last executing test programs: 1m10.042164143s ago: executing program 2 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x8000fffffffc) 1m9.833620617s ago: executing program 2 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m9.776844227s ago: executing program 2 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x94, 0x0, 0x4e, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1m9.703221278s ago: executing program 2 (id=743): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m9.438061122s ago: executing program 2 (id=754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x40000}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1m9.126378957s ago: executing program 3 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m9.104044447s ago: executing program 3 (id=772): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x14886, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1m9.043100008s ago: executing program 2 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 1m8.993494769s ago: executing program 32 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 1m8.93677309s ago: executing program 3 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 1m8.442875707s ago: executing program 3 (id=795): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m8.24069049s ago: executing program 3 (id=796): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000000b0a03"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="d40000000a4005"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m7.789838347s ago: executing program 3 (id=813): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.789327267s ago: executing program 33 (id=813): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.858537969s ago: executing program 4 (id=1802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @loopback}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.598258123s ago: executing program 4 (id=1809): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 39.890740004s ago: executing program 4 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 39.858407324s ago: executing program 4 (id=1828): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 39.665560067s ago: executing program 4 (id=1832): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x7}, 0x2, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 36.702760782s ago: executing program 4 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80000, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 36.649092383s ago: executing program 34 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80000, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 9.667944765s ago: executing program 5 (id=2868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 9.619122186s ago: executing program 5 (id=2871): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.771820879s ago: executing program 5 (id=2909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000000000, 0x2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0) 8.449623974s ago: executing program 5 (id=2921): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 8.064098s ago: executing program 5 (id=2932): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7.247541832s ago: executing program 5 (id=2956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) 7.208585092s ago: executing program 35 (id=2956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) 2.763851599s ago: executing program 7 (id=3087): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x100000000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x10001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x800000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) wait4(0x0, 0x0, 0x20000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 2.420508504s ago: executing program 1 (id=3095): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 2.152079668s ago: executing program 8 (id=3100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 2.122394748s ago: executing program 8 (id=3102): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.03358388s ago: executing program 6 (id=3105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x122) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.944356081s ago: executing program 8 (id=3106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x7, r2, 0x6, 0x3) 1.771421644s ago: executing program 1 (id=3107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.315031181s ago: executing program 1 (id=3108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001e) close_range(r1, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) 1.272087121s ago: executing program 1 (id=3109): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) set_mempolicy(0x3, &(0x7f0000000280)=0xa6f, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000001600)=[{0x0}], 0x1, 0x2, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 1.253254301s ago: executing program 1 (id=3111): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 1.252702361s ago: executing program 6 (id=3112): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8000c478, 0x400, 0x6, 0x8b6}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x1b20, 0x6513, 0x0, 0x0, 0x0) 1.112322553s ago: executing program 8 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 1.111560484s ago: executing program 1 (id=3115): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 1.105370004s ago: executing program 8 (id=3116): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.093557474s ago: executing program 7 (id=3117): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 1.035994285s ago: executing program 7 (id=3119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 998.619635ms ago: executing program 6 (id=3120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x0, 0x3, 0x2}, 0x6}}, 0x18) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 948.403416ms ago: executing program 8 (id=3121): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 900.628337ms ago: executing program 0 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 860.374507ms ago: executing program 0 (id=3124): socket$inet_sctp(0x2, 0x5, 0x84) ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) sendfile(r1, r0, 0x0, 0x7ffff000) 680.287239ms ago: executing program 0 (id=3125): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback, 0x5}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 678.6247ms ago: executing program 0 (id=3126): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x2, 0x9, {{0x7, 0x4, 0x3, 0x0, 0x1c, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={0x0}) 657.18265ms ago: executing program 0 (id=3127): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) tkill(0x0, 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setreuid(0xee01, 0x0) 633.19887ms ago: executing program 0 (id=3128): socket(0x10, 0x803, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4005890) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_io_uring_setup(0x63d, &(0x7f0000000640)={0x0, 0x8826, 0x80, 0x0, 0x2d}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 314.322475ms ago: executing program 7 (id=3129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2}, @eth={@multicast, @local, @val={@val, {0x4305}}}}, 0xfebd) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 178.598427ms ago: executing program 6 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 136.371368ms ago: executing program 7 (id=3131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 122.702848ms ago: executing program 7 (id=3132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 86.065929ms ago: executing program 6 (id=3133): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) 0s ago: executing program 6 (id=3134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): iled [ 70.139600][ T6599] FAT-fs (loop4): Directory bread(block 67) failed [ 70.151024][ T6599] FAT-fs (loop4): Directory bread(block 68) failed [ 70.157733][ T6599] FAT-fs (loop4): Directory bread(block 69) failed [ 70.164370][ T6599] FAT-fs (loop4): Directory bread(block 70) failed [ 70.171281][ T6599] FAT-fs (loop4): Directory bread(block 71) failed [ 70.177880][ T6599] FAT-fs (loop4): Directory bread(block 72) failed [ 70.184531][ T6599] FAT-fs (loop4): Directory bread(block 73) failed [ 70.200653][ T6611] tipc: Started in network mode [ 70.205688][ T6611] tipc: Node identity ac14140f, cluster identity 4711 [ 70.217538][ T6599] syz.4.1272: attempt to access beyond end of device [ 70.217538][ T6599] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 70.231501][ T6599] syz.4.1272: attempt to access beyond end of device [ 70.231501][ T6599] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 70.247904][ T6611] tipc: New replicast peer: 255.255.255.83 [ 70.253810][ T6611] tipc: Enabled bearer , priority 10 [ 70.274144][ T6613] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 70.338631][ T6623] unsupported nlmsg_type 40 [ 70.460547][ T6643] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 70.591861][ T6657] loop4: detected capacity change from 0 to 8192 [ 70.614390][ T6666] bridge_slave_0: left promiscuous mode [ 70.620217][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.655743][ T6666] bridge_slave_1: left allmulticast mode [ 70.661534][ T6666] bridge_slave_1: left promiscuous mode [ 70.667339][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.702984][ T6666] bond0: (slave bond_slave_0): Releasing backup interface [ 70.707589][ T6683] netlink: 'syz.6.1313': attribute type 1 has an invalid length. [ 70.722127][ T6666] bond0: (slave bond_slave_1): Releasing backup interface [ 70.768123][ T6666] team0: Port device team_slave_0 removed [ 70.780840][ T6666] team0: Port device team_slave_1 removed [ 70.789182][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.796699][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.807705][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.815376][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.864335][ T6692] bond1: (slave gretap1): making interface the new active one [ 70.874009][ T6692] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 70.901351][ T6699] macvtap1: entered promiscuous mode [ 70.906754][ T6699] erspan0: entered promiscuous mode [ 70.912409][ T6699] macvtap1: entered allmulticast mode [ 70.917834][ T6699] erspan0: entered allmulticast mode [ 70.949938][ T6707] loop6: detected capacity change from 0 to 2048 [ 70.982613][ T6707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.056450][ T6727] loop5: detected capacity change from 0 to 2048 [ 71.073356][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 71.091994][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.115648][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 71.323672][ T2959] tipc: Node number set to 2886997007 [ 71.434413][ T6792] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 71.442395][ T6792] netlink: 'syz.1.1356': attribute type 4 has an invalid length. [ 71.498658][ T6800] erspan0: entered promiscuous mode [ 71.508563][ T6800] macvtap1: entered promiscuous mode [ 71.514188][ T6800] macvtap1: entered allmulticast mode [ 71.519704][ T6800] erspan0: entered allmulticast mode [ 71.558370][ T6806] loop6: detected capacity change from 0 to 4096 [ 71.589773][ T6813] xt_hashlimit: max too large, truncated to 1048576 [ 71.600603][ T6813] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 71.601175][ T6806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.626149][ T6813] macvlan1: entered promiscuous mode [ 71.631573][ T6813] macvlan1: entered allmulticast mode [ 71.661679][ T6813] veth1_vlan: entered allmulticast mode [ 71.669696][ T6813] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 71.892695][ T6843] __nla_validate_parse: 9 callbacks suppressed [ 71.892712][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'. [ 71.920741][ T6843] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 71.991891][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.013857][ T6855] Cannot find add_set index 0 as target [ 72.080805][ T6866] random: crng reseeded on system resumption [ 72.131007][ T6871] can0: slcan on ttyS3. [ 72.239767][ T6889] loop5: detected capacity change from 0 to 2048 [ 72.261994][ T6871] can0 (unregistered): slcan off ttyS3. [ 72.268135][ T6871] Falling back ldisc for ttyS3. [ 72.297842][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 72.308437][ T6889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.334907][ T6896] erspan0: entered promiscuous mode [ 72.342995][ T6896] macvtap1: entered promiscuous mode [ 72.348478][ T6896] macvtap1: entered allmulticast mode [ 72.353881][ T6896] erspan0: entered allmulticast mode [ 72.443958][ T6900] netlink: 'syz.4.1406': attribute type 4 has an invalid length. [ 72.618067][ T6906] loop4: detected capacity change from 0 to 1024 [ 72.658421][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.672131][ T6906] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.687948][ T6906] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1409: bg 0: block 393: padding at end of block bitmap is not set [ 72.703069][ T6906] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 72.715800][ T6906] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.715800][ T6906] [ 72.828814][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.840805][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.844462][ T6915] loop6: detected capacity change from 0 to 128 [ 73.117804][ T6939] netlink: 'syz.5.1422': attribute type 2 has an invalid length. [ 73.125662][ T6939] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1422'. [ 73.185547][ T6947] loop5: detected capacity change from 0 to 2048 [ 73.225638][ T6947] loop5: p1 < > p4 [ 73.230651][ T6947] loop5: p4 size 8388608 extends beyond EOD, truncated [ 73.241243][ T6953] bridge_slave_0: left allmulticast mode [ 73.247139][ T6953] bridge_slave_0: left promiscuous mode [ 73.252939][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.264840][ T6953] bridge_slave_1: left allmulticast mode [ 73.270583][ T6953] bridge_slave_1: left promiscuous mode [ 73.276454][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.286717][ T6953] bond0: (slave bond_slave_0): Releasing backup interface [ 73.297279][ T6953] bond0: (slave bond_slave_1): Releasing backup interface [ 73.310030][ T6953] team0: Port device team_slave_0 removed [ 73.319409][ T6953] team0: Port device team_slave_1 removed [ 73.326156][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.333684][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.342978][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.350537][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.371341][ T6953] bond1: (slave gretap1): Releasing active interface [ 73.459641][ T6957] loop5: detected capacity change from 0 to 1024 [ 73.482433][ T6957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.505174][ T6969] xt_hashlimit: max too large, truncated to 1048576 [ 73.511389][ T6957] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 73.545517][ T6969] macvlan1: entered promiscuous mode [ 73.551074][ T6969] macvlan1: entered allmulticast mode [ 73.563223][ T6969] veth1_vlan: entered allmulticast mode [ 73.569874][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.571697][ T6969] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 73.605935][ T6977] openvswitch: netlink: Message has 6 unknown bytes. [ 73.619542][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 73.619562][ T29] audit: type=1326 audit(1752360415.185:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a56c5e929 code=0x7ffc0000 [ 73.649304][ T29] audit: type=1326 audit(1752360415.185:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a56c5e929 code=0x7ffc0000 [ 73.672951][ T29] audit: type=1326 audit(1752360415.185:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a56c5e929 code=0x7ffc0000 [ 73.698513][ T29] audit: type=1326 audit(1752360415.269:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a56c5e929 code=0x7ffc0000 [ 73.704023][ T6978] loop5: detected capacity change from 0 to 1024 [ 73.722027][ T29] audit: type=1326 audit(1752360415.269:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a56c5e929 code=0x7ffc0000 [ 73.752095][ T29] audit: type=1326 audit(1752360415.269:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a56c5e963 code=0x7ffc0000 [ 73.779499][ T29] audit: type=1326 audit(1752360415.269:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a56c5d3df code=0x7ffc0000 [ 73.802870][ T29] audit: type=1326 audit(1752360415.269:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2a56c5e9b7 code=0x7ffc0000 [ 73.821726][ T6978] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.826399][ T29] audit: type=1326 audit(1752360415.269:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a56c5d290 code=0x7ffc0000 [ 73.860058][ T29] audit: type=1326 audit(1752360415.269:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a56c5e52b code=0x7ffc0000 [ 73.860554][ T6978] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.905572][ T6978] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.912727][ T6978] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1436: bg 0: block 10: padding at end of block bitmap is not set [ 73.929023][ T6978] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1436: Failed to acquire dquot type 0 [ 73.940706][ T6978] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1436: Failed to acquire dquot type 0 [ 73.953801][ T6978] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1436: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.969219][ T6978] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1436: Failed to acquire dquot type 0 [ 73.982579][ T6978] EXT4-fs (loop5): 1 orphan inode deleted [ 73.988874][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.025830][ T6978] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.1436: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 74.051268][ T6978] syz.5.1436 (6978) used greatest stack depth: 8824 bytes left [ 74.074515][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.119139][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 74.128145][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 74.251108][ T7020] loop4: detected capacity change from 0 to 4096 [ 74.260462][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.452912][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.474862][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 74.486496][ T7024] erspan0: entered promiscuous mode [ 74.491915][ T7024] macvtap1: entered promiscuous mode [ 74.497335][ T7024] macvtap1: entered allmulticast mode [ 74.502992][ T7024] erspan0: entered allmulticast mode [ 74.512553][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 74.791746][ T7038] loop6: detected capacity change from 0 to 2048 [ 74.832568][ T7038] loop6: p1 < > p4 [ 74.837118][ T7038] loop6: p4 size 8388608 extends beyond EOD, truncated [ 74.948348][ T7056] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 74.957065][ T7056] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 74.965648][ T7056] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 74.991338][ T7056] validate_nla: 1 callbacks suppressed [ 74.991357][ T7056] netlink: '+}[@': attribute type 6 has an invalid length. [ 75.136900][ T7070] netlink: 'syz.6.1479': attribute type 1 has an invalid length. [ 75.566765][ T7100] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 75.634803][ T7106] loop4: detected capacity change from 0 to 2048 [ 75.703378][ T7106] loop4: p1 < > p4 [ 75.707863][ T7106] loop4: p4 size 8388608 extends beyond EOD, truncated [ 75.847490][ T7120] vhci_hcd: invalid port number 96 [ 75.852703][ T7120] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 76.011994][ T7143] loop6: detected capacity change from 0 to 1024 [ 76.047177][ T7143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.062149][ T7143] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.223878][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.246933][ T7157] @: renamed from vlan0 (while UP) [ 76.946301][ T7206] @: renamed from vlan0 (while UP) [ 77.172325][ T7225] __nla_validate_parse: 7 callbacks suppressed [ 77.172346][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1550'. [ 77.192907][ T7225] bridge0: port 1(macvlan2) entered blocking state [ 77.199903][ T7225] bridge0: port 1(macvlan2) entered disabled state [ 77.209464][ T7225] macvlan2: entered allmulticast mode [ 77.214919][ T7225] bridge0: entered allmulticast mode [ 77.224640][ T7225] macvlan2: left allmulticast mode [ 77.229897][ T7225] bridge0: left allmulticast mode [ 77.240779][ T7231] loop5: detected capacity change from 0 to 512 [ 77.247382][ T7229] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 77.256925][ T7231] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.268874][ T7231] EXT4-fs (loop5): 1 truncate cleaned up [ 77.282473][ T7231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.297284][ T7231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.375508][ T7243] loop4: detected capacity change from 0 to 1024 [ 77.387425][ T7243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.399697][ T7243] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.423985][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.455759][ T7251] netem: incorrect ge model size [ 77.461194][ T7251] netem: change failed [ 77.947352][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190fd400: rx timeout, send abort [ 78.286853][ T7342] loop4: detected capacity change from 0 to 8192 [ 78.295963][ T7342] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.428820][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881190fd400: abort rx timeout. Force session deactivation [ 78.521391][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 78.521409][ T29] audit: type=1326 audit(1752360420.375:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.536398][ T7371] loop6: detected capacity change from 0 to 2048 [ 78.573861][ T29] audit: type=1326 audit(1752360420.375:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.597440][ T29] audit: type=1326 audit(1752360420.375:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.621053][ T29] audit: type=1326 audit(1752360420.375:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.644716][ T29] audit: type=1326 audit(1752360420.375:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.668835][ T29] audit: type=1326 audit(1752360420.375:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.692446][ T29] audit: type=1326 audit(1752360420.375:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.716129][ T29] audit: type=1326 audit(1752360420.375:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.739781][ T29] audit: type=1326 audit(1752360420.375:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.763703][ T29] audit: type=1326 audit(1752360420.375:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.6.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 78.804742][ T7371] EXT4-fs (loop6): failed to initialize system zone (-117) [ 78.817146][ T7371] EXT4-fs (loop6): mount failed [ 79.020571][ T7406] netlink: 'syz.5.1628': attribute type 5 has an invalid length. [ 79.028427][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1628'. [ 79.096426][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.103957][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.111595][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.127251][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.134829][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.142522][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.149967][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.157496][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.165104][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.172533][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.180004][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.187564][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.195044][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.202464][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.210166][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.217624][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.225189][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.232647][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.240072][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.247633][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.255416][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.262947][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.270401][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.277819][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.285304][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.292814][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.300301][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.307925][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.318398][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 79.429904][ T7429] ALSA: seq fatal error: cannot create timer (-22) [ 79.437694][ T7427] loop4: detected capacity change from 0 to 2048 [ 79.469680][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.612399][ T7444] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 79.624456][ T7446] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 79.664662][ T7446] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.677068][ T7446] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.677068][ T7446] [ 79.686850][ T7446] EXT4-fs (loop4): Total free blocks count 0 [ 79.693017][ T7446] EXT4-fs (loop4): Free/Dirty block details [ 79.699114][ T7446] EXT4-fs (loop4): free_blocks=4096 [ 79.704566][ T7446] EXT4-fs (loop4): dirty_blocks=432 [ 79.710006][ T7446] EXT4-fs (loop4): Block reservation details [ 79.716115][ T7446] EXT4-fs (loop4): i_reserved_data_blocks=27 [ 79.820923][ T7462] tipc: New replicast peer: 255.255.255.255 [ 79.827176][ T7462] tipc: Enabled bearer , priority 10 [ 79.982621][ T7467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7467 comm=syz.0.1656 [ 79.995288][ T7467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7467 comm=syz.0.1656 [ 80.063103][ T4102] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 80.202687][ T7489] loop4: detected capacity change from 0 to 2048 [ 80.213743][ T7489] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.243086][ T7489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.293419][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.427696][ T7508] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1673'. [ 80.533345][ T7524] loop5: detected capacity change from 0 to 2048 [ 80.567564][ T7524] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.597051][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.653471][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.773624][ T2959] tipc: Node number set to 2895549981 [ 80.960678][ T7583] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 81.007082][ T7585] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.049664][ T7589] loop5: detected capacity change from 0 to 8192 [ 81.070938][ T7589] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.225129][ T7596] loop5: detected capacity change from 0 to 256 [ 81.267951][ T7600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1705'. [ 81.277026][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1705'. [ 81.286088][ T7600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1705'. [ 81.295165][ T7600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1705'. [ 81.415247][ T7611] netem: change failed [ 81.582374][ T7637] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1721'. [ 81.637982][ T7648] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1725'. [ 81.640331][ T7644] loop4: detected capacity change from 0 to 2048 [ 81.677492][ T7644] EXT4-fs (loop4): failed to initialize system zone (-117) [ 81.690857][ T7644] EXT4-fs (loop4): mount failed [ 81.725857][ T7640] macvlan2 (unregistering): left allmulticast mode [ 81.733204][ T7640] team0: Port device macvlan2 removed [ 81.747681][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 81.896208][ T7672] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 82.015947][ T7683] __nla_validate_parse: 1 callbacks suppressed [ 82.015980][ T7683] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 82.479669][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.488467][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.849370][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 83.173049][ T7737] loop5: detected capacity change from 0 to 2048 [ 83.193434][ T7737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.381631][ T7750] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 83.417987][ T7750] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.430403][ T7750] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.430403][ T7750] [ 83.440245][ T7750] EXT4-fs (loop5): Total free blocks count 0 [ 83.446413][ T7750] EXT4-fs (loop5): Free/Dirty block details [ 83.446952][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 83.447048][ T29] audit: type=1326 audit(1752360425.574:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 83.452446][ T7750] EXT4-fs (loop5): free_blocks=4096 [ 83.452468][ T7750] EXT4-fs (loop5): dirty_blocks=704 [ 83.452481][ T7750] EXT4-fs (loop5): Block reservation details [ 83.452492][ T7750] EXT4-fs (loop5): i_reserved_data_blocks=44 [ 83.507345][ T29] audit: type=1326 audit(1752360425.616:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 83.531058][ T29] audit: type=1326 audit(1752360425.616:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 83.554591][ T29] audit: type=1326 audit(1752360425.627:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7751 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 83.643216][ T4111] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 673 with error 28 [ 83.874914][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 83.876317][ T7785] 9pnet_fd: Insufficient options for proto=fd [ 83.915018][ T29] audit: type=1400 audit(1752360426.049:1786): avc: denied { bind } for pid=7786 comm="syz.6.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.954727][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 84.004300][ T7796] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1789'. [ 84.240517][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1801'. [ 84.362100][ T29] audit: type=1400 audit(1752360426.535:1787): avc: denied { accept } for pid=7830 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.399575][ T7829] loop6: detected capacity change from 0 to 1024 [ 84.420759][ T7829] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.431856][ T7829] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.479775][ T7829] JBD2: no valid journal superblock found [ 84.485830][ T7829] EXT4-fs (loop6): Could not load journal inode [ 84.503010][ T7838] atomic_op ffff88811bc65128 conn xmit_atomic 0000000000000000 [ 84.516677][ T29] audit: type=1400 audit(1752360426.704:1788): avc: denied { watch } for pid=7839 comm="syz.4.1809" path="/385/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.557471][ T7840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.650373][ T7840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.665941][ T29] audit: type=1400 audit(1752360426.863:1789): avc: denied { connect } for pid=7850 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.689741][ T29] audit: type=1326 audit(1752360426.884:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.6.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 84.713807][ T29] audit: type=1326 audit(1752360426.916:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.6.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 84.748734][ T7857] loop6: detected capacity change from 0 to 1024 [ 84.782232][ T7862] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 84.802335][ T7857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.820950][ T7840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.859392][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.960749][ T7840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.983725][ T7874] loop5: detected capacity change from 0 to 2048 [ 84.997113][ T7874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.039714][ T7840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.058646][ T7840] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062703][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'. [ 85.079915][ T7840] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102289][ T7840] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164626][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.255129][ T7889] loop4: detected capacity change from 0 to 512 [ 85.279829][ T7889] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 85.288167][ T7889] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.1828: iget: bad i_size value: 12154757448730 [ 85.323960][ T7889] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1828: couldn't read orphan inode 13 (err -117) [ 85.347623][ T7889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.466994][ T5060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.492924][ T5060] bond0: (slave syz_tun): Releasing backup interface [ 85.529543][ T7897] loop5: detected capacity change from 0 to 1024 [ 85.555569][ T7897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.584854][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.619272][ T7903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.680691][ T7903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.737740][ T7903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.796637][ T7903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.836139][ T7903] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.851259][ T7903] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.862907][ T7903] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.876770][ T7903] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.936615][ T7916] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1840'. [ 85.966503][ T7922] loop5: detected capacity change from 0 to 512 [ 85.973346][ T7922] EXT4-fs: Ignoring removed nobh option [ 85.980846][ T7922] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1843: iget: bad i_size value: 38620345925642 [ 85.994215][ T7922] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1843: couldn't read orphan inode 15 (err -117) [ 86.007021][ T7922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.052519][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 86.083260][ T7932] rdma_op ffff8881033fdd80 conn xmit_rdma 0000000000000000 [ 86.091842][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.131735][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.140392][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.151307][ T7935] vhci_hcd: invalid port number 96 [ 86.156561][ T7935] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 86.662476][ T7973] rdma_rxe: rxe_newlink: failed to add syz_tun [ 86.862802][ T7994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.902733][ T7994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.949498][ T7994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.982624][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 86.992621][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 87.035667][ T7994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.085772][ T7994] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.097545][ T7994] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.109761][ T7994] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.122660][ T7994] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.195715][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1884'. [ 87.204806][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1884'. [ 87.217328][ T8015] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 87.519850][ T8028] rdma_rxe: rxe_newlink: failed to add syz_tun [ 87.550038][ T8032] loop6: detected capacity change from 0 to 1024 [ 87.559204][ T8032] EXT4-fs: Ignoring removed nobh option [ 87.564991][ T8032] EXT4-fs: Ignoring removed bh option [ 87.580374][ T8036] loop5: detected capacity change from 0 to 1024 [ 87.583269][ T8032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.587503][ T8036] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.610923][ T8036] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.631845][ T8036] JBD2: no valid journal superblock found [ 87.637766][ T8036] EXT4-fs (loop5): Could not load journal inode [ 87.645319][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.746174][ T8048] loop6: detected capacity change from 0 to 2048 [ 87.772455][ T8048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.870425][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'. [ 87.927207][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.156085][ T8101] netlink: 372 bytes leftover after parsing attributes in process `syz.6.1921'. [ 88.188307][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 88.188325][ T29] audit: type=1326 audit(1752360430.580:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 88.234195][ T29] audit: type=1326 audit(1752360430.612:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 88.258199][ T29] audit: type=1326 audit(1752360430.612:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd4b8e929 code=0x7ffc0000 [ 88.401451][ T4138] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.445443][ T4138] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.469624][ T8112] SELinux: ebitmap: truncated map [ 88.492501][ T4138] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.516964][ T29] audit: type=1400 audit(1752360430.918:1889): avc: denied { mounton } for pid=8118 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 88.527825][ T8112] SELinux: failed to load policy [ 88.568433][ T4138] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.691543][ T29] audit: type=1400 audit(1752360431.108:1890): avc: denied { rename } for pid=8137 comm="syz.5.1933" name="file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.737370][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1938'. [ 88.756760][ T8143] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 88.765999][ T4138] erspan0 (unregistering): left allmulticast mode [ 88.817802][ T4138] team0: Port device bond0 removed [ 88.825228][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.841492][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.853103][ T4138] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 88.862918][ T4138] veth1_vlan: left allmulticast mode [ 88.871270][ T4138] bond0 (unregistering): Released all slaves [ 88.887056][ T4138] bond1 (unregistering): Released all slaves [ 89.020271][ T4138] hsr_slave_0: left promiscuous mode [ 89.037335][ T4138] hsr_slave_1: left promiscuous mode [ 89.054704][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.062277][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.107793][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.115296][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.129312][ T4138] veth1_macvtap: left promiscuous mode [ 89.135149][ T4138] veth0_macvtap: left promiscuous mode [ 89.140687][ T4138] veth1_vlan: left promiscuous mode [ 89.146273][ T4138] veth0_vlan: left promiscuous mode [ 89.240320][ T4138] team0 (unregistering): Port device team_slave_1 removed [ 89.254820][ T4138] team0 (unregistering): Port device team_slave_0 removed [ 89.259458][ T8174] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 89.299502][ T8165] IPVS: stopping master sync thread 8175 ... [ 89.299960][ T8175] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 89.328832][ T8176] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 89.339026][ T8176] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 89.355792][ T8176] bond3: (slave vcan1): making interface the new active one [ 89.364919][ T8176] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 89.498461][ T8184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.516631][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 89.545585][ T8184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.653281][ T8184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.700762][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.708110][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.731889][ T8118] bridge_slave_0: entered allmulticast mode [ 89.782074][ T8118] bridge_slave_0: entered promiscuous mode [ 89.799405][ T8184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.826582][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.833847][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.853619][ T8118] bridge_slave_1: entered allmulticast mode [ 89.860278][ T8118] bridge_slave_1: entered promiscuous mode [ 89.901534][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.914238][ T8184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925064][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.936787][ T8184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.964028][ T8118] team0: Port device team_slave_0 added [ 89.972691][ T8118] team0: Port device team_slave_1 added [ 89.982007][ T8184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034292][ T8184] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084076][ T8224] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 90.095579][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.102770][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.128825][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.140260][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.147230][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.173412][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.253984][ T29] audit: type=1400 audit(1752360432.766:1891): avc: denied { kexec_image_load } for pid=8232 comm="syz.6.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 90.312492][ T8118] hsr_slave_0: entered promiscuous mode [ 90.318756][ T8118] hsr_slave_1: entered promiscuous mode [ 90.476639][ T29] audit: type=1326 audit(1752360432.998:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.0.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 90.509261][ T8256] tipc: Enabling of bearer rejected, failed to enable media [ 90.520713][ T29] audit: type=1326 audit(1752360433.019:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.0.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 90.544338][ T29] audit: type=1326 audit(1752360433.019:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.0.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 90.568000][ T29] audit: type=1326 audit(1752360433.019:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.0.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 90.609691][ T8118] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.622393][ T8118] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.633645][ T8262] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 90.633874][ T8258] IPVS: stopping master sync thread 8262 ... [ 90.652532][ T8118] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.667075][ T8118] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.712125][ T8270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8270 comm=syz.1.1987 [ 90.760357][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.779246][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.797040][ T4138] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.804189][ T4138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.816111][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.823456][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.954702][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.177965][ T8118] veth0_vlan: entered promiscuous mode [ 91.190651][ T8118] veth1_vlan: entered promiscuous mode [ 91.202163][ T8333] uprobe: syz.5.2006:8333 failed to unregister, leaking uprobe [ 91.255883][ T8118] veth0_macvtap: entered promiscuous mode [ 91.263353][ T8118] veth1_macvtap: entered promiscuous mode [ 91.274425][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.283479][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.305574][ T8118] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.314453][ T8118] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.323360][ T8118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.332389][ T8118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.419563][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2014'. [ 91.488589][ T8365] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.550424][ T8365] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.618074][ T8365] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.680190][ T8365] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.785983][ T8365] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799595][ T8365] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.815567][ T8365] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.835264][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2038'. [ 91.845867][ T8365] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.058335][ T8444] loop6: detected capacity change from 0 to 1024 [ 92.065447][ T8446] serio: Serial port ptm0 [ 92.085691][ T8444] EXT4-fs: Ignoring removed nobh option [ 92.091586][ T8444] EXT4-fs: Ignoring removed bh option [ 92.121238][ T8444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.152976][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.336078][ T8486] loop7: detected capacity change from 0 to 512 [ 92.351111][ T8486] EXT4-fs: Ignoring removed i_version option [ 92.365010][ T8486] EXT4-fs (loop7): 1 truncate cleaned up [ 92.371328][ T8486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.452958][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.569751][ T8527] program syz.5.2093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.604854][ T8532] hub 2-0:1.0: USB hub found [ 92.614673][ T8532] hub 2-0:1.0: 8 ports detected [ 92.725307][ T8552] loop5: detected capacity change from 0 to 512 [ 92.738064][ T8552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.763639][ T8552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.787109][ T8552] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.843460][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.936344][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 92.948127][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2115'. [ 93.008147][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 93.008246][ T29] audit: type=1400 audit(1752360435.658:1962): avc: denied { create } for pid=8581 comm="syz.1.2117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.043072][ T29] audit: type=1400 audit(1752360435.669:1963): avc: denied { write } for pid=8581 comm="syz.1.2117" name="file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.065860][ T29] audit: type=1400 audit(1752360435.669:1964): avc: denied { open } for pid=8581 comm="syz.1.2117" path="/460/file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.089037][ T29] audit: type=1400 audit(1752360435.669:1965): avc: denied { ioctl } for pid=8581 comm="syz.1.2117" path="/460/file0" dev="tmpfs" ino=2391 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.184840][ T8588] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2119'. [ 93.212315][ T29] audit: type=1400 audit(1752360435.880:1966): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.243546][ T29] audit: type=1326 audit(1752360435.911:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 93.267341][ T29] audit: type=1326 audit(1752360435.911:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 93.292811][ T29] audit: type=1400 audit(1752360435.911:1969): avc: denied { name_bind } for pid=8589 comm="syz.5.2120" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 93.314274][ T29] audit: type=1326 audit(1752360435.911:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 93.337749][ T29] audit: type=1326 audit(1752360435.911:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8591 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17043fe929 code=0x7ffc0000 [ 93.562055][ T8615] loop6: detected capacity change from 0 to 256 [ 93.581164][ T8615] Falling back ldisc for ptm0. [ 93.651852][ T8616] loop5: detected capacity change from 0 to 8192 [ 93.704642][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.722203][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.738479][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.746292][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.774524][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.782111][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.789646][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.797210][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.804758][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.812325][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.819903][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.827389][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.834915][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.842502][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.851011][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.858535][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.866249][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.873901][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.881521][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.888953][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.896485][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.903942][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.911482][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.918925][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.926389][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.933934][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.941515][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.949190][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.956657][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.006827][ T1035] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.949737][ T8696] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2169'. [ 94.958921][ T8696] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2169'. [ 94.968032][ T8696] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2169'. [ 95.136860][ T8716] loop6: detected capacity change from 0 to 512 [ 95.165493][ T8719] loop7: detected capacity change from 0 to 512 [ 95.179142][ T8719] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 95.179512][ T8716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.208234][ T8719] EXT4-fs (loop7): 1 truncate cleaned up [ 95.216184][ T8719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.224211][ T8716] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.283403][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2182'. [ 95.300720][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.351640][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2182'. [ 95.397561][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2183'. [ 95.465848][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.548524][ T8744] loop6: detected capacity change from 0 to 256 [ 95.596992][ T8744] FAT-fs (loop6): bogus number of FAT sectors [ 95.603169][ T8744] FAT-fs (loop6): Can't find a valid FAT filesystem [ 95.688590][ T8752] loop7: detected capacity change from 0 to 1024 [ 95.715413][ T8752] EXT4-fs: Ignoring removed orlov option [ 95.738808][ T8752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.766055][ T8752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.788567][ T8758] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 95.788567][ T8758] program syz.6.2194 not setting count and/or reply_len properly [ 95.974647][ T8779] veth0: entered promiscuous mode [ 96.006494][ T8779] veth0: left promiscuous mode [ 96.092238][ T8783] xt_hashlimit: max too large, truncated to 1048576 [ 96.161213][ T8791] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 96.194476][ T8793] tipc: Started in network mode [ 96.199415][ T8793] tipc: Node identity 02267c25171e, cluster identity 4711 [ 96.206751][ T8793] tipc: Enabled bearer , priority 0 [ 96.219696][ T8793] tipc: Disabling bearer [ 96.260978][ T8799] netlink: 'syz.7.2214': attribute type 10 has an invalid length. [ 96.367984][ T8807] loop7: detected capacity change from 0 to 8192 [ 96.391049][ T8811] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.433358][ T8811] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.518448][ T8811] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592774][ T8811] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.687898][ T8811] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.701495][ T8811] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.714713][ T8811] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.728246][ T8811] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.987407][ T8845] loop7: detected capacity change from 0 to 8192 [ 97.093217][ T8858] loop6: detected capacity change from 0 to 512 [ 97.113589][ T8862] netlink: 'syz.1.2241': attribute type 21 has an invalid length. [ 97.127086][ T8862] __nla_validate_parse: 1 callbacks suppressed [ 97.127107][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2241'. [ 97.341311][ T8889] ip6tnl0: entered promiscuous mode [ 97.347079][ T8887] ip6tnl0: left promiscuous mode [ 97.563309][ T8912] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 97.563309][ T8912] program syz.0.2263 not setting count and/or reply_len properly [ 97.644728][ T8920] loop5: detected capacity change from 0 to 1024 [ 97.652226][ T8920] EXT4-fs: Ignoring removed orlov option [ 97.662638][ T8920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 97.671643][ T8920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.786853][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.839683][ T8933] loop5: detected capacity change from 0 to 1024 [ 97.839683][ T8934] loop7: detected capacity change from 0 to 512 [ 97.840056][ T8934] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.852268][ T8933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.859319][ T8934] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 97.881977][ T8934] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 97.882959][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 97.882977][ T29] audit: type=1400 audit(1752360440.808:2128): avc: denied { append } for pid=8932 comm="syz.5.2271" path="/268/file1/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.892149][ T8934] EXT4-fs (loop7): orphan cleanup on readonly fs [ 97.927994][ T8934] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2272: Invalid block bitmap block 0 in block_group 0 [ 97.943019][ T8934] EXT4-fs (loop7): Remounting filesystem read-only [ 97.943553][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.949940][ T8934] Quota error (device loop7): write_blk: dquota write failed [ 97.966555][ T8934] Quota error (device loop7): write_blk: dquota write failed [ 97.974913][ T8934] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 97.985125][ T8934] EXT4-fs (loop7): 1 orphan inode deleted [ 97.996895][ T8939] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2275'. [ 98.008156][ T8934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.076770][ T29] audit: type=1400 audit(1752360441.008:2129): avc: denied { listen } for pid=8948 comm="syz.0.2279" lport=32782 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.119482][ T29] audit: type=1400 audit(1752360441.050:2130): avc: denied { accept } for pid=8948 comm="syz.0.2279" lport=32782 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.183570][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.209290][ T8964] loop6: detected capacity change from 0 to 1024 [ 98.216698][ T8964] EXT4-fs: Ignoring removed orlov option [ 98.225805][ T8964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.239261][ T8964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.311755][ T29] audit: type=1400 audit(1752360441.261:2131): avc: denied { append } for pid=8976 comm="syz.6.2290" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.350816][ T29] audit: type=1326 audit(1752360441.304:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.7.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d55e929 code=0x7ffc0000 [ 98.374392][ T29] audit: type=1326 audit(1752360441.304:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.7.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d55e929 code=0x7ffc0000 [ 98.402637][ T8975] loop5: detected capacity change from 0 to 8192 [ 98.410698][ T29] audit: type=1326 audit(1752360441.304:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8978 comm="syz.7.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f317d55e929 code=0x7ffc0000 [ 98.641822][ T8996] loop6: detected capacity change from 0 to 512 [ 98.655616][ T8996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.685220][ T8996] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.792659][ T9009] loop5: detected capacity change from 0 to 256 [ 98.803773][ T9009] FAT-fs (loop5): bogus number of FAT sectors [ 98.810219][ T9009] FAT-fs (loop5): Can't find a valid FAT filesystem [ 99.026344][ T9036] netlink: 'syz.7.2315': attribute type 13 has an invalid length. [ 99.096724][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.104089][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.153083][ T9045] loop5: detected capacity change from 0 to 512 [ 99.160093][ T9045] EXT4-fs: Ignoring removed i_version option [ 99.167537][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.169013][ T9045] EXT4-fs (loop5): 1 truncate cleaned up [ 99.181418][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.248821][ T9036] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.257807][ T9036] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.266924][ T9036] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.275923][ T9036] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321092][ T9043] tipc: Enabling of bearer rejected, failed to enable media [ 99.500293][ T9075] loop7: detected capacity change from 0 to 512 [ 99.509297][ T9075] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 99.531908][ T9075] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.2332: corrupted xattr entries [ 99.553738][ T9075] EXT4-fs (loop7): Remounting filesystem read-only [ 99.568660][ T9075] EXT4-fs (loop7): 1 truncate cleaned up [ 99.606991][ T9075] EXT4-fs mount: 4 callbacks suppressed [ 99.607013][ T9075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.666476][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.725723][ T9082] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2334'. [ 99.787410][ T9094] loop6: detected capacity change from 0 to 256 [ 99.805085][ T9094] vfat: Bad value for 'fmask' [ 99.938752][ T9111] netlink: 'syz.6.2347': attribute type 1 has an invalid length. [ 100.194314][ T9145] loop6: detected capacity change from 0 to 512 [ 100.200961][ T9145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.269531][ T9145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.282550][ T9145] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.495049][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.903409][ T9182] netlink: 566 bytes leftover after parsing attributes in process `syz.0.2377'. [ 101.338130][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2400'. [ 101.347442][ T9229] IPVS: Error joining to the multicast group [ 101.600729][ T9254] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 101.632113][ T9254] bond0: (slave team0): Releasing backup interface [ 101.656286][ T9254] team0: left allmulticast mode [ 101.672213][ T9254] team_slave_0: left allmulticast mode [ 101.677839][ T9254] team_slave_1: left allmulticast mode [ 101.700269][ T9254] batman_adv: batadv0: Adding interface: team0 [ 101.706590][ T9254] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.731923][ T9254] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.772793][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 102.294304][ T9279] loop7: detected capacity change from 0 to 128 [ 102.434712][ T9279] syz.7.2422: attempt to access beyond end of device [ 102.434712][ T9279] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 102.646358][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 102.646420][ T29] audit: type=1400 audit(1752360445.829:2304): avc: denied { read write } for pid=5399 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.677090][ T29] audit: type=1400 audit(1752360445.829:2305): avc: denied { open } for pid=5399 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.719748][ T29] audit: type=1400 audit(1752360445.892:2306): avc: denied { ioctl } for pid=5399 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.783611][ T29] audit: type=1400 audit(1752360445.987:2307): avc: denied { prog_load } for pid=9300 comm="syz.7.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.802837][ T29] audit: type=1400 audit(1752360445.987:2308): avc: denied { bpf } for pid=9300 comm="syz.7.2432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.823476][ T29] audit: type=1400 audit(1752360445.987:2309): avc: denied { perfmon } for pid=9300 comm="syz.7.2432" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.952610][ T29] audit: type=1400 audit(1752360446.040:2310): avc: denied { name_bind } for pid=9300 comm="syz.7.2432" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.974626][ T29] audit: type=1400 audit(1752360446.050:2311): avc: denied { prog_run } for pid=9300 comm="syz.7.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.993737][ T29] audit: type=1400 audit(1752360446.103:2312): avc: denied { append } for pid=9303 comm="syz.5.2433" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.016924][ T29] audit: type=1400 audit(1752360446.114:2313): avc: denied { map_create } for pid=9305 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.796274][ T9342] rdma_op ffff88811eb4d580 conn xmit_rdma 0000000000000000 [ 104.036439][ T9365] loop5: detected capacity change from 0 to 512 [ 104.070129][ T9365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.076833][ T9365] EXT4-fs: inline encryption not supported [ 104.082754][ T9365] EXT4-fs: Ignoring removed bh option [ 104.117282][ T9365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.133405][ T9365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.149164][ T9365] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 104.158038][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 104.186920][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2465'. [ 104.285466][ T9380] netlink: 'syz.0.2468': attribute type 2 has an invalid length. [ 104.317505][ T9384] ip6tnl1: entered promiscuous mode [ 104.736656][ T9421] netlink: 'syz.6.2487': attribute type 1 has an invalid length. [ 104.800623][ T9427] syz.1.2490: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 104.815395][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.1.2490 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 104.815436][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.815459][ T9427] Call Trace: [ 104.815467][ T9427] [ 104.815477][ T9427] __dump_stack+0x1d/0x30 [ 104.815506][ T9427] dump_stack_lvl+0xe8/0x140 [ 104.815547][ T9427] dump_stack+0x15/0x1b [ 104.815569][ T9427] warn_alloc+0x12b/0x1a0 [ 104.815607][ T9427] ? audit_log_end+0x1d7/0x1f0 [ 104.815661][ T9427] __vmalloc_node_range_noprof+0x9c/0xe00 [ 104.815700][ T9427] ? trace_call_bpf+0x1c6/0x270 [ 104.815804][ T9427] ? perf_trace_run_bpf_submit+0xe6/0x110 [ 104.815837][ T9427] ? xskq_create+0x36/0xe0 [ 104.815866][ T9427] ? perf_trace_kmalloc+0xe1/0x110 [ 104.815924][ T9427] vmalloc_user_noprof+0x7d/0xb0 [ 104.815963][ T9427] ? xskq_create+0x80/0xe0 [ 104.815991][ T9427] xskq_create+0x80/0xe0 [ 104.816064][ T9427] xsk_init_queue+0x95/0xf0 [ 104.816092][ T9427] xsk_setsockopt+0x35c/0x510 [ 104.816118][ T9427] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.816146][ T9427] __sys_setsockopt+0x184/0x200 [ 104.816240][ T9427] __x64_sys_setsockopt+0x64/0x80 [ 104.816306][ T9427] x64_sys_call+0x2bd5/0x2fb0 [ 104.816333][ T9427] do_syscall_64+0xd2/0x200 [ 104.816357][ T9427] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.816390][ T9427] ? clear_bhb_loop+0x40/0x90 [ 104.816479][ T9427] ? clear_bhb_loop+0x40/0x90 [ 104.816501][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.816521][ T9427] RIP: 0033:0x7f17043fe929 [ 104.816541][ T9427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.816567][ T9427] RSP: 002b:00007f1702a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.816592][ T9427] RAX: ffffffffffffffda RBX: 00007f1704625fa0 RCX: 00007f17043fe929 [ 104.816608][ T9427] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 104.816668][ T9427] RBP: 00007f1704480b39 R08: 0000000000000004 R09: 0000000000000000 [ 104.816716][ T9427] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.816756][ T9427] R13: 0000000000000000 R14: 00007f1704625fa0 R15: 00007fffbf0ab778 [ 104.816795][ T9427] [ 104.816808][ T9427] Mem-Info: [ 105.042358][ T9427] active_anon:3745 inactive_anon:9 isolated_anon:0 [ 105.042358][ T9427] active_file:20585 inactive_file:2476 isolated_file:0 [ 105.042358][ T9427] unevictable:0 dirty:319 writeback:0 [ 105.042358][ T9427] slab_reclaimable:3221 slab_unreclaimable:32633 [ 105.042358][ T9427] mapped:28680 shmem:554 pagetables:1094 [ 105.042358][ T9427] sec_pagetables:0 bounce:0 [ 105.042358][ T9427] kernel_misc_reclaimable:0 [ 105.042358][ T9427] free:1865668 free_pcp:16078 free_cma:0 [ 105.087232][ T9427] Node 0 active_anon:14980kB inactive_anon:36kB active_file:82340kB inactive_file:9904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114720kB dirty:1276kB writeback:0kB shmem:2216kB writeback_tmp:0kB kernel_stack:4240kB pagetables:4376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.116135][ T9427] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.144713][ T9427] lowmem_reserve[]: 0 2882 7860 7860 [ 105.150129][ T9427] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 105.180683][ T9427] lowmem_reserve[]: 0 0 4978 4978 [ 105.185849][ T9427] Node 0 Normal free:4499584kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14980kB inactive_anon:36kB active_file:82340kB inactive_file:9904kB unevictable:0kB writepending:1276kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:60684kB local_pcp:31392kB free_cma:0kB [ 105.218064][ T9427] lowmem_reserve[]: 0 0 0 0 [ 105.222603][ T9427] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.235516][ T9427] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 105.251813][ T9427] Node 0 Normal: 524*4kB (UME) 258*8kB (UE) 596*16kB (UME) 570*32kB (UME) 389*64kB (UME) 119*128kB (UME) 55*256kB (UME) 56*512kB (UM) 16*1024kB (UM) 21*2048kB (UME) 1056*4096kB (M) = 4499584kB [ 105.271050][ T9427] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 105.280386][ T9427] 23618 total pagecache pages [ 105.285123][ T9427] 9 pages in swap cache [ 105.289277][ T9427] Free swap = 124960kB [ 105.293464][ T9427] Total swap = 124996kB [ 105.297633][ T9427] 2097051 pages RAM [ 105.301436][ T9427] 0 pages HighMem/MovableOnly [ 105.306143][ T9427] 80812 pages reserved [ 105.325542][ T9431] ALSA: seq fatal error: cannot create timer (-19) [ 105.433168][ T9451] netlink: 'syz.7.2499': attribute type 1 has an invalid length. [ 105.457013][ T9456] netlink: 'syz.0.2502': attribute type 10 has an invalid length. [ 105.467252][ T9456] geneve1: entered promiscuous mode [ 105.477709][ T9456] geneve1: entered allmulticast mode [ 105.481362][ T9459] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.485786][ T9456] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 105.496435][ T9459] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 105.683775][ T9474] SELinux: failed to load policy [ 105.764918][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 105.899717][ T9497] SELinux: failed to load policy [ 105.996385][ T2959] IPVS: starting estimator thread 0... [ 106.000399][ T9504] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 106.091767][ T9507] IPVS: using max 2208 ests per chain, 110400 per kthread [ 106.166450][ T9520] loop7: detected capacity change from 0 to 128 [ 106.173064][ T9520] EXT4-fs: Ignoring removed nobh option [ 106.207820][ T9520] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.244443][ T9520] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.334640][ T8118] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.452952][ T9538] loop7: detected capacity change from 0 to 2048 [ 106.498870][ T9538] loop7: p1 < > p4 < > [ 106.775941][ T9576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.798962][ T9580] loop6: detected capacity change from 0 to 512 [ 106.818828][ T9580] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.835384][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2559'. [ 106.847030][ T9580] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2556: bg 0: block 248: padding at end of block bitmap is not set [ 106.862442][ T9580] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2556: Failed to acquire dquot type 1 [ 106.876540][ T9580] EXT4-fs (loop6): 1 truncate cleaned up [ 106.896955][ T9576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.902813][ T9580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.935709][ T9580] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 106.954463][ T9576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.972769][ T9580] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.013294][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.026408][ T9613] $Hÿ: renamed from bond0 (while UP) [ 107.039231][ T9613] $Hÿ: entered promiscuous mode [ 107.050678][ T9576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.118074][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2575'. [ 107.124667][ T9576] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.143034][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2575'. [ 107.145729][ T9576] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.178223][ T9576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.198098][ T9576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.255043][ T9639] loop6: detected capacity change from 0 to 2048 [ 107.304080][ T9639] loop6: p1 < > p4 < > [ 107.392678][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 107.392697][ T29] audit: type=1400 audit(1752360450.838:2553): avc: denied { execmod } for pid=9649 comm="syz.1.2586" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.483623][ T29] audit: type=1400 audit(1752360450.838:2554): avc: denied { execute } for pid=9649 comm="syz.1.2586" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.572213][ T29] audit: type=1326 audit(1752360451.028:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.595950][ T29] audit: type=1326 audit(1752360451.028:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.619499][ T29] audit: type=1326 audit(1752360451.028:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.643210][ T29] audit: type=1326 audit(1752360451.028:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.666770][ T29] audit: type=1326 audit(1752360451.028:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.690637][ T29] audit: type=1326 audit(1752360451.028:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.714204][ T29] audit: type=1326 audit(1752360451.028:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.737658][ T29] audit: type=1326 audit(1752360451.028:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.0.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe0e698e929 code=0x7ffc0000 [ 107.920767][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 108.014017][ T9707] serio: Serial port ptm0 [ 108.211839][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 108.248543][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 108.359773][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 108.429509][ T4073] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 108.958665][ T9775] Cannot find del_set index 4 as target [ 109.353766][ T9813] bond_slave_0: entered promiscuous mode [ 109.359525][ T9813] bond_slave_1: entered promiscuous mode [ 109.374574][ T9813] macvlan2: entered promiscuous mode [ 109.379990][ T9813] bond0: entered promiscuous mode [ 109.385585][ T9813] macvlan2: entered allmulticast mode [ 109.403210][ T9813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.414079][ T9813] bond0: left promiscuous mode [ 109.419548][ T9813] bond_slave_0: left promiscuous mode [ 109.425048][ T9813] bond_slave_1: left promiscuous mode [ 109.655087][ T9839] __nla_validate_parse: 1 callbacks suppressed [ 109.655107][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2663'. [ 109.703723][ T9844] loop7: detected capacity change from 0 to 1024 [ 109.725592][ T9844] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.736698][ T9844] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.769481][ T9844] JBD2: no valid journal superblock found [ 109.775285][ T9844] EXT4-fs (loop7): Could not load journal inode [ 109.818667][ T9855] loop5: detected capacity change from 0 to 1024 [ 109.835707][ T9855] EXT4-fs: inline encryption not supported [ 109.845255][ T9855] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.851807][ T9855] EXT4-fs: Ignoring removed bh option [ 109.875361][ T9855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.992019][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.170176][ T9891] atomic_op ffff88811f8dd528 conn xmit_atomic 0000000000000000 [ 110.309223][ T9913] netlink: 'syz.7.2695': attribute type 5 has an invalid length. [ 110.366978][ T9924] macvlan2: entered promiscuous mode [ 110.372494][ T9924] bond0: entered promiscuous mode [ 110.377619][ T9924] bond_slave_0: entered promiscuous mode [ 110.383408][ T9924] bond_slave_1: entered promiscuous mode [ 110.389332][ T9924] macvlan2: entered allmulticast mode [ 110.394730][ T9924] bond0: entered allmulticast mode [ 110.399941][ T9924] bond_slave_0: entered allmulticast mode [ 110.405970][ T9924] bond_slave_1: entered allmulticast mode [ 110.458784][ T9924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.467730][ T9924] bond0: left allmulticast mode [ 110.473364][ T9924] bond_slave_0: left allmulticast mode [ 110.478857][ T9924] bond_slave_1: left allmulticast mode [ 110.484393][ T9924] bond0: left promiscuous mode [ 110.489299][ T9924] bond_slave_0: left promiscuous mode [ 110.495001][ T9924] bond_slave_1: left promiscuous mode [ 110.988688][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 111.013626][ T9949] netlink: 'syz.6.2710': attribute type 10 has an invalid length. [ 111.051747][ T9949] geneve1: entered promiscuous mode [ 111.064459][ T9949] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 111.385662][ T9979] hsr0: entered promiscuous mode [ 111.398877][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2722'. [ 111.422548][ T9979] hsr_slave_0: left promiscuous mode [ 111.429065][ T9979] hsr_slave_1: left promiscuous mode [ 111.440130][ T9979] hsr0 (unregistering): left promiscuous mode [ 111.499608][ T9990] netlink: 'syz.1.2726': attribute type 13 has an invalid length. [ 111.527972][ T9990] gretap0: refused to change device tx_queue_len [ 111.544225][ T9990] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.690171][T10013] capability: warning: `syz.5.2737' uses 32-bit capabilities (legacy support in use) [ 112.106160][T10056] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 112.112914][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.120578][T10056] vhci_hcd vhci_hcd.0: Device attached [ 112.129665][T10060] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 112.136222][T10060] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.143757][T10060] vhci_hcd vhci_hcd.0: Device attached [ 112.187722][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 112.187742][ T29] audit: type=1400 audit(1752360455.888:2681): avc: denied { write } for pid=10067 comm="syz.0.2758" path="socket:[25561]" dev="sockfs" ino=25561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.220689][T10069] ip6gre1: entered allmulticast mode [ 112.255879][T10060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.264252][T10056] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(5) [ 112.270928][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.278689][T10056] vhci_hcd vhci_hcd.0: Device attached [ 112.288515][ T29] audit: type=1400 audit(1752360456.004:2682): avc: denied { bind } for pid=10074 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.288568][T10060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.308238][ T29] audit: type=1400 audit(1752360456.004:2683): avc: denied { name_bind } for pid=10074 comm="syz.0.2760" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.328789][T10056] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(9) [ 112.338134][ T29] audit: type=1400 audit(1752360456.004:2684): avc: denied { node_bind } for pid=10074 comm="syz.0.2760" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 112.344611][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.344727][T10056] vhci_hcd vhci_hcd.0: Device attached [ 112.378824][ T3408] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 112.421259][T10056] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(15) [ 112.428000][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.435477][T10056] vhci_hcd vhci_hcd.0: Device attached [ 112.480638][ T29] audit: type=1400 audit(1752360456.193:2685): avc: denied { write } for pid=10082 comm="syz.0.2763" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.503668][ T29] audit: type=1400 audit(1752360456.193:2686): avc: denied { ioctl } for pid=10082 comm="syz.0.2763" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.511126][T10076] vhci_hcd: connection closed [ 112.529066][T10072] vhci_hcd: connection closed [ 112.529730][T10078] vhci_hcd: connection closed [ 112.533897][T10061] vhci_hcd: connection reset by peer [ 112.549075][T10062] vhci_hcd: connection closed [ 112.564209][ T4086] vhci_hcd: stop threads [ 112.573378][ T4086] vhci_hcd: release socket [ 112.578373][ T4086] vhci_hcd: disconnect device [ 112.613658][ T4086] vhci_hcd: stop threads [ 112.618132][ T4086] vhci_hcd: release socket [ 112.622595][ T4086] vhci_hcd: disconnect device [ 112.634384][ T4086] vhci_hcd: stop threads [ 112.638695][ T4086] vhci_hcd: release socket [ 112.643241][ T4086] vhci_hcd: disconnect device [ 112.667482][T10102] netlink: 'syz.0.2769': attribute type 13 has an invalid length. [ 112.675652][ T4086] vhci_hcd: stop threads [ 112.680040][ T4086] vhci_hcd: release socket [ 112.684632][ T4086] vhci_hcd: disconnect device [ 112.689480][ T4086] vhci_hcd: stop threads [ 112.693888][ T4086] vhci_hcd: release socket [ 112.698392][ T4086] vhci_hcd: disconnect device [ 112.726699][ T29] audit: type=1400 audit(1752360456.467:2687): avc: denied { create } for pid=10107 comm="syz.1.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.749431][ T29] audit: type=1400 audit(1752360456.467:2688): avc: denied { connect } for pid=10107 comm="syz.1.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.769444][ T29] audit: type=1400 audit(1752360456.467:2689): avc: denied { write } for pid=10107 comm="syz.1.2772" path="socket:[26638]" dev="sockfs" ino=26638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.779934][T10110] loop5: detected capacity change from 0 to 512 [ 112.823503][T10110] EXT4-fs: Ignoring removed oldalloc option [ 112.835219][T10110] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.847131][T10110] EXT4-fs (loop5): 1 truncate cleaned up [ 112.853421][T10110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.879475][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.888262][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.906280][T10102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.918776][ T29] audit: type=1400 audit(1752360456.668:2690): avc: denied { read } for pid=10117 comm="syz.5.2776" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.965807][T10102] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.974423][T10102] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.982925][T10102] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.991428][T10102] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.002858][T10102] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 113.016416][T10102] erspan0: left allmulticast mode [ 113.027920][ T10] syz1: Port: 1 Link DOWN [ 113.093151][T10135] pimreg: entered allmulticast mode [ 113.101486][T10135] pimreg: left allmulticast mode [ 113.114532][T10137] loop7: detected capacity change from 0 to 164 [ 113.232221][T10157] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 113.238793][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.246446][T10157] vhci_hcd vhci_hcd.0: Device attached [ 113.255652][T10157] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 113.262216][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.269828][T10157] vhci_hcd vhci_hcd.0: Device attached [ 113.316077][T10157] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 113.322672][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.330494][T10157] vhci_hcd vhci_hcd.0: Device attached [ 113.338051][T10157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.356826][T10157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.375089][T10178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10178 comm=syz.0.2799 [ 113.401749][T10157] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(13) [ 113.408647][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.416406][T10157] vhci_hcd vhci_hcd.0: Device attached [ 113.437271][T10184] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(16) [ 113.443969][T10184] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.451590][T10184] vhci_hcd vhci_hcd.0: Device attached [ 113.481028][T10162] vhci_hcd: connection closed [ 113.481189][T10169] vhci_hcd: connection closed [ 113.486026][ T4073] vhci_hcd: stop threads [ 113.495176][ T4073] vhci_hcd: release socket [ 113.500159][ T4073] vhci_hcd: disconnect device [ 113.505153][ T1035] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 113.515632][T10160] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 113.516293][T10158] vhci_hcd: connection closed [ 113.521635][T10185] vhci_hcd: connection closed [ 113.521885][T10179] vhci_hcd: connection closed [ 113.536020][T10191] vlan2: entered allmulticast mode [ 113.545924][T10191] bridge_slave_0: entered allmulticast mode [ 113.569066][ T4073] vhci_hcd: stop threads [ 113.573438][ T4073] vhci_hcd: release socket [ 113.577951][ T4073] vhci_hcd: disconnect device [ 113.582850][ T4073] vhci_hcd: stop threads [ 113.587156][ T4073] vhci_hcd: release socket [ 113.591650][ T4073] vhci_hcd: disconnect device [ 113.605928][ T4073] vhci_hcd: stop threads [ 113.610287][ T4073] vhci_hcd: release socket [ 113.614773][ T4073] vhci_hcd: disconnect device [ 113.637534][ T4073] vhci_hcd: stop threads [ 113.641998][ T4073] vhci_hcd: release socket [ 113.646656][ T4073] vhci_hcd: disconnect device [ 113.714966][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 114.000254][T10232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2819'. [ 114.032183][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2822'. [ 114.151696][T10249] loop5: detected capacity change from 0 to 164 [ 114.363158][T10253] loop5: detected capacity change from 0 to 512 [ 114.716605][T10253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.754257][T10253] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.771677][T10265] rdma_op ffff888139d91580 conn xmit_rdma 0000000000000000 [ 114.877382][ T5399] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.009677][T10282] netlink: 'syz.7.2843': attribute type 2 has an invalid length. [ 115.017501][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2843'. [ 115.049011][T10288] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.066032][T10290] netlink: '+}[@': attribute type 13 has an invalid length. [ 115.108080][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.118888][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.131032][T10290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.167536][ T3407] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.235208][T10224] syz.1.2816 (10224) used greatest stack depth: 7160 bytes left [ 115.329385][ T4102] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.333850][T10324] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2862'. [ 115.467581][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 115.622079][T10367] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.622983][ T3407] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.641922][T10367] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 115.663449][T10370] ipip0: entered promiscuous mode [ 115.731367][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 115.739166][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 115.765817][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.773861][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.781707][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.789663][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.797547][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.805461][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.813180][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.821019][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.828906][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.832382][T10387] program syz.0.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.836744][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.851402][T10388] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2888'. [ 115.853562][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.864355][T10388] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 115.870278][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.883933][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.891675][ T2959] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 115.901130][T10388] 0ªî{X¹¦: entered allmulticast mode [ 115.916377][T10388] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 115.932636][ T2959] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 116.027306][T10394] IPv6: Can't replace route, no match found [ 116.084987][T10407] loop6: detected capacity change from 0 to 1024 [ 116.111804][T10407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.144191][T10407] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 116.196419][ T5496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.317925][T10431] loop5: detected capacity change from 0 to 164 [ 116.336151][ T4089] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.344066][ T4089] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.355661][T10431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.377035][T10431] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.437299][T10431] Symlink component flag not implemented [ 116.443083][T10431] Symlink component flag not implemented [ 116.467552][T10431] Symlink component flag not implemented (7) [ 116.473695][T10431] Symlink component flag not implemented (116) [ 116.600330][ T3407] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.627988][T10460] loop5: detected capacity change from 0 to 1024 [ 116.658503][T10460] EXT4-fs: Ignoring removed nobh option [ 116.674061][T10460] EXT4-fs: Ignoring removed bh option [ 116.712607][T10460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.790383][T10460] loop5: detected capacity change from 1024 to 64 [ 116.805486][T10460] syz.5.2921: attempt to access beyond end of device [ 116.805486][T10460] loop5: rw=2057, sector=232, nr_sectors = 24 limit=64 [ 116.855965][T10460] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 5 [ 116.868301][T10460] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.868301][T10460] [ 116.933840][T10427] cgroup: fork rejected by pids controller in /syz0 [ 116.945387][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2930'. [ 116.982568][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 116.982585][ T29] audit: type=1400 audit(1752360460.957:2878): avc: denied { remove_name } for pid=5399 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.012100][ T29] audit: type=1400 audit(1752360460.957:2879): avc: denied { rmdir } for pid=5399 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.034962][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.050128][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.073351][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.088450][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.109647][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.124448][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.138863][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.153297][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.167632][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.182702][ T5399] EXT4-fs warning (device loop5): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 117.218134][ T29] audit: type=1400 audit(1752360461.178:2880): avc: denied { create } for pid=10521 comm="syz.1.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.226901][ T3408] vhci_hcd: vhci_device speed not set [ 117.237826][ T29] audit: type=1400 audit(1752360461.178:2881): avc: denied { bind } for pid=10521 comm="syz.1.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.262982][ T29] audit: type=1400 audit(1752360461.178:2882): avc: denied { setopt } for pid=10521 comm="syz.1.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.301130][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'. [ 117.310226][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'. [ 117.334630][ T29] audit: type=1400 audit(1752360461.326:2883): avc: denied { read } for pid=10523 comm="syz.0.2935" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.358033][ T29] audit: type=1400 audit(1752360461.326:2884): avc: denied { open } for pid=10523 comm="syz.0.2935" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.433515][ T4125] kworker/u8:48: attempt to access beyond end of device [ 117.433515][ T4125] loop5: rw=2057, sector=230, nr_sectors = 2 limit=64 [ 117.436338][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'. [ 117.453049][ T4125] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 5 [ 117.456235][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'. [ 117.477725][ T4125] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.477725][ T4125] [ 117.487819][ T29] audit: type=1400 audit(1752360461.379:2885): avc: denied { ioctl } for pid=10523 comm="syz.0.2935" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.513260][ T29] audit: type=1400 audit(1752360461.484:2886): avc: denied { create } for pid=10540 comm="syz.0.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.532966][ T29] audit: type=1400 audit(1752360461.484:2887): avc: denied { setopt } for pid=10540 comm="syz.0.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.559611][ T6608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.589570][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'. [ 117.611981][T10465] kmmpd-loop5: attempt to access beyond end of device [ 117.611981][T10465] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 117.625707][T10465] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 117.783230][T10563] pim6reg: entered allmulticast mode [ 117.791920][T10563] pim6reg: left allmulticast mode [ 118.221242][T10582] chnl_net:caif_netlink_parms(): no params data found [ 118.291296][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.298656][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.298843][T10582] bridge_slave_0: entered allmulticast mode [ 118.301722][T10582] bridge_slave_0: entered promiscuous mode [ 118.337694][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.344799][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.365356][T10582] bridge_slave_1: entered allmulticast mode [ 118.371951][T10582] bridge_slave_1: entered promiscuous mode [ 118.378079][ T1035] vhci_hcd: vhci_device speed not set [ 118.436378][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.458919][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.495085][T10633] SELinux: failed to load policy [ 118.510980][T10582] team0: Port device team_slave_0 added [ 118.523049][T10582] team0: Port device team_slave_1 added [ 118.580604][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.587734][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.613983][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.647413][T10648] pim6reg: entered allmulticast mode [ 118.654800][T10651] pim6reg: left allmulticast mode [ 118.692104][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.699162][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.725256][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.807986][T10582] hsr_slave_0: entered promiscuous mode [ 118.821299][T10582] hsr_slave_1: entered promiscuous mode [ 118.827306][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.836261][T10582] Cannot create hsr debugfs directory [ 119.115575][T10671] pimreg: entered allmulticast mode [ 119.123677][T10671] pimreg: left allmulticast mode [ 119.145436][T10676] loop6: detected capacity change from 0 to 512 [ 119.161061][T10582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 119.175025][T10676] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.191352][T10582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 119.207603][T10676] EXT4-fs (loop6): mount failed [ 119.216759][T10582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 119.241209][T10582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 119.351993][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.368546][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.387787][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.394920][ T4089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.444514][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.444551][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.491970][T10582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.600555][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.817885][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.983585][T10582] veth0_vlan: entered promiscuous mode [ 120.018012][T10582] veth1_vlan: entered promiscuous mode [ 120.056603][T10582] veth0_macvtap: entered promiscuous mode [ 120.072750][T10582] veth1_macvtap: entered promiscuous mode [ 120.087843][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.100018][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.111936][T10582] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.120708][T10582] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.129696][T10582] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.138684][T10582] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.724056][T10882] 9pnet_fd: Insufficient options for proto=fd [ 120.992611][T10913] geneve1: entered promiscuous mode [ 121.005591][T10913] __nla_validate_parse: 3 callbacks suppressed [ 121.005611][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3041'. [ 121.551714][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3060'. [ 121.560737][T10973] Unsupported xt match [ 121.560750][T10973] unable to load match [ 121.753576][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 121.753591][ T29] audit: type=1400 audit(1752360465.972:3016): avc: denied { create } for pid=10989 comm="syz.6.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.787955][T10992] netlink: 'syz.7.3069': attribute type 2 has an invalid length. [ 121.796409][T10992] netlink: 'syz.7.3069': attribute type 1 has an invalid length. [ 121.798189][ T29] audit: type=1400 audit(1752360466.015:3017): avc: denied { getopt } for pid=10989 comm="syz.6.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.804162][T10992] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.3069'. [ 121.823894][ T29] audit: type=1400 audit(1752360466.015:3018): avc: denied { write } for pid=10989 comm="syz.6.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.873772][ T29] audit: type=1400 audit(1752360466.088:3019): avc: denied { read } for pid=10993 comm="syz.0.3070" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.896927][ T29] audit: type=1400 audit(1752360466.088:3020): avc: denied { open } for pid=10993 comm="syz.0.3070" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.920541][ T29] audit: type=1400 audit(1752360466.088:3021): avc: denied { read } for pid=10993 comm="syz.0.3070" dev="nsfs" ino=4026532515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.941973][ T29] audit: type=1400 audit(1752360466.088:3022): avc: denied { open } for pid=10993 comm="syz.0.3070" path="net:[4026532515]" dev="nsfs" ino=4026532515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.965433][ T29] audit: type=1400 audit(1752360466.088:3023): avc: denied { create } for pid=10993 comm="syz.0.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.985813][ T29] audit: type=1400 audit(1752360466.088:3024): avc: denied { bind } for pid=10993 comm="syz.0.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.077401][ T29] audit: type=1400 audit(1752360466.257:3025): avc: denied { create } for pid=10999 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.144892][T11010] loop7: detected capacity change from 0 to 764 [ 122.154030][T11010] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 122.174546][T11016] program syz.8.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.200377][T11016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.294780][T11026] pim6reg1: entered promiscuous mode [ 122.300148][T11026] pim6reg1: entered allmulticast mode [ 123.019940][T11067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.147817][T11030] syz.7.3087 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 123.162193][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.7.3087 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 123.162294][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.162312][T11030] Call Trace: [ 123.162319][T11030] [ 123.162329][T11030] __dump_stack+0x1d/0x30 [ 123.162364][T11030] dump_stack_lvl+0xe8/0x140 [ 123.162451][T11030] dump_stack+0x15/0x1b [ 123.162485][T11030] dump_header+0x81/0x220 [ 123.162529][T11030] oom_kill_process+0x334/0x3f0 [ 123.162629][T11030] out_of_memory+0x979/0xb80 [ 123.162735][T11030] try_charge_memcg+0x5e6/0x9e0 [ 123.162777][T11030] obj_cgroup_charge_pages+0xa6/0x150 [ 123.162812][T11030] __memcg_kmem_charge_page+0x9f/0x170 [ 123.162902][T11030] __alloc_frozen_pages_noprof+0x188/0x360 [ 123.162949][T11030] alloc_pages_mpol+0xb3/0x250 [ 123.162989][T11030] alloc_pages_noprof+0x90/0x130 [ 123.163083][T11030] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 123.163125][T11030] __kvmalloc_node_noprof+0x30f/0x4e0 [ 123.163211][T11030] ? ip_set_alloc+0x1f/0x30 [ 123.163278][T11030] ? ip_set_alloc+0x1f/0x30 [ 123.163307][T11030] ip_set_alloc+0x1f/0x30 [ 123.163341][T11030] hash_netiface_create+0x282/0x740 [ 123.163439][T11030] ? __pfx_hash_netiface_create+0x10/0x10 [ 123.163477][T11030] ip_set_create+0x3c9/0x960 [ 123.163618][T11030] ? __nla_parse+0x40/0x60 [ 123.163661][T11030] nfnetlink_rcv_msg+0x4c3/0x590 [ 123.163708][T11030] ? selinux_capable+0x1f9/0x270 [ 123.163820][T11030] netlink_rcv_skb+0x120/0x220 [ 123.163859][T11030] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 123.164004][T11030] nfnetlink_rcv+0x16b/0x1690 [ 123.164029][T11030] ? __kfree_skb+0x109/0x150 [ 123.164063][T11030] ? nlmon_xmit+0x4f/0x60 [ 123.164137][T11030] ? consume_skb+0x49/0x150 [ 123.164168][T11030] ? nlmon_xmit+0x4f/0x60 [ 123.164193][T11030] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 123.164226][T11030] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 123.164309][T11030] ? __dev_queue_xmit+0x182/0x1fb0 [ 123.164396][T11030] ? ref_tracker_free+0x37d/0x3e0 [ 123.164506][T11030] ? __netlink_deliver_tap+0x4dc/0x500 [ 123.164551][T11030] netlink_unicast+0x5a5/0x680 [ 123.164587][T11030] netlink_sendmsg+0x58b/0x6b0 [ 123.164636][T11030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.164660][T11030] __sock_sendmsg+0x145/0x180 [ 123.164695][T11030] ____sys_sendmsg+0x31e/0x4e0 [ 123.164739][T11030] ___sys_sendmsg+0x17b/0x1d0 [ 123.164822][T11030] __x64_sys_sendmsg+0xd4/0x160 [ 123.164884][T11030] x64_sys_call+0x2999/0x2fb0 [ 123.164908][T11030] do_syscall_64+0xd2/0x200 [ 123.164975][T11030] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.165005][T11030] ? clear_bhb_loop+0x40/0x90 [ 123.165048][T11030] ? clear_bhb_loop+0x40/0x90 [ 123.165135][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.165163][T11030] RIP: 0033:0x7f317d55e929 [ 123.165189][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.165214][T11030] RSP: 002b:00007f317bbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.165244][T11030] RAX: ffffffffffffffda RBX: 00007f317d785fa0 RCX: 00007f317d55e929 [ 123.165508][T11030] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 123.165524][T11030] RBP: 00007f317d5e0b39 R08: 0000000000000000 R09: 0000000000000000 [ 123.165541][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.165573][T11030] R13: 0000000000000000 R14: 00007f317d785fa0 R15: 00007fff0ba4c148 [ 123.165603][T11030] [ 123.165611][T11030] memory: usage 307200kB, limit 307200kB, failcnt 179 [ 123.514738][T11030] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 123.522689][T11030] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 123.530048][T11030] Memory cgroup stats for /syz7: [ 123.530239][T11030] cache 0 [ 123.538252][T11030] rss 0 [ 123.541120][T11030] shmem 0 [ 123.544148][T11030] mapped_file 0 [ 123.547705][T11030] dirty 0 [ 123.550777][T11030] writeback 0 [ 123.554086][T11030] workingset_refault_anon 34 [ 123.558720][T11030] workingset_refault_file 0 [ 123.563252][T11030] swap 172032 [ 123.566607][T11030] swapcached 20480 [ 123.570385][T11030] pgpgin 20066 [ 123.573788][T11030] pgpgout 20061 [ 123.577279][T11030] pgfault 35658 [ 123.580756][T11030] pgmajfault 8 [ 123.584295][T11030] inactive_anon 8192 [ 123.588275][T11030] active_anon 12288 [ 123.592091][T11030] inactive_file 0 [ 123.595766][T11030] active_file 0 [ 123.599258][T11030] unevictable 0 [ 123.602728][T11030] hierarchical_memory_limit 314572800 [ 123.608312][T11030] hierarchical_memsw_limit 9223372036854771712 [ 123.614633][T11030] total_cache 0 [ 123.618170][T11030] total_rss 0 [ 123.621511][T11030] total_shmem 0 [ 123.625093][T11030] total_mapped_file 0 [ 123.629077][T11030] total_dirty 0 [ 123.632575][T11030] total_writeback 0 [ 123.636483][T11030] total_workingset_refault_anon 34 [ 123.641691][T11030] total_workingset_refault_file 0 [ 123.646847][T11030] total_swap 172032 [ 123.650686][T11030] total_swapcached 20480 [ 123.654997][T11030] total_pgpgin 20066 [ 123.658960][T11030] total_pgpgout 20061 [ 123.663066][T11030] total_pgfault 35658 [ 123.667050][T11030] total_pgmajfault 8 [ 123.671033][T11030] total_inactive_anon 8192 [ 123.675491][T11030] total_active_anon 12288 [ 123.679822][T11030] total_inactive_file 0 [ 123.684034][T11030] total_active_file 0 [ 123.688017][T11030] total_unevictable 0 [ 123.692103][T11030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3087,pid=11029,uid=0 [ 123.706952][T11030] Memory cgroup out of memory: Killed process 11029 (syz.7.3087) total-vm:95672kB, anon-rss:940kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 123.838646][T11082] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 123.948847][T11088] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 123.957212][T11088] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 123.985136][T11030] syz.7.3087 (11030) used greatest stack depth: 7096 bytes left [ 124.008730][T11094] loop8: detected capacity change from 0 to 512 [ 124.025554][T11094] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 124.058668][T11094] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3116: invalid indirect mapped block 2683928664 (level 1) [ 124.089793][T11094] EXT4-fs (loop8): Remounting filesystem read-only [ 124.100148][T11094] EXT4-fs (loop8): 1 truncate cleaned up [ 124.106511][T11094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.138595][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.188782][T11110] loop8: detected capacity change from 0 to 2048 [ 124.207810][T11110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.791153][T11130] loop7: detected capacity change from 0 to 512 [ 124.803467][T11130] EXT4-fs: Ignoring removed i_version option [ 124.809593][T11130] EXT4-fs: Ignoring removed nobh option [ 124.823729][T11130] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.843033][T11130] EXT4-fs (loop7): 1 truncate cleaned up [ 124.853666][T11130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.911297][ T8118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.123355][ T4091] ================================================================== [ 125.131593][ T4091] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 125.139437][ T4091] [ 125.141780][ T4091] write to 0xffff8881185b6108 of 44 bytes by task 11143 on cpu 1: [ 125.149602][ T4091] tty_set_termios+0xc0/0x8c0 [ 125.154313][ T4091] set_termios+0x496/0x4e0 [ 125.158750][ T4091] tty_mode_ioctl+0x379/0x5c0 [ 125.163453][ T4091] ppp_asynctty_ioctl+0x13f/0x2d0 [ 125.168502][ T4091] tty_ioctl+0x842/0xb80 [ 125.172234][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.172769][ T4091] __se_sys_ioctl+0xcb/0x140 [ 125.172801][ T4091] __x64_sys_ioctl+0x43/0x50 [ 125.172825][ T4091] x64_sys_call+0x19a8/0x2fb0 [ 125.172845][ T4091] do_syscall_64+0xd2/0x200 [ 125.200270][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.206200][ T4091] [ 125.208547][ T4091] read to 0xffff8881185b6108 of 4 bytes by task 4091 on cpu 0: [ 125.216107][ T4091] ppp_asynctty_receive+0x75c/0xd40 [ 125.221349][ T4091] tty_ldisc_receive_buf+0xbf/0xf0 [ 125.226498][ T4091] tty_port_default_receive_buf+0x59/0x90 [ 125.232245][ T4091] flush_to_ldisc+0x141/0x360 [ 125.236952][ T4091] process_scheduled_works+0x4cb/0x9d0 [ 125.242436][ T4091] worker_thread+0x582/0x770 [ 125.247053][ T4091] kthread+0x489/0x510 [ 125.251137][ T4091] ret_from_fork+0xda/0x150 [ 125.255656][ T4091] ret_from_fork_asm+0x1a/0x30 [ 125.260442][ T4091] [ 125.262774][ T4091] value changed: 0x00000500 -> 0x00038000 [ 125.268596][ T4091] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.270927][ T4091] Reported by Kernel Concurrency Sanitizer on: [ 125.277095][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: kworker/u8:21 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 125.289794][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.299995][ T4091] Workqueue: events_unbound flush_to_ldisc [ 125.305945][ T4091] ================================================================== [ 125.467488][ T6324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.745182][ T4091] erspan0 (unregistering): left allmulticast mode [ 125.751806][ T4091] erspan0 (unregistering): left promiscuous mode [ 125.828846][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.837740][ T4091] bond_slave_0: left allmulticast mode [ 125.843840][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.852769][ T4091] bond_slave_1: left allmulticast mode [ 125.859255][ T4091] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 125.867923][ T4091] veth1_vlan: left allmulticast mode [ 125.874103][ T4091] bond0 (unregistering): Released all slaves [ 125.923295][ T4091] tipc: Disabling bearer [ 125.928411][ T4091] tipc: Left network mode [ 125.933745][ T4091] IPVS: stopping backup sync thread 7672 ... [ 125.957003][ T4091] hsr_slave_0: left promiscuous mode [ 125.962823][ T4091] hsr_slave_1: left promiscuous mode [ 125.968476][ T4091] batman_adv: batadv0: Removing interface: team0 [ 125.975560][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.983290][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.016230][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 126.026900][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 126.034393][ T31] smc: removing ib device syz! [ 126.266701][ T4091] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.303058][ T4091] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.360057][ T4091] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.427012][ T4091] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.496554][ T4091] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.560429][ T4091] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.598199][ T4091] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.636470][ T4091] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.032486][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.064790][ T4091] bridge_slave_1: left allmulticast mode [ 127.070520][ T4091] bridge_slave_1: left promiscuous mode [ 127.076236][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.083998][ T4091] bridge_slave_0: left allmulticast mode [ 127.089761][ T4091] bridge_slave_0: left promiscuous mode [ 127.095471][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.104063][ T4091] bridge_slave_1: left allmulticast mode [ 127.109806][ T4091] bridge_slave_1: left promiscuous mode [ 127.115458][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.123083][ T4091] bridge_slave_0: left allmulticast mode [ 127.128773][ T4091] bridge_slave_0: left promiscuous mode [ 127.134424][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.211910][ T4091] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 127.252682][ T4091] bond0 (unregistering): Released all slaves [ 127.261299][ T4091] bond1 (unregistering): Released all slaves [ 127.309889][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.319952][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.329478][ T4091] bond0 (unregistering): Released all slaves [ 127.351282][ T4091] bond2 (unregistering): (slave gretap1): Releasing active interface [ 127.363691][ T4091] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 127.372238][ T4091] geneve1 (unregistering): left allmulticast mode [ 127.382527][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.391768][ T4091] bond_slave_0: left allmulticast mode [ 127.397919][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.407849][ T4091] bond_slave_1: left allmulticast mode [ 127.413560][ T4091] bond0 (unregistering): Released all slaves [ 127.421685][ T4091] bond1 (unregistering): Released all slaves [ 127.429930][ T4091] bond2 (unregistering): Released all slaves [ 127.438432][ T4091] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 127.446651][ T4091] bond3 (unregistering): Released all slaves [ 127.518914][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.528211][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.537331][ T4091] bond0 (unregistering): Released all slaves [ 127.587558][ T4091] tipc: Left network mode [ 127.592321][ T4091] tipc: Disabling bearer [ 127.597598][ T4091] tipc: Left network mode [ 127.607660][ T4091] hsr_slave_0: left promiscuous mode [ 127.613354][ T4091] hsr_slave_1: left promiscuous mode [ 127.620579][ T4091] hsr_slave_0: left promiscuous mode [ 127.627012][ T4091] hsr_slave_1: left promiscuous mode [ 127.632911][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.640471][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.648202][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.655671][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.664784][ T4091] hsr_slave_0: left promiscuous mode [ 127.670408][ T4091] hsr_slave_1: left promiscuous mode [ 127.676029][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.683615][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.691063][ T4091] batman_adv: batadv0: Removing interface: ipvlan2 [ 127.699640][ T4091] hsr_slave_0: left promiscuous mode [ 127.705280][ T4091] hsr_slave_1: left promiscuous mode [ 127.710938][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.718532][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.731586][ T4091] veth1_macvtap: left promiscuous mode [ 127.737145][ T4091] veth0_macvtap: left promiscuous mode [ 127.742687][ T4091] veth1_vlan: left promiscuous mode [ 127.748011][ T4091] veth0_vlan: left promiscuous mode [ 127.753707][ T4091] veth1_macvtap: left promiscuous mode [ 127.759202][ T4091] veth0_macvtap: left promiscuous mode [ 127.765022][ T4091] veth1_vlan: left promiscuous mode [ 127.770241][ T4091] veth0_vlan: left promiscuous mode [ 127.912553][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 127.922413][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 127.979793][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 127.990078][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 128.045349][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 128.055434][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 128.949232][ T4091] IPVS: stop unused estimator thread 0...