last executing test programs: 1m7.333830645s ago: executing program 4 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) 1m7.256280431s ago: executing program 4 (id=215): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m7.206245656s ago: executing program 4 (id=217): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x8]}, 0x8) 1m7.177403188s ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1m6.927172148s ago: executing program 4 (id=228): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 1m6.587164675s ago: executing program 4 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000480)={@dev}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000006c0)={@remote}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) 1m6.541409549s ago: executing program 32 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000480)={@dev}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000006c0)={@remote}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) 23.426765099s ago: executing program 5 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd) 23.337419356s ago: executing program 5 (id=1551): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 23.319939568s ago: executing program 5 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 22.811259629s ago: executing program 5 (id=1563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) 22.763339283s ago: executing program 5 (id=1555): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 22.272030512s ago: executing program 5 (id=1559): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 22.271567592s ago: executing program 33 (id=1559): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 13.628912586s ago: executing program 2 (id=1734): io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x8d104000, 0x0, 0xffffffffffffff8a, 0x0, 0x0, 0x0) 12.779899484s ago: executing program 2 (id=1745): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0xfffffffffffffff7, 0x2) 12.69704415s ago: executing program 2 (id=1746): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) unshare(0x28000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0}, 0x101000, 0x0, 0x5, 0x4, 0x2, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync_file_range(r0, 0x6, 0x10000000000000, 0x2) 12.439551061s ago: executing program 2 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12.284070974s ago: executing program 2 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 12.194070421s ago: executing program 1 (id=1760): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x20}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x2, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x43683bb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x80}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x1, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200, 0x9}, {}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x20, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1, 0x8}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0xfd7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0xffffffff, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 12.045825683s ago: executing program 1 (id=1762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 12.045564983s ago: executing program 2 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 12.028638374s ago: executing program 34 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 11.780803194s ago: executing program 1 (id=1765): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x200440e0) 11.719240359s ago: executing program 1 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 11.648260895s ago: executing program 1 (id=1781): mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0xd81c0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x6) 10.891464616s ago: executing program 1 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x3}, 0x50) 10.891208125s ago: executing program 35 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x3}, 0x50) 1.11114887s ago: executing program 3 (id=2154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 710.914073ms ago: executing program 3 (id=2159): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x58) 710.498603ms ago: executing program 0 (id=2167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 674.688946ms ago: executing program 3 (id=2161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0xa86, 0x0) 642.141268ms ago: executing program 3 (id=2163): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000480)='./file0\x00', 0xc80, &(0x7f0000000380)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d634a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4100000149e6d3e6cae315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d62310356f0f8a01a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 641.142288ms ago: executing program 0 (id=2174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 574.136234ms ago: executing program 0 (id=2165): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 573.629444ms ago: executing program 3 (id=2168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pause() 573.352844ms ago: executing program 0 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 480.031871ms ago: executing program 0 (id=2172): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) 479.499911ms ago: executing program 3 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801440010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2c020400) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 452.938423ms ago: executing program 0 (id=2177): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c200000000109021200010000000009"], 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 452.611963ms ago: executing program 8 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 450.853973ms ago: executing program 6 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 396.971388ms ago: executing program 8 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) fcntl$lock(r2, 0x24, &(0x7f0000001080)={0x1, 0x2, 0x7, 0xfffffffffffffffd}) 360.29181ms ago: executing program 6 (id=2181): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 359.919551ms ago: executing program 6 (id=2182): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r0, 0x0, 0x10000}, 0x18) r1 = syz_io_uring_setup(0x5bf, &(0x7f0000000440)={0x0, 0x7aca, 0x1, 0x1, 0x294}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x4000, @fd=r1, 0x9002, 0x0, 0x0, 0x4, 0x1, {0x3}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x2000) 359.673131ms ago: executing program 7 (id=2183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 328.874393ms ago: executing program 8 (id=2184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 328.672893ms ago: executing program 8 (id=2185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='THAWED\x00', 0x7) 328.216333ms ago: executing program 7 (id=2186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 212.741993ms ago: executing program 6 (id=2187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7e) 169.437426ms ago: executing program 7 (id=2188): r0 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x3, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 169.150876ms ago: executing program 6 (id=2189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r1, 0x1) 168.940936ms ago: executing program 7 (id=2190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x108000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 168.508776ms ago: executing program 6 (id=2191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 100.841241ms ago: executing program 8 (id=2192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 100.251442ms ago: executing program 7 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 63.736224ms ago: executing program 8 (id=2194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)={0x9c71, 0x3, 0x2, 0x72, 0x8, "b881154167a0d73f"}) 0s ago: executing program 7 (id=2195): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x101) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') kernel console output (not intermixed with test programs): z.2.935': attribute type 1 has an invalid length. [ 63.183635][ T6328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.935'. [ 63.219502][ T6336] loop3: detected capacity change from 0 to 512 [ 63.226406][ T6336] EXT4-fs: Ignoring removed oldalloc option [ 63.239592][ T6336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.250287][ T6336] EXT4-fs (loop3): 1 truncate cleaned up [ 64.144075][ T6372] loop5: detected capacity change from 0 to 512 [ 64.159848][ T6374] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 64.193993][ T6372] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.238064][ T6372] EXT4-fs (loop5): shut down requested (1) [ 64.416935][ T6404] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 64.456389][ T6408] lo speed is unknown, defaulting to 1000 [ 64.469916][ T6410] loop3: detected capacity change from 0 to 512 [ 64.524483][ T6410] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.551169][ T6410] EXT4-fs (loop3): shut down requested (1) [ 64.594260][ T6427] sctp: [Deprecated]: syz.3.975 (pid 6427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.594260][ T6427] Use struct sctp_sack_info instead [ 64.616601][ T6430] loop2: detected capacity change from 0 to 128 [ 64.741678][ T6441] lo speed is unknown, defaulting to 1000 [ 64.889220][ T6444] lo speed is unknown, defaulting to 1000 [ 64.942426][ T6445] syz_tun: entered allmulticast mode [ 64.972833][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'. [ 65.003783][ T6450] loop0: detected capacity change from 0 to 512 [ 65.026594][ T6439] loop3: detected capacity change from 0 to 32768 [ 65.066683][ T6450] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.079603][ T6465] loop5: detected capacity change from 0 to 128 [ 65.091714][ T6439] loop3: p1 p3 < > [ 65.103155][ T6450] EXT4-fs (loop0): shut down requested (1) [ 65.139744][ T6469] lo speed is unknown, defaulting to 1000 [ 65.540536][ T6507] loop2: detected capacity change from 0 to 1024 [ 65.547523][ T6507] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.558398][ T6507] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.569650][ T6507] JBD2: no valid journal superblock found [ 65.575452][ T6507] EXT4-fs (loop2): Could not load journal inode [ 65.590456][ T6507] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 65.626885][ T6513] loop2: detected capacity change from 0 to 1024 [ 65.634881][ T6513] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.645574][ T6513] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.653605][ T6513] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.660290][ T6513] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1014: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.674012][ T6513] EXT4-fs (loop2): 1 orphan inode deleted [ 65.679944][ T6513] EXT4-fs mount: 40 callbacks suppressed [ 65.679952][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.706292][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.735301][ T6516] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 65.745016][ T6518] loop2: detected capacity change from 0 to 512 [ 65.753232][ T6518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.767293][ T6518] EXT4-fs (loop2): 1 truncate cleaned up [ 65.774401][ T6518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.797192][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.834281][ T6529] lo speed is unknown, defaulting to 1000 [ 65.895718][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 65.925032][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 66.111824][ T6552] hub 9-0:1.0: USB hub found [ 66.121874][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 66.125132][ T6552] hub 9-0:1.0: 8 ports detected [ 66.182140][ T6562] lo speed is unknown, defaulting to 1000 [ 66.287531][ T6560] loop0: detected capacity change from 0 to 32768 [ 66.296298][ T6566] lo speed is unknown, defaulting to 1000 [ 66.331760][ T6560] loop0: p1 p3 < > [ 66.445893][ T6584] lo speed is unknown, defaulting to 1000 [ 66.567422][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 66.673611][ T6605] tipc: Started in network mode [ 66.678526][ T6605] tipc: Node identity ac14140f, cluster identity 4711 [ 66.689180][ T6605] tipc: New replicast peer: 255.255.255.255 [ 66.695414][ T6605] tipc: Enabled bearer , priority 10 [ 66.868958][ T6617] lo speed is unknown, defaulting to 1000 [ 66.907315][ T6611] loop2: detected capacity change from 0 to 32768 [ 66.943343][ T6611] loop2: p1 p3 < > [ 67.075387][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'. [ 67.156622][ T6646] wireguard0: entered promiscuous mode [ 67.162131][ T6646] wireguard0: entered allmulticast mode [ 67.317784][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 67.317796][ T29] audit: type=1326 audit(1755325964.748:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.319525][ T29] audit: type=1326 audit(1755325964.748:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.319629][ T29] audit: type=1326 audit(1755325964.748:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.319755][ T29] audit: type=1326 audit(1755325964.748:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.326939][ T29] audit: type=1326 audit(1755325964.758:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.327393][ T29] audit: type=1326 audit(1755325964.758:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.331851][ T29] audit: type=1326 audit(1755325964.768:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.331872][ T29] audit: type=1326 audit(1755325964.768:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.332044][ T29] audit: type=1326 audit(1755325964.768:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.333241][ T29] audit: type=1326 audit(1755325964.768:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58f171ebe9 code=0x7ffc0000 [ 67.661704][ T6666] lo speed is unknown, defaulting to 1000 [ 67.789282][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 67.798683][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 67.821440][ T3395] tipc: Node number set to 2886997007 [ 67.835527][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1083'. [ 67.859484][ T6685] wireguard0: entered promiscuous mode [ 67.865185][ T6685] wireguard0: entered allmulticast mode [ 67.907665][ T6694] vlan2: entered allmulticast mode [ 67.912877][ T6694] macvtap0: entered allmulticast mode [ 67.918268][ T6694] veth0_macvtap: entered allmulticast mode [ 68.233782][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.235940][ T6710] lo speed is unknown, defaulting to 1000 [ 68.244069][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.258984][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 68.359340][ T6731] vlan2: entered allmulticast mode [ 68.364618][ T6731] macvtap0: entered allmulticast mode [ 68.370002][ T6731] veth0_macvtap: entered allmulticast mode [ 68.446539][ T6736] siw: device registration error -23 [ 68.470605][ T6738] loop0: detected capacity change from 0 to 128 [ 68.479203][ T6738] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.492552][ T6738] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.504055][ T6738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.1110: bg 0: bad block bitmap checksum [ 68.525261][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.614861][ T6762] loop5: detected capacity change from 0 to 1024 [ 68.622085][ T6762] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.632979][ T6762] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.643928][ T6762] JBD2: no valid journal superblock found [ 68.649668][ T6762] EXT4-fs (loop5): Could not load journal inode [ 68.660922][ T6762] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 68.763157][ T6773] vlan2: entered allmulticast mode [ 68.768360][ T6773] macvtap0: entered allmulticast mode [ 68.773749][ T6773] veth0_macvtap: entered allmulticast mode [ 69.234100][ T6782] loop0: detected capacity change from 0 to 32768 [ 69.287983][ T6782] loop0: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 70.032417][ T6818] vlan2: entered allmulticast mode [ 70.128709][ T6818] macvtap0: entered allmulticast mode [ 70.134106][ T6818] veth0_macvtap: entered allmulticast mode [ 70.361388][ T6836] wireguard0: entered promiscuous mode [ 70.366888][ T6836] wireguard0: entered allmulticast mode [ 70.382253][ T6839] __nla_validate_parse: 6 callbacks suppressed [ 70.382266][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 70.564149][ T6847] loop3: detected capacity change from 0 to 1024 [ 70.571111][ T6847] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.582240][ T6847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.595820][ T6847] JBD2: no valid journal superblock found [ 70.601690][ T6847] EXT4-fs (loop3): Could not load journal inode [ 70.618413][ T6847] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 70.797917][ T6855] vlan2: entered allmulticast mode [ 70.876557][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.895066][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.088673][ T6885] vlan2: entered allmulticast mode [ 72.321147][ T6919] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 72.329301][ T6919] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 72.402257][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 72.402271][ T29] audit: type=1400 audit(1755325969.838:1247): avc: denied { setopt } for pid=6938 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.444415][ T29] audit: type=1400 audit(1755325969.878:1248): avc: denied { listen } for pid=6948 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.465613][ T29] audit: type=1400 audit(1755325969.898:1249): avc: denied { accept } for pid=6948 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.567679][ T29] audit: type=1326 audit(1755325969.998:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9d3cebe9 code=0x7ffc0000 [ 72.591104][ T29] audit: type=1326 audit(1755325969.998:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9d3cebe9 code=0x7ffc0000 [ 72.614678][ T29] audit: type=1326 audit(1755325969.998:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcbfeebe9 code=0x7ffc0000 [ 72.638147][ T29] audit: type=1326 audit(1755325969.998:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcbfeebe9 code=0x7ffc0000 [ 72.661895][ T29] audit: type=1326 audit(1755325969.998:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fafcbfeebe9 code=0x7ffc0000 [ 72.685297][ T29] audit: type=1326 audit(1755325969.998:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcbfeebe9 code=0x7ffc0000 [ 72.708709][ T29] audit: type=1326 audit(1755325969.998:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6957 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fafcbfeebe9 code=0x7ffc0000 [ 72.733109][ T6964] netlink: 'syz.1.1197': attribute type 21 has an invalid length. [ 72.740919][ T6964] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1197'. [ 72.791399][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.802898][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.389578][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 73.419931][ T7011] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 73.430943][ T7010] IPVS: stopping master sync thread 7011 ... [ 73.489943][ T7017] SELinux: failed to load policy [ 73.524533][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1227'. [ 73.559691][ T7038] loop5: detected capacity change from 0 to 1024 [ 73.579015][ T7038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.603657][ T4117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.733771][ T7076] netlink: 'syz.2.1254': attribute type 21 has an invalid length. [ 73.744846][ T7076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1254'. [ 73.854035][ T7100] loop3: detected capacity change from 0 to 512 [ 73.861317][ T7100] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.869242][ T7100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.890126][ T7100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 73.900586][ T7100] System zones: 1-12 [ 73.904885][ T7100] EXT4-fs (loop3): 1 truncate cleaned up [ 73.910928][ T7100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.933634][ T7112] netlink: 'syz.5.1264': attribute type 21 has an invalid length. [ 73.949501][ T7112] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1264'. [ 73.998584][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.409799][ T7171] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 74.422633][ T7169] IPVS: stopping master sync thread 7171 ... [ 74.461767][ T7140] loop5: detected capacity change from 0 to 32768 [ 74.498894][ T7140] loop5: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 74.866314][ T7202] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 74.866470][ T7201] IPVS: stopping master sync thread 7202 ... [ 75.103279][ T7146] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.111290][ T7146] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.130470][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.140134][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.247383][ T7219] loop2: detected capacity change from 0 to 32768 [ 75.299595][ T7219] loop2: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 75.763754][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.865697][ T7280] loop5: detected capacity change from 0 to 512 [ 75.875151][ T7280] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.881889][ T7280] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.892109][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.902242][ T7280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 75.910174][ T7280] System zones: 1-12 [ 75.915568][ T7280] EXT4-fs (loop5): 1 truncate cleaned up [ 75.930345][ T7280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.945485][ T7288] loop3: detected capacity change from 0 to 512 [ 75.973684][ T7217] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.981943][ T7217] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 75.983407][ T7288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.034798][ T4117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.150030][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.294232][ T7341] loop5: detected capacity change from 0 to 512 [ 76.308831][ T7343] loop0: detected capacity change from 0 to 1024 [ 76.325358][ T7343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.347447][ T7341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.360918][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.396764][ T7355] SELinux: Context is not valid (left unmapped). [ 76.430032][ T7357] syzkaller0: entered promiscuous mode [ 76.435595][ T7357] syzkaller0: entered allmulticast mode [ 76.540087][ T4117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.586705][ T7382] loop5: detected capacity change from 0 to 256 [ 76.610113][ T7387] loop3: detected capacity change from 0 to 2048 [ 76.619464][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 76.665357][ T7387] loop3: p2 p3 p7 [ 76.837954][ T7418] SELinux: failed to load policy [ 76.844808][ T7393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7393 comm=syz.5.1393 [ 76.857256][ T7393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7393 comm=syz.5.1393 [ 76.879925][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 76.998474][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 77.010067][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.017527][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.025810][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 77.051841][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.059300][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.224491][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 77.288326][ T7496] loop2: detected capacity change from 0 to 2048 [ 77.319864][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1444'. [ 77.342577][ T7496] loop2: p2 p3 p7 [ 77.344745][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.353800][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.364046][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 77.370358][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.380323][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.411735][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 77.411748][ T29] audit: type=1326 audit(77.398:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03640ebe9 code=0x7ffc0000 [ 77.418082][ T7517] loop3: detected capacity change from 0 to 256 [ 77.456590][ T29] audit: type=1326 audit(77.398:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03640ebe9 code=0x7ffc0000 [ 77.479414][ T29] audit: type=1326 audit(77.398:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc03640ebe9 code=0x7ffc0000 [ 77.484574][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 77.502252][ T29] audit: type=1326 audit(77.398:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03640ebe9 code=0x7ffc0000 [ 77.512149][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 77.533665][ T29] audit: type=1326 audit(77.398:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03640ebe9 code=0x7ffc0000 [ 77.570834][ T29] audit: type=1400 audit(77.548:1686): avc: denied { module_request } for pid=7521 comm="syz.2.1457" kmod="nft-expr-7-la" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.602001][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 77.602380][ T29] audit: type=1400 audit(77.588:1687): avc: denied { name_bind } for pid=7524 comm="syz.3.1458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 77.662792][ T7530] netlink: 'syz.2.1459': attribute type 5 has an invalid length. [ 77.679924][ T7532] SELinux: policydb version 1329550545 does not match my version range 15-35 [ 77.684676][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.689232][ T7532] SELinux: failed to load policy [ 77.698140][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.721660][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.730388][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.759940][ T29] audit: type=1326 audit(77.728:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9d3cebe9 code=0x7ffc0000 [ 77.782673][ T29] audit: type=1326 audit(77.728:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9d3cebe9 code=0x7ffc0000 [ 77.785664][ T7535] loop0: detected capacity change from 0 to 2048 [ 77.805455][ T29] audit: type=1326 audit(77.728:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1e9d3cebe9 code=0x7ffc0000 [ 77.868432][ T7544] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 77.880600][ T7535] loop0: p2 p3 p7 [ 77.881645][ T7544] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 77.893354][ T7546] SELinux: policydb version 1329550545 does not match my version range 15-35 [ 77.938333][ T7546] SELinux: failed to load policy [ 77.965810][ T7562] loop0: detected capacity change from 0 to 256 [ 78.029313][ T7571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.036799][ T7571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.069581][ T7571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.077045][ T7571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.098709][ T7577] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 78.123335][ T7573] SELinux: failed to load policy [ 78.123812][ T3171] lo speed is unknown, defaulting to 1000 [ 78.134027][ T3171] syz0: Port: 1 Link DOWN [ 78.141056][ T7577] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 78.151938][ T3171] lo speed is unknown, defaulting to 1000 [ 78.157751][ T3171] syz0: Port: 1 Link ACTIVE [ 78.191959][ T7587] loop5: detected capacity change from 0 to 128 [ 78.212290][ T7587] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.229854][ T7587] EXT4-fs error (device loop5): make_indexed_dir:2269: inode #2: block 20: comm syz.5.1487: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0 [ 78.251321][ T7587] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1487: dx entry: limit 0 != root limit 125 [ 78.263084][ T7587] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1487: Corrupt directory, running e2fsck is recommended [ 78.287696][ T4117] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.307357][ T7598] SELinux: failed to load policy [ 78.339015][ T7606] SELinux: policydb version 1329550545 does not match my version range 15-35 [ 78.348737][ T7606] SELinux: failed to load policy [ 78.407326][ T7612] loop2: detected capacity change from 0 to 512 [ 78.434439][ T7612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.448148][ T7619] loop5: detected capacity change from 0 to 2048 [ 78.461265][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.468724][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.476358][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.483817][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.525957][ T7619] loop5: p2 p3 p7 [ 78.553258][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.577545][ T7627] loop5: detected capacity change from 0 to 1024 [ 78.597219][ T7627] EXT4-fs: Ignoring removed bh option [ 78.613870][ T7627] EXT4-fs: inline encryption not supported [ 78.620752][ T7627] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.647171][ T7627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 78.656506][ T7627] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1500: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.675451][ T7627] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1500: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.677382][ T7637] syzkaller0: entered promiscuous mode [ 78.695041][ T7637] syzkaller0: entered allmulticast mode [ 78.708600][ T7627] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1500: Failed to acquire dquot type 0 [ 78.720784][ T7627] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 78.744291][ T7627] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1500: mark_inode_dirty error [ 78.768827][ T7627] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 78.781200][ T7627] EXT4-fs (loop5): 1 orphan inode deleted [ 78.787351][ T7627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.801648][ T1477] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.815941][ T1477] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 78.835031][ T7627] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 78.859151][ T4117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.908109][ T5961] syz_tun (unregistering): left allmulticast mode [ 79.078387][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.088852][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.134350][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.144648][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.193836][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.204147][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.253272][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.263614][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.312241][ T57] bridge_slave_1: left allmulticast mode [ 79.317877][ T57] bridge_slave_1: left promiscuous mode [ 79.323474][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.331117][ T57] bridge_slave_0: left allmulticast mode [ 79.336809][ T57] bridge_slave_0: left promiscuous mode [ 79.342469][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.382131][ T57] dvmrp0 (unregistering): left allmulticast mode [ 79.423125][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.432919][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.442282][ T57] bond0 (unregistering): Released all slaves [ 79.482513][ T57] tipc: Disabling bearer [ 79.487722][ T57] tipc: Left network mode [ 79.494593][ T57] hsr_slave_0: left promiscuous mode [ 79.500187][ T57] hsr_slave_1: left promiscuous mode [ 79.507731][ T57] veth1_macvtap: left promiscuous mode [ 79.513377][ T57] veth0_macvtap: left allmulticast mode [ 79.518920][ T57] veth0_macvtap: left promiscuous mode [ 79.524416][ T57] veth1_vlan: left promiscuous mode [ 79.529673][ T57] veth0_vlan: left promiscuous mode [ 79.581182][ T57] team0 (unregistering): Port device team_slave_1 removed [ 79.590927][ T57] team0 (unregistering): Port device team_slave_0 removed [ 79.650572][ T7660] loop0: detected capacity change from 0 to 512 [ 79.674635][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.793447][ T7661] lo speed is unknown, defaulting to 1000 [ 79.834784][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.875970][ T7661] chnl_net:caif_netlink_parms(): no params data found [ 79.892245][ T7696] pim6reg: entered allmulticast mode [ 79.902697][ T7696] pim6reg: left allmulticast mode [ 79.919058][ T7700] netlink: 'syz.3.1530': attribute type 3 has an invalid length. [ 79.936568][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943691][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.950996][ T7661] bridge_slave_0: entered allmulticast mode [ 79.957483][ T7661] bridge_slave_0: entered promiscuous mode [ 79.964496][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.971667][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.978764][ T7661] bridge_slave_1: entered allmulticast mode [ 79.985145][ T7661] bridge_slave_1: entered promiscuous mode [ 80.012833][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.022934][ T7711] loop3: detected capacity change from 0 to 2048 [ 80.036800][ T7713] loop0: detected capacity change from 0 to 1024 [ 80.037015][ T7709] syzkaller0: entered promiscuous mode [ 80.044126][ T7713] EXT4-fs: Ignoring removed bh option [ 80.048703][ T7709] syzkaller0: entered allmulticast mode [ 80.050873][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.075340][ T7711] loop3: p2 p3 p7 [ 80.075984][ T7713] EXT4-fs: inline encryption not supported [ 80.086690][ T7713] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.110823][ T7713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 80.111627][ T7661] team0: Port device team_slave_0 added [ 80.119909][ T7713] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1534: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.140750][ T7713] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1534: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.144907][ T7661] team0: Port device team_slave_1 added [ 80.161392][ T7713] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1534: Failed to acquire dquot type 0 [ 80.177795][ T7713] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 80.194262][ T7713] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1534: mark_inode_dirty error [ 80.209438][ T7713] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 80.210397][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.226653][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252600][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.254092][ T7713] EXT4-fs (loop0): 1 orphan inode deleted [ 80.264187][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.269587][ T7713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.275817][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.314058][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.325013][ T3450] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.346515][ T3450] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 80.362566][ T7661] hsr_slave_0: entered promiscuous mode [ 80.384389][ T7713] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.393009][ T7661] hsr_slave_1: entered promiscuous mode [ 80.439048][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.562061][ T7737] syzkaller0: entered promiscuous mode [ 80.567546][ T7737] syzkaller0: entered allmulticast mode [ 80.608545][ T7741] loop0: detected capacity change from 0 to 2048 [ 80.664761][ T7741] loop0: p2 p3 p7 [ 80.758348][ T7661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.767285][ T7661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.776060][ T7661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.784904][ T7661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.803273][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.810408][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.817754][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.824856][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.855997][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.873345][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.881172][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.894407][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.905450][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.915522][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.922565][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.932880][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.948829][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.955875][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.007478][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.016911][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.069714][ T7661] veth0_vlan: entered promiscuous mode [ 81.077031][ T7661] veth1_vlan: entered promiscuous mode [ 81.089585][ T7661] veth0_macvtap: entered promiscuous mode [ 81.096802][ T7661] veth1_macvtap: entered promiscuous mode [ 81.106358][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.124418][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.135502][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.145336][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.157906][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.171916][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.180624][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212065][ T51] batadv1: left allmulticast mode [ 81.217094][ T51] batadv1: left promiscuous mode [ 81.222199][ T51] bridge0: port 3(batadv1) entered disabled state [ 81.243206][ T51] bridge_slave_1: left allmulticast mode [ 81.248899][ T51] bridge_slave_1: left promiscuous mode [ 81.254585][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.271012][ T51] bridge_slave_0: left allmulticast mode [ 81.276700][ T51] bridge_slave_0: left promiscuous mode [ 81.282498][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.309318][ T7774] loop2: detected capacity change from 0 to 1024 [ 81.316991][ T7774] EXT4-fs: Ignoring removed bh option [ 81.322571][ T7774] EXT4-fs: inline encryption not supported [ 81.328915][ T7774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.351334][ T7774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 81.363120][ T7774] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1554: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.377204][ T7774] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1554: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.392784][ T7774] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1554: Failed to acquire dquot type 0 [ 81.404277][ T7774] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 81.413805][ T7774] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1554: mark_inode_dirty error [ 81.414115][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.426740][ T7774] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 81.443835][ T7774] EXT4-fs (loop2): 1 orphan inode deleted [ 81.449983][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.449978][ T7774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.471064][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.487329][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 81.487803][ T51] bond0 (unregistering): Released all slaves [ 81.509841][ T5282] syz_tun (unregistering): left promiscuous mode [ 81.522312][ T7774] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.549827][ T51] hsr_slave_0: left promiscuous mode [ 81.555535][ T51] hsr_slave_1: left promiscuous mode [ 81.561856][ T7661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.573415][ T51] veth1_macvtap: left promiscuous mode [ 81.578954][ T51] veth0_macvtap: left allmulticast mode [ 81.584599][ T51] veth0_macvtap: left promiscuous mode [ 81.591266][ T51] veth1_vlan: left promiscuous mode [ 81.597200][ T51] veth0_vlan: left promiscuous mode [ 81.601710][ T31] net_ratelimit: 30 callbacks suppressed [ 81.601722][ T31] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 81.682842][ T51] team0 (unregistering): Port device team_slave_1 removed [ 81.692608][ T51] team0 (unregistering): Port device team_slave_0 removed [ 81.725782][ T7799] __nla_validate_parse: 13 callbacks suppressed [ 81.725847][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1560'. [ 81.741031][ T7799] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1560'. [ 81.765449][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1560'. [ 81.784175][ T7799] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1560'. [ 81.793236][ T7799] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1560'. [ 81.820100][ T7777] lo speed is unknown, defaulting to 1000 [ 81.847328][ T7772] lo speed is unknown, defaulting to 1000 [ 81.887072][ T7819] loop2: detected capacity change from 0 to 128 [ 81.933838][ T7819] bio_check_eod: 85 callbacks suppressed [ 81.933851][ T7819] syz.2.1568: attempt to access beyond end of device [ 81.933851][ T7819] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 81.938207][ T7807] lo speed is unknown, defaulting to 1000 [ 81.939530][ T7819] syz.2.1568: attempt to access beyond end of device [ 81.939530][ T7819] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 81.981621][ T7819] syz.2.1568: attempt to access beyond end of device [ 81.981621][ T7819] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 81.984494][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 82.001644][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.001644][ T7819] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 82.015340][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.015340][ T7819] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 82.020841][ T7777] chnl_net:caif_netlink_parms(): no params data found [ 82.028905][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.028905][ T7819] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 82.048950][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.048950][ T7819] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 82.062582][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.062582][ T7819] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 82.076113][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.076113][ T7819] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 82.089584][ T7819] syz.2.1568: attempt to access beyond end of device [ 82.089584][ T7819] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 82.118387][ T51] IPVS: stop unused estimator thread 0... [ 82.163431][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.170479][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.177742][ T7772] bridge_slave_0: entered allmulticast mode [ 82.184277][ T7772] bridge_slave_0: entered promiscuous mode [ 82.199288][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.206483][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.213865][ T7777] bridge_slave_0: entered allmulticast mode [ 82.220239][ T7777] bridge_slave_0: entered promiscuous mode [ 82.229970][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.237154][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.251570][ T7772] bridge_slave_1: entered allmulticast mode [ 82.257830][ T7772] bridge_slave_1: entered promiscuous mode [ 82.278440][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.285530][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.292958][ T7777] bridge_slave_1: entered allmulticast mode [ 82.299436][ T7777] bridge_slave_1: entered promiscuous mode [ 82.310849][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 82.322021][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.337578][ T7777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.351042][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.365461][ T7777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.380572][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.403747][ T7772] team0: Port device team_slave_0 added [ 82.419936][ T7777] team0: Port device team_slave_0 added [ 82.426522][ T7772] team0: Port device team_slave_1 added [ 82.442065][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.453670][ T7777] team0: Port device team_slave_1 added [ 82.464208][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.471132][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.497079][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.518358][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.525324][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.551252][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.568271][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.575258][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.601177][ T7777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.612382][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.619302][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.645196][ T7777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.657605][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.678686][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.685805][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.693057][ T7807] bridge_slave_0: entered allmulticast mode [ 82.699325][ T7807] bridge_slave_0: entered promiscuous mode [ 82.707955][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.715154][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.722363][ T7807] bridge_slave_1: entered allmulticast mode [ 82.728536][ T7807] bridge_slave_1: entered promiscuous mode [ 82.746118][ T7772] hsr_slave_0: entered promiscuous mode [ 82.752040][ T7772] hsr_slave_1: entered promiscuous mode [ 82.757858][ T7772] debugfs: 'hsr0' already exists in 'hsr' [ 82.763610][ T7772] Cannot create hsr debugfs directory [ 82.770733][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.798393][ T7777] hsr_slave_0: entered promiscuous mode [ 82.804460][ T7777] hsr_slave_1: entered promiscuous mode [ 82.810154][ T7777] debugfs: 'hsr0' already exists in 'hsr' [ 82.815929][ T7777] Cannot create hsr debugfs directory [ 82.823355][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.839749][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.888602][ T7807] team0: Port device team_slave_0 added [ 82.895187][ T7807] team0: Port device team_slave_1 added [ 82.918918][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.925868][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.951930][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.979653][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.986600][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.012462][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029201][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.039614][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.095896][ T7807] hsr_slave_0: entered promiscuous mode [ 83.102027][ T7807] hsr_slave_1: entered promiscuous mode [ 83.107781][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 83.113560][ T7807] Cannot create hsr debugfs directory [ 83.122646][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.132914][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.184729][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.195029][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.263975][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.274305][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.322792][ T51] bridge_slave_1: left allmulticast mode [ 83.328416][ T51] bridge_slave_1: left promiscuous mode [ 83.334055][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.341742][ T51] bridge_slave_0: left allmulticast mode [ 83.347379][ T51] bridge_slave_0: left promiscuous mode [ 83.353207][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.361206][ T51] bridge_slave_1: left allmulticast mode [ 83.366848][ T51] bridge_slave_1: left promiscuous mode [ 83.372474][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.380051][ T51] bridge_slave_0: left allmulticast mode [ 83.385704][ T51] bridge_slave_0: left promiscuous mode [ 83.391395][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.483408][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.492844][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.502449][ T51] bond0 (unregistering): Released all slaves [ 83.552967][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.562416][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.571752][ T51] bond0 (unregistering): Released all slaves [ 83.605307][ T51] batadv_slave_0: left promiscuous mode [ 83.612671][ T51] hsr_slave_0: left promiscuous mode [ 83.618174][ T51] hsr_slave_1: left promiscuous mode [ 83.624949][ T51] hsr_slave_0: left promiscuous mode [ 83.630548][ T51] hsr_slave_1: left promiscuous mode [ 83.639574][ T51] veth1_macvtap: left promiscuous mode [ 83.645060][ T51] veth0_macvtap: left allmulticast mode [ 83.650658][ T51] veth0_macvtap: left promiscuous mode [ 83.656302][ T51] veth1_vlan: left promiscuous mode [ 83.661602][ T51] veth0_vlan: left promiscuous mode [ 83.667491][ T51] veth1_macvtap: left promiscuous mode [ 83.673001][ T51] veth0_macvtap: left allmulticast mode [ 83.678558][ T51] veth0_macvtap: left promiscuous mode [ 83.684041][ T51] veth1_vlan: left promiscuous mode [ 83.689222][ T51] veth0_vlan: left promiscuous mode [ 83.770764][ T51] team0 (unregistering): Port device team_slave_1 removed [ 83.779788][ T51] team0 (unregistering): Port device team_slave_0 removed [ 83.823476][ T51] team0 (unregistering): Port device team_slave_1 removed [ 83.832346][ T51] team0 (unregistering): Port device team_slave_0 removed [ 84.143480][ T7772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.152628][ T7772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.160903][ T7772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.171231][ T7772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.190081][ T7777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.201716][ T7777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.212248][ T7777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.230359][ T7807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.239936][ T7777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.250055][ T7807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.261113][ T7807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.272914][ T7807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.319530][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.336550][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.354710][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.364790][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.378488][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.392344][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.399427][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.408880][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.415958][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.424116][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.431198][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.439314][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.446337][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.461122][ T7807] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.479657][ T7777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.490013][ T7777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.506356][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.513407][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.530445][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.537497][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.558931][ T7772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.578417][ T7807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.588759][ T7807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.627278][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.649350][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.679831][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.733444][ T7777] veth0_vlan: entered promiscuous mode [ 84.754715][ T7777] veth1_vlan: entered promiscuous mode [ 84.777222][ T7772] veth0_vlan: entered promiscuous mode [ 84.786962][ T7772] veth1_vlan: entered promiscuous mode [ 84.794912][ T7777] veth0_macvtap: entered promiscuous mode [ 84.808451][ T7772] veth0_macvtap: entered promiscuous mode [ 84.818271][ T7777] veth1_macvtap: entered promiscuous mode [ 84.828819][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.840896][ T7772] veth1_macvtap: entered promiscuous mode [ 84.848395][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.861112][ T7807] veth0_vlan: entered promiscuous mode [ 84.872162][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.883735][ T7807] veth1_vlan: entered promiscuous mode [ 84.892507][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.901293][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.911314][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.925037][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.935502][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.944756][ T7807] veth0_macvtap: entered promiscuous mode [ 84.959079][ T7807] veth1_macvtap: entered promiscuous mode [ 84.968539][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.979737][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.987023][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006016][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.017799][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.032086][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.057210][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.068472][ T7915] pim6reg: entered allmulticast mode [ 85.075763][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084676][ T7915] pim6reg: left allmulticast mode [ 85.096255][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105814][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129811][ T7921] netlink: 'syz.0.1564': attribute type 3 has an invalid length. [ 85.152953][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 85.152966][ T29] audit: type=1326 audit(85.138:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.193759][ T29] audit: type=1326 audit(85.168:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.216529][ T29] audit: type=1326 audit(85.168:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.239287][ T29] audit: type=1326 audit(85.168:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.261998][ T29] audit: type=1326 audit(85.168:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.284716][ T29] audit: type=1326 audit(85.168:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.298165][ T7928] loop6: detected capacity change from 0 to 2048 [ 85.307391][ T29] audit: type=1326 audit(85.168:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.307421][ T29] audit: type=1326 audit(85.168:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.359176][ T29] audit: type=1326 audit(85.168:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.382013][ T29] audit: type=1326 audit(85.168:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.6.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f220a42ebe9 code=0x7ffc0000 [ 85.455858][ T7928] loop6: p2 p3 p7 [ 85.460380][ T7946] loop3: detected capacity change from 0 to 128 [ 85.494268][ T7934] loop0: detected capacity change from 0 to 128 [ 85.538806][ T7951] netlink: 664 bytes leftover after parsing attributes in process `syz.6.1587'. [ 85.813627][ T7986] team0 (unregistering): Port device team_slave_0 removed [ 85.825063][ T7986] team0 (unregistering): Port device team_slave_1 removed [ 85.948380][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 86.057171][ T8008] loop6: detected capacity change from 0 to 128 [ 86.088022][ T8008] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.232373][ T8028] loop0: detected capacity change from 0 to 2048 [ 86.251800][ T8031] bond_slave_0: entered promiscuous mode [ 86.252205][ T7807] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.257464][ T8031] bond_slave_1: entered promiscuous mode [ 86.272505][ T8031] macsec1: entered allmulticast mode [ 86.277887][ T8031] bond0: entered allmulticast mode [ 86.283129][ T8031] bond_slave_0: entered allmulticast mode [ 86.288857][ T8031] bond_slave_1: entered allmulticast mode [ 86.296663][ T8031] bond0: left allmulticast mode [ 86.301598][ T8031] bond_slave_0: left allmulticast mode [ 86.307069][ T8031] bond_slave_1: left allmulticast mode [ 86.312558][ T8031] bond_slave_0: left promiscuous mode [ 86.317993][ T8031] bond_slave_1: left promiscuous mode [ 86.366594][ T8028] loop0: unable to read partition table [ 86.372507][ T8028] loop0: partition table beyond EOD, truncated [ 86.378704][ T8028] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 86.404800][ T8036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8036 comm=syz.6.1628 [ 86.417365][ T8036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8036 comm=syz.6.1628 [ 86.553284][ T8051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8051 comm=syz.0.1636 [ 86.618476][ T8055] loop2: detected capacity change from 0 to 512 [ 86.655001][ T8055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.732326][ T8069] loop9: detected capacity change from 0 to 7 [ 86.746742][ T8069] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.786446][ T8069] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.794395][ T8069] loop9: unable to read partition table [ 86.814157][ T7661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.827360][ T8069] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 86.827360][ T8069] ) failed (rc=-5) [ 86.887139][ T8085] loop6: detected capacity change from 0 to 256 [ 86.911163][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.918428][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.935475][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1651'. [ 86.947675][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1651'. [ 86.982029][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.991200][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.027726][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.046178][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.055381][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070740][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.202603][ T8119] loop2: detected capacity change from 0 to 256 [ 87.212262][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 87.213371][ T8123] loop6: detected capacity change from 0 to 512 [ 87.221107][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1668'. [ 87.244308][ T8123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.271782][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.278923][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.301226][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.328166][ T8127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8127 comm=syz.2.1671 [ 87.335405][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.350981][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.380107][ T41] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.399767][ T41] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.410597][ T41] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.420675][ T41] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.528944][ T8156] loop9: detected capacity change from 0 to 7 [ 87.532412][ T8157] loop2: detected capacity change from 0 to 512 [ 87.535380][ T8156] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.550036][ T8156] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.557948][ T8156] loop9: unable to read partition table [ 87.563722][ T8156] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 87.563722][ T8156] ) failed (rc=-5) [ 87.565009][ T8157] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1682: casefold flag without casefold feature [ 87.598898][ T8159] loop6: detected capacity change from 0 to 128 [ 87.627875][ T8159] bio_check_eod: 84 callbacks suppressed [ 87.627890][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.627890][ T8159] loop6: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 87.637252][ T8157] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1682: couldn't read orphan inode 15 (err -117) [ 87.647160][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.647160][ T8159] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 87.674018][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.674018][ T8159] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.687524][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.687524][ T8159] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.701299][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.701299][ T8159] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 87.711848][ T8157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.715144][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.715144][ T8159] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 87.740779][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.740779][ T8159] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 87.754319][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.754319][ T8159] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.756104][ T8166] macsec1: entered allmulticast mode [ 87.767770][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.767770][ T8159] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.773027][ T8166] bond0: entered allmulticast mode [ 87.773042][ T8166] bond_slave_0: entered allmulticast mode [ 87.786561][ T8159] syz.6.1683: attempt to access beyond end of device [ 87.786561][ T8159] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.791527][ T8166] bond_slave_1: entered allmulticast mode [ 87.820327][ T8166] bond0: left allmulticast mode [ 87.825354][ T8166] bond_slave_0: left allmulticast mode [ 87.830821][ T8166] bond_slave_1: left allmulticast mode [ 87.937463][ T7661] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.217051][ T8200] loop2: detected capacity change from 0 to 2048 [ 88.228320][ T8202] loop6: detected capacity change from 0 to 512 [ 88.236360][ T8202] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1703: casefold flag without casefold feature [ 88.249113][ T8202] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1703: couldn't read orphan inode 15 (err -117) [ 88.271884][ T8202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.285982][ T8200] loop2: unable to read partition table [ 88.300092][ T8200] loop2: partition table beyond EOD, truncated [ 88.306296][ T8200] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 88.389541][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.423648][ T8214] loop9: detected capacity change from 0 to 7 [ 88.429954][ T8214] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.437961][ T8214] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.445884][ T8214] loop9: unable to read partition table [ 88.452174][ T8214] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.452174][ T8214] ) failed (rc=-5) [ 88.488824][ T8219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8219 comm=syz.1.1708 [ 88.501268][ T8219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8219 comm=syz.1.1708 [ 88.542618][ T8223] loop3: detected capacity change from 0 to 128 [ 88.569793][ T8223] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.698593][ T7777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.718714][ T8232] loop6: detected capacity change from 0 to 2048 [ 88.726251][ T8236] loop3: detected capacity change from 0 to 512 [ 88.733928][ T8236] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1716: casefold flag without casefold feature [ 88.752350][ T8236] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1716: couldn't read orphan inode 15 (err -117) [ 88.779539][ T8236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.780457][ T8232] loop6: unable to read partition table [ 88.797611][ T8232] loop6: partition table beyond EOD, truncated [ 88.804004][ T8232] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 88.900996][ T7777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.993325][ T8248] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1721'. [ 90.391797][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 90.391810][ T29] audit: type=1400 audit(90.378:2208): avc: denied { create } for pid=8267 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.419222][ T8275] loop0: detected capacity change from 0 to 512 [ 90.442151][ T8275] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1732: casefold flag without casefold feature [ 90.457013][ T29] audit: type=1400 audit(90.408:2209): avc: denied { write } for pid=8267 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.478132][ T8275] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1732: couldn't read orphan inode 15 (err -117) [ 90.504513][ T8275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.517485][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 90.533695][ T8284] vxlan0: entered promiscuous mode [ 90.540377][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.552896][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.583460][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.623008][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.698904][ T7772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.785947][ T29] audit: type=1400 audit(90.768:2210): avc: denied { bind } for pid=8292 comm="syz.0.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.965166][ T8297] loop0: detected capacity change from 0 to 512 [ 90.976833][ T29] audit: type=1400 audit(90.788:2211): avc: denied { write } for pid=8292 comm="syz.0.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.999063][ T8297] EXT4-fs: inline encryption not supported [ 91.011561][ T8297] EXT4-fs: Ignoring removed nobh option [ 91.022395][ T8297] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.033883][ T8297] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 91.044032][ T8297] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1744: Corrupt directory, running e2fsck is recommended [ 91.063107][ T8297] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 91.080036][ T8297] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1744: corrupted in-inode xattr: invalid ea_ino [ 91.113439][ T8297] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1744: couldn't read orphan inode 15 (err -117) [ 91.135648][ T8297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.173263][ T8297] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.184828][ T8297] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 91.194926][ T8297] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1744: Corrupt directory, running e2fsck is recommended [ 91.231281][ T8297] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.242869][ T8297] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 91.252955][ T8297] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1744: Corrupt directory, running e2fsck is recommended [ 91.267751][ T29] audit: type=1326 audit(91.248:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.316763][ T8303] loop2: detected capacity change from 0 to 128 [ 91.323248][ T8301] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.334832][ T8301] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 91.344946][ T8301] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1744: Corrupt directory, running e2fsck is recommended [ 91.369018][ T29] audit: type=1326 audit(91.278:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.373338][ T8297] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.391736][ T29] audit: type=1326 audit(91.278:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.391761][ T29] audit: type=1326 audit(91.278:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.448516][ T29] audit: type=1326 audit(91.278:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.471268][ T29] audit: type=1326 audit(91.278:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fb7b3ebe9 code=0x7ffc0000 [ 91.513804][ T8303] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 91.522435][ T8303] FAT-fs (loop2): Filesystem has been set read-only [ 91.529387][ T8303] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 91.594892][ T7772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.640077][ T8327] loop0: detected capacity change from 0 to 128 [ 91.654425][ T8327] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 91.664687][ T8327] FAT-fs (loop0): Filesystem has been set read-only [ 91.702438][ T8327] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 91.713981][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.721218][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.778437][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.790395][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.833976][ T8326] vxlan0: left promiscuous mode [ 91.845782][ T41] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.854745][ T41] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.871486][ T41] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.880438][ T41] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.902318][ T41] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.911192][ T41] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.926696][ T41] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.935683][ T41] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.089124][ T8344] lo speed is unknown, defaulting to 1000 [ 92.100598][ T8342] bond_slave_0: entered promiscuous mode [ 92.106321][ T8342] bond_slave_1: entered promiscuous mode [ 92.112317][ T8342] macsec1: entered allmulticast mode [ 92.117633][ T8342] bond0: entered allmulticast mode [ 92.122774][ T8342] bond_slave_0: entered allmulticast mode [ 92.128494][ T8342] bond_slave_1: entered allmulticast mode [ 92.140128][ T8342] bond0: left allmulticast mode [ 92.145010][ T8342] bond_slave_0: left allmulticast mode [ 92.150496][ T8342] bond_slave_1: left allmulticast mode [ 92.155992][ T8342] bond_slave_0: left promiscuous mode [ 92.161380][ T8342] bond_slave_1: left promiscuous mode [ 92.244371][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 92.298250][ T12] bridge_slave_1: left allmulticast mode [ 92.303987][ T12] bridge_slave_1: left promiscuous mode [ 92.309655][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.363945][ T8364] loop3: detected capacity change from 0 to 128 [ 92.386000][ T12] bridge_slave_0: left allmulticast mode [ 92.391800][ T12] bridge_slave_0: left promiscuous mode [ 92.397495][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.425860][ T8364] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 92.434290][ T8364] FAT-fs (loop3): Filesystem has been set read-only [ 92.443961][ T8368] loop6: detected capacity change from 0 to 164 [ 92.481714][ T8364] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 92.527914][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.557588][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.584137][ T12] bond0 (unregistering): Released all slaves [ 92.628062][ T12] hsr_slave_0: left promiscuous mode [ 92.643858][ T12] hsr_slave_1: left promiscuous mode [ 92.649574][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.669463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.764080][ T8395] loop6: detected capacity change from 0 to 128 [ 92.777633][ T8395] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 92.786190][ T8395] FAT-fs (loop6): Filesystem has been set read-only [ 92.799951][ T8395] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 92.810249][ T8385] macsec1: entered allmulticast mode [ 92.815630][ T8385] bond0: entered allmulticast mode [ 92.820733][ T8385] bond_slave_0: entered allmulticast mode [ 92.826504][ T8385] bond_slave_1: entered allmulticast mode [ 92.834982][ T8385] bond0: left allmulticast mode [ 92.839831][ T8385] bond_slave_0: left allmulticast mode [ 92.845319][ T8385] bond_slave_1: left allmulticast mode [ 92.855654][ T4637] syz_tun (unregistering): left promiscuous mode [ 92.863190][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.870264][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.878020][ T8344] bridge_slave_0: entered allmulticast mode [ 92.884631][ T8344] bridge_slave_0: entered promiscuous mode [ 92.893194][ T8396] team0 (unregistering): Port device team_slave_0 removed [ 92.900882][ T8396] team0 (unregistering): Port device team_slave_1 removed [ 92.912257][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.919336][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.926939][ T8344] bridge_slave_1: entered allmulticast mode [ 92.933514][ T8344] bridge_slave_1: entered promiscuous mode [ 92.949424][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.959402][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.977933][ T8344] team0: Port device team_slave_0 added [ 92.984493][ T8344] team0: Port device team_slave_1 added [ 92.998785][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.005728][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.031624][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.042948][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.050027][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.076081][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.108008][ T8398] loop0: detected capacity change from 0 to 164 [ 93.118400][ T8398] bio_check_eod: 39 callbacks suppressed [ 93.118415][ T8398] syz.0.1786: attempt to access beyond end of device [ 93.118415][ T8398] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.139344][ T8398] syz.0.1786: attempt to access beyond end of device [ 93.139344][ T8398] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.162762][ T8344] hsr_slave_0: entered promiscuous mode [ 93.168819][ T8344] hsr_slave_1: entered promiscuous mode [ 93.278498][ T8344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 93.290492][ T8344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 93.298460][ T8424] loop0: detected capacity change from 0 to 128 [ 93.306708][ T8422] team0 (unregistering): Port device team_slave_0 removed [ 93.315076][ T8422] team0 (unregistering): Port device team_slave_1 removed [ 93.327503][ T8344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 93.338177][ T8344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 93.358157][ T8404] lo speed is unknown, defaulting to 1000 [ 93.422376][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 93.440835][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.447818][ T8441] loop3: detected capacity change from 0 to 164 [ 93.453284][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.464205][ T8441] syz.3.1801: attempt to access beyond end of device [ 93.464205][ T8441] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.478705][ T8441] syz.3.1801: attempt to access beyond end of device [ 93.478705][ T8441] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.494273][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.532636][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.539702][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.548530][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.555581][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.586109][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.615308][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.622565][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.629706][ T8404] bridge_slave_0: entered allmulticast mode [ 93.636802][ T8404] bridge_slave_0: entered promiscuous mode [ 93.644292][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.651316][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.658442][ T8404] bridge_slave_1: entered allmulticast mode [ 93.665205][ T8404] bridge_slave_1: entered promiscuous mode [ 93.676135][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.690014][ T8344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.712520][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.724595][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.736946][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.757329][ T8404] team0: Port device team_slave_0 added [ 93.764243][ T8404] team0: Port device team_slave_1 added [ 93.779434][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.786392][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.812312][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.823275][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.830253][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.856175][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.885264][ T8404] hsr_slave_0: entered promiscuous mode [ 93.891252][ T8404] hsr_slave_1: entered promiscuous mode [ 93.897162][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 93.902890][ T8404] Cannot create hsr debugfs directory [ 93.909840][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.980857][ T12] batadv1: left allmulticast mode [ 93.985923][ T12] batadv1: left promiscuous mode [ 93.991013][ T12] bridge0: port 3(batadv1) entered disabled state [ 93.997978][ T12] bridge_slave_1: left allmulticast mode [ 94.003640][ T12] bridge_slave_1: left promiscuous mode [ 94.009284][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.017150][ T12] bridge_slave_0: left allmulticast mode [ 94.022833][ T12] bridge_slave_0: left promiscuous mode [ 94.028532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.064483][ T8476] loop3: detected capacity change from 0 to 512 [ 94.103367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.112913][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.122442][ T12] bond0 (unregistering): Released all slaves [ 94.145023][ T8479] team0 (unregistering): Port device team_slave_0 removed [ 94.154973][ T8479] team0 (unregistering): Port device team_slave_1 removed [ 94.166218][ T12] tipc: Disabling bearer [ 94.171493][ T12] tipc: Left network mode [ 94.189195][ T12] batadv_slave_0: left promiscuous mode [ 94.196375][ T12] hsr_slave_0: left promiscuous mode [ 94.203348][ T12] hsr_slave_1: left promiscuous mode [ 94.210829][ T12] veth1_macvtap: left promiscuous mode [ 94.216640][ T12] veth0_macvtap: left allmulticast mode [ 94.222236][ T12] veth0_macvtap: left promiscuous mode [ 94.227793][ T12] veth1_vlan: left promiscuous mode [ 94.233243][ T12] veth0_vlan: left promiscuous mode [ 94.271410][ T57] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 94.299872][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.309461][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.337498][ T8404] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 94.346117][ T1036] lo speed is unknown, defaulting to 1000 [ 94.346206][ T8404] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 94.351892][ T1036] infiniband syz0: ib_query_port failed (-19) [ 94.370604][ T8404] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 94.381251][ T8404] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 94.429787][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.438179][ T8344] veth0_vlan: entered promiscuous mode [ 94.449258][ T8344] veth1_vlan: entered promiscuous mode [ 94.457790][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.470871][ T8344] veth0_macvtap: entered promiscuous mode [ 94.482984][ T8344] veth1_macvtap: entered promiscuous mode [ 94.491808][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.498884][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.511232][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.518458][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.533033][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.548005][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.562887][ T3450] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.583318][ T3450] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597249][ T3450] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615041][ T3450] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.649246][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.700786][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1764'. [ 94.715643][ T8512] vxlan0: entered promiscuous mode [ 94.721323][ T31] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.730643][ T31] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.739521][ T31] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.749090][ T31] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.799785][ T8404] veth0_vlan: entered promiscuous mode [ 94.807530][ T8404] veth1_vlan: entered promiscuous mode [ 94.823719][ T8404] veth0_macvtap: entered promiscuous mode [ 94.830965][ T8404] veth1_macvtap: entered promiscuous mode [ 94.842116][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.854026][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.864662][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.874166][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.884336][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893180][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964551][ T8536] loop8: detected capacity change from 0 to 128 [ 94.981756][ T8538] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1813'. [ 94.990955][ T8538] unsupported nla_type 65024 [ 94.998178][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 95.009285][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 95.037525][ T8536] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 95.046616][ T8536] FAT-fs (loop8): Filesystem has been set read-only [ 95.063251][ T8536] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 95.082078][ T8552] $H: renamed from bond0 (while UP) [ 95.092726][ T8552] $H: entered promiscuous mode [ 95.097816][ T8552] bond_slave_0: entered promiscuous mode [ 95.103584][ T8552] bond_slave_1: entered promiscuous mode [ 95.206996][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'. [ 95.217095][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'. [ 95.497028][ T8593] loop7: detected capacity change from 0 to 128 [ 95.506477][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 95.516136][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 95.516146][ T29] audit: type=1400 audit(95.498:2305): avc: denied { firmware_load } for pid=8594 comm="syz.0.1851" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 95.537454][ T8593] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 95.555155][ T8593] FAT-fs (loop7): Filesystem has been set read-only [ 95.562179][ T8593] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 95.576012][ T8597] $H: renamed from bond0 [ 95.586456][ T8597] $H: entered promiscuous mode [ 95.591591][ T8597] bond_slave_0: entered promiscuous mode [ 95.597273][ T8597] bond_slave_1: entered promiscuous mode [ 95.753804][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 95.763807][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 95.816720][ T29] audit: type=1326 audit(95.768:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 95.839512][ T29] audit: type=1326 audit(95.768:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 95.862191][ T29] audit: type=1326 audit(95.768:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 95.884857][ T29] audit: type=1326 audit(95.768:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 95.908473][ T29] audit: type=1326 audit(95.768:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 95.931288][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1852'. [ 95.943399][ T8621] vxlan0: entered promiscuous mode [ 95.960361][ T51] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.969540][ T51] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.978603][ T51] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.019118][ T51] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.359762][ T29] audit: type=1326 audit(96.338:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b287cebe9 code=0x7ffc0000 [ 96.382540][ T29] audit: type=1326 audit(96.338:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b287cebe9 code=0x7ffc0000 [ 96.407828][ T29] audit: type=1326 audit(96.388:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b287cebe9 code=0x7ffc0000 [ 96.430669][ T29] audit: type=1326 audit(96.388:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b287cebe9 code=0x7ffc0000 [ 96.588325][ T8679] SELinux: failed to load policy [ 96.803579][ T8709] SELinux: failed to load policy [ 96.833741][ T8719] loop0: detected capacity change from 0 to 128 [ 97.095532][ T8744] SELinux: failed to load policy [ 97.722428][ T8789] loop7: detected capacity change from 0 to 1024 [ 97.755414][ T8789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.776866][ T8789] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.1933: missing EA_INODE flag [ 97.811876][ T8789] EXT4-fs (loop7): Remounting filesystem read-only [ 97.846939][ T8344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.004199][ T8814] loop9: detected capacity change from 0 to 7 [ 98.016284][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.026497][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.033245][ T8818] loop8: detected capacity change from 0 to 1024 [ 98.040723][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.050952][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.058799][ T8814] loop9: unable to read partition table [ 98.065074][ T8814] loop_reread_partitions: partition scan of loop9 (被xڬd͈`*` [ 98.065074][ T8814] ) failed (rc=-5) [ 98.080836][ T8818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.126365][ T8818] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.1946: missing EA_INODE flag [ 98.139416][ T8818] EXT4-fs (loop8): Remounting filesystem read-only [ 98.156556][ T8404] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.171267][ T8827] loop6: detected capacity change from 0 to 1024 [ 98.178769][ T8827] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.198968][ T8827] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1950: bg 0: block 10: padding at end of block bitmap is not set [ 98.229346][ T8827] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1950: Failed to acquire dquot type 0 [ 98.242726][ T8827] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1950: Failed to acquire dquot type 0 [ 98.257214][ T8827] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1950: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.327208][ T8827] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1950: Failed to acquire dquot type 0 [ 98.379262][ T8827] EXT4-fs (loop6): 1 orphan inode deleted [ 98.396665][ T8827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.459668][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.498686][ T8849] loop8: detected capacity change from 0 to 128 [ 98.530308][ T8854] loop6: detected capacity change from 0 to 1024 [ 98.546920][ T8854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.578387][ T8854] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.1960: missing EA_INODE flag [ 98.590884][ T8854] EXT4-fs (loop6): Remounting filesystem read-only [ 98.607664][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.840287][ T8884] netlink: 'syz.6.1971': attribute type 1 has an invalid length. [ 98.848062][ T8884] netlink: 'syz.6.1971': attribute type 2 has an invalid length. [ 98.886236][ T8886] loop8: detected capacity change from 0 to 512 [ 98.913977][ T8886] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 98.923623][ T8886] EXT4-fs (loop8): orphan cleanup on readonly fs [ 98.932832][ T8886] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1973: corrupted inode contents [ 98.945042][ T8886] EXT4-fs (loop8): Remounting filesystem read-only [ 98.952659][ T8886] EXT4-fs (loop8): 1 truncate cleaned up [ 98.992137][ T51] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.002687][ T51] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.019739][ T51] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.045274][ T8886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.062937][ T8893] loop3: detected capacity change from 0 to 1024 [ 99.065610][ T8886] tipc: Started in network mode [ 99.074211][ T8886] tipc: Node identity ac14140f, cluster identity 4711 [ 99.083021][ T8886] tipc: New replicast peer: 255.255.255.83 [ 99.088924][ T8886] tipc: Enabled bearer , priority 10 [ 99.103467][ T8893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.123872][ T8893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1975: missing EA_INODE flag [ 99.135639][ T8893] EXT4-fs (loop3): Remounting filesystem read-only [ 99.135825][ T8404] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.158499][ T7777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.375436][ T8925] netlink: 'syz.3.1989': attribute type 19 has an invalid length. [ 99.392593][ T8925] netlink: 'syz.3.1989': attribute type 19 has an invalid length. [ 99.417776][ T8928] loop0: detected capacity change from 0 to 1024 [ 99.433814][ T8928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.463135][ T8928] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1990: missing EA_INODE flag [ 99.475325][ T8928] EXT4-fs (loop0): Remounting filesystem read-only [ 99.493419][ T7772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.510931][ T3409] IPVS: starting estimator thread 0... [ 99.598232][ T8960] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 99.611495][ T8947] IPVS: using max 2640 ests per chain, 132000 per kthread [ 99.784664][ T8973] 8021q: adding VLAN 0 to HW filter on device $H [ 99.795041][ T8973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.949590][ T8989] loop0: detected capacity change from 0 to 1024 [ 99.957372][ T8989] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.973501][ T8989] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2018: bg 0: block 10: padding at end of block bitmap is not set [ 99.988514][ T8989] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2018: Failed to acquire dquot type 0 [ 100.000249][ T8989] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2018: Failed to acquire dquot type 0 [ 100.012002][ T8989] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2018: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.026159][ T8989] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2018: Failed to acquire dquot type 0 [ 100.037656][ T8989] EXT4-fs (loop0): 1 orphan inode deleted [ 100.043758][ T8989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.066423][ T7772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.128490][ T9001] __nla_validate_parse: 21 callbacks suppressed [ 100.128502][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2020'. [ 100.159647][ T9003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.175156][ T9001] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 100.182909][ T9001] netlink: 'syz.0.2020': attribute type 2 has an invalid length. [ 100.190764][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2020'. [ 100.209186][ T3383] tipc: Node number set to 2886997007 [ 100.226134][ T9005] netlink: 'syz.3.2022': attribute type 1 has an invalid length. [ 100.233914][ T9005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2022'. [ 100.295263][ T9009] loop3: detected capacity change from 0 to 512 [ 100.325134][ T9009] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.335323][ T9009] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.343272][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 100.353778][ T9009] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2024: corrupted inode contents [ 100.353785][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 100.354212][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 100.365926][ T9009] EXT4-fs (loop3): Remounting filesystem read-only [ 100.374915][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 100.411591][ T9009] EXT4-fs (loop3): 1 truncate cleaned up [ 100.417466][ T57] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.428130][ T57] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.438818][ T57] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 100.449529][ T9009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.479406][ T9009] tipc: Started in network mode [ 100.484317][ T9009] tipc: Node identity ac14140f, cluster identity 4711 [ 100.491334][ T9009] tipc: New replicast peer: 255.255.255.83 [ 100.497211][ T9009] tipc: Enabled bearer , priority 10 [ 100.550199][ T7777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.551176][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2037'. [ 100.575114][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 100.575141][ T29] audit: type=1326 audit(100.558:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.604554][ T29] audit: type=1400 audit(100.558:2402): avc: denied { read write } for pid=7777 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.628216][ T29] audit: type=1400 audit(100.558:2403): avc: denied { open } for pid=7777 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.629789][ T9036] netlink: 'syz.8.2037': attribute type 1 has an invalid length. [ 100.651731][ T29] audit: type=1400 audit(100.558:2404): avc: denied { ioctl } for pid=7777 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.651758][ T29] audit: type=1326 audit(100.588:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.659462][ T9036] netlink: 'syz.8.2037': attribute type 2 has an invalid length. [ 100.714898][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2037'. [ 100.717428][ T29] audit: type=1326 audit(100.668:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.746535][ T29] audit: type=1326 audit(100.688:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f2f1014a5 code=0x7ffc0000 [ 100.769346][ T29] audit: type=1326 audit(100.688:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.792131][ T29] audit: type=1326 audit(100.688:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.826793][ T9047] loop6: detected capacity change from 0 to 1024 [ 100.833903][ T29] audit: type=1326 audit(100.788:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.0.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1f2f0cebe9 code=0x7ffc0000 [ 100.846445][ T9047] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.867698][ T9047] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.879454][ T9047] JBD2: no valid journal superblock found [ 100.885271][ T9047] EXT4-fs (loop6): Could not load journal inode [ 100.894216][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.904884][ T9041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.960494][ T9056] loop3: detected capacity change from 0 to 1024 [ 100.968727][ T9056] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.983265][ T9056] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2044: bg 0: block 10: padding at end of block bitmap is not set [ 100.998106][ T9056] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2044: Failed to acquire dquot type 0 [ 101.019110][ T9056] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2044: Failed to acquire dquot type 0 [ 101.033415][ T9056] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2044: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.047735][ T9056] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2044: Failed to acquire dquot type 0 [ 101.069086][ T9056] EXT4-fs (loop3): 1 orphan inode deleted [ 101.077393][ T9056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.094347][ T9069] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2051'. [ 101.118871][ T7777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.326101][ T9099] loop7: detected capacity change from 0 to 1024 [ 101.335115][ T9099] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.352667][ T9099] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2065: bg 0: block 10: padding at end of block bitmap is not set [ 101.368871][ T9099] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2065: Failed to acquire dquot type 0 [ 101.381602][ T9099] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2065: Failed to acquire dquot type 0 [ 101.394175][ T9099] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2065: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.408270][ T9099] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2065: Failed to acquire dquot type 0 [ 101.420583][ T9099] EXT4-fs (loop7): 1 orphan inode deleted [ 101.426752][ T9099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.457463][ T8344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.500815][ T9108] loop7: detected capacity change from 0 to 512 [ 101.541444][ T3395] tipc: Node number set to 2886997007 [ 101.548799][ T9108] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 101.557274][ T9108] EXT4-fs (loop7): orphan cleanup on readonly fs [ 101.566995][ T9108] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2068: corrupted inode contents [ 101.596425][ T9108] EXT4-fs (loop7): Remounting filesystem read-only [ 101.604507][ T9108] EXT4-fs (loop7): 1 truncate cleaned up [ 101.610215][ T51] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.620779][ T51] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.644338][ T51] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.670810][ T9108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.674106][ T9122] hub 6-0:1.0: USB hub found [ 101.695499][ T9108] tipc: Started in network mode [ 101.700375][ T9108] tipc: Node identity ac14140f, cluster identity 4711 [ 101.707772][ T9128] loop3: detected capacity change from 0 to 1024 [ 101.714416][ T9122] hub 6-0:1.0: 8 ports detected [ 101.714734][ T9108] tipc: New replicast peer: 255.255.255.83 [ 101.725207][ T9108] tipc: Enabled bearer , priority 10 [ 101.731732][ T9128] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.742745][ T9128] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.759272][ T9128] JBD2: no valid journal superblock found [ 101.765043][ T9128] EXT4-fs (loop3): Could not load journal inode [ 101.796593][ T8344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.917795][ T9149] loop8: detected capacity change from 0 to 512 [ 101.959121][ T9149] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2087: Failed to acquire dquot type 1 [ 101.974439][ T9149] EXT4-fs (loop8): 1 truncate cleaned up [ 101.995222][ T9161] loop7: detected capacity change from 0 to 1024 [ 101.998018][ T9149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.016078][ T9161] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.026980][ T9161] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.039165][ T9164] SELinux: failed to load policy [ 102.059255][ T9161] JBD2: no valid journal superblock found [ 102.065110][ T9161] EXT4-fs (loop7): Could not load journal inode [ 102.139633][ T8404] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.297904][ T9205] rdma_op ffff888104250580 conn xmit_rdma 0000000000000000 [ 102.366332][ T9207] hub 6-0:1.0: USB hub found [ 102.371152][ T9207] hub 6-0:1.0: 8 ports detected [ 102.400296][ T9221] wireguard0: entered promiscuous mode [ 102.405939][ T9221] wireguard0: entered allmulticast mode [ 102.465470][ T9236] rdma_op ffff888103764d80 conn xmit_rdma 0000000000000000 [ 102.549486][ T9250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.604381][ T9252] hub 6-0:1.0: USB hub found [ 102.609044][ T9252] hub 6-0:1.0: 8 ports detected [ 102.674729][ T9267] SELinux: failed to load policy [ 102.795931][ T9290] loop6: detected capacity change from 0 to 512 [ 102.814494][ T9290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.843527][ T3383] tipc: Node number set to 2886997007 [ 102.845051][ T9291] hub 6-0:1.0: USB hub found [ 102.856115][ T9291] hub 6-0:1.0: 8 ports detected [ 102.880126][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.922923][ T9308] SELinux: failed to load policy [ 102.943399][ T9306] vhci_hcd: invalid port number 96 [ 102.948491][ T9306] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.311289][ T9318] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 103.376757][ T9322] netlink: 'syz.6.2162': attribute type 7 has an invalid length. [ 103.394033][ T9328] loop3: detected capacity change from 0 to 128 [ 103.506674][ T9348] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 103.572554][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.581015][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.697639][ T9374] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 103.713684][ T31] bridge_slave_1: left allmulticast mode [ 103.719334][ T31] bridge_slave_1: left promiscuous mode [ 103.724993][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.733876][ T31] bridge_slave_0: left allmulticast mode [ 103.739510][ T31] bridge_slave_0: left promiscuous mode [ 103.745204][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.828692][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.840012][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.849108][ T31] bond0 (unregistering): Released all slaves [ 103.864249][ T9396] vhci_hcd: invalid port number 96 [ 103.869371][ T9396] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 103.881649][ T9398] wireguard0: entered promiscuous mode [ 103.887205][ T9398] wireguard0: entered allmulticast mode [ 103.915678][ T31] tipc: Disabling bearer [ 103.920633][ T31] tipc: Left network mode [ 103.925178][ T9401] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 103.938304][ T31] hsr_slave_0: left promiscuous mode [ 103.944911][ T31] hsr_slave_1: left promiscuous mode [ 103.950572][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.971442][ C1] ================================================================== [ 103.979515][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 103.986694][ C1] [ 103.988998][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 0: [ 103.997043][ C1] wq_worker_tick+0x60/0x230 [ 104.001634][ C1] sched_tick+0x11a/0x270 [ 104.005954][ C1] update_process_times+0x15f/0x190 [ 104.011144][ C1] tick_nohz_handler+0x249/0x2d0 [ 104.016065][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 104.021253][ C1] hrtimer_interrupt+0x21a/0x460 [ 104.026173][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 104.032058][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 104.037681][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.043645][ C1] queue_work_on+0x102/0x160 [ 104.048215][ C1] tty_insert_flip_string_and_push_buffer+0x1ce/0x1f0 [ 104.054967][ C1] pty_write+0x70/0x90 [ 104.059020][ C1] tty_put_char+0x8f/0xc0 [ 104.063344][ C1] __process_echoes+0x2f9/0x6b0 [ 104.068178][ C1] n_tty_receive_buf_common+0x8e4/0xbe0 [ 104.073709][ C1] n_tty_receive_buf2+0x33/0x40 [ 104.078543][ C1] tty_ldisc_receive_buf+0x63/0xf0 [ 104.083645][ C1] tty_port_default_receive_buf+0x59/0x90 [ 104.089345][ C1] flush_to_ldisc+0x148/0x340 [ 104.094014][ C1] process_scheduled_works+0x4cb/0x9d0 [ 104.099463][ C1] worker_thread+0x582/0x770 [ 104.104043][ C1] kthread+0x489/0x510 [ 104.108099][ C1] ret_from_fork+0xda/0x150 [ 104.112588][ C1] ret_from_fork_asm+0x1a/0x30 [ 104.117336][ C1] [ 104.119638][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 1: [ 104.127683][ C1] wq_worker_tick+0x60/0x230 [ 104.132255][ C1] sched_tick+0x11a/0x270 [ 104.136572][ C1] update_process_times+0x15f/0x190 [ 104.141775][ C1] tick_nohz_handler+0x249/0x2d0 [ 104.146698][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 104.151880][ C1] hrtimer_interrupt+0x21a/0x460 [ 104.156801][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 104.162690][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 104.168307][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.174268][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 104.179285][ C1] process_scheduled_works+0x486/0x9d0 [ 104.184732][ C1] worker_thread+0x582/0x770 [ 104.189310][ C1] kthread+0x489/0x510 [ 104.193364][ C1] ret_from_fork+0xda/0x150 [ 104.197849][ C1] ret_from_fork_asm+0x1a/0x30 [ 104.202596][ C1] [ 104.204897][ C1] value changed: 0x0000000000177fa0 -> 0x000000000017a6b0 [ 104.211978][ C1] [ 104.214281][ C1] Reported by Kernel Concurrency Sanitizer on: [ 104.220423][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.232815][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.242851][ C1] Workqueue: events_unbound flush_to_ldisc [ 104.248652][ C1] ================================================================== [ 104.267537][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.807888][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.818285][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.863455][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.873699][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.933554][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.943853][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.013328][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.023637][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.064210][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.074507][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.113775][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.124030][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.153197][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.163501][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.203476][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.213736][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.273945][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.353907][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.403349][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.463570][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.512954][ T31] bridge_slave_1: left allmulticast mode [ 105.518710][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.526280][ T31] bridge_slave_0: left allmulticast mode [ 105.531995][ T31] bridge_slave_0: left promiscuous mode [ 105.537592][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.545635][ T31] bridge_slave_1: left allmulticast mode [ 105.551252][ T31] bridge_slave_1: left promiscuous mode [ 105.556898][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.564575][ T31] bridge_slave_0: left allmulticast mode [ 105.570187][ T31] bridge_slave_0: left promiscuous mode [ 105.575776][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.583950][ T31] bridge_slave_1: left allmulticast mode [ 105.589563][ T31] bridge_slave_1: left promiscuous mode [ 105.595177][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.602788][ T31] bridge_slave_0: left allmulticast mode [ 105.608452][ T31] bridge_slave_0: left promiscuous mode [ 105.614123][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.723073][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.731700][ T31] bond_slave_0: left promiscuous mode [ 105.737885][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.746668][ T31] bond_slave_1: left promiscuous mode [ 105.752636][ T31] $H (unregistering): Released all slaves [ 105.813135][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.822887][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.832261][ T31] bond0 (unregistering): Released all slaves [ 105.923852][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.933385][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.942716][ T31] bond0 (unregistering): Released all slaves [ 105.994863][ T31] tipc: Disabling bearer [ 105.999823][ T31] tipc: Left network mode [ 106.004453][ T31] tipc: Disabling bearer [ 106.009376][ T31] tipc: Left network mode [ 106.016983][ T31] hsr_slave_0: left promiscuous mode [ 106.022565][ T31] hsr_slave_1: left promiscuous mode [ 106.028078][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.035460][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.043012][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.050370][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.058932][ T31] hsr_slave_0: left promiscuous mode [ 106.064513][ T31] hsr_slave_1: left promiscuous mode [ 106.069925][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.077310][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.084795][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.092163][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.100857][ T31] hsr_slave_0: left promiscuous mode [ 106.106380][ T31] hsr_slave_1: left promiscuous mode [ 106.111894][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.119244][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.126776][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.134167][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.147653][ T31] veth1_macvtap: left promiscuous mode [ 106.153192][ T31] veth0_macvtap: left promiscuous mode [ 106.158656][ T31] veth1_vlan: left promiscuous mode [ 106.163851][ T31] veth0_vlan: left promiscuous mode [ 106.169407][ T31] veth1_macvtap: left promiscuous mode [ 106.174860][ T31] veth0_macvtap: left promiscuous mode [ 106.180376][ T31] veth1_vlan: left promiscuous mode [ 106.185596][ T31] veth0_vlan: left promiscuous mode [ 106.191163][ T31] veth1_macvtap: left promiscuous mode [ 106.196635][ T31] veth0_macvtap: left promiscuous mode [ 106.202349][ T31] veth1_vlan: left promiscuous mode [ 106.207542][ T31] veth0_vlan: left promiscuous mode [ 106.349755][ T31] team0 (unregistering): Port device team_slave_1 removed [ 106.358791][ T31] team0 (unregistering): Port device team_slave_0 removed [ 106.404480][ T31] team0 (unregistering): Port device team_slave_1 removed [ 106.413419][ T31] team0 (unregistering): Port device team_slave_0 removed [ 107.342678][ T31] bridge_slave_1: left allmulticast mode [ 107.348326][ T31] bridge_slave_1: left promiscuous mode [ 107.353953][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.361454][ T31] bridge_slave_0: left allmulticast mode [ 107.367090][ T31] bridge_slave_0: left promiscuous mode [ 107.372796][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.433823][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.442451][ T31] bond_slave_0: left promiscuous mode [ 107.448205][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.457101][ T31] bond_slave_1: left promiscuous mode [ 107.462644][ T31] $H (unregistering): Released all slaves [ 107.514696][ T31] hsr_slave_0: left promiscuous mode [ 107.520238][ T31] hsr_slave_1: left promiscuous mode [ 107.525702][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.533326][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.844573][ T31] IPVS: stop unused estimator thread 0...