr_slave_1: left promiscuous mode [ 113.816416][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.824027][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.831839][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.839355][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.848792][ T3651] hsr_slave_0: left promiscuous mode [ 113.854435][ T3651] hsr_slave_1: left promiscuous mode [ 113.860107][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.867575][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.875276][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.882781][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.892012][ T3651] hsr_slave_0: left promiscuous mode [ 113.897828][ T3651] hsr_slave_1: left promiscuous mode [ 113.903464][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.910932][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.918542][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.926007][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.935670][ T3651] hsr_slave_0: left promiscuous mode [ 113.941273][ T3651] hsr_slave_1: left promiscuous mode [ 113.946898][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.954301][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.961798][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.969348][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.978980][ T3651] hsr_slave_0: left promiscuous mode [ 113.984629][ T3651] hsr_slave_1: left promiscuous mode [ 113.990259][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.997728][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.005577][ T3651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.013039][ T3651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.034363][ T3651] veth1_macvtap: left promiscuous mode [ 114.039974][ T3651] veth0_macvtap: left promiscuous mode [ 114.045610][ T3651] veth1_vlan: left promiscuous mode [ 114.050874][ T3651] veth0_vlan: left promiscuous mode [ 114.057097][ T3651] veth1_macvtap: left promiscuous mode [ 114.062679][ T3651] veth0_macvtap: left promiscuous mode [ 114.068378][ T3651] veth1_vlan: left promiscuous mode [ 114.073618][ T3651] veth0_vlan: left promiscuous mode [ 114.079336][ T3651] veth1_macvtap: left promiscuous mode [ 114.084896][ T3651] veth0_macvtap: left promiscuous mode [ 114.090461][ T3651] veth1_vlan: left promiscuous mode [ 114.095800][ T3651] veth0_vlan: left promiscuous mode [ 114.101575][ T3651] veth1_macvtap: left promiscuous mode [ 114.107226][ T3651] veth0_macvtap: left promiscuous mode [ 114.112754][ T3651] veth1_vlan: left promiscuous mode [ 114.118053][ T3651] veth0_vlan: left promiscuous mode [ 114.123759][ T3651] veth1_macvtap: left promiscuous mode [ 114.129315][ T3651] veth0_macvtap: left promiscuous mode [ 114.135110][ T3651] veth1_vlan: left promiscuous mode [ 114.140331][ T3651] veth0_vlan: left promiscuous mode [ 114.342573][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 114.352546][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 114.413369][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 114.423100][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 114.430728][ T3712] smc: removing ib device syz! [ 114.477607][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 114.487496][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 114.543377][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 114.552922][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 114.608553][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 114.618387][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 115.566582][ T3651] IPVS: stop unused estimator thread 0... [ 115.573179][ T3651] IPVS: stop unused estimator thread 0...