last executing test programs: 3m18.127347009s ago: executing program 32 (id=166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x8, 0x0, 0x0}}, 0x10) 1m44.78498348s ago: executing program 33 (id=3238): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x12, 0x7c, 0x0, @local}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m38.804788588s ago: executing program 34 (id=3457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) close(r1) 1m15.809290526s ago: executing program 35 (id=4252): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a00a421"], 0x24}}, 0x0) 1m10.788699151s ago: executing program 7 (id=4408): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m9.919254513s ago: executing program 7 (id=4449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1m9.867458583s ago: executing program 7 (id=4450): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) 1m9.539834018s ago: executing program 7 (id=4460): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 1m9.539541158s ago: executing program 36 (id=4460): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 46.886757141s ago: executing program 8 (id=5120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r1) 46.864983191s ago: executing program 8 (id=5121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 45.964688773s ago: executing program 8 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) 45.846437325s ago: executing program 8 (id=5145): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x405, 0x2, 0x0, 0x12, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e22000000c3f414818381199c01000100", [0x204]}) 45.538928389s ago: executing program 8 (id=5162): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 45.076767305s ago: executing program 8 (id=5170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 45.032194555s ago: executing program 37 (id=5170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 32.581806137s ago: executing program 2 (id=5437): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000000000000000000000000000001c000000000000000000000008"], 0x50}}], 0x1, 0xc080) 32.561807587s ago: executing program 2 (id=5439): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1b8, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 32.35980584s ago: executing program 2 (id=5432): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=[r3], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 32.302154621s ago: executing program 2 (id=5434): syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000000b40)="$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") execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x2002, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'iso9660\x00', 0x3a, 'iso9660\x00', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43, 0x43, 0x4f]}, 0x3d) 32.163369073s ago: executing program 2 (id=5454): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) 31.977253545s ago: executing program 2 (id=5465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'tunl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) sendto$packet(r1, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0xb, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 31.939245355s ago: executing program 38 (id=5465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'tunl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) sendto$packet(r1, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0xb, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 20.518485154s ago: executing program 3 (id=5642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 20.475853284s ago: executing program 3 (id=5643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19.899789062s ago: executing program 3 (id=5646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 19.857173432s ago: executing program 3 (id=5648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) 19.806019623s ago: executing program 3 (id=5651): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.657058735s ago: executing program 3 (id=5659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 19.630783045s ago: executing program 39 (id=5659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 19.449276798s ago: executing program 9 (id=5667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1a3f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 19.406905048s ago: executing program 9 (id=5669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 19.296479649s ago: executing program 9 (id=5672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0xfffe, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 18.021931256s ago: executing program 9 (id=5677): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) 17.884231738s ago: executing program 9 (id=5690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 17.792012929s ago: executing program 9 (id=5681): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf", 0x2, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x1, 0x4) 17.791763259s ago: executing program 40 (id=5681): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf", 0x2, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x1, 0x4) 1.728647277s ago: executing program 6 (id=6009): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.273129053s ago: executing program 1 (id=6016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 1.236196144s ago: executing program 6 (id=6017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x8050) 1.167929875s ago: executing program 5 (id=6018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x102, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x4, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @remote, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1]}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB='\b'], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 1.167414085s ago: executing program 1 (id=6019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xf}, 0x82, 0xffffffff, 0x8, 0x9, 0x4, 0x100, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 1.167139945s ago: executing program 6 (id=6020): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 1.149871585s ago: executing program 5 (id=6021): ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.108738385s ago: executing program 6 (id=6022): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x7fffffb}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x6}}}, 0x10, 0x0}, 0x814) 1.027862536s ago: executing program 5 (id=6023): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) 1.027470666s ago: executing program 6 (id=6024): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 896.768708ms ago: executing program 4 (id=6029): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 896.465798ms ago: executing program 0 (id=6030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000040), 0x0) 883.440188ms ago: executing program 0 (id=6031): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 867.605618ms ago: executing program 4 (id=6032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffe72, &(0x7f0000000200)={&(0x7f0000000640)={0x24, r3, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 813.698169ms ago: executing program 0 (id=6033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000240)=""/30, 0x1e) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) 813.137509ms ago: executing program 4 (id=6034): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x408, 0x2}}, {0x8, 0x1b, [0x0, 0xfffe]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 812.773159ms ago: executing program 1 (id=6035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 802.620619ms ago: executing program 4 (id=6036): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 802.054389ms ago: executing program 1 (id=6037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @void}, 0x10) 776.19957ms ago: executing program 4 (id=6038): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 729.24686ms ago: executing program 1 (id=6039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(r0, 0x3) 728.69917ms ago: executing program 0 (id=6040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 728.2367ms ago: executing program 4 (id=6041): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 727.94065ms ago: executing program 1 (id=6042): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r2, r3, 0x0, 0x8000fffffffe) 722.53718ms ago: executing program 0 (id=6043): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 455.966423ms ago: executing program 0 (id=6044): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x1) 198.242047ms ago: executing program 6 (id=6045): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x4, 0x6, 0x1, 0x40, 0x7]}, &(0x7f0000000200)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x7ff, 0x0, 0x0, 0xc]}, &(0x7f0000000000)=0x54) 184.886108ms ago: executing program 5 (id=6046): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x1ffff, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) 95.925469ms ago: executing program 5 (id=6047): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 5 (id=6048): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) kernel console output (not intermixed with test programs): 85892][T15563] vhci_hcd: connection closed [ 183.286065][T15561] vhci_hcd: connection closed [ 183.291104][T15558] vhci_hcd: connection closed [ 183.297742][ T3771] vhci_hcd: stop threads [ 183.306742][ T3771] vhci_hcd: release socket [ 183.311198][ T3771] vhci_hcd: disconnect device [ 183.321325][T15560] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 183.340072][T15560] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5006: attempt to clear invalid blocks 2 len 1 [ 183.364818][T15560] EXT4-fs (loop2): Remounting filesystem read-only [ 183.373498][ T3771] vhci_hcd: stop threads [ 183.377803][ T3771] vhci_hcd: release socket [ 183.382269][ T3771] vhci_hcd: disconnect device [ 183.392613][T15560] EXT4-fs (loop2): 1 truncate cleaned up [ 183.405165][T15560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.417737][ T3391] vhci_hcd: vhci_device speed not set [ 183.431333][ T3771] vhci_hcd: stop threads [ 183.435603][ T3771] vhci_hcd: release socket [ 183.440093][ T3771] vhci_hcd: disconnect device [ 183.481518][ T3391] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 183.489075][ T3391] usb 3-1: enqueue for inactive port 0 [ 183.497256][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.511257][ T3391] usb 3-1: enqueue for inactive port 0 [ 183.518161][ T3391] usb 3-1: enqueue for inactive port 0 [ 183.601253][ T3391] vhci_hcd: vhci_device speed not set [ 183.694936][ T29] audit: type=1326 audit(2000000011.610:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.741014][ T29] audit: type=1326 audit(2000000011.610:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.764839][ T29] audit: type=1326 audit(2000000011.610:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.788546][ T29] audit: type=1326 audit(2000000011.610:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.812333][ T29] audit: type=1326 audit(2000000011.610:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.836131][ T29] audit: type=1326 audit(2000000011.610:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.848570][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5019'. [ 183.859846][ T29] audit: type=1326 audit(2000000011.610:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.894432][ T29] audit: type=1326 audit(2000000011.610:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.8.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde5e6fe969 code=0x7ffc0000 [ 183.997889][T15591] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 184.004532][T15591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.012055][T15591] vhci_hcd vhci_hcd.0: Device attached [ 184.020390][T15591] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 184.026940][T15591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.034669][T15591] vhci_hcd vhci_hcd.0: Device attached [ 184.041130][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 184.067486][T15591] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 184.074029][T15591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.081784][T15591] vhci_hcd vhci_hcd.0: Device attached [ 184.095214][T15602] vhci_hcd: connection closed [ 184.095314][T15598] vhci_hcd: connection closed [ 184.095453][ T3771] vhci_hcd: stop threads [ 184.109495][ T3771] vhci_hcd: release socket [ 184.114143][ T3771] vhci_hcd: disconnect device [ 184.118888][T15592] vhci_hcd: connection closed [ 184.120835][ T3771] vhci_hcd: stop threads [ 184.130055][ T3771] vhci_hcd: release socket [ 184.134720][ T3771] vhci_hcd: disconnect device [ 184.141002][ T3771] vhci_hcd: stop threads [ 184.145467][ T3771] vhci_hcd: release socket [ 184.150012][ T3771] vhci_hcd: disconnect device [ 184.190552][ T2970] vhci_hcd: vhci_device speed not set [ 184.617059][T15628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 184.623650][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.631190][T15628] vhci_hcd vhci_hcd.0: Device attached [ 184.638809][T15628] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 184.645344][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.652987][T15628] vhci_hcd vhci_hcd.0: Device attached [ 184.662774][T15628] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 184.669373][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.677127][T15628] vhci_hcd vhci_hcd.0: Device attached [ 184.688080][T15631] vhci_hcd: connection closed [ 184.688379][T15629] vhci_hcd: connection closed [ 184.690551][T15633] vhci_hcd: connection closed [ 184.700841][ T3734] vhci_hcd: stop threads [ 184.710150][ T3734] vhci_hcd: release socket [ 184.714769][ T3734] vhci_hcd: disconnect device [ 184.727561][ T3734] vhci_hcd: stop threads [ 184.732021][ T3734] vhci_hcd: release socket [ 184.734386][T15638] loop0: detected capacity change from 0 to 512 [ 184.736621][ T3734] vhci_hcd: disconnect device [ 184.743318][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'. [ 184.771265][ T3734] vhci_hcd: stop threads [ 184.775695][ T3734] vhci_hcd: release socket [ 184.780298][ T3734] vhci_hcd: disconnect device [ 184.782150][T15638] EXT4-fs: Ignoring removed nobh option [ 184.806850][T15638] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 184.815419][T15638] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.5035: attempt to clear invalid blocks 2 len 1 [ 184.828592][T15638] EXT4-fs (loop0): Remounting filesystem read-only [ 184.836713][T15638] EXT4-fs (loop0): 1 truncate cleaned up [ 184.844165][T15638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.879133][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.930869][T15643] lo speed is unknown, defaulting to 1000 [ 185.346603][T15652] lo speed is unknown, defaulting to 1000 [ 185.623988][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5050'. [ 185.683184][T15677] loop8: detected capacity change from 0 to 512 [ 185.691126][T15677] EXT4-fs: Ignoring removed nobh option [ 185.697973][T15677] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 185.717494][T15677] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5052: attempt to clear invalid blocks 2 len 1 [ 185.747420][T15682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 185.754045][T15682] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.761592][T15682] vhci_hcd vhci_hcd.0: Device attached [ 185.796127][T15677] EXT4-fs (loop8): Remounting filesystem read-only [ 185.810899][T15677] EXT4-fs (loop8): 1 truncate cleaned up [ 185.823839][T15682] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 185.830374][T15682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.838046][T15682] vhci_hcd vhci_hcd.0: Device attached [ 185.846242][T15677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.894880][T15687] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 185.901516][T15687] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.909223][T15687] vhci_hcd vhci_hcd.0: Device attached [ 185.917462][T13790] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.929774][T15694] vhci_hcd: connection closed [ 185.934051][ T3788] vhci_hcd: stop threads [ 185.934089][T15683] vhci_hcd: connection closed [ 185.938839][ T3788] vhci_hcd: release socket [ 185.944009][T15688] vhci_hcd: connection closed [ 185.947796][ T3788] vhci_hcd: disconnect device [ 185.950768][ T1041] vhci_hcd: vhci_device speed not set [ 185.954084][ T3788] vhci_hcd: stop threads [ 185.971483][ T3788] vhci_hcd: release socket [ 185.975942][ T3788] vhci_hcd: disconnect device [ 185.982561][ T3788] vhci_hcd: stop threads [ 185.986846][ T3788] vhci_hcd: release socket [ 185.991316][ T3788] vhci_hcd: disconnect device [ 186.013407][ T1041] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 186.027355][T15703] loop0: detected capacity change from 0 to 512 [ 186.039625][ T1041] usb 3-1: enqueue for inactive port 0 [ 186.046494][T15703] EXT4-fs: Ignoring removed nobh option [ 186.052644][ T1041] usb 3-1: enqueue for inactive port 0 [ 186.058259][ T1041] usb 3-1: enqueue for inactive port 0 [ 186.120967][T15703] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 186.148794][T15703] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.5073: attempt to clear invalid blocks 2 len 1 [ 186.165954][ T1041] vhci_hcd: vhci_device speed not set [ 186.190031][T15703] EXT4-fs (loop0): Remounting filesystem read-only [ 186.197777][T15703] EXT4-fs (loop0): 1 truncate cleaned up [ 186.225977][T15703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.286361][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.317029][T15719] loop8: detected capacity change from 0 to 1024 [ 186.354871][T15719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.453430][T15729] gretap0: entered promiscuous mode [ 186.458693][T15729] macsec1: entered promiscuous mode [ 186.487656][T13790] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.527979][T15729] gretap0: left promiscuous mode [ 186.595005][T15739] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 186.601552][T15739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.609016][T15739] vhci_hcd vhci_hcd.0: Device attached [ 186.624344][T15739] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 186.630893][T15739] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.638555][T15739] vhci_hcd vhci_hcd.0: Device attached [ 186.653047][T15739] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 186.659627][T15739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.667330][T15739] vhci_hcd vhci_hcd.0: Device attached [ 186.674102][T15744] loop8: detected capacity change from 0 to 2048 [ 186.691336][T15745] vhci_hcd: connection closed [ 186.691540][T15748] vhci_hcd: connection closed [ 186.691681][ T12] vhci_hcd: stop threads [ 186.696368][T15740] vhci_hcd: connection closed [ 186.701020][ T12] vhci_hcd: release socket [ 186.701029][ T12] vhci_hcd: disconnect device [ 186.719522][ T12] vhci_hcd: stop threads [ 186.723835][ T12] vhci_hcd: release socket [ 186.728277][ T12] vhci_hcd: disconnect device [ 186.743010][ T12] vhci_hcd: stop threads [ 186.747477][ T12] vhci_hcd: release socket [ 186.751991][ T12] vhci_hcd: disconnect device [ 186.790568][ T3391] vhci_hcd: vhci_device speed not set [ 186.830138][T15755] macsec1: entered promiscuous mode [ 186.844952][T15759] loop8: detected capacity change from 0 to 512 [ 186.851981][T15759] EXT4-fs: Ignoring removed nobh option [ 186.865104][T15759] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 186.893054][T15759] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5082: attempt to clear invalid blocks 2 len 1 [ 186.907214][T15759] EXT4-fs (loop8): Remounting filesystem read-only [ 186.934840][T15766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15766 comm=syz.9.5084 [ 186.947425][T15766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15766 comm=syz.9.5084 [ 186.961020][T15759] EXT4-fs (loop8): 1 truncate cleaned up [ 186.967141][T15759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.004896][T13790] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.049267][T15770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15770 comm=syz.2.5100 [ 187.062120][T15770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15770 comm=syz.2.5100 [ 187.252904][T15774] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 187.259478][T15774] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.267091][T15774] vhci_hcd vhci_hcd.0: Device attached [ 187.280029][T15774] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 187.286648][T15774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.294318][T15774] vhci_hcd vhci_hcd.0: Device attached [ 187.301155][T15774] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 187.307682][T15774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.315359][T15774] vhci_hcd vhci_hcd.0: Device attached [ 187.317011][T15782] loop0: detected capacity change from 0 to 1024 [ 187.333523][T15785] vhci_hcd: connection closed [ 187.333761][ T3734] vhci_hcd: stop threads [ 187.342784][ T3734] vhci_hcd: release socket [ 187.347199][ T3734] vhci_hcd: disconnect device [ 187.353667][T15779] vhci_hcd: connection closed [ 187.357677][ T3734] vhci_hcd: stop threads [ 187.357678][T15783] vhci_hcd: connection closed [ 187.357688][ T3734] vhci_hcd: release socket [ 187.357698][ T3734] vhci_hcd: disconnect device [ 187.384997][ T3734] vhci_hcd: stop threads [ 187.389259][ T3734] vhci_hcd: release socket [ 187.393709][ T3734] vhci_hcd: disconnect device [ 187.399510][T15782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.480671][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.558928][T15800] loop0: detected capacity change from 0 to 2048 [ 187.597387][T15806] gretap0: entered promiscuous mode [ 187.602784][T15806] macsec1: entered promiscuous mode [ 187.609864][T15806] gretap0: left promiscuous mode [ 188.392907][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 188.392925][ T29] audit: type=1326 audit(2000000016.310:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.397753][T15813] loop0: detected capacity change from 0 to 2048 [ 188.422744][ T29] audit: type=1326 audit(2000000016.310:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.473018][ T29] audit: type=1326 audit(2000000016.390:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.496678][ T29] audit: type=1326 audit(2000000016.390:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.532952][ T29] audit: type=1400 audit(2000000016.450:3767): avc: denied { append } for pid=15820 comm="syz.2.5110" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.562220][T15816] Falling back ldisc for ttyS3. [ 188.612398][ T29] audit: type=1326 audit(2000000016.520:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.620185][T15829] loop0: detected capacity change from 0 to 2048 [ 188.635859][ T29] audit: type=1326 audit(2000000016.520:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.635915][ T29] audit: type=1326 audit(2000000016.520:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.635945][ T29] audit: type=1326 audit(2000000016.520:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.712762][ T29] audit: type=1326 audit(2000000016.520:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.9.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 188.815788][T15845] macsec1: entered promiscuous mode [ 188.821094][T15845] gretap0: entered promiscuous mode [ 188.848549][T15845] gretap0: left promiscuous mode [ 188.980797][T15857] Falling back ldisc for ttyS3. [ 189.042699][T15865] gretap0: entered promiscuous mode [ 189.048058][T15865] macsec1: entered promiscuous mode [ 189.080852][T15865] gretap0: left promiscuous mode [ 189.871099][T15908] Falling back ldisc for ttyS3. [ 189.885120][T15920] loop8: detected capacity change from 0 to 512 [ 189.907619][T15922] netlink: 'syz.1.5150': attribute type 13 has an invalid length. [ 189.916685][T15922] gretap0: refused to change device tx_queue_len [ 189.923365][T15922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.959793][T15920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.977669][T15920] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.083774][T15920] support for cryptoloop has been removed. Use dm-crypt instead. [ 190.168195][T13790] EXT4-fs error (device loop8): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 190.180060][T15926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.199913][T13790] EXT4-fs error (device loop8): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 190.249600][T15926] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.258208][T15926] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.266652][T15926] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.275077][T15926] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.333748][T15926] wireguard0: left promiscuous mode [ 190.339080][T15926] wireguard0: left allmulticast mode [ 190.361799][T15926] ipvlan2: left promiscuous mode [ 190.395566][T15926] wireguard2: left promiscuous mode [ 190.401102][T15926] wireguard2: left allmulticast mode [ 190.475076][T15967] macsec1: entered promiscuous mode [ 190.581143][T13790] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.597528][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.607968][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.664880][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.675216][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.703702][T15980] syz.2.5172: attempt to access beyond end of device [ 190.703702][T15980] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.743081][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.753469][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.813688][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.824092][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.911958][T15982] lo speed is unknown, defaulting to 1000 [ 190.917954][ T12] bridge_slave_1: left allmulticast mode [ 190.923674][ T12] bridge_slave_1: left promiscuous mode [ 190.929335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.940741][ T12] bridge_slave_0: left allmulticast mode [ 190.946485][ T12] bridge_slave_0: left promiscuous mode [ 190.952492][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.043847][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.054151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.063808][ T12] bond0 (unregistering): Released all slaves [ 191.147771][ T12] hsr_slave_0: left promiscuous mode [ 191.159478][ T12] hsr_slave_1: left promiscuous mode [ 191.165287][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.172738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.191577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.199023][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.216505][ T12] veth1_macvtap: left promiscuous mode [ 191.237492][ T12] veth0_macvtap: left promiscuous mode [ 191.393852][T16010] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 191.402824][T15982] chnl_net:caif_netlink_parms(): no params data found [ 191.456883][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.463985][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.471639][T15982] bridge_slave_0: entered allmulticast mode [ 191.478186][T15982] bridge_slave_0: entered promiscuous mode [ 191.486439][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.493658][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.500934][T15982] bridge_slave_1: entered allmulticast mode [ 191.507306][T15982] bridge_slave_1: entered promiscuous mode [ 191.531171][T16022] gretap0: left promiscuous mode [ 191.550767][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.558088][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.567662][T16022] $Hÿ: left promiscuous mode [ 191.572825][T16022] bond_slave_0: left promiscuous mode [ 191.578534][T16022] bond_slave_1: left promiscuous mode [ 191.622958][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.661081][T16022] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.669613][T16022] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.678169][T16022] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.686820][T16022] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.703127][T16022] wireguard0: left promiscuous mode [ 191.708513][T16022] wireguard0: left allmulticast mode [ 191.714600][T16022] ipvlan2: left promiscuous mode [ 191.720253][T16022] bond2: left promiscuous mode [ 191.720970][T16037] loop0: detected capacity change from 0 to 1024 [ 191.725078][T16022] bond2: left allmulticast mode [ 191.732124][T16037] EXT4-fs: Ignoring removed bh option [ 191.738987][T16022] ip6gre2: left allmulticast mode [ 191.753337][T16037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.771335][ T23] lo speed is unknown, defaulting to 1000 [ 191.773166][T15982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.777133][ T23] syz0: Port: 1 Link DOWN [ 191.805182][T15982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.833234][T15982] team0: Port device team_slave_0 added [ 191.843812][T15982] team0: Port device team_slave_1 added [ 191.865983][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.889724][T15982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.896858][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.922881][T15982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.935066][T15982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.942219][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.968318][T15982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.992894][T16052] loop0: detected capacity change from 0 to 512 [ 192.002910][T15982] hsr_slave_0: entered promiscuous mode [ 192.009189][T15982] hsr_slave_1: entered promiscuous mode [ 192.015382][T15982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.023049][T15982] Cannot create hsr debugfs directory [ 192.023617][T16052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.041836][T16052] ext4 filesystem being mounted at /1060/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.100753][T16052] support for cryptoloop has been removed. Use dm-crypt instead. [ 192.118127][ T3322] EXT4-fs error (device loop0): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 192.129726][ T3322] EXT4-fs error (device loop0): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 192.344062][T11256] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.368681][T15982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.377714][T15982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.393796][T15982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.406612][T15982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.424107][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.431207][T15982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.438559][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.445612][T15982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.455057][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.462842][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.493454][T15982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.507129][T15982] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.516583][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.523733][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.534224][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.541331][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.604141][T15982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.653818][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.663142][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.672364][ T3734] bond0 (unregistering): Released all slaves [ 192.680869][ T3734] bond1 (unregistering): Released all slaves [ 192.722594][T15982] veth0_vlan: entered promiscuous mode [ 192.730251][T15982] veth1_vlan: entered promiscuous mode [ 192.742836][T15982] veth0_macvtap: entered promiscuous mode [ 192.749980][T15982] veth1_macvtap: entered promiscuous mode [ 192.763721][T15982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.772206][T15982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.786042][T15982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.794847][T15982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.803669][T15982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.812500][T15982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.823419][ T3734] hsr_slave_0: left promiscuous mode [ 192.828953][ T3734] hsr_slave_1: left promiscuous mode [ 192.834674][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.039911][T16070] lo speed is unknown, defaulting to 1000 [ 193.092972][T16070] chnl_net:caif_netlink_parms(): no params data found [ 193.129477][T16070] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.136586][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.143815][T16070] bridge_slave_0: entered allmulticast mode [ 193.150101][T16070] bridge_slave_0: entered promiscuous mode [ 193.157203][T16070] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.164394][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.171815][T16070] bridge_slave_1: entered allmulticast mode [ 193.178381][T16070] bridge_slave_1: entered promiscuous mode [ 193.196153][T16070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.206659][T16070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.225638][T16070] team0: Port device team_slave_0 added [ 193.232406][T16070] team0: Port device team_slave_1 added [ 193.249607][T16070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.256709][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.282743][T16070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.294076][T16070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.301280][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.327263][T16070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.356538][T16070] hsr_slave_0: entered promiscuous mode [ 193.362610][T16070] hsr_slave_1: entered promiscuous mode [ 193.635590][T16070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.644689][T16070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.653612][T16070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.662322][T16070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.696272][T16070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.708512][T16070] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.717910][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.725012][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.736527][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.743649][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.788436][T16070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.816283][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 193.816300][ T29] audit: type=1400 audit(2000000021.730:3823): avc: denied { read write } for pid=16091 comm="syz.9.5207" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 193.846157][ T29] audit: type=1400 audit(2000000021.730:3824): avc: denied { open } for pid=16091 comm="syz.9.5207" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 193.855977][T16070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.930320][T16101] SELinux: syz.9.5210 (16101) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 194.019776][T16120] $Hÿ: left promiscuous mode [ 194.024735][T16120] bond_slave_0: left promiscuous mode [ 194.030313][T16120] bond_slave_1: left promiscuous mode [ 194.044003][T16120] wireguard0: left promiscuous mode [ 194.049315][T16120] wireguard0: left allmulticast mode [ 194.056273][T16120] gretap1: left promiscuous mode [ 194.061429][T16120] gretap1: left allmulticast mode [ 194.067406][T16120] ipvlan2: left promiscuous mode [ 194.074213][T16120] ip6gre2: left allmulticast mode [ 194.092304][T16120] wireguard2: left promiscuous mode [ 194.097556][T16120] wireguard2: left allmulticast mode [ 194.113620][T16120] bond2: left promiscuous mode [ 194.118494][T16120] vxcan1: left promiscuous mode [ 194.133941][T16133] loop2: detected capacity change from 0 to 1024 [ 194.147027][T16133] EXT4-fs: Ignoring removed bh option [ 194.156844][T16070] veth0_vlan: entered promiscuous mode [ 194.168513][T16133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.183682][T16070] veth1_vlan: entered promiscuous mode [ 194.224682][T16070] veth0_macvtap: entered promiscuous mode [ 194.251939][T16070] veth1_macvtap: entered promiscuous mode [ 194.268773][T16070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.280303][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.282269][T16070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.298833][T16070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.307812][T16070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.316569][T16070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.325425][T16070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.354321][ T29] audit: type=1326 audit(2000000022.270:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16149 comm="syz.9.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 194.381779][ T29] audit: type=1326 audit(2000000022.300:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16149 comm="syz.9.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 194.401652][T16153] SELinux: syz.2.5217 (16153) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 194.405453][ T29] audit: type=1326 audit(2000000022.300:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16149 comm="syz.9.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd328b3e969 code=0x7ffc0000 [ 194.463940][T16158] netlink: 452 bytes leftover after parsing attributes in process `syz.0.5205'. [ 194.477258][T16160] loop2: detected capacity change from 0 to 512 [ 194.494083][T16160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.507034][T16160] ext4 filesystem being mounted at /999/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.570558][T16160] support for cryptoloop has been removed. Use dm-crypt instead. [ 194.589239][ T3321] EXT4-fs error (device loop2): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 194.602453][ T3321] EXT4-fs error (device loop2): ext4_lookup:1784: inode #2: comm syz-executor: 'ÿ.' linked to parent dir [ 194.652369][T13601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.905253][ T3730] bridge_slave_1: left allmulticast mode [ 194.910975][ T3730] bridge_slave_1: left promiscuous mode [ 194.916876][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.924579][ T3730] bridge_slave_0: left allmulticast mode [ 194.930247][ T3730] bridge_slave_0: left promiscuous mode [ 194.935992][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.993858][ T3730] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.003423][ T3730] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.012670][ T3730] $Hÿ (unregistering): Released all slaves [ 195.021251][ T3730] bond1 (unregistering): Released all slaves [ 195.029825][ T3730] bond2 (unregistering): Released all slaves [ 195.081105][ T3730] hsr_slave_0: left promiscuous mode [ 195.086734][ T3730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.226411][T16180] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.233730][T16180] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.283542][T16180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.293995][T16180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.328525][T16180] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.337681][T16180] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.346883][T16180] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.356090][T16180] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.369120][T16180] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.378082][T16180] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.387240][T16180] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.396659][T16180] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.406026][T16180] vxlan0: left promiscuous mode [ 195.524200][T16207] loop3: detected capacity change from 0 to 1024 [ 195.535187][T16207] EXT4-fs: Ignoring removed bh option [ 195.555548][T16207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.615236][T16216] netlink: 452 bytes leftover after parsing attributes in process `syz.9.5230'. [ 195.634217][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.636674][T16188] chnl_net:caif_netlink_parms(): no params data found [ 195.680487][ T29] audit: type=1400 audit(2000000023.590:3828): avc: denied { mounton } for pid=16218 comm="syz.1.5233" path="/1110/bus" dev="tmpfs" ino=5716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.731644][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.739011][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.748450][T16188] bridge_slave_0: entered allmulticast mode [ 195.752018][ T29] audit: type=1400 audit(2000000023.660:3829): avc: denied { connect } for pid=16227 comm="syz.1.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.755387][T16188] bridge_slave_0: entered promiscuous mode [ 195.774153][ T29] audit: type=1400 audit(2000000023.660:3830): avc: denied { write } for pid=16227 comm="syz.1.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.781175][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.806873][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.815440][T16188] bridge_slave_1: entered allmulticast mode [ 195.834450][T16188] bridge_slave_1: entered promiscuous mode [ 195.863222][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.875288][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.905196][T16188] team0: Port device team_slave_0 added [ 195.912809][T16188] team0: Port device team_slave_1 added [ 195.937646][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.944741][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.970714][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.992191][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.999251][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.025439][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.067205][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.074484][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.096886][T16246] loop0: detected capacity change from 0 to 2048 [ 196.106382][T16251] netlink: 452 bytes leftover after parsing attributes in process `syz.1.5248'. [ 196.146765][T16246] Alternate GPT is invalid, using primary GPT. [ 196.153251][T16246] loop0: p2 p3 p7 [ 196.193577][T16242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.203589][T16242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.231179][T16242] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.240118][T16242] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.249320][T16242] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.258420][T16242] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.278269][T16253] sch_tbf: burst 3092 is lower than device lo mtu (39799) ! [ 196.323365][T16188] hsr_slave_0: entered promiscuous mode [ 196.334554][T16188] hsr_slave_1: entered promiscuous mode [ 196.350754][T16188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.354012][T16258] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 196.358312][T16188] Cannot create hsr debugfs directory [ 196.421892][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.429100][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.478830][T16265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.489875][T16265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.524936][T16265] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.533977][T16265] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.543117][T16265] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.552248][T16265] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.704867][T16280] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5260'. [ 196.749061][T16283] loop3: detected capacity change from 0 to 2048 [ 196.773953][T16283] Alternate GPT is invalid, using primary GPT. [ 196.780367][T16283] loop3: p2 p3 p7 [ 196.806897][T16188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.815560][T16188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.823937][T16188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.832762][T16188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.864269][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.876584][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.885580][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.892675][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.905769][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.912827][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.956256][T16285] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 197.001897][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.056511][T16296] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 197.093327][T16188] veth0_vlan: entered promiscuous mode [ 197.101762][T16188] veth1_vlan: entered promiscuous mode [ 197.126425][ T29] audit: type=1400 audit(2000000025.040:3831): avc: denied { write } for pid=16309 comm="syz.3.5272" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.127506][T16311] program syz.3.5272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.164396][T16311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 197.166641][T16188] veth0_macvtap: entered promiscuous mode [ 197.195701][T16188] veth1_macvtap: entered promiscuous mode [ 197.207231][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.218450][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.227661][T16188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.236465][T16188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.245227][T16188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.253933][T16188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.298106][ T29] audit: type=1326 audit(2000000025.210:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16318 comm="syz.2.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17198fe969 code=0x7ffc0000 [ 197.327006][T16324] program syz.1.5285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.337107][T16324] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 198.166060][T16332] loop2: detected capacity change from 0 to 2048 [ 198.213323][T16332] Alternate GPT is invalid, using primary GPT. [ 198.219784][T16332] loop2: p2 p3 p7 [ 198.274406][T16349] loop2: detected capacity change from 0 to 1024 [ 198.285257][T16349] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.296209][T16349] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.322259][T16349] JBD2: no valid journal superblock found [ 198.328093][T16349] EXT4-fs (loop2): Could not load journal inode [ 198.354088][T16349] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 198.414417][T16365] loop2: detected capacity change from 0 to 164 [ 198.423053][T16365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 198.434126][T16365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 198.442542][T16365] Symlink component flag not implemented [ 198.448219][T16365] Symlink component flag not implemented [ 198.450594][T16363] Falling back ldisc for ttyS3. [ 198.454556][T16365] Symlink component flag not implemented (7) [ 198.464772][T16365] Symlink component flag not implemented (116) [ 198.708415][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x1 [ 198.715930][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.723479][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.731020][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.738512][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.746005][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.753411][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x2 [ 198.760820][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.768272][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.775688][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x4 [ 198.783084][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.790544][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.797927][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.805379][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.812787][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x2 [ 198.820255][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.827669][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.835072][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.842451][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.849823][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.857230][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.864628][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.872109][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.879551][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.886953][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.894414][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.901797][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.909298][T15949] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 198.919182][T15949] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 198.962075][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 198.962092][ T29] audit: type=1400 audit(2000000026.880:3842): avc: denied { bind } for pid=16390 comm="syz.1.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.051548][T16392] Falling back ldisc for ttyS3. [ 199.126521][ T29] audit: type=1400 audit(2000000027.040:3843): avc: denied { create } for pid=16414 comm="syz.2.5317" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.155067][ T29] audit: type=1400 audit(2000000027.040:3844): avc: denied { write } for pid=16414 comm="syz.2.5317" name="file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.177592][ T29] audit: type=1400 audit(2000000027.040:3845): avc: denied { open } for pid=16414 comm="syz.2.5317" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.200442][ T29] audit: type=1400 audit(2000000027.040:3846): avc: denied { ioctl } for pid=16414 comm="syz.2.5317" path="/11/file0" dev="tmpfs" ino=78 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.226719][ T29] audit: type=1400 audit(2000000027.070:3847): avc: denied { unlink } for pid=16188 comm="syz-executor" name="file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.257075][ T29] audit: type=1326 audit(2000000027.170:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16422 comm="syz.3.5322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa38499e969 code=0x0 [ 199.297300][ T29] audit: type=1326 audit(2000000027.210:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.2.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17198fe969 code=0x7ffc0000 [ 199.320882][ T29] audit: type=1326 audit(2000000027.210:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.2.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17198fe969 code=0x7ffc0000 [ 199.362958][ T29] audit: type=1326 audit(2000000027.210:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.2.5325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17198fe969 code=0x7ffc0000 [ 199.419749][T16447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5329'. [ 199.434604][T16443] SELinux: ebitmap: truncated map [ 199.441411][T16443] SELinux: failed to load policy [ 200.121100][T16457] Falling back ldisc for ttyS3. [ 200.154936][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5341'. [ 200.189474][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5341'. [ 200.221430][T16478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5344'. [ 200.270736][T16476] Falling back ldisc for ttyS3. [ 200.277607][T16482] SELinux: ebitmap: truncated map [ 200.285204][T16482] SELinux: failed to load policy [ 200.342934][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 200.352094][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5362'. [ 200.361162][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 200.371927][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5362'. [ 200.380929][T16494] netlink: 'syz.0.5362': attribute type 6 has an invalid length. [ 200.978615][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'. [ 201.039882][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'. [ 201.226141][T16523] SELinux: ebitmap: truncated map [ 201.238124][T16523] SELinux: failed to load policy [ 201.249307][T16527] loop2: detected capacity change from 0 to 1024 [ 201.263224][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5365'. [ 201.272807][T16531] netlink: 'syz.9.5365': attribute type 6 has an invalid length. [ 201.286853][T16527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.299059][T16527] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.314406][T16527] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5367: bg 0: block 393: padding at end of block bitmap is not set [ 201.379832][T16188] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.922154][T16564] vhci_hcd: invalid port number 96 [ 201.927328][T16564] vhci_hcd: default hub control req: 2000 vfffc i0060 l0 [ 201.973225][T16570] SELinux: failed to load policy [ 202.185734][T16577] loop2: detected capacity change from 0 to 512 [ 202.192048][T16578] loop3: detected capacity change from 0 to 1024 [ 202.198668][T16574] loop0: detected capacity change from 0 to 512 [ 202.198875][T16577] EXT4-fs: Ignoring removed i_version option [ 202.206706][T16574] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.216491][T16578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.217941][T16574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.229761][T16578] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.241400][T16577] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.257251][T16577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5387: bg 0: block 131: padding at end of block bitmap is not set [ 202.272759][T16574] EXT4-fs (loop0): 1 truncate cleaned up [ 202.277017][T16578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5386: bg 0: block 393: padding at end of block bitmap is not set [ 202.279311][T16574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.294380][T16577] EXT4-fs (loop2): Remounting filesystem read-only [ 202.330184][T16577] EXT4-fs (loop2): 1 truncate cleaned up [ 202.339427][T16577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.353506][T16070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.365392][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.402017][T16586] smc: net device bond0 applied user defined pnetid SYZ2 [ 202.410757][T16586] smc: net device bond0 erased user defined pnetid SYZ2 [ 202.419223][T16188] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.490214][T16596] vhci_hcd: invalid port number 96 [ 202.495445][T16596] vhci_hcd: default hub control req: 2000 vfffc i0060 l0 [ 202.507631][T16602] SELinux: failed to load policy [ 202.569276][T16611] loop3: detected capacity change from 0 to 512 [ 202.579528][T16611] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.586685][T16611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.606525][T16611] EXT4-fs (loop3): 1 truncate cleaned up [ 202.630361][T16611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.660778][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.683855][T16620] loop3: detected capacity change from 0 to 512 [ 202.690532][T16620] EXT4-fs: Ignoring removed i_version option [ 202.698282][T16620] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.709134][T16620] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5405: bg 0: block 131: padding at end of block bitmap is not set [ 202.735083][T16620] EXT4-fs (loop3): Remounting filesystem read-only [ 202.741850][T16620] EXT4-fs (loop3): 1 truncate cleaned up [ 202.748086][T16620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.766238][T16623] smc: net device bond0 applied user defined pnetid SYZ2 [ 202.773990][T16623] smc: net device bond0 erased user defined pnetid SYZ2 [ 202.781648][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.885889][T16635] SELinux: failed to load policy [ 203.038814][T16649] hub 9-0:1.0: USB hub found [ 203.045867][T16649] hub 9-0:1.0: 8 ports detected [ 203.384413][T16678] SELinux: failed to load policy [ 203.436436][T16684] loop2: detected capacity change from 0 to 1764 [ 203.460291][T16690] hub 9-0:1.0: USB hub found [ 203.480891][T16690] hub 9-0:1.0: 8 ports detected [ 203.510937][T16692] SELinux: failed to load policy [ 203.546199][T16696] loop0: detected capacity change from 0 to 1764 [ 203.587751][T16702] hub 9-0:1.0: USB hub found [ 203.598375][T16702] hub 9-0:1.0: 8 ports detected [ 203.659439][T16711] netlink: 'syz.9.5445': attribute type 6 has an invalid length. [ 203.687547][T16713] ip6gre1: entered allmulticast mode [ 203.731720][ T3765] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.806713][ T3765] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.833746][ T3765] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.883764][ T3765] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.963364][ T3765] bridge_slave_1: left allmulticast mode [ 203.969034][ T3765] bridge_slave_1: left promiscuous mode [ 203.974852][ T3765] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.982614][ T3765] bridge_slave_0: left allmulticast mode [ 203.988329][ T3765] bridge_slave_0: left promiscuous mode [ 203.994098][ T3765] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.083461][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.093622][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.103088][ T3765] bond0 (unregistering): Released all slaves [ 204.139626][T16723] chnl_net:caif_netlink_parms(): no params data found [ 204.175387][ T3765] hsr_slave_0: left promiscuous mode [ 204.180969][ T3765] hsr_slave_1: left promiscuous mode [ 204.186500][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.194116][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.201850][ T3765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.209295][ T3765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.219895][ T3765] veth1_macvtap: left promiscuous mode [ 204.225471][ T3765] veth0_macvtap: left promiscuous mode [ 204.231149][ T3765] veth1_vlan: left promiscuous mode [ 204.236367][ T3765] veth0_vlan: left promiscuous mode [ 204.298675][ T3765] team0 (unregistering): Port device team_slave_1 removed [ 204.308155][ T3765] team0 (unregistering): Port device team_slave_0 removed [ 204.348863][T16723] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.355997][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.363172][T16723] bridge_slave_0: entered allmulticast mode [ 204.369763][T16723] bridge_slave_0: entered promiscuous mode [ 204.376371][T16723] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.383521][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.390904][T16723] bridge_slave_1: entered allmulticast mode [ 204.397231][T16723] bridge_slave_1: entered promiscuous mode [ 204.414125][T16723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.424426][T16723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.444327][T16723] team0: Port device team_slave_0 added [ 204.450961][T16723] team0: Port device team_slave_1 added [ 204.466676][T16723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.473700][T16723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.499782][T16723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.511137][T16723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.518203][T16723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.544314][T16723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.570385][T16723] hsr_slave_0: entered promiscuous mode [ 204.576534][T16723] hsr_slave_1: entered promiscuous mode [ 204.582451][T16723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.589990][T16723] Cannot create hsr debugfs directory [ 204.855635][T16723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.864317][T16723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.872921][T16723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.881882][T16723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.913903][T16723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.926749][T16723] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.936136][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.943233][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.954680][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.961809][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.020781][T16723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.119064][T16723] veth0_vlan: entered promiscuous mode [ 205.129988][T16723] veth1_vlan: entered promiscuous mode [ 205.145077][T16723] veth0_macvtap: entered promiscuous mode [ 205.152562][T16723] veth1_macvtap: entered promiscuous mode [ 205.163097][T16723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.173957][T16723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.183624][T16723] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.192458][T16723] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.201262][T16723] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.210166][T16723] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.252847][T16756] wireguard0: entered promiscuous mode [ 205.258333][T16756] wireguard0: entered allmulticast mode [ 205.337154][T16763] binfmt_misc: register: failed to install interpreter file ./file0 [ 205.377184][T16778] netlink: 'syz.4.5463': attribute type 6 has an invalid length. [ 205.385047][T16778] __nla_validate_parse: 6 callbacks suppressed [ 205.385119][T16778] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5463'. [ 205.454838][T16782] ip6gre1: entered allmulticast mode [ 205.467065][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.504149][T16791] netlink: 'syz.0.5483': attribute type 3 has an invalid length. [ 205.516299][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 205.516313][ T29] audit: type=1400 audit(2000000033.430:3965): avc: denied { mount } for pid=16790 comm="syz.9.5472" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 205.516458][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.531113][T16788] loop3: detected capacity change from 0 to 1024 [ 205.584144][T16794] wireguard0: entered promiscuous mode [ 205.585293][T16788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.589675][T16794] wireguard0: entered allmulticast mode [ 205.610267][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.632124][ T29] audit: type=1400 audit(2000000033.540:3966): avc: denied { mac_admin } for pid=16787 comm="syz.3.5471" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.653326][ T29] audit: type=1400 audit(2000000033.540:3967): avc: denied { relabelto } for pid=16787 comm="syz.3.5471" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 205.680590][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.703354][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.736356][T16810] loop3: detected capacity change from 0 to 1764 [ 205.884209][T16831] netlink: 'syz.9.5485': attribute type 3 has an invalid length. [ 205.944273][ T29] audit: type=1400 audit(2000000033.860:3968): avc: denied { associate } for pid=16840 comm="syz.9.5490" name="244" dev="tmpfs" ino=1269 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 205.997340][ T29] audit: type=1400 audit(2000000033.900:3969): avc: denied { remove_name } for pid=14294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 206.023616][ T29] audit: type=1400 audit(2000000033.900:3970): avc: denied { rmdir } for pid=14294 comm="syz-executor" name="244" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 206.139927][ T29] audit: type=1400 audit(2000000034.050:3971): avc: denied { mounton } for pid=16854 comm="syz.0.5501" path="/proc/104/task" dev="proc" ino=51369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 206.189002][T16864] loop3: detected capacity change from 0 to 1024 [ 206.195739][T16864] EXT4-fs: Ignoring removed i_version option [ 206.203485][T16864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.212778][T16864] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.224031][T16864] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 206.233441][T16864] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.239935][T16864] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.5503: iget: bad i_size value: 1407374883559424 [ 206.253232][T16864] EXT4-fs (loop3): Remounting filesystem read-only [ 206.259831][T16864] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 206.274632][T16864] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 206.290321][T16864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.317782][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.106624][T16784] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.117798][T16784] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.129640][T16784] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.141387][T16784] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.176355][ T29] audit: type=1400 audit(2000000035.090:3972): avc: denied { bind } for pid=16890 comm="syz.3.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.196393][ T29] audit: type=1400 audit(2000000035.090:3973): avc: denied { write } for pid=16890 comm="syz.3.5517" path="socket:[51576]" dev="sockfs" ino=51576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.585290][T16936] loop0: detected capacity change from 0 to 128 [ 207.593740][T16936] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 207.670411][ T29] audit: type=1400 audit(2000000035.580:3974): avc: denied { read } for pid=16946 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.724043][T16951] usb usb1: usbfs: process 16951 (syz.0.5552) did not claim interface 0 before use [ 208.190058][T16971] IPv6: Can't replace route, no match found [ 208.242676][T16980] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.292094][T16980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.358472][T16988] loop3: detected capacity change from 0 to 512 [ 208.366174][T16980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.377935][T16988] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 208.387131][T16988] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.5556: iget: bogus i_mode (5) [ 208.398850][T16988] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5556: couldn't read orphan inode 15 (err -117) [ 208.411651][T16988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.424106][T16988] ext2 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.425233][T16980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.453895][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.494237][T16995] usb usb1: usbfs: process 16995 (syz.3.5558) did not claim interface 0 before use [ 208.585196][T17001] netlink: 'syz.3.5561': attribute type 1 has an invalid length. [ 208.601609][T17001] bond1: entered promiscuous mode [ 208.606931][T17001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.636674][T17001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.644435][T17001] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.654852][T17001] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 208.667528][T17001] bond1: (slave vxcan3): making interface the new active one [ 208.674949][T17001] vxcan3: entered promiscuous mode [ 208.681667][T17001] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 208.718647][T17010] loop3: detected capacity change from 0 to 128 [ 208.726224][T17010] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 208.815513][T17019] loop3: detected capacity change from 0 to 8192 [ 208.832518][T17019] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 208.841201][T17019] FAT-fs (loop3): Filesystem has been set read-only [ 208.961790][T17033] loop3: detected capacity change from 0 to 2048 [ 209.005343][T17033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.050242][T17040] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 209.058946][T17026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.068908][T17026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.098238][T17040] bond1: entered promiscuous mode [ 209.104765][T17040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.124558][T17040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.131923][T17040] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.142177][T17040] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 209.155591][T17040] bond1: (slave vxcan3): making interface the new active one [ 209.163119][T17040] vxcan3: entered promiscuous mode [ 209.169405][T15982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.169802][T17040] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 209.731230][T17059] loop0: detected capacity change from 0 to 8192 [ 209.752009][T17059] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 209.760721][T17059] FAT-fs (loop0): Filesystem has been set read-only [ 210.585091][T17069] netlink: 'syz.9.5592': attribute type 1 has an invalid length. [ 210.599830][T17069] bond1: entered promiscuous mode [ 210.605093][T17069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.620170][T17069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.627328][T17069] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.637536][T17069] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 210.649574][T17069] bond1: (slave vxcan3): making interface the new active one [ 210.656998][T17069] vxcan3: entered promiscuous mode [ 210.663376][T17069] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 210.926412][T16980] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.937696][T16980] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.948797][T16980] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.960641][T16980] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.001026][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 211.001039][ T29] audit: type=1326 audit(2000000038.920:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 211.046528][ T29] audit: type=1326 audit(2000000038.950:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 211.046872][T17079] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 211.070166][ T29] audit: type=1326 audit(2000000038.950:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 211.079998][T17080] loop4: detected capacity change from 0 to 2048 [ 211.114271][T17080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.195504][T17076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.205091][T17076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.251871][T16723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.269316][T17089] loop0: detected capacity change from 0 to 1024 [ 211.278423][T17089] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.289452][T17089] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 211.302672][T17089] JBD2: no valid journal superblock found [ 211.308443][T17089] EXT4-fs (loop0): Could not load journal inode [ 211.320118][T17089] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 212.171568][T17106] netlink: 'syz.4.5604': attribute type 1 has an invalid length. [ 212.314555][T17120] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.372514][T17120] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.432826][T17120] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.492630][T17120] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.564429][ T29] audit: type=1326 audit(2000000040.480:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17095 comm="syz.3.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38499e969 code=0x7fc00000 [ 212.607282][ T29] audit: type=1326 audit(2000000040.520:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.3.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38499e969 code=0x7ffc0000 [ 212.647148][ T29] audit: type=1326 audit(2000000040.550:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.3.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa38499e969 code=0x7ffc0000 [ 212.670937][ T29] audit: type=1326 audit(2000000040.550:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.3.5610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38499e969 code=0x7ffc0000 [ 212.698083][ T29] audit: type=1326 audit(2000000040.610:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 212.732503][ T29] audit: type=1326 audit(2000000040.610:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 212.756141][ T29] audit: type=1326 audit(2000000040.610:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd2de969 code=0x7ffc0000 [ 212.789821][T17134] loop3: detected capacity change from 0 to 1024 [ 212.797763][T17134] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.808880][T17134] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.820282][T17134] JBD2: no valid journal superblock found [ 212.826088][T17134] EXT4-fs (loop3): Could not load journal inode [ 212.837468][T17134] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 214.736930][T17120] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.748018][T17120] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.759206][T17120] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.770315][T17120] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.799294][T17139] netlink: 'syz.3.5620': attribute type 1 has an invalid length. [ 214.833542][T17139] bond2: entered promiscuous mode [ 214.838797][T17145] loop0: detected capacity change from 0 to 1024 [ 214.845287][T17139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.862573][T17145] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 214.873498][T17145] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 214.884375][T17139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.891735][T17146] loop4: detected capacity change from 0 to 8192 [ 214.900983][T17139] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 214.911272][T17139] bond2: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 214.914011][T17145] JBD2: no valid journal superblock found [ 214.923738][T17139] bond2: (slave vxcan5): making interface the new active one [ 214.926231][T17145] EXT4-fs (loop0): Could not load journal inode [ 214.933605][T17139] vxcan5: entered promiscuous mode [ 214.935165][T17139] bond2: (slave vxcan5): Enslaving as an active interface with an up link [ 214.956821][T17146] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 214.965479][T17146] FAT-fs (loop4): Filesystem has been set read-only [ 214.999637][T17145] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 215.134231][T17176] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5639'. [ 215.166786][T17180] netlink: 'syz.4.5641': attribute type 1 has an invalid length. [ 215.195692][T17178] loop0: detected capacity change from 0 to 8192 [ 215.236822][T17178] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 215.245579][T17178] FAT-fs (loop0): Filesystem has been set read-only [ 215.862284][T17193] loop4: detected capacity change from 0 to 8192 [ 215.904864][T17193] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 215.913496][T17193] FAT-fs (loop4): Filesystem has been set read-only [ 215.977571][T17209] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5653'. [ 216.213238][ T3734] bridge_slave_1: left allmulticast mode [ 216.218942][ T3734] bridge_slave_1: left promiscuous mode [ 216.224851][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.240109][ T3734] bridge_slave_0: left allmulticast mode [ 216.245828][ T3734] bridge_slave_0: left promiscuous mode [ 216.251695][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.304327][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 216.304368][ T29] audit: type=1400 audit(2000000044.220:3995): avc: denied { mounton } for pid=17239 comm="syz.9.5669" path="/289/file0" dev="tmpfs" ino=1501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.312162][T17242] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.5671'. [ 216.353005][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.362427][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.371552][ T3734] bond0 (unregistering): Released all slaves [ 216.381009][ T3734] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 216.389125][ T3734] vxcan3: left promiscuous mode [ 216.395019][ T3734] bond1 (unregistering): Released all slaves [ 216.405503][ T3734] bond2 (unregistering): (slave vxcan5): Releasing backup interface [ 216.413766][ T3734] vxcan5: left promiscuous mode [ 216.419452][ T3734] bond2 (unregistering): Released all slaves [ 216.473741][ T3734] hsr_slave_0: left promiscuous mode [ 216.479450][ T3734] hsr_slave_1: left promiscuous mode [ 216.485470][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.493349][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.527643][ T3734] team0 (unregistering): Port device team_slave_1 removed [ 216.537258][ T3734] team0 (unregistering): Port device team_slave_0 removed [ 216.651235][T17230] chnl_net:caif_netlink_parms(): no params data found [ 216.686536][T17230] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.693709][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.700927][T17230] bridge_slave_0: entered allmulticast mode [ 216.707387][T17230] bridge_slave_0: entered promiscuous mode [ 216.714399][T17230] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.721604][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.728874][T17230] bridge_slave_1: entered allmulticast mode [ 216.735491][T17230] bridge_slave_1: entered promiscuous mode [ 216.752852][T17230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.763299][T17230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.783055][T17230] team0: Port device team_slave_0 added [ 216.789674][T17230] team0: Port device team_slave_1 added [ 216.805532][T17230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.812511][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.838502][T17230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.849924][T17230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.856908][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.882877][T17230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.909273][T17230] hsr_slave_0: entered promiscuous mode [ 216.915341][T17230] hsr_slave_1: entered promiscuous mode [ 216.921231][T17230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.928796][T17230] Cannot create hsr debugfs directory [ 217.204883][T17230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.213416][T17230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.222228][T17230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.231297][T17230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.265316][T17230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.277294][T17230] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.287055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.294178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.305425][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.312587][ T3771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.373837][T17230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.476003][T17230] veth0_vlan: entered promiscuous mode [ 217.483798][T17230] veth1_vlan: entered promiscuous mode [ 217.499554][T17230] veth0_macvtap: entered promiscuous mode [ 217.507092][T17230] veth1_macvtap: entered promiscuous mode [ 217.518997][T17230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.530167][T17230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.539804][T17230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.548577][T17230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.557318][T17230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.566176][T17230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.732446][T17278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.803777][T17278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.887729][T17278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.955058][T17278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.068745][T17285] chnl_net:caif_netlink_parms(): no params data found [ 218.150294][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.157409][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.171697][T17285] bridge_slave_0: entered allmulticast mode [ 218.178319][T17285] bridge_slave_0: entered promiscuous mode [ 218.185487][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.192600][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.199783][T17285] bridge_slave_1: entered allmulticast mode [ 218.206207][T17285] bridge_slave_1: entered promiscuous mode [ 218.235401][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.250526][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.300170][T17285] team0: Port device team_slave_0 added [ 218.311438][T17285] team0: Port device team_slave_1 added [ 218.334743][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.341780][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.367806][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.378654][T17301] chnl_net:caif_netlink_parms(): no params data found [ 218.389265][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.396369][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.422418][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.469025][T17285] hsr_slave_0: entered promiscuous mode [ 218.475062][T17285] hsr_slave_1: entered promiscuous mode [ 218.481312][T17285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.488863][T17285] Cannot create hsr debugfs directory [ 218.505945][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.513055][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.520354][T17301] bridge_slave_0: entered allmulticast mode [ 218.528843][T17301] bridge_slave_0: entered promiscuous mode [ 218.535975][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.543177][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.550409][T17301] bridge_slave_1: entered allmulticast mode [ 218.556842][T17301] bridge_slave_1: entered promiscuous mode [ 218.582625][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.593177][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.624792][T17301] team0: Port device team_slave_0 added [ 218.633540][T17301] team0: Port device team_slave_1 added [ 218.655954][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.662978][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.689005][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.705306][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.712364][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.738391][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.785019][T17301] hsr_slave_0: entered promiscuous mode [ 218.791085][T17301] hsr_slave_1: entered promiscuous mode [ 218.796865][T17301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.804494][T17301] Cannot create hsr debugfs directory [ 218.979504][T17285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.988489][T17285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.996863][T17285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.006117][T17285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.020718][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.027770][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.035051][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.042216][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.051094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.059038][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.095259][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.107635][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.118827][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.126044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.137866][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.144949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.217496][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.232897][T17301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.242810][T17301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.251713][T17301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.263183][T17301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.312462][T17301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.327123][T17301] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.339901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.347065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.357842][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.364940][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.379374][T17285] veth0_vlan: entered promiscuous mode [ 219.398078][T17301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.408518][T17301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.429091][T17285] veth1_vlan: entered promiscuous mode [ 219.448091][T17285] veth0_macvtap: entered promiscuous mode [ 219.456349][T17285] veth1_macvtap: entered promiscuous mode [ 219.468089][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.477515][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.489535][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.497746][T17285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.506634][T17285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.515437][T17285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.524293][T17285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.610254][T17278] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.624084][T17278] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.637045][T17278] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.649609][T17278] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.670312][T17301] veth0_vlan: entered promiscuous mode [ 219.682638][T17301] veth1_vlan: entered promiscuous mode [ 219.711238][T17301] veth0_macvtap: entered promiscuous mode [ 219.723379][T17301] veth1_macvtap: entered promiscuous mode [ 219.740340][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.756642][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.768114][T17301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.776937][T17301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.785870][T17301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.794615][T17301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.905025][T17372] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5698'. [ 219.962671][T17374] netlink: 9412 bytes leftover after parsing attributes in process `syz.6.5687'. [ 220.042967][T17358] chnl_net:caif_netlink_parms(): no params data found [ 220.074669][ T29] audit: type=1400 audit(2000000047.990:3996): avc: denied { mounton } for pid=17385 comm="syz.6.5693" path="/proc/10/cgroup" dev="proc" ino=55474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 220.117115][ T29] audit: type=1400 audit(2000000048.030:3997): avc: denied { mount } for pid=17387 comm="syz.6.5695" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 220.139307][ T29] audit: type=1400 audit(2000000048.030:3998): avc: denied { unmount } for pid=17301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 220.171323][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.178456][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.187955][T17358] bridge_slave_0: entered allmulticast mode [ 220.194571][T17358] bridge_slave_0: entered promiscuous mode [ 220.204902][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.212024][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.219923][T17358] bridge_slave_1: entered allmulticast mode [ 220.228249][T17358] bridge_slave_1: entered promiscuous mode [ 220.252564][T17358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.263244][T17358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.287022][T17358] team0: Port device team_slave_0 added [ 220.294163][T17358] team0: Port device team_slave_1 added [ 220.318068][T17358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.325135][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.351155][T17358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.365619][T17358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.372692][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.398763][T17358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.401445][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5699'. [ 220.445982][T17358] hsr_slave_0: entered promiscuous mode [ 220.452155][T17358] hsr_slave_1: entered promiscuous mode [ 220.458057][T17358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.465792][T17358] Cannot create hsr debugfs directory [ 220.586641][T17406] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.5702'. [ 220.626812][T17414] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5704'. [ 220.656119][ T29] audit: type=1326 audit(2000000048.570:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.679711][ T29] audit: type=1326 audit(2000000048.570:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.708004][ T29] audit: type=1326 audit(2000000048.620:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.731871][ T29] audit: type=1326 audit(2000000048.620:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.755397][ T29] audit: type=1326 audit(2000000048.620:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.779087][ T29] audit: type=1326 audit(2000000048.620:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17417 comm="syz.0.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67feefe969 code=0x7ffc0000 [ 220.874543][T17428] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.885974][T17430] loop4: detected capacity change from 0 to 512 [ 220.894111][T17358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.903805][T17358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.912853][T17358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.921953][T17358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.927909][T17430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.941629][T17430] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.957419][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.964529][T17358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.971872][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.978942][T17358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.990413][T17428] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.022911][T17428] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.054625][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.054742][T16723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.070657][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.079829][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.094808][T17428] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.107082][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.119167][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.126254][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.139789][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.146874][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.218606][T17358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.283177][T17358] veth0_vlan: entered promiscuous mode [ 221.296842][T17358] veth1_vlan: entered promiscuous mode [ 221.312483][T17358] veth0_macvtap: entered promiscuous mode [ 221.324517][T17358] veth1_macvtap: entered promiscuous mode [ 221.335938][T17358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.347430][T17358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.357262][T17358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.366047][T17358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.374904][T17358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.383611][T17358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.476047][T17448] loop4: detected capacity change from 0 to 512 [ 221.483759][T17448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.502842][T17448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.516048][T17448] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.526713][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5714'. [ 221.536764][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 221.536777][ T29] audit: type=1400 audit(2000000049.450:4015): avc: denied { read write } for pid=17447 comm="syz.4.5713" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.565693][ T29] audit: type=1400 audit(2000000049.450:4016): avc: denied { open } for pid=17447 comm="syz.4.5713" path="/36/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.591972][ T29] audit: type=1400 audit(2000000049.510:4017): avc: denied { ioctl } for pid=17447 comm="syz.4.5713" path="/36/bus/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.657604][T16723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.707167][T17461] loop0: detected capacity change from 0 to 512 [ 221.717229][T17461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.744050][T17461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.771172][T17461] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.810620][ T29] audit: type=1326 audit(2000000049.720:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.834302][ T29] audit: type=1326 audit(2000000049.720:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.857921][ T29] audit: type=1326 audit(2000000049.720:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.881592][ T29] audit: type=1326 audit(2000000049.720:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.905126][ T29] audit: type=1326 audit(2000000049.720:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.930071][ T29] audit: type=1326 audit(2000000049.730:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 221.953673][ T29] audit: type=1326 audit(2000000049.730:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7ffc0000 [ 222.107165][T17285] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.347504][T17480] loop0: detected capacity change from 0 to 512 [ 222.421054][T17480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.462697][T17480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.487331][T17480] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.730689][T17285] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.845313][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5738'. [ 222.857634][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5738'. [ 222.877654][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5738'. [ 222.889964][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5738'. [ 223.137685][T17504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5728'. [ 223.305594][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5750'. [ 224.132468][T17428] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.154659][T17428] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.166509][T17428] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.178263][T17428] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.256550][T17535] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.341994][T17535] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.382738][T17535] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.432587][T17535] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.537410][T17535] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.548785][T17535] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.560942][T17535] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.572492][T17535] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.689685][T17587] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.793978][T17587] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.055883][T17587] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.139051][T17592] __nla_validate_parse: 9 callbacks suppressed [ 226.139071][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 226.174212][T17587] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.193647][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 226.213493][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 226.224001][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 226.248881][T17587] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.262485][T17587] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.284416][T17587] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.294613][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5763'. [ 226.314903][T17587] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.425734][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'. [ 226.448862][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'. [ 226.470811][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'. [ 226.485128][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'. [ 226.570898][T17604] loop4: detected capacity change from 0 to 512 [ 226.599817][T17604] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.5771: iget: bogus i_mode (0) [ 226.615800][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5787'. [ 226.637427][T17604] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5771: couldn't read orphan inode 17 (err -117) [ 226.671113][T17604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.763288][T16723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.915155][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 226.915173][ T29] audit: type=1326 audit(2000000054.830:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="syz.4.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x7fc00000 [ 227.575505][T17640] SELinux: policydb version 0 does not match my version range 15-34 [ 227.617204][T17642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.634727][T17640] SELinux: failed to load policy [ 227.654435][ T29] audit: type=1326 audit(2000000055.560:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="syz.4.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c22f6e969 code=0x7fc00000 [ 227.713334][T17642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.793684][T17642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.874300][T17642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.976078][T17642] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.009855][T17642] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.075832][T17642] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.095493][T17669] SELinux: policydb version 0 does not match my version range 15-34 [ 228.114559][T17642] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143559][T17669] SELinux: failed to load policy [ 228.243792][ T29] audit: type=1400 audit(2000000056.160:4040): avc: denied { create } for pid=17672 comm="syz.5.5805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.326819][ T29] audit: type=1400 audit(2000000056.240:4041): avc: denied { bind } for pid=17672 comm="syz.5.5805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.368792][ T29] audit: type=1400 audit(2000000056.240:4042): avc: denied { write } for pid=17672 comm="syz.5.5805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.544772][T17695] SELinux: policydb version 0 does not match my version range 15-34 [ 228.571538][T17695] SELinux: failed to load policy [ 229.038378][ T29] audit: type=1400 audit(2000000056.950:4043): avc: denied { read } for pid=17706 comm="syz.0.5829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 229.062465][T17711] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.134531][T17711] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.245794][T17711] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.324141][T17711] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.444443][ T29] audit: type=1326 audit(2000000057.360:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.5.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 229.474680][ T29] audit: type=1326 audit(2000000057.360:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.5.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 229.498404][ T29] audit: type=1326 audit(2000000057.360:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.5.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 229.521948][ T29] audit: type=1326 audit(2000000057.360:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.5.5832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 229.620193][T17749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17749 comm=syz.4.5838 [ 229.632834][T17749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17749 comm=syz.4.5838 [ 229.752111][T17769] netlink: 'syz.1.5858': attribute type 3 has an invalid length. [ 229.946256][T17711] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.959849][T17711] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.972647][T17711] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.985955][T17711] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.998908][T17780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17780 comm=syz.5.5853 [ 230.011631][T17780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17780 comm=syz.5.5853 [ 230.172090][T17799] netlink: 'syz.6.5863': attribute type 3 has an invalid length. [ 230.255533][T17807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.331952][T17807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.412128][T17807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.453737][T17807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.507147][T17807] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.518475][T17807] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.530090][T17807] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.541553][T17807] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.854946][T17845] SELinux: policydb version 0 does not match my version range 15-34 [ 230.884673][T17845] SELinux: failed to load policy [ 230.919883][T17855] atomic_op ffff88811a98e528 conn xmit_atomic 0000000000000000 [ 230.979453][T17861] loop4: detected capacity change from 0 to 128 [ 230.988224][T17861] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 231.016226][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 231.097317][T17878] SELinux: security policydb version 18 (MLS) not backwards compatible [ 231.108041][T17878] SELinux: failed to load policy [ 231.120790][T17881] SELinux: policydb version 0 does not match my version range 15-34 [ 231.133233][T17881] SELinux: failed to load policy [ 231.202687][T17891] atomic_op ffff88811e8c3d28 conn xmit_atomic 0000000000000000 [ 231.263733][T17902] __nla_validate_parse: 7 callbacks suppressed [ 231.263751][T17902] netlink: 340 bytes leftover after parsing attributes in process `syz.1.5913'. [ 231.285015][T17906] loop4: detected capacity change from 0 to 512 [ 231.314069][T17906] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.331804][T17906] EXT4-fs (loop4): mount failed [ 231.350780][T17913] netlink: 340 bytes leftover after parsing attributes in process `syz.6.5927'. [ 231.366492][T17915] SELinux: security policydb version 18 (MLS) not backwards compatible [ 231.375334][T17915] SELinux: failed to load policy [ 231.553410][T17936] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5923'. [ 231.574737][T17928] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5923'. [ 231.810002][T17972] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5944'. [ 231.820105][T17969] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5944'. [ 231.859713][T17978] loop0: detected capacity change from 0 to 512 [ 231.903504][T17978] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.927909][T17978] EXT4-fs (loop0): mount failed [ 232.117599][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 232.117663][ T29] audit: type=1400 audit(2000000060.030:4166): avc: denied { append } for pid=18006 comm="syz.5.5960" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.119305][T18007] random: crng reseeded on system resumption [ 232.124042][ T29] audit: type=1400 audit(2000000060.030:4167): avc: denied { open } for pid=18006 comm="syz.5.5960" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.179507][ T29] audit: type=1326 audit(2000000060.090:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.5.5960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x0 [ 233.128971][T18043] loop0: detected capacity change from 0 to 128 [ 233.173514][T18043] syz.0.5984: attempt to access beyond end of device [ 233.173514][T18043] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 233.191664][ T29] audit: type=1326 audit(2000000061.110:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18045 comm="syz.5.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 233.222293][ T29] audit: type=1326 audit(2000000061.130:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18045 comm="syz.5.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 233.245940][ T29] audit: type=1326 audit(2000000061.130:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18045 comm="syz.5.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 233.269462][ T29] audit: type=1326 audit(2000000061.130:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18045 comm="syz.5.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a36c7e969 code=0x7ffc0000 [ 233.304687][ T29] audit: type=1400 audit(2000000061.190:4173): avc: denied { relabelfrom } for pid=18052 comm="syz.6.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.324691][ T29] audit: type=1400 audit(2000000061.190:4174): avc: denied { relabelto } for pid=18052 comm="syz.6.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.325004][T18051] random: crng reseeded on system resumption [ 233.352021][ T3730] kworker/u8:31: attempt to access beyond end of device [ 233.352021][ T3730] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 233.433224][ T29] audit: type=1326 audit(2000000061.350:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18048 comm="syz.4.5974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c22f6e969 code=0x0 [ 233.462048][T18058] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5980'. [ 233.474161][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 233.489250][T18062] loop0: detected capacity change from 0 to 1024 [ 233.497532][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.529093][T18062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.551234][T18062] EXT4-fs: Mount option(s) incompatible with ext2 [ 233.766329][T18088] vhci_hcd: invalid port number 96 [ 233.771519][T18088] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 234.120608][T18118] pimreg: entered allmulticast mode [ 234.180982][T18121] pimreg: left allmulticast mode [ 234.573382][T18141] futex_wake_op: syz.5.6021 tries to shift op by -1; fix this program [ 234.767343][T18158] netlink: 'syz.4.6029': attribute type 10 has an invalid length. [ 234.782269][T18158] ipvlan0: entered allmulticast mode [ 234.787656][T18158] veth0_vlan: entered allmulticast mode [ 234.794934][T18158] team0: Device ipvlan0 failed to register rx_handler [ 234.870384][T18171] netlink: '+}[@': attribute type 16 has an invalid length. [ 234.877838][T18171] netlink: '+}[@': attribute type 17 has an invalid length. [ 234.906004][T18175] vhci_hcd: invalid port number 23 [ 234.970040][T18186] loop4: detected capacity change from 0 to 1024 [ 234.980424][T18186] EXT4-fs: Ignoring removed orlov option [ 234.993211][T18186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.731816][T18198] ================================================================== [ 235.740019][T18198] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 235.747931][T18198] [ 235.750247][T18198] write to 0xffff8881067fc28c of 4 bytes by task 18186 on cpu 1: [ 235.757956][T18198] xas_set_mark+0x12b/0x140 [ 235.762463][T18198] __folio_start_writeback+0x1dd/0x430 [ 235.767935][T18198] ext4_bio_write_folio+0x5ad/0x9f0 [ 235.773148][T18198] mpage_submit_folio+0xe4/0x170 [ 235.778095][T18198] mpage_process_page_bufs+0x39b/0x4a0 [ 235.783566][T18198] mpage_prepare_extent_to_map+0x741/0xaa0 [ 235.789388][T18198] ext4_do_writepages+0x6ea/0x21c0 [ 235.794496][T18198] ext4_writepages+0x176/0x300 [ 235.799260][T18198] do_writepages+0x1c3/0x310 [ 235.803851][T18198] file_write_and_wait_range+0x156/0x2c0 [ 235.809486][T18198] generic_buffers_fsync_noflush+0x45/0x120 [ 235.815401][T18198] ext4_sync_file+0x1ab/0x690 [ 235.820082][T18198] vfs_fsync_range+0x10d/0x130 [ 235.824849][T18198] ext4_buffered_write_iter+0x34f/0x3c0 [ 235.830388][T18198] ext4_file_write_iter+0x383/0xf00 [ 235.835586][T18198] iter_file_splice_write+0x5f2/0x970 [ 235.840969][T18198] direct_splice_actor+0x156/0x2a0 [ 235.846094][T18198] splice_direct_to_actor+0x312/0x680 [ 235.851473][T18198] do_splice_direct+0xda/0x150 [ 235.856270][T18198] do_sendfile+0x380/0x650 [ 235.860690][T18198] __x64_sys_sendfile64+0x105/0x150 [ 235.865900][T18198] x64_sys_call+0xb39/0x2fb0 [ 235.870497][T18198] do_syscall_64+0xd2/0x200 [ 235.875012][T18198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.880907][T18198] [ 235.883229][T18198] read to 0xffff8881067fc28c of 4 bytes by task 18198 on cpu 0: [ 235.890864][T18198] __writeback_single_inode+0x1f9/0x7c0 [ 235.896422][T18198] writeback_single_inode+0x167/0x3e0 [ 235.901791][T18198] sync_inode_metadata+0x5b/0x90 [ 235.906729][T18198] generic_buffers_fsync_noflush+0xd9/0x120 [ 235.912631][T18198] ext4_sync_file+0x1ab/0x690 [ 235.917337][T18198] vfs_fsync_range+0x10d/0x130 [ 235.922122][T18198] ext4_buffered_write_iter+0x34f/0x3c0 [ 235.927674][T18198] ext4_file_write_iter+0x383/0xf00 [ 235.932882][T18198] iter_file_splice_write+0x5f2/0x970 [ 235.938274][T18198] direct_splice_actor+0x156/0x2a0 [ 235.943397][T18198] splice_direct_to_actor+0x312/0x680 [ 235.948782][T18198] do_splice_direct+0xda/0x150 [ 235.953571][T18198] do_sendfile+0x380/0x650 [ 235.957995][T18198] __x64_sys_sendfile64+0x105/0x150 [ 235.963191][T18198] x64_sys_call+0xb39/0x2fb0 [ 235.967796][T18198] do_syscall_64+0xd2/0x200 [ 235.972318][T18198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.978224][T18198] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.980566][T18198] value changed: 0x0a000021 -> 0x04000021 [ 235.986278][T18198] [ 235.988588][T18198] Reported by Kernel Concurrency Sanitizer on: [ 235.994735][T18198] CPU: 0 UID: 0 PID: 18198 Comm: syz.4.6041 Tainted: G W 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 236.008448][T18198] Tainted: [W]=WARN [ 236.012247][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.022307][T18198] ================================================================== [ 236.143114][T16723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.