last executing test programs: 2m23.575265013s ago: executing program 32 (id=581): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x200000000000001}, 0x104022, 0xffffffffffffffff, 0x0, 0x0, 0x93, 0x44020008, 0x4, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff00}, 0x48) 1m27.037035199s ago: executing program 33 (id=2463): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1m21.523470982s ago: executing program 34 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m20.716338984s ago: executing program 6 (id=2626): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000000000007111a100000000008510000002000000850000007d00000095003300000000009500a5050000000092cd842542c2e90fa00a72382f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1m20.609986625s ago: executing program 6 (id=2630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) 1m20.478306037s ago: executing program 6 (id=2632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x200, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 1m20.400494819s ago: executing program 6 (id=2633): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf1112f4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0x1ff, 0x8]}) pipe(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(0x0) 1m20.075551323s ago: executing program 6 (id=2638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 1m19.829995287s ago: executing program 6 (id=2658): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x3}], 0x1, 0x40002042, 0x0) 1m19.815489587s ago: executing program 35 (id=2658): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x3}], 0x1, 0x40002042, 0x0) 1m2.265488089s ago: executing program 3 (id=3143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) 1m2.113626672s ago: executing program 3 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1m1.981440873s ago: executing program 3 (id=3146): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000044494"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1m1.631290989s ago: executing program 3 (id=3161): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m1.441997872s ago: executing program 3 (id=3163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 1m1.378130793s ago: executing program 7 (id=3166): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 1m1.327641803s ago: executing program 7 (id=3168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000040) 1m1.230448545s ago: executing program 7 (id=3170): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0xbfab, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1m1.120358706s ago: executing program 7 (id=3174): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m1.089256957s ago: executing program 3 (id=3175): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 1m1.029274618s ago: executing program 36 (id=3175): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 1m0.987927918s ago: executing program 7 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 1m0.974285019s ago: executing program 5 (id=3180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) 1m0.8674895s ago: executing program 5 (id=3184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x2]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 1m0.808101881s ago: executing program 5 (id=3186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1m0.771212212s ago: executing program 7 (id=3188): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 1m0.770583932s ago: executing program 5 (id=3189): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m0.750730832s ago: executing program 37 (id=3188): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 1m0.546865765s ago: executing program 5 (id=3194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001600850000005900000095"], 0x0, 0x0, 0x3c, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xfffffffffffffe31, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1m0.089577292s ago: executing program 5 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1m0.045550293s ago: executing program 38 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 6.775768308s ago: executing program 1 (id=4699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 6.586515361s ago: executing program 1 (id=4701): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6.475386273s ago: executing program 1 (id=4705): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 6.460110644s ago: executing program 1 (id=4706): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 6.417572894s ago: executing program 1 (id=4707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) 6.135918788s ago: executing program 1 (id=4710): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08002, &(0x7f0000000240), 0xfe, 0x57d, &(0x7f0000000340)="$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") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 6.115995149s ago: executing program 39 (id=4710): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08002, &(0x7f0000000240), 0xfe, 0x57d, &(0x7f0000000340)="$eJzs3U1vG0UYAOB3na9+QVOpqoADitQDRaVOk/BRJA7liKCiEtyLlbhRFaeuYqdqQiXaA730gioQQlRC/ADuHCv+AL+iElSqoIrgwMVonXXrJHbipE4c8PNI287sjv3O7O6MZ712HEDfGkv/yUW8HBFfJRFHm7YNRrZxbLXcypOb0+mSRK32yR9JJNm6Rvkk+/9wlnkpIn75MuJ0bmPcytLyXKFUKi5k+fHq/LXxytLymSvzhdnibPHq5NTUubemJt995+2utfX1i39/9/GDD87dPbny7U+Pjt1L4nwcybY1t+M53GrOjMVYtk+G4vy6ghNdCLafJL2uADsykPXzoUjHgKMxkPV64P/vi4ioAX0q0f+hT2XTgOXGtX2XroP/Mx6/v3oBtLH9g6vvjcSB+rXRoZVkzZVRer072oX4aYyff79/L12ie+9DAGzp1u2IODs4uHH8S7Lxb+fOdlBmfQzjH+ydB+n8541W85/c0/lPtJj/HG7Rd3di6/6fe9TiYUm33qVO53/vRev2Z0YHstwL9TnfUHL5SqmYjm0vRsSpGBpJ85vdzzm38rDWblvz/C9d0viNuWBWj0eDI2sfM1OoFp6nzc0e3454ZeP8d+DZ+H+gPtddf/zT/XGxwxgnivdfbbdt6/bvrtqPEa+1PP7P7mglm9+fHK+fD+ONs2KtdD/9defEr+3i97r96fE/tHn7R5Pm+7WV7cf44cA/xXbbdnr+Dyef1tPD2bobhWp1YSJiOPlo4/rJZ49t5Bvl0/afOrn5+Nfq/D8YEZ912P47x++0Lbofjv/Mto7/9hMPP/z8+3bxOzv+b9ZTp7I1nYx/nVbwefYdAAAAAAAA7De5iDgSSS7/NJ3L5fOrn+84HodypXKlevpyefHqTNS/KzsaQ7nGne6jTZ+HmMg+D9vIT67LT0XEsYj4euBgPZ+fLpdmet14AAAAAAAAAAAAAAAAAAAA2CdG2nz/P/XbwNqy2V8EH977WgK7xk9+Q//asv9345eegH3J6z/0rx30/292ox7A3vP6D31qqNcVAHrJ6z/0L/0f+pf+D/1L/wcAAAAAAAAAAAAAAAAAAAAAAAAAAICuunjhQrrUVp7cnE7zM9eXFufK18/MFCtz+fnF6fx0eeFafrZcni0V89Pl+a2er1QuX5uYjMUb49VipTpeWVq+NF9evFq9dGW+MFu8VPRrQwAAAAAAAAAAAAAAAAAAALBRZWl5rlAqFRd2OzGSBdyLWBJ7mBjs+AToeVV3mkj+rNX2QTU6T9xt3btz23meHg5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDOvwEAAP//+oozoA==") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 2.099592309s ago: executing program 8 (id=4820): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 2.02506074s ago: executing program 8 (id=4824): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.084382754s ago: executing program 8 (id=4844): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x5b0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x8, 0x4000, 0x4000) 873.197487ms ago: executing program 8 (id=4853): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x482900, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 830.581068ms ago: executing program 8 (id=4857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 605.921991ms ago: executing program 9 (id=4871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 543.880232ms ago: executing program 4 (id=4873): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 543.565412ms ago: executing program 9 (id=4874): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 543.164562ms ago: executing program 0 (id=4875): getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioperm(0x9, 0x2, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 538.326852ms ago: executing program 0 (id=4876): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x80) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'veth0_vlan\x00'}}, 0x1e) 504.334853ms ago: executing program 0 (id=4877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 457.113223ms ago: executing program 4 (id=4878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 456.683383ms ago: executing program 0 (id=4879): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x4300, 0x10002, 0x0, 0xffffeffe, 0x4b, "2cf174f1d8b4d04b1faa82dc1ecf00", 0x5}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) 424.636914ms ago: executing program 9 (id=4881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000100)={0x1d, r3}, 0x10) bind$can_raw(r4, &(0x7f0000000000), 0x10) 424.127954ms ago: executing program 9 (id=4882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000001200)=[{&(0x7f0000001300)=""/238, 0xf4}], 0x1000000000000035) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r1, 0xa001) r3 = dup3(r2, r1, 0x80000) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 361.839534ms ago: executing program 9 (id=4885): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0x4025, 0x10000, 0x1ff, 0x0, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 351.915815ms ago: executing program 4 (id=4886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 322.311495ms ago: executing program 4 (id=4888): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20c00, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 234.528266ms ago: executing program 4 (id=4889): unshare(0x2040400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 233.719106ms ago: executing program 2 (id=4890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 202.553197ms ago: executing program 2 (id=4891): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = getpid() io_setup(0x4, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 201.967857ms ago: executing program 0 (id=4892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 143.909527ms ago: executing program 9 (id=4893): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 143.458678ms ago: executing program 0 (id=4894): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="13", 0x1}], 0x1}}], 0x2, 0x14) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) shutdown(r0, 0x2) 96.132669ms ago: executing program 2 (id=4895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) close(r3) 82.381519ms ago: executing program 2 (id=4896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open$dir(0x0, 0x101042, 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 27.99899ms ago: executing program 2 (id=4897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 27.62489ms ago: executing program 4 (id=4898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x689, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 27.30886ms ago: executing program 40 (id=4898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x689, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 25.10161ms ago: executing program 2 (id=4900): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 0s ago: executing program 8 (id=4901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): attach request for unsupported USB speed: UNKNOWN [ 143.421117][T12630] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(15) [ 143.427746][T12630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.435496][T12630] vhci_hcd vhci_hcd.0: Device attached [ 143.443210][T12630] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(17) [ 143.449892][T12630] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.457403][T12630] vhci_hcd vhci_hcd.0: Device attached [ 143.463900][ T3400] vhci_hcd: vhci_device speed not set [ 143.470252][T12646] vhci_hcd: connection closed [ 143.470252][T12648] vhci_hcd: connection closed [ 143.475248][ T5804] vhci_hcd: stop threads [ 143.484220][ T5804] vhci_hcd: release socket [ 143.488252][T12640] vhci_hcd: connection closed [ 143.488664][ T5804] vhci_hcd: disconnect device [ 143.489290][T12638] vhci_hcd: connection closed [ 143.493341][T12636] vhci_hcd: connection closed [ 143.500324][T12631] vhci_hcd: connection closed [ 143.503470][ T5804] vhci_hcd: stop threads [ 143.516604][ T5804] vhci_hcd: release socket [ 143.521037][ T5804] vhci_hcd: disconnect device [ 143.526861][ T3400] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 143.534461][T12632] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 143.542912][T12643] vhci_hcd: connection closed [ 143.548424][ T5804] vhci_hcd: stop threads [ 143.557447][ T5804] vhci_hcd: release socket [ 143.561887][ T5804] vhci_hcd: disconnect device [ 143.567075][ T5804] vhci_hcd: stop threads [ 143.571379][ T5804] vhci_hcd: release socket [ 143.575889][ T5804] vhci_hcd: disconnect device [ 143.586756][ T5804] vhci_hcd: stop threads [ 143.591098][ T5804] vhci_hcd: release socket [ 143.595556][ T5804] vhci_hcd: disconnect device [ 143.603386][ T5804] vhci_hcd: stop threads [ 143.607650][ T5804] vhci_hcd: release socket [ 143.612094][ T5804] vhci_hcd: disconnect device [ 143.617207][ T5804] vhci_hcd: stop threads [ 143.621652][ T5804] vhci_hcd: release socket [ 143.626075][ T5804] vhci_hcd: disconnect device [ 143.671604][T12658] loop0: detected capacity change from 0 to 128 [ 143.705173][T12658] syz.0.3530: attempt to access beyond end of device [ 143.705173][T12658] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 143.872990][T12676] loop8: detected capacity change from 0 to 512 [ 144.873442][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 144.888163][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'. [ 144.888807][T12742] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3561'. [ 144.925643][T12735] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3561'. [ 144.989196][T12754] loop0: detected capacity change from 0 to 512 [ 145.221983][T12770] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3573'. [ 145.368447][T12789] netlink: 'syz.9.3583': attribute type 13 has an invalid length. [ 145.383229][T12792] loop2: detected capacity change from 0 to 128 [ 145.423339][T12789] net_ratelimit: 2 callbacks suppressed [ 145.423389][T12789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.480686][T12798] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 145.505929][T12798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.538232][T12798] bond3: (slave veth19): Enslaving as an active interface with a down link [ 145.557913][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.566056][T12798] bond3: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 145.577763][ T23] usb 17-1: enqueue for inactive port 0 [ 145.609568][ T23] usb 17-1: enqueue for inactive port 0 [ 145.699125][ T23] vhci_hcd: vhci_device speed not set [ 145.760215][T12814] serio: Serial port ptm0 [ 145.769900][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3594'. [ 145.797599][T12820] loop1: detected capacity change from 0 to 256 [ 145.812107][T12820] FAT-fs (loop1): bogus number of FAT sectors [ 145.818263][T12820] FAT-fs (loop1): Can't find a valid FAT filesystem [ 145.964538][T12835] netlink: 'syz.1.3601': attribute type 13 has an invalid length. [ 146.033193][T12835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.061316][T12835] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.081076][T12835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.086727][T12846] loop9: detected capacity change from 0 to 512 [ 146.099070][T12842] loop0: detected capacity change from 0 to 4096 [ 146.251269][T12858] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 146.297241][T12858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.323758][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 146.323773][ T29] audit: type=1400 audit(151.214:5694): avc: denied { open } for pid=12861 comm="syz.1.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.348888][ T29] audit: type=1400 audit(151.214:5695): avc: denied { kernel } for pid=12861 comm="syz.1.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.373560][T12864] loop1: detected capacity change from 0 to 128 [ 146.373901][ T29] audit: type=1400 audit(151.266:5696): avc: denied { tracepoint } for pid=12861 comm="syz.1.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 146.401819][T12858] bond1: (slave veth3): Enslaving as an active interface with a down link [ 146.423530][ T29] audit: type=1400 audit(151.329:5697): avc: denied { mount } for pid=12861 comm="syz.1.3612" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 146.459025][T12863] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.468120][T12866] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 146.482967][T12863] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 146.485026][T12862] syz.1.3612: attempt to access beyond end of device [ 146.485026][T12862] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 146.514598][T12866] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 146.514670][ T29] audit: type=1400 audit(151.340:5698): avc: denied { create } for pid=12865 comm="syz.8.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.543340][ T29] audit: type=1400 audit(151.340:5699): avc: denied { write } for pid=12865 comm="syz.8.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.563370][ T29] audit: type=1400 audit(151.382:5700): avc: denied { unmount } for pid=11578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.594059][ T29] audit: type=1400 audit(151.497:5701): avc: denied { read } for pid=12867 comm="syz.9.3614" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.614904][ T29] audit: type=1400 audit(151.497:5702): avc: denied { open } for pid=12867 comm="syz.9.3614" path="net:[4026532376]" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.637692][ T29] audit: type=1400 audit(151.497:5703): avc: denied { create } for pid=12867 comm="syz.9.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.683164][T12868] loop9: detected capacity change from 0 to 512 [ 146.781869][T12887] loop1: detected capacity change from 0 to 128 [ 146.925894][T12911] loop0: detected capacity change from 0 to 1024 [ 146.932552][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3629'. [ 146.940761][T12913] netlink: 'syz.9.3631': attribute type 1 has an invalid length. [ 146.958657][T12913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.993409][T12921] loop8: detected capacity change from 0 to 128 [ 147.007235][T12913] bond1: (slave veth3): Enslaving as an active interface with a down link [ 147.030784][T12913] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.038175][T12913] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 147.059959][T12921] syz.8.3633: attempt to access beyond end of device [ 147.059959][T12921] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 147.095689][ T5796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 393: padding at end of block bitmap is not set [ 147.111199][ T5796] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 147.123867][ T5796] EXT4-fs (loop0): This should not happen!! Data will be lost [ 147.123867][ T5796] [ 147.155757][T12926] blktrace: Concurrent blktraces are not allowed on loop2 [ 147.598831][T12953] loop8: detected capacity change from 0 to 1024 [ 147.622466][T12953] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 147.634864][T12953] EXT4-fs (loop8): This should not happen!! Data will be lost [ 147.634864][T12953] [ 147.644525][T12953] EXT4-fs (loop8): Total free blocks count 0 [ 147.650580][T12953] EXT4-fs (loop8): Free/Dirty block details [ 147.656504][T12953] EXT4-fs (loop8): free_blocks=0 [ 147.662507][T12953] EXT4-fs (loop8): dirty_blocks=0 [ 147.667617][T12953] EXT4-fs (loop8): Block reservation details [ 147.674336][T12953] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 147.718868][T12958] loop2: detected capacity change from 0 to 128 [ 147.993309][T12971] loop2: detected capacity change from 0 to 128 [ 148.025228][T12977] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 148.039223][T12977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.059804][T12977] bond1: (slave veth3): Enslaving as an active interface with a down link [ 148.083264][T12977] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.093440][T12977] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 148.117514][T12983] serio: Serial port ptm0 [ 148.157027][T12988] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 148.199810][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3662'. [ 148.313640][T13021] loop8: detected capacity change from 0 to 128 [ 148.348882][ T3400] usb 19-1: enqueue for inactive port 0 [ 148.359061][T13029] loop0: detected capacity change from 0 to 1024 [ 148.361838][ T3400] usb 19-1: enqueue for inactive port 0 [ 148.366204][T13029] EXT4-fs: Ignoring removed orlov option [ 148.423665][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3675'. [ 148.439887][T13041] netlink: 'syz.0.3676': attribute type 3 has an invalid length. [ 148.460921][ T3400] vhci_hcd: vhci_device speed not set [ 148.496688][T13049] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 148.518399][T13047] SELinux: ebitmap: truncated map [ 148.525222][T13049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.532883][T13047] SELinux: failed to load policy [ 148.574759][T13049] bond4: (slave veth21): Enslaving as an active interface with a down link [ 148.591299][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3685'. [ 148.600363][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3685'. [ 148.609373][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3685'. [ 148.618733][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3685'. [ 148.627821][T13059] netlink: 'syz.9.3685': attribute type 6 has an invalid length. [ 148.639492][T13049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.648028][T13049] bond4: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 148.756765][T13071] syzkaller0: tun_chr_ioctl cmd 35111 [ 148.792456][T13075] loop1: detected capacity change from 0 to 128 [ 148.979307][T13092] all: renamed from lo (while UP) [ 149.075018][T13111] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.075018][T13111] program syz.9.3706 not setting count and/or reply_len properly [ 149.100198][T13106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.112143][T13106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.124949][T13106] bond0 (unregistering): Released all slaves [ 149.163175][T13125] loop9: detected capacity change from 0 to 128 [ 149.202405][T13125] syz.9.3708: attempt to access beyond end of device [ 149.202405][T13125] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 150.135010][T13295] loop8: detected capacity change from 0 to 2048 [ 150.166051][T13295] loop8: p1 < > p4 [ 150.177227][T13295] loop8: p4 size 8388608 extends beyond EOD, truncated [ 150.267590][T13314] @: renamed from vlan0 (while UP) [ 150.465418][T13328] loop8: detected capacity change from 0 to 1024 [ 150.472925][T13328] EXT4-fs: Ignoring removed orlov option [ 150.736019][T13346] __nla_validate_parse: 1 callbacks suppressed [ 150.736030][T13346] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 150.864072][T13358] loop0: detected capacity change from 0 to 128 [ 150.871066][T13356] serio: Serial port ptm0 [ 150.881018][T13358] FAT-fs (loop0): Directory bread(block 32) failed [ 150.887738][T13358] FAT-fs (loop0): Directory bread(block 33) failed [ 150.894586][T13358] FAT-fs (loop0): Directory bread(block 34) failed [ 150.901232][T13358] FAT-fs (loop0): Directory bread(block 35) failed [ 150.907978][T13358] FAT-fs (loop0): Directory bread(block 36) failed [ 150.914830][T13358] FAT-fs (loop0): Directory bread(block 37) failed [ 150.922271][T13358] FAT-fs (loop0): Directory bread(block 38) failed [ 150.928985][T13358] FAT-fs (loop0): Directory bread(block 39) failed [ 150.935668][T13358] FAT-fs (loop0): Directory bread(block 40) failed [ 150.951091][T13358] FAT-fs (loop0): Directory bread(block 41) failed [ 150.983069][T13358] syz.0.3756: attempt to access beyond end of device [ 150.983069][T13358] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 150.998355][T13358] FAT-fs (loop0): Filesystem has been set read-only [ 151.005104][T13358] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 151.101431][T13373] vlan0: entered allmulticast mode [ 151.150744][T13377] loop2: detected capacity change from 0 to 512 [ 151.157822][T13377] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 151.182442][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 151.182455][ T29] audit: type=1400 audit(156.316:5880): avc: denied { mount } for pid=13376 comm="syz.2.3765" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.228109][ T29] audit: type=1400 audit(156.368:5881): avc: denied { unmount } for pid=11644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.350120][T13387] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3769'. [ 151.377978][T13389] all: renamed from lo (while UP) [ 151.509776][T13398] syzkaller0: tun_chr_ioctl cmd 35111 [ 151.546104][T13404] loop0: detected capacity change from 0 to 1024 [ 151.574241][T13404] EXT4-fs mount: 34 callbacks suppressed [ 151.574257][T13404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.637319][T13413] tipc: Started in network mode [ 151.642504][T13413] tipc: Node identity ac14140f, cluster identity 4711 [ 151.723423][T13413] tipc: New replicast peer: 255.255.255.255 [ 151.729630][T13413] tipc: Enabled bearer , priority 10 [ 152.112703][T13414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 152.131771][T13414] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 152.144123][T13414] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.144123][T13414] [ 152.153857][T13414] EXT4-fs (loop0): Total free blocks count 0 [ 152.159902][T13414] EXT4-fs (loop0): Free/Dirty block details [ 152.165797][T13414] EXT4-fs (loop0): free_blocks=68451041280 [ 152.171633][T13414] EXT4-fs (loop0): dirty_blocks=16432 [ 152.177019][T13414] EXT4-fs (loop0): Block reservation details [ 152.183039][T13414] EXT4-fs (loop0): i_reserved_data_blocks=1027 [ 152.205679][ T3442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 152.246884][ T29] audit: type=1400 audit(157.439:5882): avc: denied { mount } for pid=13434 comm="+}[@" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.268991][ T5814] bridge_slave_1: left allmulticast mode [ 152.274711][ T5814] bridge_slave_1: left promiscuous mode [ 152.280398][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.310714][ T5814] bridge_slave_0: left promiscuous mode [ 152.316440][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.323651][ T29] audit: type=1400 audit(157.450:5883): avc: denied { mounton } for pid=13438 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.473568][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.491358][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.500681][ T5814] bond0 (unregistering): Released all slaves [ 152.517411][ T5814] bond1 (unregistering): (slave veth3): Releasing active interface [ 152.527046][ T5814] bond1 (unregistering): Released all slaves [ 152.609712][T13462] syzkaller1: entered promiscuous mode [ 152.615302][T13462] syzkaller1: entered allmulticast mode [ 152.629319][ T5814] tipc: Disabling bearer [ 152.634645][ T5814] tipc: Left network mode [ 152.667411][ T5814] hsr_slave_0: left promiscuous mode [ 152.674532][ T5814] hsr_slave_1: left promiscuous mode [ 152.742092][ T29] audit: type=1400 audit(157.954:5884): avc: denied { append } for pid=13482 comm="syz.2.3800" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.767770][ T29] audit: type=1400 audit(157.954:5885): avc: denied { ioctl } for pid=13482 comm="syz.2.3800" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.767957][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 152.841289][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 152.957511][T13497] serio: Serial port ptm0 [ 152.992347][T13438] chnl_net:caif_netlink_parms(): no params data found [ 153.146255][T13515] loop2: detected capacity change from 0 to 8192 [ 153.156448][ T29] audit: type=1400 audit(158.394:5886): avc: denied { read } for pid=13518 comm="syz.0.3814" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.179350][ T29] audit: type=1400 audit(158.394:5887): avc: denied { open } for pid=13518 comm="syz.0.3814" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.210561][T13515] syz.2.3812: attempt to access beyond end of device [ 153.210561][T13515] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 153.224545][T13515] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 153.232379][T13515] FAT-fs (loop2): Filesystem has been set read-only [ 153.241621][T13515] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 153.249641][T13522] loop1: detected capacity change from 0 to 512 [ 153.254685][T13515] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 153.257891][T13522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.275300][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.276192][T13522] EXT4-fs (loop1): 1 truncate cleaned up [ 153.282391][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.284820][T13438] bridge_slave_0: entered allmulticast mode [ 153.288539][T13522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.302584][T13438] bridge_slave_0: entered promiscuous mode [ 153.327132][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.334313][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.343164][T13438] bridge_slave_1: entered allmulticast mode [ 153.344577][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.349855][T13438] bridge_slave_1: entered promiscuous mode [ 153.377417][ T5814] IPVS: stop unused estimator thread 0... [ 153.389353][ T29] audit: type=1400 audit(158.636:5888): avc: denied { name_bind } for pid=13525 comm="syz.1.3817" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.442579][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.460583][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.552823][T13438] team0: Port device team_slave_0 added [ 153.562670][T13438] team0: Port device team_slave_1 added [ 153.589115][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.596284][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.622361][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.633966][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.640938][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.667040][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.699409][T13537] serio: Serial port ptm0 [ 153.712518][T13438] hsr_slave_0: entered promiscuous mode [ 153.725738][T13438] hsr_slave_1: entered promiscuous mode [ 153.732325][T13438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.740053][T13438] Cannot create hsr debugfs directory [ 154.045975][T13438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 154.046222][ T29] audit: type=1326 audit(159.329:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13562 comm="syz.9.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086431e929 code=0x7ffc0000 [ 154.084424][T13438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 154.114435][T13568] wireguard0: entered promiscuous mode [ 154.120002][T13568] wireguard0: entered allmulticast mode [ 154.142891][T13438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 154.154554][T13438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 154.290230][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.331391][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.365026][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.372222][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.385809][T13595] loop9: detected capacity change from 0 to 128 [ 154.399394][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.406550][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.414728][T13595] FAT-fs (loop9): Directory bread(block 32) failed [ 154.424714][T13595] FAT-fs (loop9): Directory bread(block 33) failed [ 154.431982][T13595] FAT-fs (loop9): Directory bread(block 34) failed [ 154.449069][T13595] FAT-fs (loop9): Directory bread(block 35) failed [ 154.455885][T13595] FAT-fs (loop9): Directory bread(block 36) failed [ 154.463092][T13595] FAT-fs (loop9): Directory bread(block 37) failed [ 154.463223][T13438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.469715][T13595] FAT-fs (loop9): Directory bread(block 38) failed [ 154.480009][T13438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.510518][T13595] FAT-fs (loop9): Directory bread(block 39) failed [ 154.525441][T13604] sd 0:0:1:0: device reset [ 154.527118][T13595] FAT-fs (loop9): Directory bread(block 40) failed [ 154.545664][T13595] FAT-fs (loop9): Directory bread(block 41) failed [ 154.578198][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.608565][T13613] loop2: detected capacity change from 0 to 512 [ 154.637206][T13595] syz.9.3844: attempt to access beyond end of device [ 154.637206][T13595] loop9: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 154.655042][T13595] FAT-fs (loop9): Filesystem has been set read-only [ 154.661876][T13595] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 154.681609][T13613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.751921][T13629] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3851'. [ 154.761123][T13629] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3851'. [ 154.874069][T13438] veth0_vlan: entered promiscuous mode [ 154.884832][T13438] veth1_vlan: entered promiscuous mode [ 154.904570][T13438] veth0_macvtap: entered promiscuous mode [ 154.913636][T13438] veth1_macvtap: entered promiscuous mode [ 154.935538][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.968836][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.979366][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.988532][T13438] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.997293][T13438] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.006067][T13438] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.014874][T13438] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.072904][T13644] netlink: 'syz.2.3856': attribute type 1 has an invalid length. [ 155.099385][T13646] tipc: Started in network mode [ 155.104312][T13646] tipc: Node identity ac14140f, cluster identity 4711 [ 155.123060][T13646] tipc: New replicast peer: 255.255.255.255 [ 155.129364][T13646] tipc: Enabled bearer , priority 10 [ 155.261109][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3862'. [ 155.423042][T13681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3873'. [ 155.463107][T13685] loop1: detected capacity change from 0 to 1024 [ 155.484268][T13685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.590649][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3879'. [ 155.717234][T13707] loop8: detected capacity change from 0 to 2048 [ 155.739969][T13707] EXT4-fs (loop8): failed to initialize system zone (-117) [ 155.760928][T13707] EXT4-fs (loop8): mount failed [ 155.902570][T13713] loop0: detected capacity change from 0 to 8192 [ 155.911266][T13715] wireguard0: entered promiscuous mode [ 155.916844][T13715] wireguard0: entered allmulticast mode [ 155.962720][T13719] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 155.987322][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 155.987389][ T29] audit: type=1400 audit(161.365:5928): avc: denied { ioctl } for pid=13722 comm="syz.0.3887" path="socket:[37604]" dev="sockfs" ino=37604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.048234][ T29] audit: type=1326 audit(161.428:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.071271][ T29] audit: type=1326 audit(161.428:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.134644][T13729] loop2: detected capacity change from 0 to 512 [ 156.143127][T13696] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 156.158315][T13696] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 156.170666][T13696] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.170666][T13696] [ 156.180551][T13696] EXT4-fs (loop1): Total free blocks count 0 [ 156.183009][T13729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.186569][T13696] EXT4-fs (loop1): Free/Dirty block details [ 156.186585][T13696] EXT4-fs (loop1): free_blocks=68451041280 [ 156.186599][T13696] EXT4-fs (loop1): dirty_blocks=16432 [ 156.186616][T13696] EXT4-fs (loop1): Block reservation details [ 156.186627][T13696] EXT4-fs (loop1): i_reserved_data_blocks=1027 [ 156.186999][ T29] audit: type=1326 audit(161.428:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.196578][ T3407] tipc: Node number set to 2886997007 [ 156.202335][ T29] audit: type=1326 audit(161.428:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.277215][ T29] audit: type=1326 audit(161.428:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.285494][T13731] loop8: detected capacity change from 0 to 512 [ 156.300442][ T29] audit: type=1326 audit(161.428:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.329639][ T29] audit: type=1326 audit(161.428:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.352987][ T29] audit: type=1326 audit(161.428:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.375929][ T29] audit: type=1326 audit(161.428:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.2.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 156.389326][T13729] EXT4-fs (loop2): 1 truncate cleaned up [ 156.415504][T13729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.427979][T13731] EXT4-fs (loop8): too many log groups per flexible block group [ 156.432225][ T5797] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 156.436099][T13731] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 156.456676][T13731] EXT4-fs (loop8): mount failed [ 156.518391][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.835950][T13767] loop2: detected capacity change from 0 to 1024 [ 156.856175][T13767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.906958][T13767] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.3907: lblock 1 mapped to illegal pblock 1 (length 15) [ 156.925074][T13767] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 156.937486][T13767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.937486][T13767] [ 156.948069][T13772] loop0: detected capacity change from 0 to 512 [ 156.955010][T13772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.977644][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.994042][T13772] EXT4-fs (loop0): 1 truncate cleaned up [ 157.000647][T13772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.018115][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3910'. [ 157.091330][T11607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.356654][T13817] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.3924'. [ 157.365929][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3924'. [ 157.389568][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3928'. [ 157.786061][T13833] Falling back ldisc for ttyS3. [ 157.825092][T13846] syzkaller1: entered promiscuous mode [ 157.830660][T13846] syzkaller1: entered allmulticast mode [ 157.867311][T13852] netlink: 'syz.0.3943': attribute type 12 has an invalid length. [ 157.879122][T13854] loop1: detected capacity change from 0 to 512 [ 157.893881][T13854] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 157.904075][T13854] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3944: invalid indirect mapped block 2683928664 (level 1) [ 157.918376][T13854] EXT4-fs (loop1): Remounting filesystem read-only [ 157.945149][T13854] EXT4-fs (loop1): 1 truncate cleaned up [ 157.954599][T13861] loop9: detected capacity change from 0 to 128 [ 157.968214][T13861] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.973044][T13854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.017992][T11578] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.044379][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.139227][T13879] loop1: detected capacity change from 0 to 128 [ 158.150095][T13879] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.217103][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.234614][ T3407] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 158.242079][ T3407] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 158.249579][ T3407] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 158.273210][ T3407] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 158.290995][T13894] loop1: detected capacity change from 0 to 512 [ 158.299467][T13894] EXT4-fs: Ignoring removed bh option [ 158.305800][T13894] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.314932][T13895] sctp: [Deprecated]: syz.9.3961 (pid 13895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.314932][T13895] Use struct sctp_sack_info instead [ 158.314914][T13894] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 158.348574][T13894] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 158.375496][T13894] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 158.385319][T13900] netlink: 'syz.0.3962': attribute type 3 has an invalid length. [ 158.402580][T13894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.446609][T13894] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.505432][T13903] loop0: detected capacity change from 0 to 8192 [ 158.517169][T13903] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.533653][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.609447][T13920] loop9: detected capacity change from 0 to 1024 [ 158.623601][T13917] loop8: detected capacity change from 0 to 8192 [ 158.636350][T13920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.685534][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.727580][T13938] loop1: detected capacity change from 0 to 1024 [ 158.759341][T13938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.830384][T13956] vhci_hcd: invalid port number 65 [ 158.835568][T13956] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 159.066198][T13938] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3977: Allocating blocks 497-513 which overlap fs metadata [ 159.102246][T13937] EXT4-fs (loop1): pa ffff888106e45620: logic 272, phys. 385, len 8 [ 159.111078][T13937] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 159.141221][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.352166][T13969] loop8: detected capacity change from 0 to 1024 [ 159.368642][T13969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.386493][T13969] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.3988: lblock 1 mapped to illegal pblock 1 (length 15) [ 159.402882][T13969] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 159.409647][T13974] loop0: detected capacity change from 0 to 512 [ 159.415418][T13969] EXT4-fs (loop8): This should not happen!! Data will be lost [ 159.415418][T13969] [ 159.440405][T13974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.464599][T11607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.474569][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.543928][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.551719][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.559416][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.566875][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.574287][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.581827][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.589245][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.596652][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.604017][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.611449][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.618863][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.626524][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.640900][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.648373][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.655791][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.663510][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.670934][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.678427][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.685827][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.693442][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.700887][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.708671][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.716100][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.723601][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.724703][T13990] Falling back ldisc for ttyS3. [ 159.731186][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.743410][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.750882][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.767825][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.809773][T14003] loop8: detected capacity change from 0 to 1024 [ 159.827009][T14003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.828700][T14007] netlink: 'syz.9.4003': attribute type 1 has an invalid length. [ 159.846962][T14007] netlink: 'syz.9.4003': attribute type 4 has an invalid length. [ 159.854894][T14007] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4003'. [ 159.868085][T14007] netlink: 'syz.9.4003': attribute type 1 has an invalid length. [ 159.870588][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.875974][T14007] netlink: 'syz.9.4003': attribute type 4 has an invalid length. [ 159.892716][T14007] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4003'. [ 159.946360][T14016] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4007'. [ 159.968359][T14018] sctp: [Deprecated]: syz.2.4008 (pid 14018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.968359][T14018] Use struct sctp_sack_info instead [ 160.000803][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 160.008415][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 160.015950][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 160.032714][ T10] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 160.062303][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.069883][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.079408][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.087027][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.094509][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.102112][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.109552][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.117226][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.124670][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.132402][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.139869][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.147239][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.155397][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.162957][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.170591][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.178170][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.185552][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.193044][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.200520][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.208001][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.215463][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.222892][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.230281][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.237767][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.245334][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.252719][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.260173][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.268236][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 160.306089][T14044] loop1: detected capacity change from 0 to 1024 [ 160.325896][T14044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.360800][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.383298][T14056] loop9: detected capacity change from 0 to 1024 [ 160.390950][T14056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.445811][T14056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.481324][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.526266][T14065] sctp: [Deprecated]: syz.0.4023 (pid 14065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.526266][T14065] Use struct sctp_sack_info instead [ 160.755206][T14075] loop9: detected capacity change from 0 to 1024 [ 160.772654][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.780346][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.788224][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.795714][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.803177][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.810643][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.818063][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.825500][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.832938][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.840471][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.847906][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.855312][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.864112][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.871549][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.872069][T14075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.878973][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.898443][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.905877][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.913434][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.920963][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.928512][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.936108][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.943538][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.951012][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.958513][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.965895][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.973331][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.980721][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.989026][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 161.056324][T14093] loop0: detected capacity change from 0 to 512 [ 161.071070][T14093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.094831][T14093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.099334][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 161.116725][T14097] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4038'. [ 161.162263][T11607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.177195][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 161.202768][T14097] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4038'. [ 161.211880][T14097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4038'. [ 161.265404][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 161.265420][ T29] audit: type=1400 audit(166.908:6042): avc: denied { name_bind } for pid=14109 comm="syz.8.4043" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 161.317634][ T29] audit: type=1400 audit(166.950:6043): avc: denied { ioctl } for pid=14113 comm="syz.2.4044" path="socket:[39239]" dev="sockfs" ino=39239 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.375455][ T29] audit: type=1400 audit(167.013:6044): avc: denied { write } for pid=14118 comm="syz.2.4047" lport=45838 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.413117][ T29] audit: type=1400 audit(167.045:6045): avc: denied { getopt } for pid=14118 comm="syz.2.4047" lport=45838 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.451479][T14124] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 161.527841][ T29] audit: type=1400 audit(167.171:6046): avc: denied { cpu } for pid=14125 comm="syz.8.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.573373][T14091] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 161.606208][T14091] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 161.618558][T14091] EXT4-fs (loop9): This should not happen!! Data will be lost [ 161.618558][T14091] [ 161.628221][T14091] EXT4-fs (loop9): Total free blocks count 0 [ 161.634261][T14091] EXT4-fs (loop9): Free/Dirty block details [ 161.640211][T14091] EXT4-fs (loop9): free_blocks=68451041280 [ 161.646095][T14091] EXT4-fs (loop9): dirty_blocks=16432 [ 161.651536][T14091] EXT4-fs (loop9): Block reservation details [ 161.657568][T14091] EXT4-fs (loop9): i_reserved_data_blocks=1027 [ 161.695705][ T5850] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 161.929662][ T29] audit: type=1326 audit(167.580:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 161.952684][ T29] audit: type=1326 audit(167.580:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 161.975579][ T29] audit: type=1326 audit(167.580:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.1.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 162.045646][T14144] netem: incorrect gi model size [ 162.338564][ T29] audit: type=1400 audit(168.021:6050): avc: denied { map } for pid=14173 comm="syz.1.4070" path="socket:[39390]" dev="sockfs" ino=39390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 162.360447][T14182] loop9: detected capacity change from 0 to 1024 [ 162.367703][T14182] EXT4-fs: Ignoring removed orlov option [ 162.387522][T14182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.478379][ T29] audit: type=1326 audit(168.179:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.0.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 162.560408][T14196] loop2: detected capacity change from 0 to 512 [ 162.569518][T14196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.620050][T14196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.669370][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.695412][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.796365][T14212] loop9: detected capacity change from 0 to 256 [ 162.803617][T14212] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.816685][T14212] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.887764][T14217] netlink: 'syz.9.4086': attribute type 1 has an invalid length. [ 162.906330][T14217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.935498][T14217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.947522][T14217] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.959589][T14217] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 163.227870][T14242] loop9: detected capacity change from 0 to 8192 [ 163.390863][T14259] netlink: 'syz.8.4101': attribute type 12 has an invalid length. [ 163.396853][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4100'. [ 163.398899][T14259] netlink: 'syz.8.4101': attribute type 29 has an invalid length. [ 163.410177][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4100'. [ 163.415748][T14259] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4101'. [ 163.434338][T14259] netlink: 'syz.8.4101': attribute type 2 has an invalid length. [ 163.442251][T14259] netlink: 'syz.8.4101': attribute type 3 has an invalid length. [ 163.450108][T14259] netlink: 15 bytes leftover after parsing attributes in process `syz.8.4101'. [ 163.532513][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4106'. [ 163.564225][T14271] syzkaller0: entered promiscuous mode [ 163.569942][T14271] syzkaller0: entered allmulticast mode [ 163.649710][T14282] loop8: detected capacity change from 0 to 164 [ 163.657881][T14282] Unable to read rock-ridge attributes [ 163.866948][T14308] loop2: detected capacity change from 0 to 1024 [ 163.896452][T14308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.931026][T14308] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 163.981869][T14322] loop0: detected capacity change from 0 to 512 [ 163.996042][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.008144][T14322] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.040577][T11607] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 164.311776][T14364] syzkaller1: entered promiscuous mode [ 164.317351][T14364] syzkaller1: entered allmulticast mode [ 164.453858][T14385] loop1: detected capacity change from 0 to 512 [ 164.465557][T14385] EXT4-fs (loop1): 1 orphan inode deleted [ 164.471508][T14385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.484746][ T3442] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 165.074834][T14394] SELinux: ebitmap: truncated map [ 165.081753][T14394] SELinux: failed to load policy [ 165.119976][T14398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14398 comm=syz.8.4159 [ 165.219856][T14409] loop9: detected capacity change from 0 to 512 [ 165.237377][T14409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.266302][T14409] Cannot find add_set index 0 as target [ 165.276364][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.290885][T14415] netlink: 'syz.0.4167': attribute type 1 has an invalid length. [ 165.303282][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.395403][T14436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.430177][T14437] loop1: detected capacity change from 0 to 8192 [ 165.741536][T14465] loop0: detected capacity change from 0 to 512 [ 165.759270][T14465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.795389][T14472] loop1: detected capacity change from 0 to 1024 [ 165.807701][T14465] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 165.836524][T14472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.849740][T11607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.866825][T14472] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 165.907231][T14481] syzkaller0: entered promiscuous mode [ 165.912775][T14481] syzkaller0: entered allmulticast mode [ 165.931599][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.940350][T14485] ALSA: seq fatal error: cannot create timer (-22) [ 166.003562][T14491] netlink: 'syz.0.4197': attribute type 13 has an invalid length. [ 166.011434][T14491] netlink: 'syz.0.4197': attribute type 27 has an invalid length. [ 166.065309][T14494] loop1: detected capacity change from 0 to 512 [ 166.074830][T14494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.114218][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.138067][T14503] loop1: detected capacity change from 0 to 512 [ 166.161681][T14505] loop0: detected capacity change from 0 to 2048 [ 166.169993][T14503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.192866][T14503] EXT4-fs warning (device loop1): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 166.208549][T14505] Alternate GPT is invalid, using primary GPT. [ 166.215174][T14505] loop0: p1 p2 p3 [ 166.227232][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.302848][T14512] serio: Serial port ttyS3 [ 166.340577][T14516] loop8: detected capacity change from 0 to 1024 [ 166.351257][T14516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.369256][T14516] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 166.398952][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 166.398965][ T29] audit: type=1400 audit(172.294:6086): avc: denied { relabelfrom } for pid=14520 comm="syz.1.4207" name="NETLINK" dev="sockfs" ino=40692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.429294][ T29] audit: type=1400 audit(172.294:6087): avc: denied { relabelto } for pid=14520 comm="syz.1.4207" name="NETLINK" dev="sockfs" ino=40692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 166.430744][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.541914][ T29] audit: type=1400 audit(172.441:6088): avc: denied { create } for pid=14536 comm="syz.1.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 166.563175][ T29] audit: type=1400 audit(172.441:6089): avc: denied { bind } for pid=14536 comm="syz.1.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 166.677068][T14541] loop1: detected capacity change from 0 to 512 [ 166.683710][T14541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.691347][T14541] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 166.699329][T14541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 166.707738][T14541] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 166.717283][T14541] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 166.726339][T14541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.739049][T14541] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 166.755594][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.903635][T14552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14552 comm=syz.9.4220 [ 167.177516][T14583] syzkaller0: entered promiscuous mode [ 167.183532][T14583] syzkaller0: entered allmulticast mode [ 167.333458][T14603] __nla_validate_parse: 7 callbacks suppressed [ 167.333475][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4231'. [ 167.484503][T14631] loop8: detected capacity change from 0 to 128 [ 167.497566][ T29] audit: type=1326 audit(173.449:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14630 comm="syz.8.4234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93fe02e929 code=0x0 [ 167.825201][T14682] loop1: detected capacity change from 0 to 128 [ 167.837490][T14682] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 167.845400][T14682] FAT-fs (loop1): Filesystem has been set read-only [ 167.852574][T14682] syz.1.4238: attempt to access beyond end of device [ 167.852574][T14682] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 167.867057][T14682] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 167.875006][T14682] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 167.883213][T14682] syz.1.4238: attempt to access beyond end of device [ 167.883213][T14682] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 167.884509][T14686] veth1_macvtap: left promiscuous mode [ 167.902202][T14686] macsec0: entered allmulticast mode [ 168.095124][ T29] audit: type=1326 audit(174.079:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14727 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 168.148109][ T29] audit: type=1326 audit(174.099:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14727 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 168.171108][ T29] audit: type=1326 audit(174.099:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14727 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 168.194046][ T29] audit: type=1326 audit(174.099:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14727 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 168.217073][ T29] audit: type=1326 audit(174.099:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14727 comm="syz.1.4245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 168.241543][T14740] 9pnet_virtio: no channels available for device [ 168.290921][T14748] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4250'. [ 168.300575][T14746] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 168.369076][T14758] Falling back ldisc for ptm0. [ 168.460605][T14769] 9pnet_virtio: no channels available for device [ 168.581209][T14786] vhci_hcd: invalid port number 96 [ 168.586420][T14786] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 168.612483][T14792] netlink: 'syz.8.4271': attribute type 1 has an invalid length. [ 168.626645][T14792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.654633][T14797] loop1: detected capacity change from 0 to 128 [ 168.686879][T14803] loop1: detected capacity change from 0 to 1024 [ 168.693843][T14803] EXT4-fs: Ignoring removed nobh option [ 168.853723][T14823] loop2: detected capacity change from 0 to 128 [ 168.860736][T14823] vfat: Unknown parameter '18446744073709551615' [ 168.946441][T14835] tipc: Started in network mode [ 168.951620][T14835] tipc: Node identity ac14140f, cluster identity 4711 [ 168.958699][T14835] tipc: New replicast peer: 255.255.255.255 [ 168.964807][T14835] tipc: Enabled bearer , priority 10 [ 168.971878][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4290'. [ 168.980881][T14835] tipc: Disabling bearer [ 169.005535][T14837] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 169.014667][T14840] netlink: 87 bytes leftover after parsing attributes in process `syz.2.4293'. [ 169.110151][T14850] loop1: detected capacity change from 0 to 128 [ 169.143545][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 169.153256][T14858] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 169.174576][T14861] loop2: detected capacity change from 0 to 128 [ 169.869494][T14888] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4313'. [ 169.878549][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4313'. [ 169.916165][T14892] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 169.938804][T14894] loop8: detected capacity change from 0 to 128 [ 169.945323][T14894] vfat: Unknown parameter '18446744073709551615' [ 170.045795][T14899] loop8: detected capacity change from 0 to 128 [ 170.055783][T14899] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 170.063786][T14899] FAT-fs (loop8): Filesystem has been set read-only [ 170.070690][T14899] syz.8.4318: attempt to access beyond end of device [ 170.070690][T14899] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 170.084781][T14899] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 170.092627][T14899] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 170.100741][T14899] syz.8.4318: attempt to access beyond end of device [ 170.100741][T14899] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 170.159644][T14912] loop8: detected capacity change from 0 to 128 [ 170.229700][T14920] loop1: detected capacity change from 0 to 512 [ 170.263818][T14920] EXT4-fs: Ignoring removed nobh option [ 170.276063][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.4327: corrupted inode contents [ 170.288192][T14920] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.4327: mark_inode_dirty error [ 170.301984][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.4327: corrupted inode contents [ 170.327780][T14920] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.4327: mark_inode_dirty error [ 170.384942][T14920] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4327: Failed to acquire dquot type 0 [ 170.404125][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4327: corrupted inode contents [ 170.422773][T14931] loop0: detected capacity change from 0 to 2048 [ 170.433027][T14933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14933 comm=syz.8.4330 [ 170.445808][T14920] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.4327: mark_inode_dirty error [ 170.458760][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4327: corrupted inode contents [ 170.481686][T14920] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4327: mark_inode_dirty error [ 170.494431][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4327: corrupted inode contents [ 170.507998][T14931] loop0: p1 < > p4 [ 170.512614][T14931] loop0: p4 size 8388608 extends beyond EOD, truncated [ 170.543679][T14920] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 170.553551][T14920] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4327: corrupted inode contents [ 170.567064][T14920] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.4327: mark_inode_dirty error [ 170.586834][T14920] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 170.611997][T14939] loop8: detected capacity change from 0 to 128 [ 170.620209][T14920] EXT4-fs (loop1): 1 truncate cleaned up [ 170.644662][T14942] tipc: Started in network mode [ 170.649627][T14942] tipc: Node identity ac14140f, cluster identity 4711 [ 170.657646][T14942] tipc: New replicast peer: 255.255.255.255 [ 170.663718][T14942] tipc: Enabled bearer , priority 10 [ 170.671833][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 170.680882][T14942] tipc: Disabling bearer [ 170.692025][T14944] bridge: RTM_NEWNEIGH with invalid ether address [ 170.998624][T14971] loop0: detected capacity change from 0 to 1024 [ 171.015495][T14973] loop1: detected capacity change from 0 to 1024 [ 171.015951][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.029164][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.039644][T14973] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 171.105476][T14971] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4345: Allocating blocks 449-513 which overlap fs metadata [ 171.121064][T14973] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.142385][T14973] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 171.151714][T14973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.172773][T14969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.187127][T14973] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.4346: Inode bitmap for bg 0 marked uninitialized [ 171.203100][T14969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.207713][T14970] EXT4-fs (loop0): pa ffff888106e455b0: logic 48, phys. 177, len 21 [ 171.219088][T14970] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 171.229961][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 171.229976][ T29] audit: type=1400 audit(177.364:6151): avc: denied { bind } for pid=14977 comm="syz.8.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.282072][T14969] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.282104][T14969] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.282131][T14969] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.282189][T14969] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.314046][T14969] team1: left promiscuous mode [ 171.327486][ T29] audit: type=1400 audit(177.448:6152): avc: denied { bind } for pid=14980 comm="syz.2.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.327508][ T29] audit: type=1400 audit(177.448:6153): avc: denied { setopt } for pid=14980 comm="syz.2.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.359371][T14981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.360115][ T29] audit: type=1326 audit(177.490:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.360143][ T29] audit: type=1326 audit(177.490:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.361646][ T29] audit: type=1326 audit(177.501:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.361676][ T29] audit: type=1326 audit(177.501:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.361702][ T29] audit: type=1326 audit(177.501:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.384639][ T29] audit: type=1326 audit(177.532:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.384672][ T29] audit: type=1326 audit(177.532:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.0.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 171.483757][T14981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.610407][T14981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.639015][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 171.672878][T14981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.743456][T14981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.772867][T14981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.782845][T14981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.792680][T14981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.934520][T15007] loop0: detected capacity change from 0 to 128 [ 172.092543][T15021] loop8: detected capacity change from 0 to 512 [ 172.109288][T15021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.110996][T15023] loop0: detected capacity change from 0 to 512 [ 172.124758][T15021] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 172.132833][T15021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 172.141166][T15021] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 172.148023][T15023] EXT4-fs: Ignoring removed oldalloc option [ 172.150724][T15021] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 172.156830][T15027] loop1: detected capacity change from 0 to 1024 [ 172.179804][T15023] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.191506][T15021] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4363: dx entry: limit 65535 != root limit 120 [ 172.203692][T15021] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4363: Corrupt directory, running e2fsck is recommended [ 172.205813][T15032] loop2: detected capacity change from 0 to 128 [ 172.219214][T15027] EXT4-fs: Ignoring removed nobh option [ 172.229141][T15027] EXT4-fs: Ignoring removed bh option [ 172.244218][T15023] EXT4-fs (loop0): 1 truncate cleaned up [ 172.261456][T15021] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.4363: path /123/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 172.317022][T15047] loop8: detected capacity change from 0 to 128 [ 172.382893][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.390154][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.475596][T15069] loop9: detected capacity change from 0 to 512 [ 172.482641][T15045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.489414][T15069] EXT4-fs: Ignoring removed oldalloc option [ 172.496912][T15069] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 172.499281][T15045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.510757][T15069] EXT4-fs (loop9): 1 truncate cleaned up [ 172.528774][T15045] batman_adv: batadv0: Interface deactivated: macvlan0 [ 172.546179][T15045] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.554687][T15045] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.563187][T15045] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.571622][T15045] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.630240][T15083] loop2: detected capacity change from 0 to 128 [ 172.685401][T15091] netlink: 'syz.9.4391': attribute type 1 has an invalid length. [ 172.697871][T15091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.716427][T15091] bond3: (slave veth5): Enslaving as an active interface with a down link [ 172.735149][T15091] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.745051][T15091] bond3: (slave batadv1): making interface the new active one [ 172.753962][T15091] batadv1: entered promiscuous mode [ 172.759355][T15091] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 172.777473][T15094] loop2: detected capacity change from 0 to 512 [ 172.790632][T15094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.800861][T15094] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.808855][T15094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 172.817962][T15094] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 172.827555][T15094] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 172.840972][T15094] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.4392: dx entry: limit 65535 != root limit 120 [ 172.853197][T15094] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4392: Corrupt directory, running e2fsck is recommended [ 172.866298][T15094] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.4392: path /213/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 173.265266][ T10] page_pool_release_retry() stalled pool shutdown: id 83, 1 inflight 60 sec [ 173.526495][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881136e8200: rx timeout, send abort [ 173.534835][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881136e8200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 173.550450][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.557624][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.939557][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.979884][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.297542][T15111] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.306606][T15111] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.315524][T15111] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.324433][T15111] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.578510][T15273] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4413'. [ 175.067233][T15281] loop1: detected capacity change from 0 to 512 [ 175.073922][T15281] EXT4-fs: Ignoring removed oldalloc option [ 175.089496][T15281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.104504][T15281] EXT4-fs (loop1): 1 truncate cleaned up [ 175.516807][T15329] program syz.0.4439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.526411][T15329] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 175.551322][T15332] loop9: detected capacity change from 0 to 1024 [ 175.554741][T15334] vlan0: entered allmulticast mode [ 175.652993][T15343] loop0: detected capacity change from 0 to 1024 [ 175.682970][T15343] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 175.844930][T15360] loop1: detected capacity change from 0 to 512 [ 175.878380][T15360] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.887361][T15365] loop0: detected capacity change from 0 to 128 [ 175.896175][T15360] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.4451: bad orphan inode 13 [ 175.918851][T15360] ext4_test_bit(bit=12, block=18) = 1 [ 175.924301][T15360] is_bad_inode(inode)=0 [ 175.928481][T15360] NEXT_ORPHAN(inode)=2130706432 [ 175.933470][T15360] max_ino=32 [ 175.936669][T15360] i_nlink=1 [ 175.999925][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 175.999981][ T29] audit: type=1400 audit(182.372:6342): avc: denied { unmount } for pid=11607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.045358][T15369] netlink: 'syz.0.4455': attribute type 12 has an invalid length. [ 176.047129][ T29] audit: type=1400 audit(182.372:6343): avc: denied { execute } for pid=15359 comm="syz.1.4451" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.106577][ T29] audit: type=1400 audit(182.487:6344): avc: denied { read write } for pid=15370 comm="syz.1.4456" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.181519][ T29] audit: type=1400 audit(182.487:6345): avc: denied { open } for pid=15370 comm="syz.1.4456" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.204717][ T29] audit: type=1400 audit(182.529:6346): avc: denied { ioctl } for pid=15370 comm="syz.1.4456" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.251998][ T29] audit: type=1400 audit(182.634:6347): avc: denied { write } for pid=15383 comm="syz.2.4461" name="file0" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.262501][T15382] loop8: detected capacity change from 0 to 512 [ 176.303183][T15386] loop0: detected capacity change from 0 to 1024 [ 176.309677][ T29] audit: type=1400 audit(182.666:6348): avc: denied { ioctl } for pid=15383 comm="syz.2.4461" path="/223/file0" dev="tmpfs" ino=1178 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.371348][T15386] EXT4-fs: Ignoring removed nobh option [ 176.377021][T15386] EXT4-fs: Ignoring removed bh option [ 176.431407][ T29] audit: type=1400 audit(182.813:6349): avc: denied { append } for pid=15379 comm="syz.0.4459" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.438527][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.453243][ T29] audit: type=1400 audit(182.813:6350): avc: denied { map } for pid=15379 comm="syz.0.4459" path="/225/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.460594][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.511909][ T5831] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 176.533074][ T5831] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.533731][ T29] audit: type=1400 audit(182.823:6351): avc: denied { read write } for pid=15385 comm="syz.2.4462" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.545285][ T5831] EXT4-fs (loop9): This should not happen!! Data will be lost [ 176.545285][ T5831] [ 176.577843][ T5831] EXT4-fs (loop9): Total free blocks count 0 [ 176.583928][ T5831] EXT4-fs (loop9): Free/Dirty block details [ 176.589920][ T5831] EXT4-fs (loop9): free_blocks=68451041280 [ 176.595734][ T5831] EXT4-fs (loop9): dirty_blocks=13424 [ 176.601144][ T5831] EXT4-fs (loop9): Block reservation details [ 176.607163][ T5831] EXT4-fs (loop9): i_reserved_data_blocks=839 [ 176.668966][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.676489][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.683912][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.691465][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.698597][ T5831] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 176.699046][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.711362][ T5831] EXT4-fs (loop9): This should not happen!! Data will be lost [ 176.711362][ T5831] [ 176.728778][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.736296][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.743769][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.751218][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.758664][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.824938][T15397] pim6reg1: entered promiscuous mode [ 176.830366][T15397] pim6reg1: entered allmulticast mode [ 176.864197][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.871715][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.879173][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.886622][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.894042][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.901544][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.908930][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.916342][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.924235][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.931656][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.939089][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.946583][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.954225][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.961658][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.969208][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 176.977884][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 177.013059][T15401] loop8: detected capacity change from 0 to 1024 [ 177.032904][T15401] EXT4-fs: Ignoring removed orlov option [ 177.144854][T15416] can0: slcan on ttyS3. [ 177.210080][T15416] can0 (unregistered): slcan off ttyS3. [ 177.244160][T15426] netlink: 'syz.0.4475': attribute type 1 has an invalid length. [ 177.257815][T15426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.283211][T15426] bond2: (slave veth11): Enslaving as an active interface with a down link [ 177.305783][T15426] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.314776][T15426] bond2: (slave batadv1): making interface the new active one [ 177.323685][T15426] batadv1: entered promiscuous mode [ 177.329129][T15426] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 177.355843][T15433] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 177.392137][T15439] loop8: detected capacity change from 0 to 128 [ 177.440701][T15445] loop1: detected capacity change from 0 to 1024 [ 177.451597][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 177.460703][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 177.718753][T15466] program syz.0.4492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.729465][T15466] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 177.778630][T15472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.822691][T15472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.972778][T15478] loop8: detected capacity change from 0 to 512 [ 177.979745][T15478] EXT4-fs: Ignoring removed nobh option [ 177.989519][T15472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.024218][T15478] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 178.046025][T15478] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4498: attempt to clear invalid blocks 1 len 1 [ 178.064505][T15472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.078410][T15478] EXT4-fs (loop8): Remounting filesystem read-only [ 178.085428][T15478] EXT4-fs (loop8): 1 truncate cleaned up [ 178.117698][ T5797] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 178.158964][T15472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.169060][ T5797] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.181542][ T5797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.181542][ T5797] [ 178.191220][ T5797] EXT4-fs (loop1): Total free blocks count 0 [ 178.194667][T15472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.197309][ T5797] EXT4-fs (loop1): Free/Dirty block details [ 178.211513][ T5797] EXT4-fs (loop1): free_blocks=68451041280 [ 178.217351][ T5797] EXT4-fs (loop1): dirty_blocks=16416 [ 178.222846][ T5797] EXT4-fs (loop1): Block reservation details [ 178.228856][ T5797] EXT4-fs (loop1): i_reserved_data_blocks=1026 [ 178.241903][ T5797] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 178.254585][ T5797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.254585][ T5797] [ 178.277682][T15472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.292404][T15472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.353866][T15502] loop9: detected capacity change from 0 to 1024 [ 178.376962][T15502] EXT4-fs: Ignoring removed orlov option [ 178.395269][T15502] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 178.444540][T15510] loop2: detected capacity change from 0 to 512 [ 178.463875][T15502] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.4508: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 178.503932][T15506] serio: Serial port ptm0 [ 178.512159][T15510] EXT4-fs: Ignoring removed i_version option [ 178.518342][T15510] EXT4-fs: Ignoring removed nobh option [ 178.518460][T15518] syzkaller1: entered promiscuous mode [ 178.529454][T15518] syzkaller1: entered allmulticast mode [ 178.567075][T15521] vlan2: entered allmulticast mode [ 178.573470][T15510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.579148][T15521] dummy0: entered allmulticast mode [ 178.605215][T15525] loop0: detected capacity change from 0 to 1024 [ 178.630202][T15510] EXT4-fs (loop2): 1 truncate cleaned up [ 178.697487][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4519'. [ 178.803333][T15539] loop2: detected capacity change from 0 to 256 [ 178.873410][T15539] FAT-fs (loop2): bogus number of FAT sectors [ 178.879563][T15539] FAT-fs (loop2): Can't find a valid FAT filesystem [ 178.898576][T15545] loop9: detected capacity change from 0 to 512 [ 179.308079][ T5797] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 179.352648][ T5797] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 179.365058][ T5797] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.365058][ T5797] [ 179.374876][ T5797] EXT4-fs (loop0): Total free blocks count 0 [ 179.381033][ T5797] EXT4-fs (loop0): Free/Dirty block details [ 179.386951][ T5797] EXT4-fs (loop0): free_blocks=68451041280 [ 179.392896][ T5797] EXT4-fs (loop0): dirty_blocks=16416 [ 179.398277][ T5797] EXT4-fs (loop0): Block reservation details [ 179.404408][ T5797] EXT4-fs (loop0): i_reserved_data_blocks=1026 [ 179.413929][ T5797] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 179.426562][ T5797] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.426562][ T5797] [ 179.630484][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4535'. [ 179.946456][T15588] loop0: detected capacity change from 0 to 512 [ 179.964022][T15588] EXT4-fs: Ignoring removed nobh option [ 179.979457][T15588] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 179.997912][T15588] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4542: attempt to clear invalid blocks 1 len 1 [ 180.017709][T15588] EXT4-fs (loop0): Remounting filesystem read-only [ 180.033304][T15588] EXT4-fs (loop0): 1 truncate cleaned up [ 180.178336][T11607] EXT4-fs unmount: 61 callbacks suppressed [ 180.178352][T11607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.576758][T15636] syzkaller0: entered promiscuous mode [ 180.582465][T15636] syzkaller0: entered allmulticast mode [ 180.716995][T15652] loop9: detected capacity change from 0 to 256 [ 180.724475][T15652] FAT-fs (loop9): bogus number of FAT sectors [ 180.730575][T15652] FAT-fs (loop9): Can't find a valid FAT filesystem [ 180.738661][T15649] loop8: detected capacity change from 0 to 8192 [ 180.759596][T15649] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.782877][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 180.782894][ T29] audit: type=1400 audit(187.390:6595): avc: denied { mount } for pid=15647 comm="syz.8.4565" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 180.810697][ T29] audit: type=1326 audit(187.390:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93fe02d290 code=0x7ffc0000 [ 180.833663][ T29] audit: type=1326 audit(187.390:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f93fe02d677 code=0x7ffc0000 [ 180.856508][ T29] audit: type=1326 audit(187.390:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93fe02d290 code=0x7ffc0000 [ 180.885109][ T29] audit: type=1326 audit(187.390:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fe02e929 code=0x7ffc0000 [ 180.908249][ T29] audit: type=1326 audit(187.390:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fe02e929 code=0x7ffc0000 [ 180.931272][ T29] audit: type=1326 audit(187.390:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 180.954192][ T29] audit: type=1326 audit(187.390:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 180.977196][ T29] audit: type=1326 audit(187.390:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15655 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c737e929 code=0x7ffc0000 [ 181.000049][ T29] audit: type=1326 audit(187.390:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15647 comm="syz.8.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f93fe02e929 code=0x7ffc0000 [ 181.238427][T15679] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.254702][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4579'. [ 181.309802][T15679] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.367712][T15679] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.408612][T15694] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4586'. [ 181.523311][T15679] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.821848][T15679] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.863418][T15679] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.898834][T15679] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.935694][T15679] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.092153][T15712] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 182.231169][T15733] loop9: detected capacity change from 0 to 512 [ 182.239825][T15721] loop1: detected capacity change from 0 to 8192 [ 182.248386][T15733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.274963][ T3313] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 182.282919][ T3313] FAT-fs (loop1): Filesystem has been set read-only [ 182.314349][T15733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.422366][T15753] vlan2: entered allmulticast mode [ 182.427644][T15753] dummy0: entered allmulticast mode [ 182.479951][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.508169][T15754] syzkaller0: entered promiscuous mode [ 182.513678][T15754] syzkaller0: entered allmulticast mode [ 182.626735][T15768] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 182.654612][T15770] devtmpfs: Too few inodes for current use [ 183.316459][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.323917][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.337335][T15787] loop8: detected capacity change from 0 to 512 [ 183.343380][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.351039][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.358495][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.365982][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.373389][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.380837][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.388504][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.395930][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.403351][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.410779][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.418968][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.419174][T15787] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 183.426607][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.441948][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.445395][T15787] EXT4-fs (loop8): orphan cleanup on readonly fs [ 183.449440][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.449466][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.470879][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.478314][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.485765][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.493208][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.500651][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.508067][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.515566][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.522980][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.530396][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.537824][T15231] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 183.545847][T15231] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 183.546027][T15787] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.570383][ T5811] batadv1: left promiscuous mode [ 183.572750][T15787] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 183.589577][T15787] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4625: bg 0: block 40: padding at end of block bitmap is not set [ 183.607902][T15787] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 183.617434][T15787] EXT4-fs (loop8): 1 truncate cleaned up [ 183.624010][T15787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.663657][T15787] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 183.689763][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.826913][T15851] loop8: detected capacity change from 0 to 1764 [ 184.378280][T15955] loop2: detected capacity change from 0 to 128 [ 184.387364][T15955] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.418790][T11644] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.681446][T15974] loop2: detected capacity change from 0 to 1024 [ 184.697551][T15974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.713569][T15974] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4653: Allocating blocks 497-513 which overlap fs metadata [ 184.729245][T15974] EXT4-fs (loop2): pa ffff888106d95a10: logic 256, phys. 369, len 9 [ 184.737333][T15974] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 184.758002][T11644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.829737][T15989] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4659'. [ 184.974274][T16005] netlink: 'syz.8.4667': attribute type 1 has an invalid length. [ 185.222719][T16059] loop8: detected capacity change from 0 to 256 [ 185.404131][T16096] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4680'. [ 185.441638][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'. [ 185.569178][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 185.569194][ T29] audit: type=1326 audit(192.419:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.604363][ T29] audit: type=1326 audit(192.450:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.627520][ T29] audit: type=1326 audit(192.450:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.650505][ T29] audit: type=1326 audit(192.450:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.673512][ T29] audit: type=1326 audit(192.450:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.696420][ T29] audit: type=1326 audit(192.450:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.719338][ T29] audit: type=1326 audit(192.450:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.743277][ T29] audit: type=1326 audit(192.450:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.766282][ T29] audit: type=1326 audit(192.534:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 185.789544][ T29] audit: type=1326 audit(192.565:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16122 comm="syz.0.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a6ae929 code=0x7ffc0000 [ 186.056342][T16150] syzkaller0: entered promiscuous mode [ 186.062008][T16150] syzkaller0: entered allmulticast mode [ 186.189048][T16186] loop9: detected capacity change from 0 to 128 [ 186.198767][T16187] loop8: detected capacity change from 0 to 128 [ 186.241418][T16187] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 186.249430][T16187] FAT-fs (loop8): Filesystem has been set read-only [ 186.284307][T16187] syz.8.4695: attempt to access beyond end of device [ 186.284307][T16187] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 186.315001][T16187] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 186.322963][T16187] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 186.324172][T16196] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4698'. [ 186.332140][T16198] syz.8.4695: attempt to access beyond end of device [ 186.332140][T16198] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 186.353457][T16198] Buffer I/O error on dev loop8, logical block 2065, async page read [ 186.362556][T16198] syz.8.4695: attempt to access beyond end of device [ 186.362556][T16198] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 186.376206][T16198] Buffer I/O error on dev loop8, logical block 2066, async page read [ 186.384487][T16198] syz.8.4695: attempt to access beyond end of device [ 186.384487][T16198] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 186.397793][T16198] Buffer I/O error on dev loop8, logical block 2067, async page read [ 186.414670][T16198] syz.8.4695: attempt to access beyond end of device [ 186.414670][T16198] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 186.427927][T16198] Buffer I/O error on dev loop8, logical block 2068, async page read [ 186.436548][T16198] syz.8.4695: attempt to access beyond end of device [ 186.436548][T16198] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 186.449855][T16198] Buffer I/O error on dev loop8, logical block 2069, async page read [ 186.461246][T16198] syz.8.4695: attempt to access beyond end of device [ 186.461246][T16198] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 186.474522][T16198] Buffer I/O error on dev loop8, logical block 2070, async page read [ 186.483665][T16198] syz.8.4695: attempt to access beyond end of device [ 186.483665][T16198] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 186.497002][T16198] Buffer I/O error on dev loop8, logical block 2071, async page read [ 186.507080][T16198] syz.8.4695: attempt to access beyond end of device [ 186.507080][T16198] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 186.520382][T16198] Buffer I/O error on dev loop8, logical block 2072, async page read [ 186.528934][T16187] syz.8.4695: attempt to access beyond end of device [ 186.528934][T16187] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 186.542241][T16187] Buffer I/O error on dev loop8, logical block 2065, async page read [ 186.552250][T16187] Buffer I/O error on dev loop8, logical block 2066, async page read [ 186.579505][T16210] loop9: detected capacity change from 0 to 512 [ 186.613270][T16210] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 186.639396][T16210] EXT4-fs (loop9): 1 truncate cleaned up [ 186.645446][T16210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.680469][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.376696][T16252] loop9: detected capacity change from 0 to 1024 [ 187.453040][T16252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.570159][T16232] chnl_net:caif_netlink_parms(): no params data found [ 187.596785][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.698778][T16232] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.705924][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.718827][T16232] bridge_slave_0: entered allmulticast mode [ 187.726778][T16232] bridge_slave_0: entered promiscuous mode [ 187.744553][T16232] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.751753][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.778791][T16232] bridge_slave_1: entered allmulticast mode [ 187.796858][T16269] loop2: detected capacity change from 0 to 128 [ 187.798534][T16232] bridge_slave_1: entered promiscuous mode [ 187.821237][T16269] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.845515][T16232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.869315][T16232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.878909][T11644] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.901916][T16232] team0: Port device team_slave_0 added [ 187.913600][T16232] team0: Port device team_slave_1 added [ 187.939298][T16232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.946330][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.972379][T16232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.988400][T16232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.995420][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.021464][T16232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.066076][T16232] hsr_slave_0: entered promiscuous mode [ 188.076039][T16232] hsr_slave_1: entered promiscuous mode [ 188.082687][T16232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.090480][T16232] Cannot create hsr debugfs directory [ 188.188616][T16290] loop2: detected capacity change from 0 to 4096 [ 188.201240][T16290] EXT4-fs: test_dummy_encryption option not supported [ 188.229287][T16290] loop2: detected capacity change from 0 to 1024 [ 188.236577][T16290] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 188.249079][ T5804] batadv1: left promiscuous mode [ 188.283691][T16301] loop2: detected capacity change from 0 to 512 [ 188.291055][T16301] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 188.316293][T16301] EXT4-fs (loop2): failed to open journal device unknown-block(1,255) -6 [ 188.434258][T16317] wg2: entered promiscuous mode [ 188.439159][T16317] wg2: entered allmulticast mode [ 188.457471][T16232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.470767][T16232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.493834][T16232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.504955][T16232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.558816][T16232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.570336][T16232] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.581110][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.588322][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.599617][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.606735][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.692720][T16232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.841021][T16360] loop8: detected capacity change from 0 to 2048 [ 188.863084][T16360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.893885][T16360] EXT4-fs error (device loop8): ext4_ext_precache:632: inode #2: comm syz.8.4756: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 188.894061][T16360] EXT4-fs (loop8): Remounting filesystem read-only [ 188.929024][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.986458][T16232] veth0_vlan: entered promiscuous mode [ 188.988656][T16232] veth1_vlan: entered promiscuous mode [ 189.014485][T16232] veth0_macvtap: entered promiscuous mode [ 189.022444][T16232] veth1_macvtap: entered promiscuous mode [ 189.063689][T16232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.076423][T16232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.085937][T16232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.085983][T16232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.086042][T16232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.086088][T16232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.266178][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4765'. [ 189.275227][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4765'. [ 189.298687][T16392] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.298751][T16392] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.298784][T16392] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.298874][T16392] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.299207][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 189.308834][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4765'. [ 189.308890][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4765'. [ 189.749482][T16418] syzkaller1: entered promiscuous mode [ 189.755044][T16418] syzkaller1: entered allmulticast mode [ 189.817541][T16424] loop4: detected capacity change from 0 to 2048 [ 189.869035][T16424] loop4: p1 < > p4 [ 189.873515][T16424] loop4: p4 size 8388608 extends beyond EOD, truncated [ 189.901611][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4783'. [ 190.062572][T16449] SELinux: ebitmap: truncated map [ 190.068644][T16449] SELinux: failed to load policy [ 190.191560][T16471] loop9: detected capacity change from 0 to 512 [ 190.199271][T16471] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 190.228198][T16471] EXT4-fs (loop9): failed to open journal device unknown-block(1,255) -6 [ 190.241324][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4803'. [ 190.273337][T16486] netlink: 'syz.9.4806': attribute type 1 has an invalid length. [ 190.281136][T16486] netlink: 'syz.9.4806': attribute type 2 has an invalid length. [ 190.289196][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4806'. [ 190.308743][ T5804] nci: nci_rsp_packet: unknown rsp opcode 0x10c [ 190.362641][T16491] loop8: detected capacity change from 0 to 2048 [ 190.402364][T16491] loop8: p1 < > p4 [ 190.406253][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 190.406266][ T29] audit: type=1400 audit(197.489:6791): avc: denied { setopt } for pid=16497 comm="syz.4.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.432073][T16491] loop8: p4 size 8388608 extends beyond EOD, truncated [ 190.479930][ T29] audit: type=1400 audit(197.573:6792): avc: denied { read } for pid=16503 comm="syz.4.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.765251][ T29] audit: type=1400 audit(197.877:6793): avc: denied { write } for pid=16508 comm="syz.2.4825" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.808988][ T29] audit: type=1326 audit(197.919:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.832056][ T29] audit: type=1326 audit(197.919:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.855055][ T29] audit: type=1326 audit(197.919:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.878124][ T29] audit: type=1326 audit(197.919:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.901370][ T29] audit: type=1326 audit(197.919:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.929649][ T29] audit: type=1326 audit(198.045:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 190.952884][ T29] audit: type=1326 audit(198.045:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dbbfe929 code=0x7ffc0000 [ 191.147922][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4828'. [ 191.207710][T16538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4828'. [ 191.222938][T16544] loop9: detected capacity change from 0 to 512 [ 191.230334][T16544] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 191.245278][T16546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4831'. [ 191.361483][T16544] loop9: detected capacity change from 0 to 8192 [ 191.397674][T16544] loop9: p1 < > p2 < p5 > p3 p4 [ 191.418257][T16544] loop9: p3 start 83890176 is beyond EOD, truncated [ 191.424955][T16544] loop9: p4 size 16776960 extends beyond EOD, truncated [ 191.490755][T16544] loop9: p5 size 16776960 extends beyond EOD, truncated [ 191.513715][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'. [ 191.667839][T16562] netlink: 'syz.0.4838': attribute type 39 has an invalid length. [ 191.858628][T16568] loop9: detected capacity change from 0 to 2048 [ 191.939259][T16568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.981487][T16568] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.4841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 192.002337][T16568] EXT4-fs (loop9): Remounting filesystem read-only [ 192.020294][T16578] loop8: detected capacity change from 0 to 1024 [ 192.034210][T11578] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.065973][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'. [ 192.078689][T16578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.116020][T16578] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 192.130994][T16578] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 192.143565][T16578] EXT4-fs (loop8): This should not happen!! Data will be lost [ 192.143565][T16578] [ 192.153274][T16578] EXT4-fs (loop8): Total free blocks count 0 [ 192.159386][T16578] EXT4-fs (loop8): Free/Dirty block details [ 192.165330][T16578] EXT4-fs (loop8): free_blocks=4293918720 [ 192.171087][T16578] EXT4-fs (loop8): dirty_blocks=80 [ 192.176428][T16578] EXT4-fs (loop8): Block reservation details [ 192.182419][T16578] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 192.214975][T13438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.278477][T16596] Falling back ldisc for ttyS3. [ 192.421995][T16632] loop4: detected capacity change from 0 to 1024 [ 192.428642][T16632] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 192.443416][T16632] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 192.653471][T16660] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 192.757368][T16681] loop4: detected capacity change from 0 to 256 [ 192.802284][T16681] loop4: detected capacity change from 256 to 0 [ 192.815611][T16232] bio_check_eod: 26663 callbacks suppressed [ 192.815654][T16232] syz-executor: attempt to access beyond end of device [ 192.815654][T16232] loop4: rw=0, sector=12, nr_sectors = 4 limit=0 [ 192.834720][T16232] FAT-fs (loop4): Directory bread(block 3) failed [ 192.848351][T16232] syz-executor: attempt to access beyond end of device [ 192.848351][T16232] loop4: rw=0, sector=0, nr_sectors = 4 limit=0 [ 192.864274][T16232] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 193.024947][ T5808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.073581][ T5808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.130553][ T5808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.150132][T16715] ================================================================== [ 193.158246][T16715] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 193.166846][T16715] [ 193.169173][T16715] write to 0xffff8881217af828 of 8 bytes by task 16707 on cpu 1: [ 193.176888][T16715] shmem_file_splice_read+0x470/0x600 [ 193.182274][T16715] splice_direct_to_actor+0x26c/0x680 [ 193.187663][T16715] do_splice_direct+0xda/0x150 [ 193.192437][T16715] do_sendfile+0x380/0x650 [ 193.196864][T16715] __x64_sys_sendfile64+0x105/0x150 [ 193.202091][T16715] x64_sys_call+0xb39/0x2fb0 [ 193.206696][T16715] do_syscall_64+0xd2/0x200 [ 193.211290][T16715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.217194][T16715] [ 193.219520][T16715] write to 0xffff8881217af828 of 8 bytes by task 16715 on cpu 0: [ 193.227243][T16715] shmem_file_splice_read+0x470/0x600 [ 193.232623][T16715] splice_direct_to_actor+0x26c/0x680 [ 193.238007][T16715] do_splice_direct+0xda/0x150 [ 193.242784][T16715] do_sendfile+0x380/0x650 [ 193.247216][T16715] __x64_sys_sendfile64+0x105/0x150 [ 193.252418][T16715] x64_sys_call+0xb39/0x2fb0 [ 193.257006][T16715] do_syscall_64+0xd2/0x200 [ 193.261508][T16715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.267404][T16715] [ 193.269728][T16715] value changed: 0x0000000000000c0e -> 0x0000000000000c15 [ 193.276829][T16715] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.279147][T16715] Reported by Kernel Concurrency Sanitizer on: [ 193.285313][T16715] CPU: 0 UID: 0 PID: 16715 Comm: syz.8.4901 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 193.296083][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.306155][T16715] ================================================================== [ 193.368580][ T5808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.480898][ T5808] bridge_slave_1: left allmulticast mode [ 193.486573][ T5808] bridge_slave_1: left promiscuous mode [ 193.492391][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.530196][ T5808] bridge_slave_0: left allmulticast mode [ 193.535869][ T5808] bridge_slave_0: left promiscuous mode [ 193.541609][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.684290][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.709296][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.720685][ T5808] bond0 (unregistering): Released all slaves [ 193.780470][ T5808] hsr_slave_0: left promiscuous mode [ 193.786768][ T5808] hsr_slave_1: left promiscuous mode [ 193.792437][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.800006][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.807632][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.815051][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.845339][ T5808] veth1_macvtap: left promiscuous mode [ 193.869452][ T5808] veth0_macvtap: left promiscuous mode [ 193.875053][ T5808] veth1_vlan: left promiscuous mode [ 193.880850][ T5808] veth0_vlan: left promiscuous mode [ 193.950918][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 193.960964][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 194.224193][ T5808] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.234067][ T5808] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.270632][ T5808] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.280402][ T5808] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.318287][ T5808] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.328160][ T5808] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.385518][ T5808] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.395368][ T5808] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.785968][ T5808] bridge_slave_1: left allmulticast mode [ 194.791639][ T5808] bridge_slave_1: left promiscuous mode [ 194.797421][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.805192][ T5808] bridge_slave_0: left allmulticast mode [ 194.810858][ T5808] bridge_slave_0: left promiscuous mode [ 194.816590][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.824845][ T5808] bridge_slave_1: left allmulticast mode [ 194.830553][ T5808] bridge_slave_1: left promiscuous mode [ 194.836207][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.843749][ T5808] bridge_slave_0: left allmulticast mode [ 194.849375][ T5808] bridge_slave_0: left promiscuous mode [ 194.855064][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.862997][ T5808] bridge_slave_1: left allmulticast mode [ 194.868635][ T5808] bridge_slave_1: left promiscuous mode [ 194.874317][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.881881][ T5808] bridge_slave_0: left allmulticast mode [ 194.887530][ T5808] bridge_slave_0: left promiscuous mode [ 194.893211][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.004819][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.014502][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.024056][ T5808] bond0 (unregistering): Released all slaves [ 195.032530][ T5808] bond1 (unregistering): (slave veth3): Releasing active interface [ 195.041658][ T5808] bond1 (unregistering): Released all slaves [ 195.050124][ T5808] bond2 (unregistering): (slave veth11): Releasing active interface [ 195.058158][ T5808] batadv1: entered promiscuous mode [ 195.065030][ T5808] bond2 (unregistering): (slave batadv1): Releasing active interface [ 195.073860][ T5808] bond2 (unregistering): Released all slaves [ 195.138684][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.147904][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.157048][ T5808] bond0 (unregistering): Released all slaves [ 195.165080][ T5808] bond1 (unregistering): (slave veth3): Releasing active interface [ 195.173324][ T5808] bond1 (unregistering): Released all slaves [ 195.181495][ T5808] bond2 (unregistering): Released all slaves [ 195.189501][ T5808] bond3 (unregistering): (slave veth5): Releasing active interface [ 195.197498][ T5808] batadv1: entered promiscuous mode [ 195.203630][ T5808] bond3 (unregistering): (slave batadv1): Releasing active interface [ 195.212734][ T5808] bond3 (unregistering): Released all slaves [ 195.309588][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.318791][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.327702][ T5808] bond0 (unregistering): Released all slaves [ 195.335501][ T5808] bond1 (unregistering): Released all slaves [ 195.387040][ T5808] tipc: Left network mode [ 195.391737][ T5808] tipc: Left network mode [ 195.399242][ T5808] hsr_slave_0: left promiscuous mode [ 195.404903][ T5808] hsr_slave_1: left promiscuous mode [ 195.410454][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.418087][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.425679][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.433302][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.442150][ T5808] hsr_slave_0: left promiscuous mode [ 195.447732][ T5808] hsr_slave_1: left promiscuous mode [ 195.453368][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.461049][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.470298][ T5808] hsr_slave_0: left promiscuous mode [ 195.475959][ T5808] hsr_slave_1: left promiscuous mode [ 195.481533][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.489179][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.499203][ T5808] veth1_macvtap: left promiscuous mode [ 195.504728][ T5808] veth0_macvtap: left promiscuous mode [ 195.510263][ T5808] veth1_vlan: left promiscuous mode [ 195.515492][ T5808] veth0_vlan: left promiscuous mode [ 195.581644][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 195.591404][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 195.641501][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 195.651932][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 195.702315][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 195.711492][ T5808] team0 (unregistering): Port device team_slave_0 removed