last executing test programs: 2.939165275s ago: executing program 3 (id=115): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x11a3, &(0x7f0000001280)="$eJzs209rHGUcB/BfYjS6MTH+iyYXH/Sil8Hk4EG8BElAsqAkWSERhAnZ6LLr7rKzh13xkLMnX4d49CaobyDvordQKO0lp05ptk2aNj20pVloP5/LfOE7A8+PgYFnmDn+6o9fmgdFdpD3Y3JiIia7EekkRYrJuO8wPvvvy1u/b+3sbqxWq2ubKa2vbi9/kVKa++jfH3776+P/+zPf/z33z3Qczf94fGPl2tHC0eLx7e2fG0VqFKnd6ac87XU6/XyvVU/7jaKZpfRdq54X9dRoF/Xehf6g1el2hylv789Wur16UaS8PUzN+jD1O6nfG6b8p7zRTlmWpdlK8Cxqf56UZRlRlq/Ga1GWZflGVGIm3ozZmIu3Yj7ejnfi3Xgv3o+F+CA+jMXTs8a9bgAAAAAAAAAAAAAAAAAAAHix+P8fAAAAAAAAAAAAAAAAAAAAxm9rZ3djtVpd20zp9Yjrh4PaoDY6jvr1b6prn6dT8+dX3RwMaq+c9cujPl3sp6Nyr1+5tJ+KTz8Z9Xe7r7+tPtQvxf7zHx8AAABeClk6c+n+Psse14/SA+8HHtnfL01d2Rg8pWL4azNvteo9QRCEszDuJxNX4fymj3slAAAAAAAAAAAAPImr+Jxw3DMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//+VQHgq") r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x100, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x48) 2.56797819s ago: executing program 3 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 2.506877922s ago: executing program 3 (id=131): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/56, 0x38}, {0x0}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 2.425120053s ago: executing program 3 (id=136): r0 = socket(0x2, 0x3, 0xff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x14) 2.381179014s ago: executing program 3 (id=140): r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.659296475s ago: executing program 0 (id=173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) 1.522234867s ago: executing program 3 (id=181): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "1c00a070326ee3ccf74102d90c210079b078c45a31be1958"}}, 0x0, 0x0, 0x0}, 0x0) 1.070053644s ago: executing program 0 (id=199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e22, 0x2, @empty, 0xb}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 1.045492914s ago: executing program 0 (id=202): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x9, 0x7, 0x1ff, 0x6, 0x35}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 926.984256ms ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) sysinfo(&(0x7f0000000680)=""/26) 911.605006ms ago: executing program 0 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 856.100857ms ago: executing program 2 (id=211): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40001100, 0x0) 839.746347ms ago: executing program 0 (id=212): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100"], 0x48}}, 0x20000000) 830.205657ms ago: executing program 2 (id=213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 826.651628ms ago: executing program 0 (id=214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f570c0000002a000007ff00be0083"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x74, 0x0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 811.319538ms ago: executing program 2 (id=215): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) 590.442441ms ago: executing program 2 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) 569.404312ms ago: executing program 1 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 549.864672ms ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 489.303733ms ago: executing program 1 (id=229): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 422.101683ms ago: executing program 1 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") 380.301564ms ago: executing program 4 (id=231): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {0xfff7, 0xf7, 0x8944, 0xfc2}, 0x3a, [0xfc, 0xa, 0x10, 0x6, 0x1, 0x6e3f, 0x8664, 0x8, 0x5, 0x800, 0x4, 0x1, 0x9b, 0x8, 0x55, 0x5, 0x9, 0xfd, 0x8, 0x400, 0xb61b, 0x7, 0x8, 0x5, 0x3, 0x8000, 0x8, 0x7, 0x80000000, 0x7, 0x6, 0x9, 0x0, 0x5, 0xde, 0x2, 0x4ba, 0xae75, 0xfffffffb, 0x3, 0xfffff800, 0xfffffffa, 0xffff0001, 0x4, 0x40, 0x8000fe, 0xff, 0x6, 0x4, 0x80000000, 0x400, 0x10, 0xff5, 0xa00000, 0x7, 0x0, 0x4, 0x1648, 0x9, 0x1, 0x2, 0xfffffffc, 0x8, 0xf62], [0xc3, 0x9, 0x8a, 0x0, 0x9, 0x80000000, 0x0, 0x6, 0x5, 0x18a3, 0x7, 0x0, 0x8001, 0x81, 0x101, 0xfffffffc, 0x2, 0x3ff, 0x5, 0x1, 0x6, 0x9, 0x4, 0x8, 0x4, 0x1, 0x3fb, 0x8, 0x7, 0x800, 0x2, 0x91, 0x80, 0x7, 0x8, 0x8, 0x7, 0x40800000, 0x8, 0x80000000, 0x8001, 0x6b, 0x0, 0x8, 0x7, 0x8bd2, 0x2, 0x8, 0xff, 0x0, 0x4, 0x1732, 0x0, 0x75, 0x10, 0x0, 0x1, 0x1ff, 0x3, 0xffffff01, 0x1, 0x2, 0x4, 0x5], [0x8, 0x9, 0xffff, 0x80000001, 0x4, 0xf, 0x10001, 0xc9, 0x8, 0x7, 0x0, 0x5, 0xeb, 0x8, 0xd, 0xa, 0x2, 0x8, 0x5, 0x7, 0x49, 0x7fffffff, 0x8, 0x7ff, 0x596, 0x3, 0x4, 0x80000000, 0x5, 0x5, 0xa, 0x3, 0xc, 0x4, 0x1000, 0x5025, 0x331, 0x0, 0x8, 0x8, 0x2, 0x5, 0x0, 0x80, 0x0, 0x6, 0x0, 0x1ff, 0x81, 0x2, 0x2, 0x2, 0x7fffffff, 0x1, 0xffff, 0x5, 0x5, 0x3, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0x3fc8], [0x397, 0x7, 0x0, 0x508, 0x19, 0x0, 0x9ee, 0xffff, 0x3, 0x8, 0x5, 0xffff00, 0xfffffff2, 0x3, 0xb, 0x1, 0x9b50, 0x0, 0x3, 0x28, 0xd, 0x8, 0xfffffffe, 0x5, 0xf, 0xf, 0x3, 0x200, 0xe603, 0x2, 0x9, 0x5, 0x8001, 0x2, 0x40, 0x556, 0x101, 0x1, 0xa, 0x81, 0x104, 0xb5, 0x2, 0xd7c, 0x3, 0x1, 0x1, 0xfe, 0x400, 0x0, 0x1, 0x1, 0x1511, 0x4, 0x2, 0x21, 0xffff0000, 0x6, 0x9, 0x1, 0x3, 0x7, 0x0, 0x9]}, 0x45c) fallocate(r0, 0x0, 0x0, 0x8000c62) 325.325345ms ago: executing program 1 (id=232): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 299.531326ms ago: executing program 4 (id=233): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x3, "0001000000000000649300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0xd) 191.269177ms ago: executing program 1 (id=234): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x800006dc, 0x0, 0x3, 0x4, 0x18, "114300000000000000000000e1000d00"}) 185.538287ms ago: executing program 4 (id=235): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x3, @any, 0x8003}, 0x4) listen(r1, 0x0) 173.206247ms ago: executing program 4 (id=236): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x2e, &(0x7f0000001640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 33.64619ms ago: executing program 4 (id=237): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x18) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.580251ms ago: executing program 4 (id=238): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_abort}]}, 0x2, 0x535, &(0x7f00000010c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000001000000"]) 0s ago: executing program 2 (id=239): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 20.711140][ T28] audit: type=1400 audit(1752804900.694:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.712227][ T275] cgroup: Unknown subsys name 'net' [ 20.734096][ T28] audit: type=1400 audit(1752804900.694:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.761418][ T28] audit: type=1400 audit(1752804900.724:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.761578][ T275] cgroup: Unknown subsys name 'devices' [ 20.907401][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.913006][ T275] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.045008][ T28] audit: type=1400 audit(1752804901.024:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.062521][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.068460][ T28] audit: type=1400 audit(1752804901.024:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.086434][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.101675][ T28] audit: type=1400 audit(1752804901.024:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.133947][ T28] audit: type=1400 audit(1752804901.064:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.159759][ T28] audit: type=1400 audit(1752804901.064:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.185874][ T28] audit: type=1400 audit(1752804901.074:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.211380][ T28] audit: type=1400 audit(1752804901.074:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.894999][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.902385][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.909849][ T283] device bridge_slave_0 entered promiscuous mode [ 21.918894][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.926065][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.933393][ T283] device bridge_slave_1 entered promiscuous mode [ 21.954174][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.961438][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.968947][ T285] device bridge_slave_0 entered promiscuous mode [ 21.978508][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.985567][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.993051][ T285] device bridge_slave_1 entered promiscuous mode [ 22.017713][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.024760][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.032380][ T284] device bridge_slave_0 entered promiscuous mode [ 22.039129][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.046234][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.053963][ T287] device bridge_slave_0 entered promiscuous mode [ 22.070278][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.077553][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.084964][ T284] device bridge_slave_1 entered promiscuous mode [ 22.091713][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.098892][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.107046][ T287] device bridge_slave_1 entered promiscuous mode [ 22.137184][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.144242][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.151722][ T286] device bridge_slave_0 entered promiscuous mode [ 22.177381][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.185226][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.192811][ T286] device bridge_slave_1 entered promiscuous mode [ 22.387596][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.394643][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.401969][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.409113][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.428188][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.435342][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.442639][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.449704][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.468069][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.475137][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.482567][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.489610][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.510584][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.517761][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.525069][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.532129][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.556336][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.563754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.572593][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.580078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.588657][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.596565][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.603938][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.611472][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.619858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.627642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.649137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.656668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.667597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.687263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.695102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.703587][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.710826][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.718501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.726962][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.733973][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.742997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.751424][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758471][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.786782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.795173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.803501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.811971][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.819162][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.826773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.834890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.843033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.851024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.878620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.887187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.895326][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.902363][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.909859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.918917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.927228][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.934420][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.951674][ T283] device veth0_vlan entered promiscuous mode [ 22.960368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.968807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.977309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.985301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.993509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.002077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.010545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.018668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.026785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.035074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.043658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.051320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.065085][ T285] device veth0_vlan entered promiscuous mode [ 23.075811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.084248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.093242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.102051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.110217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.118957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.127845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.135765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.147738][ T286] device veth0_vlan entered promiscuous mode [ 23.155012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.162642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.170123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.178174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.186459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.194451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.202872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.210429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.218153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.226150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.235740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.244821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.263376][ T286] device veth1_macvtap entered promiscuous mode [ 23.272759][ T285] device veth1_macvtap entered promiscuous mode [ 23.280113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.288803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.297598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.305993][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.313032][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.320820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.329436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.337675][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.344876][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.352410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.360789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.368861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.377088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.385076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.398433][ T283] device veth1_macvtap entered promiscuous mode [ 23.405870][ T287] device veth0_vlan entered promiscuous mode [ 23.417104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.425745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.433918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.441708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.450159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.469365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.477671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.486249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.494676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.503225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.511682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.526454][ T284] device veth0_vlan entered promiscuous mode [ 23.541774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.550320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.558702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.567172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.576170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.584195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.592573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.601021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.609442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.618014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.626353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.634762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.642528][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.653527][ T287] device veth1_macvtap entered promiscuous mode [ 23.660563][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 23.672544][ T284] device veth1_macvtap entered promiscuous mode [ 23.691050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.701337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.709832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.718454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.727138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.737558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.745896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.783870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.798158][ T313] loop1: detected capacity change from 0 to 256 [ 23.805845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.195035][ T357] incfs: Backing dir is not set, filesystem can't be mounted. [ 24.205597][ T357] incfs: mount failed -2 [ 24.233556][ T360] loop2: detected capacity change from 0 to 256 [ 24.322999][ T370] loop2: detected capacity change from 0 to 512 [ 24.364063][ T370] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 24.367020][ T376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.379557][ T370] EXT4-fs (loop2): mount failed [ 24.501597][ T370] process 'syz.2.27' launched './file1' with NULL argv: empty string added [ 24.509172][ T380] loop1: detected capacity change from 0 to 512 [ 24.649327][ T319] loop4: detected capacity change from 0 to 131072 [ 24.656123][ T392] syz.1.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 24.663755][ T396] netlink: 'syz.2.38': attribute type 21 has an invalid length. [ 24.687915][ T396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 24.697776][ T319] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.708863][ T402] loop1: detected capacity change from 0 to 512 [ 24.745891][ T402] EXT4-fs: Ignoring removed mblk_io_submit option [ 24.762411][ T402] EXT4-fs: Ignoring removed bh option [ 24.782430][ T409] serio: Serial port ttyS3 [ 24.787343][ T402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.790541][ T319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.819425][ T402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.838672][ T402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 24.853571][ T402] EXT4-fs (loop1): 1 truncate cleaned up [ 24.859525][ T402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.859538][ T319] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 24.861189][ T319] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 24.932962][ T285] EXT4-fs (loop1): unmounting filesystem. [ 25.152327][ T428] capability: warning: `syz.0.51' uses 32-bit capabilities (legacy support in use) [ 25.197289][ T430] input: syz0 as /devices/virtual/input/input4 [ 25.292802][ T438] input: syz1 as /devices/virtual/input/input5 [ 25.301136][ T438] input: failed to attach handler leds to device input5, error: -6 [ 25.352311][ T440] syz.1.56 (440) used greatest stack depth: 20544 bytes left [ 25.451479][ T465] syz.3.67[465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.451574][ T465] syz.3.67[465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.490707][ T470] loop1: detected capacity change from 0 to 1024 [ 25.527187][ T470] ======================================================= [ 25.527187][ T470] WARNING: The mand mount option has been deprecated and [ 25.527187][ T470] and is ignored by this kernel. Remove the mand [ 25.527187][ T470] option from the mount to silence this warning. [ 25.527187][ T470] ======================================================= [ 25.570305][ T470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.592524][ T285] EXT4-fs (loop1): unmounting filesystem. [ 25.728465][ T500] loop3: detected capacity change from 0 to 256 [ 25.745782][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 25.745819][ T28] audit: type=1400 audit(1752804905.734:157): avc: denied { create } for pid=501 comm="syz.4.85" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.776023][ T500] exfat: Deprecated parameter 'utf8' [ 25.781505][ T500] exfat: Unexpected value for 'utf8' [ 25.793909][ T508] loop1: detected capacity change from 0 to 256 [ 25.801361][ T28] audit: type=1400 audit(1752804905.734:158): avc: denied { ioctl } for pid=501 comm="syz.4.85" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16571 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.830413][ T503] loop2: detected capacity change from 0 to 8192 [ 25.907469][ T28] audit: type=1400 audit(1752804905.894:159): avc: denied { read write } for pid=513 comm="syz.2.90" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.931470][ T482] loop0: detected capacity change from 0 to 40427 [ 25.932557][ T28] audit: type=1400 audit(1752804905.894:160): avc: denied { open } for pid=513 comm="syz.2.90" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.939599][ T482] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 25.968913][ T28] audit: type=1400 audit(1752804905.894:161): avc: denied { ioctl } for pid=513 comm="syz.2.90" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.983325][ T482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 26.012625][ T482] F2FS-fs (loop0): invalid crc value [ 26.014302][ T521] loop1: detected capacity change from 0 to 512 [ 26.023356][ T482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.035973][ T521] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 26.059923][ T482] F2FS-fs (loop0): Start checkpoint disabled! [ 26.062221][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 26.067051][ T482] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 26.077585][ T28] audit: type=1400 audit(1752804906.064:162): avc: denied { bind } for pid=524 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.082488][ T482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.138837][ T531] loop3: detected capacity change from 0 to 1024 [ 26.139913][ T28] audit: type=1400 audit(1752804906.064:163): avc: denied { name_bind } for pid=524 comm="syz.3.94" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.175887][ T306] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 26.205024][ T531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.210670][ T28] audit: type=1400 audit(1752804906.064:164): avc: denied { node_bind } for pid=524 comm="syz.3.94" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 26.224198][ T531] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.255648][ T28] audit: type=1400 audit(1752804906.104:165): avc: denied { create } for pid=526 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 26.275570][ T28] audit: type=1400 audit(1752804906.154:166): avc: denied { ioctl } for pid=532 comm="syz.4.97" path="socket:[17492]" dev="sockfs" ino=17492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.303508][ T531] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.96: lblock 3 mapped to illegal pblock 3 (length 3) [ 26.319226][ T531] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 26.334512][ T531] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.334512][ T531] [ 26.358904][ T531] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.96: lblock 3 mapped to illegal pblock 3 (length 1) [ 26.382717][ T316] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 26.397109][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.405808][ T306] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 26.405950][ T316] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 26.416554][ T306] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.433996][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.433996][ T10] loop0: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 26.442089][ T306] usb 3-1: config 1 interface 0 has no altsetting 0 [ 26.463509][ T316] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.463509][ T316] [ 26.474906][ T284] EXT4-fs (loop3): unmounting filesystem. [ 26.480854][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.480854][ T10] loop0: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 26.495791][ T306] usb 3-1: string descriptor 0 read error: -22 [ 26.502043][ T306] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 26.507783][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 26.519942][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.534193][ T548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 26.543911][ T514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.546845][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 26.556416][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.556416][ T10] loop0: rw=1, sector=57344, nr_sectors = 12288 limit=40427 [ 26.560231][ T548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 26.578501][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.578501][ T10] loop0: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 26.593380][ T548] Zero length message leads to an empty skb [ 26.599739][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.599739][ T10] loop0: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 26.616956][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.625313][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.625313][ T10] loop0: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 26.640045][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.640045][ T10] loop0: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 26.656749][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.656749][ T10] loop0: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 26.671289][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.671289][ T10] loop0: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 26.685457][ T10] kworker/u4:1: attempt to access beyond end of device [ 26.685457][ T10] loop0: rw=1, sector=69680, nr_sectors = 8 limit=40427 [ 26.746757][ T556] loop3: detected capacity change from 0 to 512 [ 26.796611][ T556] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.806776][ T306] usbhid 3-1:1.0: can't add hid device: -71 [ 26.813311][ T306] usbhid: probe of 3-1:1.0 failed with error -71 [ 26.816711][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.830271][ T556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.107: bg 0: block 248: padding at end of block bitmap is not set [ 26.845838][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.855079][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.855769][ T306] usb 3-1: USB disconnect, device number 2 [ 26.865846][ T39] usb 5-1: config 0 descriptor?? [ 26.887098][ T556] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.107: Failed to acquire dquot type 1 [ 26.919577][ T556] EXT4-fs (loop3): 1 truncate cleaned up [ 26.935822][ T556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.971234][ T284] EXT4-fs (loop3): unmounting filesystem. [ 27.056506][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 27.081578][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 27.229103][ T576] loop3: detected capacity change from 0 to 8192 [ 27.290497][ T39] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 27.308559][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 27.360621][ T590] SELinux: failed to load policy [ 27.398494][ T39] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 27.417057][ T594] syz.0.124[594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.417148][ T594] syz.0.124[594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.477499][ T600] capability: warning: `syz.0.127' uses deprecated v2 capabilities in a way that may be insecure [ 27.538990][ T606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.130'. [ 27.756399][ T647] netlink: 'syz.0.147': attribute type 10 has an invalid length. Stopping sshd: [ 27.855222][ T58] usb 5-1: USB disconnect, device number 2 stopped /usr/sbin/sshd (pid 195) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK [ 27.960681][ T681] loop1: detected capacity change from 0 to 128 [ 27.970156][ T681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. Stopping dhcpcd... [ 27.996136][ T681] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) stopped /sbin/dhcpcd (pid 141) [ 28.046146][ T693] loop2: detected capacity change from 0 to 1024 [ 28.053232][ T693] EXT4-fs: Ignoring removed nobh option [ 28.059975][ T693] EXT4-fs: Ignoring removed bh option [ 28.066687][ T693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.079619][ T285] EXT4-fs (loop1): unmounting filesystem. Stopping network: [ 28.117433][ T693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.199049][ T283] EXT4-fs (loop2): unmounting filesystem. [ 28.284894][ T721] loop0: detected capacity change from 0 to 512 OK Stopping iptables: [ 28.350172][ T728] Illegal XDP return value 4291058360 on prog (id 83) dev N/A, expect packet loss! OK [ 28.390033][ T703] loop1: detected capacity change from 0 to 40427 [ 28.405145][ T703] F2FS-fs (loop1): invalid crc value Stopping system message bus: [ 28.413674][ T735] incfs: Options parsing error. -22 [ 28.422507][ T703] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.427643][ T735] incfs: mount failed -22 [ 28.477529][ T703] F2FS-fs (loop1): Start checkpoint disabled! done [ 28.500582][ T750] input: syz0 as /devices/virtual/input/input7 [ 28.510063][ T703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 28.521515][ T753] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 28.562757][ T760] loop4: detected capacity change from 0 to 256 [ 28.592670][ T760] FAT-fs (loop4): Directory bread(block 64) failed [ 28.616581][ T760] FAT-fs (loop4): Directory bread(block 65) failed [ 28.623285][ T760] FAT-fs (loop4): Directory bread(block 66) failed [ 28.631347][ T760] FAT-fs (loop4): Directory bread(block 67) failed [ 28.638180][ T760] FAT-fs (loop4): Directory bread(block 68) failed [ 28.644707][ T760] FAT-fs (loop4): Directory bread(block 69) failed [ 28.654099][ T760] FAT-fs (loop4): Directory bread(block 70) failed [ 28.661018][ T760] FAT-fs (loop4): Directory bread(block 71) failed [ 28.681422][ T760] FAT-fs (loop4): Directory bread(block 72) failed [ 28.694429][ T760] FAT-fs (loop4): Directory bread(block 73) failed killall: udevd: no process killed Stopping klogd: [ 28.795575][ T58] usb 4-1: new full-speed USB device number 2 using dummy_hcd OK Stopping acpid: [ 28.909203][ T797] loop2: detected capacity change from 0 to 128 [ 28.915946][ T797] EXT4-fs: Ignoring removed nobh option [ 28.922901][ T797] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.931643][ T797] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.956542][ T283] EXT4-fs (loop2): unmounting filesystem. [ 28.986673][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.002525][ T58] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.008457][ T811] loop0: detected capacity change from 0 to 1024 [ 29.022845][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.034611][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.043538][ T58] usb 4-1: Product: syz [ 29.048393][ T58] usb 4-1: Manufacturer: syz [ 29.053308][ T58] usb 4-1: SerialNumber: syz [ 29.058235][ T811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.092793][ T817] loop4: detected capacity change from 0 to 512 [ 29.115638][ T817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.134455][ T287] EXT4-fs (loop0): unmounting filesystem. [ 29.141623][ T817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 29.157468][ T817] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.180595][ T817] EXT4-fs (loop4): 1 truncate cleaned up [ 29.187043][ T817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.264193][ T286] EXT4-fs (loop4): unmounting filesystem. [ 29.306175][ T846] virtiofs: Unknown parameter 'always 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 18 wg0 : 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 19 wg1 : 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 20 wg2 : 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 21 veth0_to_bridge: 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 22 bridge_slave_0: 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 23 veth1_to_bridge: 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 24 bridge_slave_1: 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.306175][ T846] 25 veth0_to_bond: 1 V3 [ 29.306175][ T846] 010000E0 1 0:00000000 0 [ 29.474483][ T58] usb 4-1: 0:2 : does not exist [ 29.479651][ T862] loop4: detected capacity change from 0 to 256 [ 29.508380][ T19] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.512098][ T868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.517351][ T19] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.532596][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 29.545846][ T674] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.549662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.563692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 29.572298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.583176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.592152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.601262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.612602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.624608][ T874] loop1: detected capacity change from 0 to 512 [ 29.637349][ T874] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 29.652833][ T874] EXT4-fs (loop1): mount failed [ 29.669844][ T878] loop4: detected capacity change from 0 to 1024 [ 29.697352][ T878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.706260][ T878] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.722288][ T878] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm syz.4.231: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.736468][ T674] usb 1-1: Using ep0 maxpacket: 16 [ 29.742921][ T674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.743199][ T10] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.754068][ T674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.768786][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 29.778383][ T674] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.791165][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.791165][ T10] [ 29.803882][ T674] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.814742][ T286] EXT4-fs (loop4): unmounting filesystem. [ 29.822855][ T674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.837060][ T674] usb 1-1: config 0 descriptor?? OK [ 29.877370][ T892] loop7: detected capacity change from 0 to 7 [ 29.882834][ T19] usb 4-1: USB disconnect, device number 2 Stopping syslogd: [ 29.892205][ T607] loop: Write error at byte offset 4, length 3584. [ 29.899420][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 stopped /sbin/sy[ 29.908843][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write slogd (pid 85) OK [ 30.055788][ T902] loop4: detected capacity change from 0 to 512 umount: can't remount debugfs read-only [ 30.081492][ T902] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 30.220408][ T674] usbhid 1-1:0.0: can't add hid device: -71 [ 30.230868][ T674] usbhid: probe of 1-1:0.0 failed with error -71 [ 30.240540][ T674] usb 1-1: USB disconnect, device number 2 Connection to 10.128.0.73 closed by remote host. Sent SIGTERM to all processes [ 30.956321][ T607] device bridge_slave_1 left promiscuous mode [ 30.962439][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.970179][ T607] device bridge_slave_0 left promiscuous mode [ 30.976566][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.984870][ T607] device veth1_macvtap left promiscuous mode [ 30.990976][ T607] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 31.766417][ T607] device bridge_slave_1 left promiscuous mode [ 31.772722][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.780115][ T607] device bridge_slave_0 left promiscuous mode [ 31.786258][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.794168][ T607] device bridge_slave_1 left promiscuous mode [ 31.800351][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.807855][ T607] device bridge_slave_0 left promiscuous mode [ 31.813985][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.821829][ T607] device bridge_slave_1 left promiscuous mode [ 31.828056][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.835955][ T607] device bridge_slave_0 left promiscuous mode [ 31.842255][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.850052][ T607] device bridge_slave_1 left promiscuous mode [ 31.856300][ T607] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.863661][ T607] device bridge_slave_0 left promiscuous mode [ 31.869837][ T607] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.878152][ T607] device veth1_macvtap left promiscuous mode [ 31.884174][ T607] device veth0_vlan left promiscuous mode [ 31.890538][ T607] device veth1_macvtap left promiscuous mode [ 31.896728][ T607] device veth0_vlan left promiscuous mode [ 31.902675][ T607] device veth1_macvtap left promiscuous mode [ 31.908868][ T607] device veth0_vlan left promiscuous mode [ 31.914797][ T607] device veth1_macvtap left promiscuous mode [ 31.921072][ T607] device veth0_vlan left promiscuous mode [ 32.300642][ T909] kvm: exiting hardware virtualization [ 32.306830][ T909] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 32.313506][ T909] ACPI: PM: Preparing to enter system sleep state S5 [ 32.320552][ T909] reboot: Power down serialport: VM disconnected.