last executing test programs: 26m31.483908224s ago: executing program 3 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x1, [0x5]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @local, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 26m28.938063826s ago: executing program 3 (id=1120): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1108001, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x45, &(0x7f0000000500)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xf, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xf, 0x0, @opaque="d34c7d9bef6b81"}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'bond0\x00', 0x1}) 26m27.510167261s ago: executing program 3 (id=1126): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000000)="00050002", 0x4) connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 26m21.41666752s ago: executing program 3 (id=1139): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = eventfd2(0x76, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file4\x00', &(0x7f0000000280), 0x8040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps_rollup\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 26m17.568210457s ago: executing program 3 (id=1144): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r0, 0x0, &(0x7f00000003c0)=0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x60142, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000e662bd0002f14a200"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendfile(r5, r6, &(0x7f0000000000)=0x58c, 0x1001) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x0) 26m14.219230055s ago: executing program 3 (id=1150): syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000040000c9d8db6d043400"/41, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040), 0x0, 0x0, 0x208000, 0x0) eventfd2(0x0, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 25m58.118301119s ago: executing program 32 (id=1150): syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000040000c9d8db6d043400"/41, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f0000000040), 0x0, 0x0, 0x208000, 0x0) eventfd2(0x0, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") creat(&(0x7f0000000040)='./bus\x00', 0x0) 20.662285654s ago: executing program 5 (id=4332): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "570f60", 0x44, 0x2f, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0xd, 0x2, 0x1, 0x1, 0x5, 0x41}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0xf5, 0x3, 0x0, 0x1, 0x4, 0xea}, 0x2, {0xffffffff, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 20.615845103s ago: executing program 5 (id=4334): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x6000)=nil) preadv(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1, 0xc03, 0x0) 20.605901384s ago: executing program 5 (id=4336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x3d, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}}, 0x4010) 20.546493873s ago: executing program 5 (id=4337): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x10, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0x0, 0x750, &(0x7f0000000f40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 20.347575403s ago: executing program 5 (id=4343): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x40047101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 20.086373462s ago: executing program 5 (id=4358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) 20.086168772s ago: executing program 33 (id=4358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) 16.991413342s ago: executing program 2 (id=4399): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 16.713101351s ago: executing program 2 (id=4402): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x4044, &(0x7f0000000c00)={[{@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000001380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 16.14841197s ago: executing program 2 (id=4407): r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) 15.944946809s ago: executing program 2 (id=4410): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x29c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') mount$bpf(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x40000, 0x0) 15.531624568s ago: executing program 2 (id=4415): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f8, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x10, 0x3, 0x7c27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) 15.058354506s ago: executing program 2 (id=4421): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1004888, &(0x7f0000001f80)=ANY=[@ANYBLOB="756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c636f6465706167653d3737352c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c00615ccfa662"], 0x1, 0x26c, &(0x7f0000000340)="$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") open(&(0x7f0000000000)='./bus\x00', 0x14927e, 0x100) 15.028667856s ago: executing program 34 (id=4421): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1004888, &(0x7f0000001f80)=ANY=[@ANYBLOB="756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c636f6465706167653d3737352c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c00615ccfa662"], 0x1, 0x26c, &(0x7f0000000340)="$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") open(&(0x7f0000000000)='./bus\x00', 0x14927e, 0x100) 6.675327521s ago: executing program 6 (id=4493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 6.674825121s ago: executing program 6 (id=4494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x4, 0x12) 6.65145965s ago: executing program 6 (id=4497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.53543628s ago: executing program 6 (id=4501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') utime(&(0x7f00000000c0)='./file1\x00', 0x0) 6.142446489s ago: executing program 6 (id=4514): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 5.897958818s ago: executing program 6 (id=4523): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 5.874259958s ago: executing program 35 (id=4523): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 1.159204464s ago: executing program 8 (id=4702): bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 1.103607843s ago: executing program 8 (id=4705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000004c0), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 990.731893ms ago: executing program 8 (id=4711): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 926.410793ms ago: executing program 8 (id=4712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 914.757483ms ago: executing program 8 (id=4713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(0xffffffffffffffff) 763.999532ms ago: executing program 8 (id=4718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd"], 0x0) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x28, {0x28, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x6d, &(0x7f00000001c0)=""/109) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x250, 0xff, 0x9, 0x2, 0x40, 0xc2}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x20, 0xf, 0xca, "0bc201aab2012ad723cf03958f9ba16e73b20447604f4c565368f8718ee9a05ecaa5682650adb48a86efa034270cd43f640af4f8c167eaaeb55267a2b3ca005da833e53eb913268ea25393862ca5b54d10b050e6e8f96395a4911ffc1bb228a5bfe86f75dd527a8e2023b33a136b5434066ac496aef1a4f26b8a4dba5bb74dd51bcfc029460e86ac527cd41d679502ab9acb2fdd9fbef42d8e866163bd416811b2d14c0550338ec1813178a5c10b99c96bca08db6cdd9edda13418750c519069fe87d11bb6faf22fc905"}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x81, 0x2, "dc06"}, &(0x7f00000006c0)={0x20, 0x82, 0x1, '1'}, &(0x7f0000000700)={0x20, 0x83, 0x1, ')'}, &(0x7f0000000740)={0x20, 0x84, 0x4, "bea7df3b"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "846690"}}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) 563.438892ms ago: executing program 0 (id=4732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 434.171241ms ago: executing program 4 (id=4737): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000000), 0x20000000}, 0x20) 409.671481ms ago: executing program 4 (id=4738): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 378.869341ms ago: executing program 0 (id=4740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) 338.207701ms ago: executing program 4 (id=4741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 337.855731ms ago: executing program 7 (id=4742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 321.563491ms ago: executing program 0 (id=4744): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$eJzs3b9re1UUAPDz0uQl6JAKTiL4QAenL992dUmRFordJIM6qNgWpAlCCwV/YOzk6uLo6iIIbv4TLv4HgqvgZsHCk5f3XpPUNCbVtOr381l6e+85956bvlI65OSd54cnh1kcX3zyU3Q6STR60YvLJDajEbXPYkbviwAA/ssu8zx+zUur5CUR0VlfWQDAGq389/+7tZcEAKzZ62+8+dpOGhFZ1om94efn/eI/++Jrub5zHO/HII7icXTjKiK/Vo738jwfNbPCZrw0HJ33i8zh2z9U++/8EhHF/ltJfWSZ3q7y9w92t7LSVP6oqOOp6vxecf52dOPZOefvH+xuz8mPfhovvzhV/6Poxo/vxQcxiMNxEWV+NCI+3cqyV/Mvf/v4raK8Ij8Znffb47iJfOM+fy4AAAAAAAAAAAAAAAAAAAAAAPy/Pap657Rj3L+nmKr672xcFd+0IqttzvbnKfOvu/rc6A80yuOruj/P4yzL8ipwkt+M55rRfJhbAwAAAAAAAAAAAAAAAAAAwL/L2Ycfnbw7GByd/iODuhtA/bb+u+7Tm5p5IRYHtydnNarhgp1jo45JIhaWUVxi6Zp/r9oe3O2le+a2mr/5dul9vv7ru1eD1hIxf3NQ1ZLd+oy1o57p1A/J99MxaSx5Vjp/qXWar/T4pXOXuivfPX16PBgtiIlkUWGv/Fy+ZtVMcvMWaUTcsnOrGkylz8Z0ln+ei9+UP0l06wAAAAAAAAAAAAAAAAAAgLWavOl3zuLFwtRG3l5bWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwryaf/z8edKrpycy8waiKml1qTmbybr2UxunZA14PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ8QfAQAA//+C9FlJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 294.256401ms ago: executing program 1 (id=4745): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 266.364431ms ago: executing program 1 (id=4746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000007ccfb6fbdcec0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) 265.993361ms ago: executing program 1 (id=4747): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780), 0xffffffffffffff54) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 252.677861ms ago: executing program 7 (id=4748): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000000), 0x20000000}, 0x20) 207.363661ms ago: executing program 7 (id=4749): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xfdef) 206.891071ms ago: executing program 1 (id=4750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 190.217151ms ago: executing program 4 (id=4751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000004c0), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 126.37152ms ago: executing program 0 (id=4752): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 125.06668ms ago: executing program 7 (id=4753): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0xfffffffffffffdb9, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000, 0x100000000000000) 122.61492ms ago: executing program 1 (id=4754): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 111.950481ms ago: executing program 4 (id=4755): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#\\)(', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 30.57409ms ago: executing program 7 (id=4756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 30.31065ms ago: executing program 1 (id=4757): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 30.13543ms ago: executing program 0 (id=4758): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000055}, 0x40400c1) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) 29.85005ms ago: executing program 7 (id=4759): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) 356.31µs ago: executing program 4 (id=4760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000340)={'syzkaller0\x00'}) 0s ago: executing program 0 (id=4761): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) connect$vsock_stream(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): eaned up [ 1850.844672][T20027] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1851.050531][T20037] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1853.426301][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 1854.359392][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1856.908677][T20103] tc_dump_action: action bad kind [ 1858.081626][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1858.108758][T20105] EXT4-fs (loop4): Ignoring removed orlov option [ 1858.511098][T20105] EXT4-fs (loop4): 1 orphan inode deleted [ 1858.516928][T20105] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1858.535962][T20105] ext4 filesystem being mounted at /776/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.267500][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1864.920500][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1866.536987][T20169] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1866.544075][T20169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3878: bg 0: block 248: padding at end of block bitmap is not set [ 1866.558583][T20169] Quota error (device loop2): write_blk: dquota write failed [ 1866.565834][T20169] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1866.575564][T20169] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.3878: Failed to acquire dquot type 1 [ 1866.587250][T20169] EXT4-fs (loop2): 1 truncate cleaned up [ 1866.593086][T20169] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 1868.062044][T20173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1868.812705][T20200] EXT4-fs (loop2): Ignoring removed orlov option [ 1869.328056][T20200] EXT4-fs (loop2): 1 orphan inode deleted [ 1869.333751][T20200] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1869.351529][T20200] ext4 filesystem being mounted at /785/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1870.607096][T20222] EXT4-fs (loop1): Ignoring removed orlov option [ 1871.363727][T20222] EXT4-fs (loop1): 1 orphan inode deleted [ 1871.369415][T20222] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1871.387418][T20222] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1872.225359][T20229] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1872.270128][T20229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1872.361668][T20229] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1872.738927][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1872.934337][T20229] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1872.952074][T20229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1875.014655][ T288] attempt to access beyond end of device [ 1875.014655][ T288] loop2: rw=2049, want=45104, limit=40427 [ 1875.026198][T20244] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1875.120009][T20244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1875.159560][T20244] EXT4-fs (loop5): 1 truncate cleaned up [ 1875.165114][T20244] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1875.530502][T20259] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1875.537449][T20259] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3894: bg 0: block 248: padding at end of block bitmap is not set [ 1875.552072][T20259] Quota error (device loop4): write_blk: dquota write failed [ 1875.559838][T20259] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1875.569787][T20259] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.3894: Failed to acquire dquot type 1 [ 1875.582143][T20259] EXT4-fs (loop4): 1 truncate cleaned up [ 1875.600202][T20259] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 1875.640524][T20256] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1875.647539][T20256] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1875.671964][T20256] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1875.778510][T20256] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1875.785537][T20256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1877.671826][ T284] attempt to access beyond end of device [ 1877.671826][ T284] loop1: rw=2049, want=45104, limit=40427 [ 1877.850766][T20283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1878.106004][T20297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1878.112921][T20297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3903: bg 0: block 248: padding at end of block bitmap is not set [ 1878.127597][T20297] Quota error (device loop4): write_blk: dquota write failed [ 1878.134991][T20297] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1878.202241][T20297] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.3903: Failed to acquire dquot type 1 [ 1878.678019][T20297] EXT4-fs (loop4): 1 truncate cleaned up [ 1878.757156][T20297] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1880.363045][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3907'. [ 1880.570802][T20330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1880.577651][T20330] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3909: bg 0: block 248: padding at end of block bitmap is not set [ 1880.592319][T20330] Quota error (device loop5): write_blk: dquota write failed [ 1880.599659][T20330] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1880.609951][T20330] EXT4-fs error (device loop5): ext4_acquire_dquot:6219: comm syz.5.3909: Failed to acquire dquot type 1 [ 1880.621874][T20328] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1880.629183][T20330] EXT4-fs (loop5): 1 truncate cleaned up [ 1880.629747][T20328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1880.644605][T20330] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 1880.672257][T20328] EXT4-fs (loop2): 1 truncate cleaned up [ 1880.678482][T20328] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1882.181644][T20350] EXT4-fs (loop5): Ignoring removed orlov option [ 1882.218987][T20350] EXT4-fs (loop5): 1 orphan inode deleted [ 1882.224813][T20350] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1882.242667][T20350] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1884.450978][T20377] exfat: Deprecated parameter 'utf8' [ 1884.456214][T20377] exfat: Unknown parameter 'eraors' [ 1884.797017][T20375] Alternate GPT is invalid, using primary GPT. [ 1884.803137][T20375] loop5: p1 p2 p3 [ 1885.344542][T18920] udevd[18920]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1885.357034][T18910] udevd[18910]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1885.388368][T18892] udevd[18892]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1885.421652][T18920] udevd[18920]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1885.433269][T18910] udevd[18910]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1885.446027][T18892] udevd[18892]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1885.472814][T20390] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1885.900740][T20403] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1886.000963][T20403] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3923: bg 0: block 248: padding at end of block bitmap is not set [ 1886.015878][T20403] Quota error (device loop0): write_blk: dquota write failed [ 1886.024046][T20403] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1886.034167][T20403] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.3923: Failed to acquire dquot type 1 [ 1886.046216][T20403] EXT4-fs (loop0): 1 truncate cleaned up [ 1886.052202][T20403] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 1886.130779][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1887.080118][T20423] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1887.087243][T20423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1887.149243][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1887.347055][T20426] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1887.422112][T20426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1887.461647][T20423] EXT4-fs (loop0): 1 truncate cleaned up [ 1887.473317][T20423] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1887.492307][T20426] EXT4-fs (loop1): 1 truncate cleaned up [ 1887.502127][T20426] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1888.930811][T20450] exfat: Deprecated parameter 'utf8' [ 1888.936027][T20450] exfat: Unknown parameter 'eraors' [ 1889.603388][T20450] Alternate GPT is invalid, using primary GPT. [ 1889.610069][T20450] loop2: p1 p2 p3 [ 1892.357063][T20469] EXT4-fs (loop1): Ignoring removed orlov option [ 1892.688734][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 1892.799404][T20477] EXT4-fs (loop0): Ignoring removed orlov option [ 1892.939182][T20469] EXT4-fs: failed to create workqueue [ 1892.944734][T20469] EXT4-fs (loop1): mount failed [ 1893.446244][T20477] EXT4-fs (loop0): 1 orphan inode deleted [ 1893.451886][T20477] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1893.469622][T20477] ext4 filesystem being mounted at /795/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1894.210629][T18910] udevd[18910]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1894.232818][T18920] udevd[18920]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1894.233107][T18892] udevd[18892]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1894.372925][T18920] udevd[18920]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1894.372961][T18921] udevd[18921]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1894.384462][T18892] udevd[18892]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1895.510157][T20520] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1895.518957][T20520] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3944: bg 0: block 248: padding at end of block bitmap is not set [ 1895.585507][T20520] Quota error (device loop2): write_blk: dquota write failed [ 1895.637196][T20520] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1895.648263][T20520] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.3944: Failed to acquire dquot type 1 [ 1895.661718][T20520] EXT4-fs (loop2): 1 truncate cleaned up [ 1895.667415][T20520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1895.823037][T20527] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1895.832307][T20514] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1896.360171][T20514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1896.394076][T20527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1896.416856][T20527] EXT4-fs (loop5): 1 truncate cleaned up [ 1896.423483][T20527] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1897.042299][T20514] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1897.074680][T20514] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1897.081696][T20514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1899.000609][ T285] attempt to access beyond end of device [ 1899.000609][ T285] loop4: rw=2049, want=45104, limit=40427 [ 1899.687294][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 1899.710633][T20573] EXT4-fs (loop2): Ignoring removed orlov option [ 1900.774125][T20573] EXT4-fs (loop2): 1 orphan inode deleted [ 1900.779778][T20573] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1900.797455][T20573] ext4 filesystem being mounted at /801/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1902.550678][T20606] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1902.557784][T20606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1903.534842][T20606] EXT4-fs (loop2): 1 truncate cleaned up [ 1903.619386][T20606] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1904.303905][T20620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1905.722436][T20630] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1905.728656][T20630] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1906.132019][T20630] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1906.187620][T20630] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1906.197718][T20630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1909.532094][ T288] attempt to access beyond end of device [ 1909.532094][ T288] loop2: rw=2049, want=45104, limit=40427 [ 1914.069740][T20720] EXT4-fs (loop2): Ignoring removed orlov option [ 1914.213646][T20720] EXT4-fs (loop2): 1 orphan inode deleted [ 1914.219388][T20720] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1914.237341][T20720] ext4 filesystem being mounted at /806/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1916.650964][T20749] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1916.675836][T20749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1916.736790][T20749] EXT4-fs (loop0): 1 truncate cleaned up [ 1916.950194][T20749] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1917.033327][T20760] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1917.043638][T20760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1917.085954][T20760] EXT4-fs (loop1): 1 truncate cleaned up [ 1917.091897][T20760] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1918.588397][T20772] EXT4-fs (loop4): Ignoring removed orlov option [ 1918.771159][T20772] EXT4-fs (loop4): 1 orphan inode deleted [ 1918.776770][T20772] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1918.794650][T20772] ext4 filesystem being mounted at /795/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1922.305608][T20793] EXT4-fs (loop2): Ignoring removed orlov option [ 1922.345271][T20793] EXT4-fs (loop2): 1 orphan inode deleted [ 1922.351082][T20793] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1922.676466][T20793] ext4 filesystem being mounted at /809/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1923.154623][T20809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1925.062648][T20832] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1925.460085][T20838] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1925.470039][T20838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1925.483066][T20838] EXT4-fs (loop2): 1 truncate cleaned up [ 1925.509376][T20838] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1925.569639][T20829] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1925.575944][T20829] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1925.678792][T20829] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1925.720085][T20846] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1925.728037][T20846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1926.014369][T20829] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1926.028497][T20846] EXT4-fs (loop1): 1 truncate cleaned up [ 1926.038150][T20829] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1926.049032][T20846] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1927.149889][T20859] EXT4-fs (loop2): Ignoring removed orlov option [ 1927.789782][ T6017] attempt to access beyond end of device [ 1927.789782][ T6017] loop5: rw=2049, want=45104, limit=40427 [ 1927.891034][T20859] EXT4-fs (loop2): 1 orphan inode deleted [ 1927.896656][T20859] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1927.914531][T20859] ext4 filesystem being mounted at /813/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1930.993820][T20900] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1932.126406][T20914] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1932.142159][T20914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1932.154148][T20914] EXT4-fs (loop5): 1 truncate cleaned up [ 1932.160091][T20914] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1933.095094][T20932] EXT4-fs (loop2): Ignoring removed orlov option [ 1933.965580][T20932] EXT4-fs (loop2): 1 orphan inode deleted [ 1933.971263][T20932] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1933.989038][T20932] ext4 filesystem being mounted at /815/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1934.741656][T20944] EXT4-fs (loop4): Ignoring removed orlov option [ 1934.873931][T20944] EXT4-fs (loop4): 1 orphan inode deleted [ 1934.879574][T20944] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1934.897114][T20944] ext4 filesystem being mounted at /799/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1935.286523][T20948] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1938.791051][T20997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1939.030797][T21005] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 1939.042345][T21005] ext4 filesystem being mounted at /821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1940.297481][T21028] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1940.319374][T21028] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1940.331247][T21028] EXT4-fs (loop5): 1 truncate cleaned up [ 1940.336939][T21028] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1941.021125][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1942.642126][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1943.629373][T21063] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1943.637578][T21063] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1943.823596][T21076] EXT4-fs (loop5): Ignoring removed orlov option [ 1943.885018][T21063] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1943.984194][T21076] EXT4-fs (loop5): 1 orphan inode deleted [ 1944.018630][T21076] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1944.036554][T21076] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1944.219681][T21063] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1944.229317][T21063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1945.480332][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1946.257981][ T285] attempt to access beyond end of device [ 1946.257981][ T285] loop4: rw=2049, want=45104, limit=40427 [ 1946.720235][T21123] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1950.592298][T21160] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1950.665994][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1950.951587][T21160] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1950.987946][T21160] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1951.018390][T21160] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1951.025439][T21160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1951.712084][T21187] EXT4-fs (loop2): Ignoring removed orlov option [ 1952.285317][T21187] EXT4-fs (loop2): 1 orphan inode deleted [ 1952.292876][T21187] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1952.310959][T21187] ext4 filesystem being mounted at /830/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1956.925147][ T284] attempt to access beyond end of device [ 1956.925147][ T284] loop1: rw=2049, want=45104, limit=40427 [ 1956.930831][T21240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1963.673019][T21307] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1963.686591][T21307] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1964.243651][T21307] EXT4-fs (loop0): 1 truncate cleaned up [ 1964.249196][T21307] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1966.576437][ T24] audit: type=1326 audit(1738346849.100:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.645866][ T24] audit: type=1326 audit(1738346849.130:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.676013][ T24] audit: type=1326 audit(1738346849.130:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.707011][ T24] audit: type=1326 audit(1738346849.130:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.731286][ T24] audit: type=1326 audit(1738346849.130:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.755883][ T24] audit: type=1326 audit(1738346849.130:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.779526][ T24] audit: type=1326 audit(1738346849.130:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.802787][ T24] audit: type=1326 audit(1738346849.130:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.826179][ T24] audit: type=1326 audit(1738346849.130:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1966.850081][ T24] audit: type=1326 audit(1738346849.130:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.0.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1967.979632][T21378] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1967.987015][T21378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1968.471584][T21378] EXT4-fs (loop1): 1 truncate cleaned up [ 1968.477079][T21378] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1969.540062][T21393] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1969.547372][T21393] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1969.559705][T21393] EXT4-fs (loop5): 1 truncate cleaned up [ 1969.565175][T21393] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1974.446453][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 1974.446849][ T24] audit: type=1326 audit(1738346856.170:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1974.491557][ T24] audit: type=1326 audit(1738346856.170:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bb061da9 code=0x7ffc0000 [ 1976.581685][T21453] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1976.779468][T21461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.932476][T21463] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1976.949456][T21463] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1976.966500][T21463] EXT4-fs (loop2): 1 truncate cleaned up [ 1976.972393][T21463] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1980.219564][T21499] exfat: Deprecated parameter 'utf8' [ 1980.224705][T21499] exfat: Unknown parameter 'eraors' [ 1981.352150][T21513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1981.822354][T21486] Alternate GPT is invalid, using primary GPT. [ 1981.911423][T21486] loop2: p1 p2 p3 [ 1982.484465][ T94] Alternate GPT is invalid, using primary GPT. [ 1982.499433][ T94] loop2: p1 p2 p3 [ 1983.798670][T21526] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1983.870925][T18910] print_req_error: 44 callbacks suppressed [ 1983.870943][T18910] blk_update_request: I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1983.910038][T18920] blk_update_request: I/O error, dev loop2, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1983.912376][T18910] blk_update_request: I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.932321][ T288] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1984.283390][T18892] blk_update_request: I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1984.450723][T18910] buffer_io_error: 38 callbacks suppressed [ 1984.450736][T18910] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 1984.465054][T18910] blk_update_request: I/O error, dev loop2, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.519376][T18910] Buffer I/O error on dev loop2p1, logical block 9, async page read [ 1984.923280][T18910] blk_update_request: I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1984.937133][T18920] blk_update_request: I/O error, dev loop2, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1984.950806][T18892] blk_update_request: I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1984.965953][T18910] blk_update_request: I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1985.003862][T18910] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 1985.011979][T18910] blk_update_request: I/O error, dev loop2, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1985.023087][T18910] Buffer I/O error on dev loop2p1, logical block 9, async page read [ 1985.039429][T18910] Buffer I/O error on dev loop2p1, logical block 10, async page read [ 1985.047705][T18920] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 1985.061440][T18892] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 1985.069509][T18910] Buffer I/O error on dev loop2p1, logical block 11, async page read [ 1985.077732][T18920] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 1985.078103][T21545] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1985.086511][T18892] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 1985.101091][T21545] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1985.640555][T21545] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1985.711736][T21569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1986.516737][T21545] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1986.526410][T21545] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1987.925417][ T6017] attempt to access beyond end of device [ 1987.925417][ T6017] loop5: rw=2049, want=45104, limit=40427 [ 1987.970709][T21594] EXT4-fs (loop0): Ignoring removed orlov option [ 1987.984047][T21591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1988.063500][T21594] EXT4-fs (loop0): 1 orphan inode deleted [ 1988.069304][T21594] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1988.086828][T21594] ext4 filesystem being mounted at /846/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.130644][T21591] EXT4-fs (loop4): 1 truncate cleaned up [ 1988.235741][T21591] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota, [ 1988.650829][T21605] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1989.399582][T21616] exfat: Deprecated parameter 'utf8' [ 1989.404904][T21616] exfat: Unknown parameter 'eraors' [ 1989.663523][T21616] Alternate GPT is invalid, using primary GPT. [ 1989.669748][T21616] loop2: p1 p2 p3 [ 1989.722176][T21622] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1989.752730][T21622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1989.767419][T21622] EXT4-fs (loop1): 1 truncate cleaned up [ 1989.773060][T21622] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1990.908080][T21547] udevd[21547]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1990.931824][T21638] EXT4-fs (loop5): Ignoring removed orlov option [ 1990.960893][T18910] udevd[18910]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1991.122544][T18921] udevd[18921]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1991.149682][T21638] EXT4-fs (loop5): 1 orphan inode deleted [ 1991.155313][T21638] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1991.173132][T21638] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1992.082981][T21645] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1992.100312][T21645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1992.225791][T18910] udevd[18910]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1992.240870][T18892] udevd[18892]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1992.245506][T21645] EXT4-fs (loop4): 1 truncate cleaned up [ 1992.257468][T21547] udevd[21547]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1992.542893][T21645] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1993.363224][T21671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1993.423706][T21675] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1993.431261][T21687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.700892][T21698] overlayfs: failed to resolve './file1': -2 [ 1994.739327][ T24] audit: type=1326 audit(1738346877.250:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1994.805493][ T24] audit: type=1326 audit(1738346877.250:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1994.829451][ T24] audit: type=1326 audit(1738346877.260:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1994.875707][ T24] audit: type=1326 audit(1738346877.260:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1994.900506][ T24] audit: type=1326 audit(1738346877.260:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1995.112868][T21711] EXT4-fs (loop2): Ignoring removed orlov option [ 1995.900797][T21711] EXT4-fs (loop2): 1 orphan inode deleted [ 1995.906397][T21711] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 1995.924161][T21711] ext4 filesystem being mounted at /854/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1996.341728][ T24] audit: type=1326 audit(1738346877.260:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1996.521426][ T24] audit: type=1326 audit(1738346877.260:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1996.564835][ T24] audit: type=1326 audit(1738346877.260:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1996.588780][ T24] audit: type=1326 audit(1738346877.260:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1996.615274][ T24] audit: type=1326 audit(1738346877.260:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21702 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f87864da9 code=0x7ffc0000 [ 1996.674030][T20107] tipc: Left network mode [ 1996.760716][T21729] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1996.835726][T21729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1996.883655][T21729] EXT4-fs (loop5): 1 truncate cleaned up [ 1996.889487][T21729] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 1996.920882][T21731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.927809][T21731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.935173][T21731] device bridge_slave_0 entered promiscuous mode [ 1996.942865][T21731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.949862][T21731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.957289][T21731] device bridge_slave_1 entered promiscuous mode [ 1997.557627][T21731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.564552][T21731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1997.571727][T21731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.576651][T21738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1997.578462][T21731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1997.606828][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1997.614472][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.621854][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.800308][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1997.815684][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1997.824862][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1998.299722][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1998.307318][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1998.326931][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.333839][ T7891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.341528][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1998.349693][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.356592][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.363895][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1998.372356][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1998.380961][T21731] device veth0_vlan entered promiscuous mode [ 1998.397237][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1998.405626][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1998.415910][T21731] device veth1_macvtap entered promiscuous mode [ 1998.427215][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1998.435301][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1998.443828][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1998.463456][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1998.508665][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1999.277982][T20107] device bridge_slave_1 left promiscuous mode [ 1999.285134][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.300555][T20107] device bridge_slave_0 left promiscuous mode [ 1999.311128][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.321492][T20107] device veth1_macvtap left promiscuous mode [ 1999.329844][T20107] device veth0_vlan left promiscuous mode [ 1999.956152][T21772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.965176][T21772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.972617][T21772] device bridge_slave_0 entered promiscuous mode [ 1999.979986][T21772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.986989][T21772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.994407][T21772] device bridge_slave_1 entered promiscuous mode [ 2000.048033][T21772] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.055008][T21772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2000.062118][T21772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.068862][T21772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.093466][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2000.101018][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.108155][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.117578][T20107] tipc: Left network mode [ 2000.123241][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2000.131597][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.138455][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.145967][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2000.154108][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.160975][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2000.175090][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2000.184470][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2000.200858][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2000.212641][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2000.220582][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2000.227804][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2000.240282][T21772] device veth0_vlan entered promiscuous mode [ 2000.251259][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2000.259333][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2000.268678][T21772] device veth1_macvtap entered promiscuous mode [ 2000.281033][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2000.288738][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2000.297187][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2000.308800][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2000.316982][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2000.757155][T21781] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2000.805502][T20107] device bridge_slave_1 left promiscuous mode [ 2000.855304][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.903184][T20107] device bridge_slave_0 left promiscuous mode [ 2000.926757][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.944119][T20107] device veth1_macvtap left promiscuous mode [ 2000.950494][T20107] device veth0_vlan left promiscuous mode [ 2013.075903][T21808] EXT4-fs (loop1): Ignoring removed orlov option [ 2014.368987][T21808] EXT4-fs (loop1): 1 orphan inode deleted [ 2014.374651][T21808] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 2014.392339][T21808] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2014.778259][ T7891] tipc: Left network mode [ 2014.913039][T21831] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 2014.938609][T21823] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.946790][T21831] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2014.959035][T21823] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.082260][T21823] device bridge_slave_0 entered promiscuous mode [ 2015.259305][T21831] EXT4-fs (loop0): 1 truncate cleaned up [ 2015.279397][T21831] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 2015.300762][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 2015.300777][ T24] audit: type=1326 audit(1738346897.830:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.342236][T21823] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.349096][T21823] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.379776][T21823] device bridge_slave_1 entered promiscuous mode [ 2015.405375][ T24] audit: type=1326 audit(1738346897.860:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.463117][ T24] audit: type=1326 audit(1738346897.860:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.487029][ T24] audit: type=1326 audit(1738346897.860:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.510598][ T24] audit: type=1326 audit(1738346897.860:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.536737][ T24] audit: type=1326 audit(1738346897.860:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.560624][ T24] audit: type=1326 audit(1738346897.860:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.607069][ T24] audit: type=1326 audit(1738346897.860:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.631809][ T24] audit: type=1326 audit(1738346897.860:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.748507][ T24] audit: type=1326 audit(1738346897.860:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21837 comm="syz.1.4217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e3705da9 code=0x7ffc0000 [ 2015.897035][T21841] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2015.918474][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2015.926164][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2016.350257][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2016.360489][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2016.368527][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.375438][T20107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.389632][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2016.397257][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2016.405571][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2016.585472][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.592384][T20107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.648854][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2016.656985][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2016.664948][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2016.672937][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2016.700280][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2016.708801][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2016.723910][T21823] device veth0_vlan entered promiscuous mode [ 2016.731302][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2016.739128][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2016.747455][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2016.755168][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2016.773134][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2016.781685][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2016.792234][T21823] device veth1_macvtap entered promiscuous mode [ 2016.803864][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2016.811698][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2016.820714][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2016.838141][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2016.849190][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2017.494657][T21863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2018.560678][ T7891] device bridge_slave_1 left promiscuous mode [ 2018.570573][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.579628][ T7891] device bridge_slave_0 left promiscuous mode [ 2018.585720][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.851977][ T7891] device veth1_macvtap left promiscuous mode [ 2018.867894][ T7891] device veth0_vlan left promiscuous mode [ 2020.307776][T21888] EXT4-fs (loop0): Ignoring removed orlov option [ 2020.430223][T21888] EXT4-fs (loop0): 1 orphan inode deleted [ 2020.435931][T21888] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 2020.454067][T21888] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2021.508958][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 2021.508972][ T24] audit: type=1326 audit(1738346904.030:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdecd4da9 code=0x7ffc0000 [ 2021.545138][ T24] audit: type=1326 audit(1738346904.030:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21901 comm="syz.2.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdecd4da9 code=0x7ffc0000 [ 2021.575097][T21905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2021.615307][T21883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.622522][T21883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.630206][T21883] device bridge_slave_0 entered promiscuous mode [ 2021.637285][T21883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.644698][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.652687][T21883] device bridge_slave_1 entered promiscuous mode [ 2021.720234][T21883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.727142][T21883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.734365][T21883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.741317][T21883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.767834][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2021.775624][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.787522][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.809477][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2021.817679][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2021.824639][T20107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2021.832732][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2021.840962][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.847835][T20107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2021.855349][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2021.863646][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2021.962705][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2021.977067][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2021.989176][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2021.999183][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2022.010641][T21883] device veth0_vlan entered promiscuous mode [ 2022.027218][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2022.049868][T21883] device veth1_macvtap entered promiscuous mode [ 2022.064949][ T7891] tipc: Left network mode [ 2022.096406][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2022.121700][T20107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2022.257923][T21918] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2022.272522][T21918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2022.291491][T21918] EXT4-fs (loop2): 1 truncate cleaned up [ 2022.297174][T21918] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 2022.734484][T21924] overlayfs: failed to resolve './file0': -2 [ 2023.018742][ T7891] device bridge_slave_1 left promiscuous mode [ 2023.026601][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.211419][ T7891] device bridge_slave_0 left promiscuous mode [ 2023.217516][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.232246][ T7891] device veth1_macvtap left promiscuous mode [ 2023.238282][ T7891] device veth0_vlan left promiscuous mode [ 2024.862059][ T24] audit: type=1326 audit(1738346907.190:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.036008][ T24] audit: type=1326 audit(1738346907.190:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.053270][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 2025.084813][T21954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.092954][ T24] audit: type=1326 audit(1738346907.200:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.124202][T21954] device bridge_slave_0 entered promiscuous mode [ 2025.130354][ T24] audit: type=1326 audit(1738346907.200:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.130374][ T24] audit: type=1326 audit(1738346907.200:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.130392][ T24] audit: type=1326 audit(1738346907.210:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.130410][ T24] audit: type=1326 audit(1738346907.210:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.130438][ T24] audit: type=1326 audit(1738346907.210:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21946 comm="syz.0.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2025.656612][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2025.671106][T21954] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.684723][T21954] device bridge_slave_1 entered promiscuous mode [ 2025.787692][T21951] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 2025.802155][T21951] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 2025.836560][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2025.844550][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2025.854464][T21951] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2026.069369][T21951] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 2026.078323][T21951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2026.111793][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2026.194683][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2026.250723][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.257876][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2026.265292][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2026.311973][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2026.320130][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.327019][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2026.334674][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2026.342746][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2026.351151][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2026.362058][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2026.951575][T21984] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 2026.966466][T21984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2026.980998][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2026.989869][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2026.999073][T21954] device veth0_vlan entered promiscuous mode [ 2027.008741][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2027.016607][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2027.026223][T21984] EXT4-fs (loop0): 1 truncate cleaned up [ 2027.126755][T21984] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 2027.144958][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2027.166624][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2027.197160][T21954] device veth1_macvtap entered promiscuous mode [ 2027.231203][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2027.239144][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2027.247727][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2027.351838][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2027.377740][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2027.433653][T21823] attempt to access beyond end of device [ 2027.433653][T21823] loop2: rw=2049, want=45104, limit=40427 [ 2027.648306][T21995] EXT4-fs (loop1): Ignoring removed orlov option [ 2027.670006][ T7891] device bridge_slave_1 left promiscuous mode [ 2027.676664][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.684687][T21995] EXT4-fs (loop1): 1 orphan inode deleted [ 2027.692960][ T7891] device bridge_slave_0 left promiscuous mode [ 2027.701781][T21995] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota, [ 2027.702473][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.727687][ T7891] device veth1_macvtap left promiscuous mode [ 2027.733672][ T7891] device veth0_vlan left promiscuous mode [ 2027.763570][T21995] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2027.997078][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 2027.997094][ T24] audit: type=1326 audit(1738346910.520:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22005 comm="syz.4.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0ba73da9 code=0x7ffc0000 [ 2028.075304][ T24] audit: type=1326 audit(1738346910.560:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.0.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2028.116299][ T24] audit: type=1326 audit(1738346910.560:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.0.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2028.214836][ T24] audit: type=1326 audit(1738346910.560:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22005 comm="syz.4.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0ba73da9 code=0x7ffc0000 [ 2028.274513][ T24] audit: type=1326 audit(1738346910.560:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22005 comm="syz.4.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c0ba73da9 code=0x7ffc0000 [ 2028.298474][T22013] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2028.304191][ T24] audit: type=1326 audit(1738346910.560:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.0.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2028.342806][T22013] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,bsddf,data=ordered,commit=0x0000000000000005,i_version,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 2028.345414][ T24] audit: type=1326 audit(1738346910.560:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.0.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2028.671289][ T24] audit: type=1326 audit(1738346910.560:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22006 comm="syz.0.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb145090da9 code=0x7ffc0000 [ 2028.705059][ T24] audit: type=1326 audit(1738346910.560:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22005 comm="syz.4.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0ba73da9 code=0x7ffc0000 [ 2028.750342][ T24] audit: type=1326 audit(1738346910.560:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22005 comm="syz.4.4251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0ba73da9 code=0x7ffc0000 [ 2030.636236][T22037] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2030.667842][T22037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2030.681971][T22037] EXT4-fs (loop2): 1 truncate cleaned up [ 2030.860139][T22037] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue [ 2032.360496][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4273'. [ 2032.386058][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4273'. [ 2032.417134][T22076] mmap: syz.1.4271 (22076) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 2032.632473][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4282'. [ 2032.712672][T22091] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 2032.961370][T22126] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 2033.065814][ T24] kauditd_printk_skb: 84 callbacks suppressed [ 2033.065829][ T24] audit: type=1400 audit(1738346915.590:8024): avc: denied { getopt } for pid=22133 comm="syz.5.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2033.168038][T22140] 9pnet_virtio: no channels available for device syz [ 2033.197413][T22141] netlink: 'syz.4.4297': attribute type 10 has an invalid length. [ 2033.216523][ T24] audit: type=1400 audit(1738346915.740:8025): avc: denied { write } for pid=22142 comm="syz.5.4299" name="001" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2033.275975][ T24] audit: type=1400 audit(1738346915.770:8026): avc: denied { map } for pid=22142 comm="syz.5.4299" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2033.309903][T22146] overlayfs: upper fs does not support tmpfile. [ 2033.319644][T22146] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2033.330865][T22146] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 2033.344132][ T24] audit: type=1400 audit(1738346915.830:8027): avc: denied { mount } for pid=22145 comm="syz.5.4300" name="/" dev="ramfs" ino=67240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2033.370203][T22146] SELinux: (dev overlay, type overlay) has no security xattr handler [ 2033.398042][ T24] audit: type=1400 audit(1738346915.830:8028): avc: denied { mounton } for pid=22145 comm="syz.5.4300" path="/17/file0/bus" dev="ramfs" ino=67243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2033.457724][ T24] audit: type=1400 audit(1738346915.920:8029): avc: denied { unmount } for pid=21954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2033.550023][ T24] audit: type=1400 audit(1738346916.080:8030): avc: denied { append } for pid=22152 comm="syz.5.4303" name="ppp" dev="devtmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2033.629300][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 2033.702937][ T24] audit: type=1400 audit(1738346916.230:8031): avc: denied { execute } for pid=22161 comm="syz.1.4307" path="/22/bus" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2033.764780][ T24] audit: type=1400 audit(1738346916.290:8032): avc: denied { ioctl } for pid=22166 comm="syz.1.4309" path="socket:[67321]" dev="sockfs" ino=67321 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2034.015562][ T24] audit: type=1400 audit(1738346916.540:8033): avc: denied { write } for pid=22176 comm="syz.1.4312" name="usbmon6" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2034.474648][T22192] fuse: Invalid rootmode [ 2035.673489][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 2035.684702][T22239] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 2035.844056][T22243] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue [ 2036.643035][T22305] device syzkaller0 entered promiscuous mode [ 2036.667577][T22305] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2036.686522][T22298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.696519][T22298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.704782][T22298] device bridge_slave_0 entered promiscuous mode [ 2036.716161][T22298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.723473][T22298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.731093][T22298] device bridge_slave_1 entered promiscuous mode [ 2036.847187][T22298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.854177][T22298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.861270][T22298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.868028][T22298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.927071][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2036.990973][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.998393][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.038913][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2037.069576][T22335] EXT4-fs error (device loop2): ext4_orphan_get:1421: comm syz.2.4378: bad orphan inode 13 [ 2037.199590][T22335] ext4_test_bit(bit=12, block=4) = 1 [ 2037.205297][T22335] is_bad_inode(inode)=0 [ 2037.223555][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.230469][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2037.281880][T22341] FAT-fs (loop0): Directory bread(block 64) failed [ 2037.290600][T22335] NEXT_ORPHAN(inode)=0 [ 2037.319647][T22335] max_ino=32 [ 2037.331109][T22341] FAT-fs (loop0): Directory bread(block 65) failed [ 2037.341349][T22335] i_nlink=1 [ 2037.344416][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2037.352605][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.354836][T22335] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2037.359472][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.375277][T22298] device veth0_vlan entered promiscuous mode [ 2037.381626][T22341] FAT-fs (loop0): Directory bread(block 66) failed [ 2037.388072][T22341] FAT-fs (loop0): Directory bread(block 67) failed [ 2037.395384][ T613] device bridge_slave_1 left promiscuous mode [ 2037.402290][ T613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.409692][T22341] FAT-fs (loop0): Directory bread(block 68) failed [ 2037.425035][T22341] FAT-fs (loop0): Directory bread(block 69) failed [ 2037.431872][T22335] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz.2.4378: Unrecognised inode hash code 20 [ 2037.443607][ T613] device bridge_slave_0 left promiscuous mode [ 2037.453838][ T613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.461230][T22341] FAT-fs (loop0): Directory bread(block 70) failed [ 2037.471747][T22335] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.4378: Corrupt directory, running e2fsck is recommended [ 2037.476012][T22341] FAT-fs (loop0): Directory bread(block 71) failed [ 2037.491932][ T613] device veth1_macvtap left promiscuous mode [ 2037.494125][T22335] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz.2.4378: Unrecognised inode hash code 20 [ 2037.498029][ T613] device veth0_vlan left promiscuous mode [ 2037.509380][T22341] FAT-fs (loop0): Directory bread(block 72) failed [ 2037.526295][T22341] FAT-fs (loop0): Directory bread(block 73) failed [ 2037.541448][T22335] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.4378: Corrupt directory, running e2fsck is recommended [ 2037.554854][T22335] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 13: comm syz.2.4378: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 2037.576199][T22344] EXT4-fs error (device loop2): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.2.4378: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 2037.666752][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2037.674817][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2037.683227][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2037.691875][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2037.699988][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.708244][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.710054][T22348] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2037.717187][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.731347][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.734395][T22348] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue [ 2037.746415][T22298] device veth1_macvtap entered promiscuous mode [ 2037.756332][T22350] exfat: Unknown parameter 'keep_last_dots' [ 2037.767275][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.777172][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.778389][T22348] EXT4-fs error (device loop4): ext4_empty_dir:3092: inode #12: block 80: comm syz.4.4381: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2037.791682][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2037.811772][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2037.820120][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2037.827722][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2037.835869][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2037.844174][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2037.859456][T22354] EXT4-fs (loop0): Ignoring removed bh option [ 2037.866789][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2037.876580][T22348] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.4381: directory missing '..' [ 2037.899836][T22354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 2037.909156][T22354] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.4383: lblock 2 mapped to illegal pblock 2 (length 1) [ 2037.924678][T22354] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.4383: lblock 0 mapped to illegal pblock 48 (length 1) [ 2037.940605][T22354] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.4383: Failed to acquire dquot type 0 [ 2037.957896][T22354] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 2037.968337][T22354] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.4383: mark_inode_dirty error [ 2037.980009][T22354] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 2037.990744][T22354] EXT4-fs (loop0): 1 orphan inode deleted [ 2037.996638][T22354] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue [ 2038.009362][ T111] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 2038.026617][ T111] EXT4-fs error (device loop0): ext4_release_dquot:6242: comm kworker/u4:2: Failed to release dquot type 0 [ 2038.041674][T22354] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz.0.4383: Invalid inode table block 1 in block_group 0 [ 2038.054681][T22354] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5900: Corrupt filesystem [ 2038.066926][T22354] EXT4-fs error (device loop0): ext4_quota_off:6521: inode #3: comm syz.0.4383: mark_inode_dirty error [ 2038.089791][T22364] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2038.141371][T22364] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 2038.250716][T22372] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2038.286030][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 2038.286051][ T24] audit: type=1400 audit(1738346920.810:8046): avc: denied { create } for pid=22363 comm="syz.1.4385" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2038.357864][T22364] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 2038.415378][ T24] audit: type=1400 audit(1738346920.920:8047): avc: denied { open } for pid=22368 comm="syz.6.4388" path="/1/file2/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2038.994071][T22399] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2210: inode #12: comm syz.6.4396: corrupted in-inode xattr [ 2039.007197][T22399] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.4396: couldn't read orphan inode 12 (err -117) [ 2039.023229][T22380] overlayfs: statfs failed on './file0' [ 2039.029589][T22399] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2039.279396][T22396] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2039.289294][T22396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2039.315802][T22396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2039.360100][T22396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2039.367067][T22396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2039.378680][T22410] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 2039.395447][ T24] audit: type=1400 audit(1738346921.920:8048): avc: denied { create } for pid=22395 comm="syz.1.4395" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2039.420216][T22407] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 2039.421310][T22410] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000, [ 2039.427381][T21772] attempt to access beyond end of device [ 2039.427381][T21772] loop1: rw=2049, want=40968, limit=40427 [ 2039.453872][T22407] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2039.474633][T22407] F2FS-fs (loop4): invalid crc value [ 2039.482139][T22407] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2039.506512][ T24] audit: type=1400 audit(1738346922.030:8049): avc: denied { mounton } for pid=22409 comm="syz.2.4399" path="/24/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2039.543589][T22416] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2039.577288][ T24] audit: type=1400 audit(1738346922.090:8050): avc: denied { unlink } for pid=21823 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2039.591156][T22407] F2FS-fs (loop4): Start checkpoint disabled! [ 2039.600687][ T24] audit: type=1400 audit(1738346922.090:8051): avc: denied { unlink } for pid=21823 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2039.606895][T22407] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2039.636314][ T24] audit: type=1400 audit(1738346922.100:8052): avc: denied { read } for pid=22415 comm="syz.6.4400" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2039.658815][T22407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2039.726776][ T24] audit: type=1400 audit(1738346922.250:8053): avc: denied { ioctl } for pid=22415 comm="syz.6.4400" path="/3/file1/file1" dev="loop6" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2039.737609][T22416] EXT4-fs error (device loop6): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2039.766956][T22416] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2039.779704][T22416] EXT4-fs (loop6): This should not happen!! Data will be lost [ 2039.779704][T22416] [ 2039.783220][ T24] audit: type=1400 audit(1738346922.250:8054): avc: denied { ioctl } for pid=22406 comm="syz.4.4398" path="/27/file2/file2" dev="loop4" ino=10 ioctlcmd=0xf519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2039.796794][T22416] EXT4-fs (loop6): Total free blocks count 0 [ 2039.814206][ T6005] attempt to access beyond end of device [ 2039.814206][ T6005] loop4: rw=2049, want=40992, limit=40427 [ 2039.819664][T22416] EXT4-fs (loop6): Free/Dirty block details [ 2039.830860][T22428] exfat: Deprecated parameter 'namecase' [ 2039.837292][T22416] EXT4-fs (loop6): free_blocks=68451041280 [ 2039.841750][T22428] exfat: Unknown parameter 'keep_last_dots' [ 2039.853267][T22416] EXT4-fs (loop6): dirty_blocks=32 [ 2039.858199][T22416] EXT4-fs (loop6): Block reservation details [ 2039.864071][T22416] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 2039.891789][ T6005] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 2039.904298][ T6005] EXT4-fs (loop6): This should not happen!! Data will be lost [ 2039.904298][ T6005] [ 2039.951070][T22433] Quota error (device loop2): write_blk: dquota write failed [ 2039.958624][T22433] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.4402: Failed to acquire dquot type 1 [ 2039.970391][T22433] EXT4-fs (loop2): 1 truncate cleaned up [ 2039.975838][T22433] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,max_dir_size_kb=0x0000000000000005,,errors=continue [ 2039.989566][T22433] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2040.030010][T22431] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 2040.040035][T22431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 2040.047805][T22431] System zones: 1-12 [ 2040.052265][T22431] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2040.058501][T22431] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.4403: Inode bitmap for bg 0 marked uninitialized [ 2040.071267][T22431] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 2040.112207][T22431] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (3832!=33349) [ 2040.122002][ T6005] EXT4-fs error (device loop2): ext4_release_dquot:6242: comm kworker/u4:11: Failed to release dquot type 1 [ 2040.170961][T22440] EXT4-fs error (device loop6): ext4_acquire_dquot:6219: comm syz.6.4405: Failed to acquire dquot type 0 [ 2040.183709][T22440] EXT4-fs (loop6): 1 truncate cleaned up [ 2040.189182][T22440] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2040.241259][T22443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2040.298541][T22443] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2040.313914][T22450] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.4408: bad orphan inode 13 [ 2040.324224][T22450] ext4_test_bit(bit=12, block=4) = 1 [ 2040.329654][T22443] EXT4-fs (loop1): 1 truncate cleaned up [ 2040.330192][T22450] is_bad_inode(inode)=0 [ 2040.335153][T22443] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue [ 2040.356740][T22450] NEXT_ORPHAN(inode)=0 [ 2040.361030][T22450] max_ino=32 [ 2040.364054][T22450] i_nlink=1 [ 2040.367104][T22450] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2040.422298][T22446] F2FS-fs (loop4): invalid crc value [ 2040.423039][T22450] EXT4-fs warning (device loop0): dx_probe:806: inode #2: comm syz.0.4408: Unrecognised inode hash code 20 [ 2040.435556][T22446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2040.438689][T22450] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.4408: Corrupt directory, running e2fsck is recommended [ 2040.482628][T22458] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 2040.492897][T22446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 2040.496059][T22458] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2040.590236][T22458] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 2040.598505][T22458] EXT4-fs error (device loop2): ext4_dirty_inode:6110: inode #2: comm syz.2.4410: mark_inode_dirty error [ 2040.609916][T22458] EXT4-fs error (device loop2) in ext4_do_update_inode:5303: error 27 [ 2040.618121][T22458] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.4410: mark_inode_dirty error [ 2040.619031][T22463] attempt to access beyond end of device [ 2040.619031][T22463] loop4: rw=2049, want=45104, limit=40427 [ 2040.658045][T22471] EXT4-fs (loop1): Ignoring removed orlov option [ 2040.670666][T22462] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 2040.674650][T22471] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2040.710020][T22462] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2040.714791][T22471] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2040.736682][T21823] EXT4-fs error (device loop2): ext4_lookup:1827: inode #19: comm syz-executor: 'bus' linked to parent dir [ 2040.748986][T21823] EXT4-fs error (device loop2): ext4_lookup:1827: inode #19: comm syz-executor: 'bus' linked to parent dir [ 2040.761163][T22471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 2040.784821][T22471] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 2040.956143][T22485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2040.979977][T22485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2040.989492][T22485] System zones: 1-12 [ 2040.995901][T22485] EXT4-fs (loop4): 1 truncate cleaned up [ 2041.014392][T22483] F2FS-fs (loop0): fault_injection options not supported [ 2041.021428][T22485] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue [ 2041.042456][T22483] F2FS-fs (loop0): fault_type options not supported [ 2041.086251][T22488] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2041.096215][T22483] F2FS-fs (loop0): invalid crc value [ 2041.102381][T22488] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2041.117631][T22498] FAT-fs (loop1): Directory bread(block 64) failed [ 2041.124240][T22498] FAT-fs (loop1): Directory bread(block 65) failed [ 2041.131470][T22483] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2041.133589][T22498] FAT-fs (loop1): Directory bread(block 66) failed [ 2041.146186][T22498] FAT-fs (loop1): Directory bread(block 67) failed [ 2041.153139][T22498] FAT-fs (loop1): Directory bread(block 68) failed [ 2041.169814][T22498] FAT-fs (loop1): Directory bread(block 69) failed [ 2041.176303][T22498] FAT-fs (loop1): Directory bread(block 70) failed [ 2041.183148][T22498] FAT-fs (loop1): Directory bread(block 71) failed [ 2041.189565][T22498] FAT-fs (loop1): Directory bread(block 72) failed [ 2041.195905][T22498] FAT-fs (loop1): Directory bread(block 73) failed [ 2041.269588][T22483] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2041.352934][T22483] attempt to access beyond end of device [ 2041.352934][T22483] loop0: rw=10241, want=45104, limit=40427 [ 2041.457502][T21731] attempt to access beyond end of device [ 2041.457502][T21731] loop0: rw=2049, want=45112, limit=40427 [ 2041.476701][T22503] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2041.486938][ T6005] device bridge_slave_1 left promiscuous mode [ 2041.493450][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.502031][T22503] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2041.511366][T22503] F2FS-fs (loop4): invalid crc value [ 2041.516650][ T6005] device bridge_slave_0 left promiscuous mode [ 2041.523012][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.530999][ T6005] device veth1_macvtap left promiscuous mode [ 2041.537038][ T6005] device veth0_vlan left promiscuous mode [ 2041.537797][T22503] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2041.619320][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2041.628936][T22503] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2041.652380][T22503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2041.705109][T22509] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.714502][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.739755][T22509] device bridge_slave_0 entered promiscuous mode [ 2041.760359][T22509] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.781431][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.801161][T22509] device bridge_slave_1 entered promiscuous mode [ 2041.869246][ T5] usb 7-1: Using ep0 maxpacket: 8 [ 2041.874985][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2041.889775][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2041.914398][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2041.929530][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2041.947724][ T613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.954616][ T613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2041.962363][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2041.971017][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2041.979177][ T613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.986056][ T613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.008112][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2042.016257][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2042.025349][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2042.029375][ T5] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2042.049075][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2042.050274][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.062589][T22509] device veth0_vlan entered promiscuous mode [ 2042.072573][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2042.081786][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2042.089179][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2042.089955][ T8478] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2042.104552][ T5] usb 7-1: config 0 descriptor?? [ 2042.105569][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2042.118788][T22509] device veth1_macvtap entered promiscuous mode [ 2042.130747][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2042.145211][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2042.259320][T15229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2042.469562][T13137] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2042.519437][ T8478] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2042.530029][ T8478] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2042.539036][ T8478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.549268][T15229] usb 5-1: Using ep0 maxpacket: 8 [ 2042.559384][T22523] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2042.580108][ T8478] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2042.699391][T15229] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2042.859533][T13137] usb 8-1: config 0 has an invalid interface number: 160 but max is 0 [ 2042.867753][T13137] usb 8-1: config 0 has no interface number 0 [ 2042.873694][T13137] usb 8-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2042.884509][T15229] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2042.893356][T15229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.901112][T15229] usb 5-1: Product: syz [ 2042.905055][T15229] usb 5-1: Manufacturer: syz [ 2042.909563][T15229] usb 5-1: SerialNumber: syz [ 2042.914867][T15229] usb 5-1: config 0 descriptor?? [ 2043.059366][T13137] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 2043.068314][T13137] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.076099][T13137] usb 8-1: Product: syz [ 2043.080073][T13137] usb 8-1: Manufacturer: syz [ 2043.084607][T13137] usb 8-1: SerialNumber: syz [ 2043.089767][T13137] usb 8-1: config 0 descriptor?? [ 2043.129867][T13137] uvcvideo: Found UVC 0.00 device syz (05ac:8501) [ 2043.136505][T13137] uvcvideo: No valid video chain found. [ 2043.330889][T14995] usb 8-1: USB disconnect, device number 2 [ 2043.853488][T22188] usb 1-1: USB disconnect, device number 2 [ 2043.900051][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 2043.900067][ T24] audit: type=1400 audit(1738346926.430:8062): avc: denied { append } for pid=22542 comm="syz.0.4430" name="event2" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2044.072185][T22545] F2FS-fs (loop0): fault_type options not supported [ 2044.078743][T22545] F2FS-fs (loop0): Unrecognized mount option "barrier" or missing value [ 2044.109293][T14995] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2044.230915][T13137] usb 5-1: USB disconnect, device number 2 [ 2044.469346][T14995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2044.480358][T14995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2044.490308][T14995] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2044.503331][T14995] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2044.512436][T22188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2044.520287][T14995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.528854][T14995] usb 8-1: config 0 descriptor?? [ 2044.582375][T22557] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2044.590058][T22557] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2044.598886][T22557] F2FS-fs (loop1): invalid crc value [ 2044.605625][T22557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2044.637709][T22557] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2044.644668][T22557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2044.709491][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2044.719420][T13137] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2044.726950][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 2044.759260][T22188] usb 1-1: Using ep0 maxpacket: 32 [ 2044.799546][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2044.809364][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 2044.879336][T22188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2044.887186][T22188] usb 1-1: config 0 has no interface number 0 [ 2044.893113][T22188] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 2044.903308][T22188] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2044.979267][T13137] usb 5-1: Using ep0 maxpacket: 16 [ 2045.010409][T14995] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 2045.017885][T14995] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 2045.027161][T14995] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2045.059329][ T821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2045.079427][T22188] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2045.088274][T22188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.096213][T22188] usb 1-1: Product: syz [ 2045.100340][T22188] usb 1-1: Manufacturer: syz [ 2045.104815][T22188] usb 1-1: SerialNumber: syz [ 2045.109947][T22188] usb 1-1: config 0 descriptor?? [ 2045.119380][T13137] usb 5-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 2045.129470][T13137] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 2045.138216][T13137] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2045.151039][T13137] usb 5-1: New USB device found, idVendor=6161, idProduct=0015, bcdDevice= 0.00 [ 2045.159885][T13137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.168853][T13137] usb 5-1: config 0 descriptor?? [ 2045.219979][T13137] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2045.299285][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 2045.390232][T22188] usb 1-1: USB disconnect, device number 3 [ 2045.419316][ T821] usb 2-1: config 0 has no interfaces? [ 2045.579323][ T821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2045.588192][ T821] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2045.596636][ T821] usb 2-1: Product: syz [ 2045.600663][ T821] usb 2-1: Manufacturer: syz [ 2045.605034][ T821] usb 2-1: SerialNumber: syz [ 2045.610167][ T821] usb 2-1: config 0 descriptor?? [ 2045.773638][T22569] udc-core: couldn't find an available UDC or it's busy [ 2045.780515][T22569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2045.788073][T22569] udc-core: couldn't find an available UDC or it's busy [ 2045.795211][T22569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2045.969314][T22188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2046.189298][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0003: -71 [ 2046.229234][T22188] usb 1-1: Using ep0 maxpacket: 32 [ 2046.229345][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2046.244571][ T5] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 2046.257546][ T5] asix 7-1:0.0 eth1: register 'asix' at usb-dummy_hcd.6-1, ASIX AX88772 USB 2.0 Ethernet, aa:aa:aa:aa:aa:aa [ 2046.274774][ T5] usb 7-1: USB disconnect, device number 2 [ 2046.280662][ T5] asix 7-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.6-1, ASIX AX88772 USB 2.0 Ethernet [ 2046.369345][T22188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2046.377289][T22188] usb 1-1: config 0 has no interface number 0 [ 2046.383583][T22188] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 2046.394228][T22188] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2046.579329][T22188] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2046.588254][T22188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.596059][T22188] usb 1-1: Product: syz [ 2046.600048][T22188] usb 1-1: Manufacturer: syz [ 2046.604404][T22188] usb 1-1: SerialNumber: syz [ 2046.609588][T22188] usb 1-1: config 0 descriptor?? [ 2046.719276][ T5] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2046.840675][ T24] audit: type=1400 audit(1738346929.370:8063): avc: denied { ioctl } for pid=22580 comm="syz.7.4441" path="socket:[69017]" dev="sockfs" ino=69017 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2046.959246][ T5] usb 7-1: Using ep0 maxpacket: 32 [ 2047.079348][ T5] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2047.087560][ T5] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2047.096108][ T5] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.106178][ T5] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2047.115091][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2047.124552][ T5] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 2047.137204][ T5] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2047.146225][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.154856][ T5] usb 7-1: config 0 descriptor?? [ 2047.201222][ T24] audit: type=1400 audit(1738346929.730:8064): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2047.222630][T15229] usb 8-1: USB disconnect, device number 3 [ 2047.358668][ T5] usb 5-1: USB disconnect, device number 3 [ 2047.379385][T15229] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 2047.406009][T13137] usb 7-1: USB disconnect, device number 3 [ 2047.492312][T22591] EXT4-fs (loop4): Ignoring removed orlov option [ 2047.498653][T22591] EXT4-fs (loop4): Ignoring removed orlov option [ 2047.510394][T22591] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,orlov,orlov, [ 2047.531585][ T24] audit: type=1400 audit(1738346930.060:8065): avc: denied { mount } for pid=22590 comm="syz.4.4445" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2047.553544][ T24] audit: type=1400 audit(1738346930.060:8066): avc: denied { link } for pid=22590 comm="syz.4.4445" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2047.576347][ T24] audit: type=1400 audit(1738346930.060:8067): avc: denied { unmount } for pid=21883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2047.739303][T15229] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2047.750825][T22598] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 2047.757316][T22598] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2047.768044][T22598] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2047.802257][T22598] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2047.809179][T22598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2047.816038][ T8478] usb 2-1: USB disconnect, device number 2 [ 2047.869130][T22598] F2FS-fs (loop4): switch extent_cache option is not allowed [ 2047.869388][ T24] audit: type=1400 audit(1738346930.390:8068): avc: denied { remount } for pid=22597 comm="syz.4.4447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2047.929419][T15229] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 2047.938578][T15229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.947060][T15229] usb 8-1: Product: syz [ 2047.951292][T15229] usb 8-1: Manufacturer: syz [ 2047.955733][T15229] usb 8-1: SerialNumber: syz [ 2047.961133][T15229] usb 8-1: config 0 descriptor?? [ 2047.969356][T13137] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2048.083035][ T8478] usb 1-1: USB disconnect, device number 4 [ 2048.205565][ T5] usb 8-1: USB disconnect, device number 4 [ 2048.339314][T13137] usb 7-1: config index 0 descriptor too short (expected 240, got 36) [ 2048.347921][T13137] usb 7-1: config 0 has an invalid interface number: 178 but max is 0 [ 2048.356515][T13137] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.366765][T13137] usb 7-1: config 0 has no interface number 0 [ 2048.989430][T13137] usb 7-1: New USB device found, idVendor=4c94, idProduct=2388, bcdDevice=c6.b5 [ 2048.998414][T13137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.328102][T13137] usb 7-1: config 0 descriptor?? [ 2049.336364][T22673] device pim6reg1 entered promiscuous mode [ 2049.349284][T13137] usb 7-1: can't set config #0, error -71 [ 2049.355757][T13137] usb 7-1: USB disconnect, device number 4 [ 2049.389269][ T401] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2049.653342][T22714] device pim6reg1 entered promiscuous mode [ 2049.660621][T22716] device pim6reg1 entered promiscuous mode [ 2049.682230][T22718] device syzkaller0 entered promiscuous mode [ 2049.749312][ T401] usb 8-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x55, skipping [ 2049.813916][T22722] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 2049.840022][ T24] audit: type=1400 audit(1738346932.370:8069): avc: denied { setattr } for pid=22721 comm="syz.6.4501" name="work" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2049.878804][ T24] audit: type=1400 audit(1738346932.390:8070): avc: denied { write } for pid=22721 comm="syz.6.4501" name="work" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2049.879342][ T401] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2049.900485][ T24] audit: type=1400 audit(1738346932.390:8071): avc: denied { add_name } for pid=22721 comm="syz.6.4501" name="#103" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2049.900503][ T24] audit: type=1400 audit(1738346932.390:8072): avc: denied { remove_name } for pid=22721 comm="syz.6.4501" name="#103" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2049.900521][ T24] audit: type=1400 audit(1738346932.390:8073): avc: denied { rename } for pid=22721 comm="syz.6.4501" name="#103" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2049.900538][ T24] audit: type=1400 audit(1738346932.390:8074): avc: denied { unlink } for pid=22721 comm="syz.6.4501" name="#103" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2049.900556][ T24] audit: type=1400 audit(1738346932.390:8075): avc: denied { unlink } for pid=22721 comm="syz.6.4501" name="#104" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2049.910094][T22722] EXT4-fs error (device loop6): ext4_remount:5878: Abort forced by user [ 2050.031384][T22722] EXT4-fs (loop6): Remounting filesystem read-only [ 2050.033309][ T401] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2050.046403][ T401] usb 8-1: Manufacturer: syz [ 2050.050897][ T401] usb 8-1: SerialNumber: syz [ 2050.072764][ T401] usb 8-1: can't set config #36, error -71 [ 2050.083941][ T24] audit: type=1400 audit(1738346932.610:8076): avc: denied { read } for pid=22721 comm="syz.6.4501" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2050.092929][ T401] usb 8-1: USB disconnect, device number 5 [ 2050.127190][T22746] tipc: Started in network mode [ 2050.133181][T22298] EXT4-fs error (device loop6): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2050.144667][T22746] tipc: Own node identity 6, cluster identity 4711 [ 2050.144674][T22746] tipc: 32-bit node address hash set to 6 [ 2050.166931][ T24] audit: type=1400 audit(1738346932.650:8077): avc: denied { rmdir } for pid=22298 comm="syz-executor" name="work" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2050.194588][T22298] EXT4-fs error (device loop6): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2050.364052][T22770] device syzkaller0 entered promiscuous mode [ 2050.545665][T22792] device pim6reg1 entered promiscuous mode [ 2050.580829][T22777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.587814][T22777] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.595418][T22777] device bridge_slave_0 entered promiscuous mode [ 2050.602971][T22777] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.609951][T22777] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.617156][T22777] device bridge_slave_1 entered promiscuous mode [ 2050.730699][T22777] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.737583][T22777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.745090][T22777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.751964][T22777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.777394][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2050.793361][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.800872][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.859163][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2050.867538][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.869318][T14995] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2050.874450][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.888850][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2050.897071][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.903946][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.927595][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2050.935698][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2050.952340][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2050.964980][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2050.973604][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2050.981137][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2050.990056][T22777] device veth0_vlan entered promiscuous mode [ 2051.003570][T22777] device veth1_macvtap entered promiscuous mode [ 2051.016450][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2051.025057][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2051.034078][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2051.068031][T22830] tipc: Started in network mode [ 2051.072869][T13320] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 2051.072877][T22830] tipc: Own node identity 6, cluster identity 4711 [ 2051.072892][T22830] tipc: 32-bit node address hash set to 6 [ 2051.129420][T14995] usb 2-1: Using ep0 maxpacket: 16 [ 2051.249402][T14995] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 2051.257598][T14995] usb 2-1: config 0 has no interface number 0 [ 2051.339342][ T821] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 2051.449284][ T7571] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2051.459445][T14995] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 2051.468377][T14995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.476289][T14995] usb 2-1: Product: syz [ 2051.480492][T14995] usb 2-1: Manufacturer: syz [ 2051.484916][T14995] usb 2-1: SerialNumber: syz [ 2051.490530][T14995] usb 2-1: config 0 descriptor?? [ 2051.499444][T13320] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2051.507413][T13320] usb 1-1: config 0 has no interface number 0 [ 2051.513378][T13320] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2051.523839][T13320] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2051.534936][T13320] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 2051.545496][T13320] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2051.558333][T13320] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2051.567248][T13320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.576200][T13320] usb 1-1: config 0 descriptor?? [ 2051.609333][T22821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2051.616195][T22821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2051.623871][ T613] device bridge_slave_1 left promiscuous mode [ 2051.629915][ T613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.637244][ T613] device bridge_slave_0 left promiscuous mode [ 2051.643813][ T613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.651791][ T613] device veth1_macvtap left promiscuous mode [ 2051.657710][ T613] device veth0_vlan left promiscuous mode [ 2051.779352][T14995] uvcvideo: Found UVC 0.00 device syz (0408:4034) [ 2051.785685][ T821] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2051.793562][T14995] uvcvideo: No valid video chain found. [ 2051.798939][ T821] usb 5-1: config 0 has no interface number 0 [ 2051.806246][T14995] usb 2-1: USB disconnect, device number 3 [ 2051.812122][ T821] usb 5-1: config 0 interface 89 altsetting 16 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2051.825032][ T821] usb 5-1: config 0 interface 89 has no altsetting 0 [ 2051.851224][ T7571] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.853682][T15229] usb 1-1: USB disconnect, device number 5 [ 2051.862016][ T7571] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.878891][ T7571] usb 9-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2051.887881][ T7571] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.896961][ T7571] usb 9-1: config 0 descriptor?? [ 2052.009322][ T821] usb 5-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=94.bf [ 2052.018191][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.026705][ T821] usb 5-1: Product: syz [ 2052.030996][ T821] usb 5-1: Manufacturer: syz [ 2052.035801][ T821] usb 5-1: SerialNumber: syz [ 2052.041150][ T821] usb 5-1: config 0 descriptor?? [ 2052.069453][T22828] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2052.140749][T22841] udc-core: couldn't find an available UDC or it's busy [ 2052.147587][T22841] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2052.329299][T13137] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2052.339303][T14995] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2052.373078][ T821] usb 5-1: USB disconnect, device number 4 [ 2052.400277][ T7571] sony 0003:054C:024B.0002: unexpected long global item [ 2052.407250][ T7571] sony 0003:054C:024B.0002: parse failed [ 2052.413047][ T7571] sony: probe of 0003:054C:024B.0002 failed with error -22 [ 2052.605120][T22879] tipc: Started in network mode [ 2052.608566][T15229] usb 9-1: USB disconnect, device number 2 [ 2052.609888][T14995] usb 2-1: Using ep0 maxpacket: 16 [ 2052.620556][T22879] tipc: Own node identity 6, cluster identity 4711 [ 2052.626870][T22879] tipc: 32-bit node address hash set to 6 [ 2052.690005][T13137] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.701626][T13137] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2052.710775][T13137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.722058][T13137] usb 8-1: config 0 descriptor?? [ 2052.759326][T14995] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 2052.767805][T14995] usb 2-1: config 0 has no interface number 0 [ 2052.824745][T22895] device pim6reg1 entered promiscuous mode [ 2052.939319][T14995] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 2052.957793][T14995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.967228][T14995] usb 2-1: Product: syz [ 2052.971556][T14995] usb 2-1: Manufacturer: syz [ 2052.976061][T14995] usb 2-1: SerialNumber: syz [ 2052.987065][T14995] usb 2-1: config 0 descriptor?? [ 2053.035978][T22926] tipc: Started in network mode [ 2053.041071][T22926] tipc: Own node identity 6, cluster identity 4711 [ 2053.047609][T22926] tipc: 32-bit node address hash set to 6 [ 2053.059321][T13137] usbhid 8-1:0.0: can't add hid device: -71 [ 2053.066614][T13137] usbhid: probe of 8-1:0.0 failed with error -71 [ 2053.083360][T13137] usb 8-1: USB disconnect, device number 6 [ 2053.250975][T14995] uvcvideo: Found UVC 0.00 device syz (0408:4034) [ 2053.257459][T14995] uvcvideo: No valid video chain found. [ 2053.272867][T22953] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 2053.281171][T22953] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2053.295409][T22953] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 2053.309392][T22953] EXT4-fs error (device loop0): ext4_acquire_dquot:6219: comm syz.0.4608: Failed to acquire dquot type 1 [ 2053.337795][T22953] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4608: bg 0: block 40: padding at end of block bitmap is not set [ 2053.372847][T22953] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 2053.386150][T22953] EXT4-fs (loop0): 1 truncate cleaned up [ 2053.392048][T22953] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,,errors=continue [ 2053.460408][T14995] usb 2-1: USB disconnect, device number 4 [ 2053.534304][T22988] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2053.551744][T13137] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2053.789261][T13137] usb 8-1: Using ep0 maxpacket: 16 [ 2053.909349][T13137] usb 8-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.929738][T13137] usb 8-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2053.953029][T13137] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2053.959546][T13137] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 2053.974660][T13137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.983256][T13137] usb 8-1: config 0 descriptor?? [ 2054.097532][T23089] syz.4.4668[23089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2054.097591][T23089] syz.4.4668[23089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2054.560960][T13137] logitech 0003:046D:C71F.0003: hidraw0: USB HID v4.13 Device [HID 046d:c71f] on usb-dummy_hcd.7-1/input0 [ 2054.997826][T13320] usb 8-1: USB disconnect, device number 7 [ 2055.326211][T23181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2055.335268][T23181] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2055.404964][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 2055.404980][ T24] audit: type=1400 audit(1738346937.930:8108): avc: denied { watch_reads } for pid=23180 comm="syz.4.4710" path="/112" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2055.591455][T23210] device pim6reg1 entered promiscuous mode [ 2055.723762][ T24] audit: type=1400 audit(1738346938.250:8109): avc: denied { relabelfrom } for pid=23230 comm="syz.0.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2055.769733][ T24] audit: type=1400 audit(1738346938.280:8110): avc: denied { relabelto } for pid=23230 comm="syz.0.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2055.799482][T22188] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2055.888598][T23247] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4738'. [ 2056.039309][T22188] usb 9-1: Using ep0 maxpacket: 16 [ 2056.159408][T22188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2056.176040][T23275] hub 5-0:1.0: USB hub found [ 2056.180787][T23281] binfmt_misc: register: failed to install interpreter file ./file0 [ 2056.187743][T22188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2056.188881][T23275] hub 5-0:1.0: 1 port detected [ 2056.224294][T22188] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2056.247180][ T24] audit: type=1400 audit(1738346938.770:8111): avc: denied { setopt } for pid=23287 comm="syz.7.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2056.272665][T22188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.282240][T23288] ================================================================== [ 2056.290247][T23288] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 2056.299260][T23288] Read of size 1 at addr ffff8881265ad3d8 by task syz.7.4759/23288 [ 2056.306769][ T24] audit: type=1400 audit(1738346938.810:8112): avc: denied { bind } for pid=23295 comm="syz.0.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2056.306972][T23288] [ 2056.326458][ T24] audit: type=1400 audit(1738346938.810:8113): avc: denied { listen } for pid=23295 comm="syz.0.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2056.328430][T23288] CPU: 1 PID: 23288 Comm: syz.7.4759 Not tainted 5.10.233-syzkaller-00881-gfbe98d68b6b3 #0 [ 2056.351481][ T24] audit: type=1400 audit(1738346938.810:8114): avc: denied { connect } for pid=23295 comm="syz.0.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2056.357660][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2056.387175][T23288] Call Trace: [ 2056.390301][T23288] dump_stack_lvl+0x1e2/0x24b [ 2056.394806][T23288] ? printk+0xd1/0x111 [ 2056.398708][T23288] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2056.404008][T23288] ? wake_up_klogd+0xb8/0xf0 [ 2056.408429][T23288] ? panic+0x812/0x812 [ 2056.412337][T23288] print_address_description+0x81/0x3b0 [ 2056.417718][T23288] ? stack_trace_save+0x113/0x1c0 [ 2056.422576][T23288] kasan_report+0x179/0x1c0 [ 2056.426911][T23288] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 2056.433250][T23288] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 2056.439584][T23288] __asan_report_load1_noabort+0x14/0x20 [ 2056.445055][T23288] xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 2056.451219][T23288] ? ____kasan_kmalloc+0xed/0x110 [ 2056.456073][T23288] ? ____kasan_kmalloc+0xdb/0x110 [ 2056.460938][T23288] ? xfrm_policy_addr_delta+0x20b/0x330 [ 2056.466316][T23288] xfrm_policy_inexact_insert_node+0x917/0xb00 [ 2056.472309][T23288] ? xfrm_policy_inexact_alloc_bin+0x5ad/0x13f0 [ 2056.478388][T23288] xfrm_policy_inexact_alloc_chain+0x4ec/0xaf0 [ 2056.484385][T23288] xfrm_policy_inexact_insert+0x6a/0x1160 [ 2056.489926][T23288] ? __kasan_check_write+0x14/0x20 [ 2056.494870][T23288] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2056.499730][T23288] ? policy_hash_bysel+0x137/0x700 [ 2056.504765][T23288] xfrm_policy_insert+0xe7/0x940 [ 2056.509628][T23288] xfrm_add_policy+0x4f2/0x980 [ 2056.514226][T23288] ? cap_capable+0x1ce/0x270 [ 2056.518650][T23288] ? xfrm_dump_sa_done+0xc0/0xc0 [ 2056.523435][T23288] xfrm_user_rcv_msg+0x4e7/0x7c0 [ 2056.528387][T23288] ? xfrm_netlink_rcv+0x90/0x90 [ 2056.533062][T23288] ? stack_trace_save+0x113/0x1c0 [ 2056.537925][T23288] ? avc_has_perm_noaudit+0x240/0x240 [ 2056.543134][T23288] ? iov_iter_advance+0x258/0xb20 [ 2056.547987][T23288] netlink_rcv_skb+0x1cf/0x410 [ 2056.552590][T23288] ? xfrm_netlink_rcv+0x90/0x90 [ 2056.557274][T23288] ? netlink_ack+0xb30/0xb30 [ 2056.561700][T23288] ? mutex_trylock+0xa0/0xa0 [ 2056.566128][T23288] ? __netlink_lookup+0x37b/0x3a0 [ 2056.571081][T23288] xfrm_netlink_rcv+0x72/0x90 [ 2056.575600][T23288] netlink_unicast+0x8df/0xac0 [ 2056.580194][T23288] ? netlink_detachskb+0x90/0x90 [ 2056.585048][T23288] ? security_netlink_send+0x7b/0xa0 [ 2056.590098][T23288] netlink_sendmsg+0xa46/0xd00 [ 2056.594777][T23288] ? netlink_getsockopt+0x5c0/0x5c0 [ 2056.599809][T23288] ? security_socket_sendmsg+0x82/0xb0 [ 2056.605101][T23288] ? netlink_getsockopt+0x5c0/0x5c0 [ 2056.610138][T23288] ____sys_sendmsg+0x59e/0x8f0 [ 2056.614828][T23288] ? __sys_sendmsg_sock+0x40/0x40 [ 2056.619692][T23288] ? import_iovec+0xe5/0x120 [ 2056.624110][T23288] ___sys_sendmsg+0x252/0x2e0 [ 2056.628727][T23288] ? __sys_sendmsg+0x280/0x280 [ 2056.633377][T23288] ? percpu_counter_add_batch+0x13d/0x160 [ 2056.638890][T23288] ? __fdget+0x1bc/0x240 [ 2056.642966][T23288] __se_sys_sendmsg+0x1b1/0x280 [ 2056.647640][T23288] ? __x64_sys_sendmsg+0x90/0x90 [ 2056.652559][T23288] ? fpu__clear_all+0x20/0x20 [ 2056.657019][T23288] ? __kasan_check_read+0x11/0x20 [ 2056.661960][T23288] __x64_sys_sendmsg+0x7b/0x90 [ 2056.666583][T23288] do_syscall_64+0x34/0x70 [ 2056.670821][T23288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2056.676540][T23288] RIP: 0033:0x7f5c76f94da9 [ 2056.680802][T23288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2056.700247][T23288] RSP: 002b:00007f5c755ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2056.708477][T23288] RAX: ffffffffffffffda RBX: 00007f5c771adfa0 RCX: 00007f5c76f94da9 [ 2056.716289][T23288] RDX: 0000000000004000 RSI: 0000000020000580 RDI: 0000000000000005 [ 2056.724101][T23288] RBP: 00007f5c770162a0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.731914][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2056.739721][T23288] R13: 0000000000000000 R14: 00007f5c771adfa0 R15: 00007ffc044717c8 [ 2056.747542][T23288] [ 2056.749707][T23288] Allocated by task 23288: [ 2056.753965][T23288] ____kasan_kmalloc+0xdb/0x110 [ 2056.758649][T23288] __kasan_kmalloc+0x9/0x10 [ 2056.762989][T23288] __kmalloc+0x1aa/0x330 [ 2056.767064][T23288] sk_prot_alloc+0xbe/0x370 [ 2056.771401][T23288] sk_alloc+0x38/0x4d0 [ 2056.775311][T23288] pfkey_create+0x12c/0x620 [ 2056.779649][T23288] __sock_create+0x3a6/0x760 [ 2056.784074][T23288] __sys_socket+0x132/0x370 [ 2056.788588][T23288] __x64_sys_socket+0x7a/0x90 [ 2056.793203][T23288] do_syscall_64+0x34/0x70 [ 2056.797529][T23288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2056.803249][T23288] [ 2056.805424][T23288] Last potentially related work creation: [ 2056.811068][T23288] kasan_save_stack+0x3b/0x60 [ 2056.815588][T23288] __kasan_record_aux_stack+0xd3/0x100 [ 2056.820876][T23288] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2056.826521][T23288] kvfree_call_rcu+0x136/0x650 [ 2056.831120][T23288] drop_sysctl_table+0x311/0x450 [ 2056.835894][T23288] unregister_sysctl_table+0x76/0x120 [ 2056.841099][T23288] unregister_net_sysctl_table+0x15/0x20 [ 2056.846577][T23288] neigh_sysctl_unregister+0x78/0x90 [ 2056.851693][T23288] inetdev_event+0x7c1/0x1040 [ 2056.856213][T23288] raw_notifier_call_chain+0x8c/0xf0 [ 2056.861411][T23288] unregister_netdevice_many+0xde7/0x17d0 [ 2056.866966][T23288] sit_exit_batch_net+0x620/0x670 [ 2056.871907][T23288] cleanup_net+0x6e9/0xcb0 [ 2056.876176][T23288] process_one_work+0x6dc/0xbd0 [ 2056.880849][T23288] worker_thread+0xaea/0x1510 [ 2056.885372][T23288] kthread+0x34b/0x3d0 [ 2056.889281][T23288] ret_from_fork+0x1f/0x30 [ 2056.893521][T23288] [ 2056.895686][T23288] Second to last potentially related work creation: [ 2056.902244][T23288] kasan_save_stack+0x3b/0x60 [ 2056.906752][T23288] __kasan_record_aux_stack+0xd3/0x100 [ 2056.912130][T23288] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2056.917771][T23288] call_rcu+0x135/0x11f0 [ 2056.921853][T23288] in6_dev_finish_destroy+0x144/0x180 [ 2056.927059][T23288] ip6_route_dev_notify+0x6c4/0x800 [ 2056.932176][T23288] raw_notifier_call_chain+0x8c/0xf0 [ 2056.937301][T23288] unregister_netdevice_many+0xde7/0x17d0 [ 2056.942857][T23288] default_device_exit_batch+0x38a/0x3f0 [ 2056.948317][T23288] cleanup_net+0x6e9/0xcb0 [ 2056.952576][T23288] process_one_work+0x6dc/0xbd0 [ 2056.957259][T23288] worker_thread+0xaea/0x1510 [ 2056.961773][T23288] kthread+0x34b/0x3d0 [ 2056.965694][T23288] ret_from_fork+0x1f/0x30 [ 2056.969937][T23288] [ 2056.972100][T23288] The buggy address belongs to the object at ffff8881265ad000 [ 2056.972100][T23288] which belongs to the cache kmalloc-1k of size 1024 [ 2056.986080][T23288] The buggy address is located 984 bytes inside of [ 2056.986080][T23288] 1024-byte region [ffff8881265ad000, ffff8881265ad400) [ 2056.999632][T23288] The buggy address belongs to the page: [ 2057.005212][T23288] page:ffffea0004996a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881265a8800 pfn:0x1265a8 [ 2057.016560][T23288] head:ffffea0004996a00 order:3 compound_mapcount:0 compound_pincount:0 [ 2057.024718][T23288] flags: 0x4000000000010200(slab|head) [ 2057.030025][T23288] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 2057.038462][T23288] raw: ffff8881265a8800 000000008010000d 00000001ffffffff 0000000000000000 [ 2057.047038][T23288] page dumped because: kasan: bad access detected [ 2057.053551][T23288] page_owner tracks the page as allocated [ 2057.059199][T23288] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 23825535957, free_ts 0 [ 2057.077162][T23288] prep_new_page+0x166/0x180 [ 2057.081582][T23288] get_page_from_freelist+0x2d8c/0x2f30 [ 2057.086971][T23288] __alloc_pages_nodemask+0x435/0xaf0 [ 2057.092165][T23288] new_slab+0x80/0x400 [ 2057.096071][T23288] ___slab_alloc+0x302/0x4b0 [ 2057.100935][T23288] __slab_alloc+0x63/0xa0 [ 2057.105180][T23288] __kmalloc+0x204/0x330 [ 2057.109344][T23288] __register_sysctl_table+0xea/0x1240 [ 2057.114642][T23288] register_net_sysctl+0x2c/0x40 [ 2057.119417][T23288] neigh_sysctl_register+0x454/0x530 [ 2057.124532][T23288] devinet_sysctl_register+0xaa/0x1e0 [ 2057.129741][T23288] inetdev_init+0x266/0x470 [ 2057.134080][T23288] inetdev_event+0x205/0x1040 [ 2057.138594][T23288] raw_notifier_call_chain+0x8c/0xf0 [ 2057.143778][T23288] call_netdevice_notifiers+0x145/0x1b0 [ 2057.149129][T23288] register_netdevice+0x1066/0x13f0 [ 2057.154322][T23288] page_owner free stack trace missing [ 2057.159540][T23288] [ 2057.161695][T23288] Memory state around the buggy address: [ 2057.167176][T23288] ffff8881265ad280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2057.175155][T23288] ffff8881265ad300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2057.183058][T23288] >ffff8881265ad380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 2057.191037][T23288] ^ [ 2057.197905][T23288] ffff8881265ad400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2057.205804][T23288] ffff8881265ad480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2057.213695][T23288] ================================================================== [ 2057.221682][T23288] Disabling lock debugging due to kernel taint [ 2057.229648][ T24] audit: type=1400 audit(1738346938.810:8115): avc: denied { shutdown } for pid=23295 comm="syz.0.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2057.259080][T22188] usb 9-1: config 0 descriptor?? [ 2057.285462][T23301] device syzkaller0 entered promiscuous mode [ 2057.510484][T23204] udc-core: couldn't find an available UDC or it's busy [ 2057.517271][T23204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2057.525010][T23204] udc-core: couldn't find an available UDC or it's busy [ 2057.531855][T23204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2057.749694][T23204] udc-core: couldn't find an available UDC or it's busy [ 2057.756456][T23204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2057.770066][T22188] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 2057.777163][T22188] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 2057.784148][T22188] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 2057.791085][T22188] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 2057.798712][T22188] konepure 0003:1E7D:2DB4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.8-1/input0 [ 2057.973343][T22188] usb 9-1: USB disconnect, device number 3