last executing test programs: 5m35.892193588s ago: executing program 1 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 5m35.876355239s ago: executing program 1 (id=308): socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m35.855276181s ago: executing program 1 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 5m35.840092472s ago: executing program 1 (id=310): syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='writeback_sb_inodes_requeue\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_open_pts(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) 5m35.482801791s ago: executing program 1 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 5m34.963519093s ago: executing program 1 (id=330): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000001c0)=0x741e, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r8], 0x34}}, 0x400c840) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}, 0x1, 0x200000000000000}, 0x0) 5m34.963015213s ago: executing program 32 (id=330): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000001c0)=0x741e, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r8], 0x34}}, 0x400c840) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}, 0x1, 0x200000000000000}, 0x0) 6.145819852s ago: executing program 4 (id=5262): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x4, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 6.022713402s ago: executing program 4 (id=5263): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.099909136s ago: executing program 4 (id=5266): clock_adjtime(0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) 4.353463037s ago: executing program 5 (id=5274): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.19145197s ago: executing program 4 (id=5277): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.407923514s ago: executing program 5 (id=5281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000003ac0)={0x102, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") 2.256353227s ago: executing program 0 (id=5289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000600)=0xd, 0x18) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000740)}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.077862551s ago: executing program 0 (id=5291): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000280)=""/242) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.776364766s ago: executing program 5 (id=5294): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) 1.761077677s ago: executing program 4 (id=5295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000050000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 1.737138779s ago: executing program 0 (id=5296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000600)=0xd, 0x18) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000740)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.682485713s ago: executing program 4 (id=5298): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1.288346115s ago: executing program 5 (id=5302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.153796296s ago: executing program 3 (id=5305): clock_adjtime(0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 1.089900991s ago: executing program 3 (id=5306): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.047787674s ago: executing program 2 (id=5316): clock_adjtime(0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 977.329261ms ago: executing program 0 (id=5307): socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) 977.083621ms ago: executing program 2 (id=5308): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 636.337158ms ago: executing program 0 (id=5309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x2141, 0x9, 0x0, 0x5, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 635.488048ms ago: executing program 2 (id=5310): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x4, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 576.757243ms ago: executing program 2 (id=5311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000006ae3500000000000000000000000000010000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) 486.44842ms ago: executing program 0 (id=5312): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) write$ppp(r0, &(0x7f0000000480), 0x0) 485.921121ms ago: executing program 2 (id=5313): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x4, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 443.125524ms ago: executing program 2 (id=5314): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/58, 0x3a}], 0x1, &(0x7f0000001740)=""/106, 0x6a}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001840)=""/101, 0x65}, {&(0x7f00000018c0)=""/205, 0xcd}, {0x0}], 0x3, &(0x7f0000001a80)=""/80, 0x50}, 0xf}], 0x2, 0x120, &(0x7f0000001b80)={0x77359400}) sched_setaffinity(r2, 0x8, &(0x7f0000001140)=0xa7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r5, 0x0, 0x0, 0x10122, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, 0x0, 0x14) finit_module(r0, 0x0, 0x3) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1) 401.055327ms ago: executing program 3 (id=5315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 375.630829ms ago: executing program 3 (id=5317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 356.614801ms ago: executing program 5 (id=5318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000600)=0xd, 0x18) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000740)}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 157.907467ms ago: executing program 3 (id=5319): socket$packet(0x11, 0x2, 0x300) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x5409, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) 69.841894ms ago: executing program 5 (id=5320): clock_adjtime(0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1233, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 3 (id=5321): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): -000000000000. [ 218.794252][ T29] audit: type=1326 audit(1755709067.102:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 218.800799][T11440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.818872][ T29] audit: type=1326 audit(1755709067.132:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 218.829663][T11662] loop2: detected capacity change from 0 to 1024 [ 218.860742][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.871883][T11662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.885975][T11662] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.2938: missing EA_INODE flag [ 218.895825][T11440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.907924][T11440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.910175][T11662] EXT4-fs (loop2): Remounting filesystem read-only [ 218.925959][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.933034][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.941857][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.948918][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.969772][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.992630][T11440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.176383][T11694] loop3: detected capacity change from 0 to 1024 [ 219.193239][T11440] veth0_vlan: entered promiscuous mode [ 219.205660][T11440] veth1_vlan: entered promiscuous mode [ 219.232182][T11440] veth0_macvtap: entered promiscuous mode [ 219.252074][T11440] veth1_macvtap: entered promiscuous mode [ 219.267977][T11440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.364795][T11694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.464526][T11440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.496309][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 219.514246][T11694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 219.538317][ T384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.573470][ T384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.582656][ T384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.591507][ T384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.601448][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.625689][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 219.634602][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 219.645696][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2873'. [ 219.662134][T11707] loop3: detected capacity change from 0 to 1024 [ 219.676479][ T29] audit: type=1326 audit(1755709067.972:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776489ebe9 code=0x7ffc0000 [ 219.699995][ T29] audit: type=1326 audit(1755709067.972:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776489ebe9 code=0x7ffc0000 [ 219.730606][T11707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.747886][T11714] loop0: detected capacity change from 0 to 1024 [ 219.765398][T11714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.777983][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.791291][T11714] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2951: missing EA_INODE flag [ 219.808010][T11714] EXT4-fs (loop0): Remounting filesystem read-only [ 219.810380][T11728] loop5: detected capacity change from 0 to 512 [ 219.818307][T11730] loop3: detected capacity change from 0 to 512 [ 219.830061][T11728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.839875][T11730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.856322][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.859850][T11730] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.912188][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.925550][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.952381][ T29] audit: type=1326 audit(1755709068.262:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 219.979569][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 219.999051][ T29] audit: type=1326 audit(1755709068.292:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 220.041483][T11752] loop4: detected capacity change from 0 to 1024 [ 220.060016][T11752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.088096][T11760] loop5: detected capacity change from 0 to 512 [ 220.088242][T11763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2970'. [ 220.096115][T11760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.124232][T11760] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 220.125732][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.132238][T11760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 220.132506][T11760] EXT4-fs (loop5): orphan cleanup on readonly fs [ 220.155885][T11760] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 220.166485][T11760] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 220.181124][T11760] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 220.182380][T11767] syzkaller0: entered promiscuous mode [ 220.193323][T11767] syzkaller0: entered allmulticast mode [ 220.200270][T11760] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2969: bg 0: block 40: padding at end of block bitmap is not set [ 220.214705][T11771] loop0: detected capacity change from 0 to 1024 [ 220.218269][T11760] EXT4-fs (loop5): Remounting filesystem read-only [ 220.227829][T11760] EXT4-fs (loop5): 1 truncate cleaned up [ 220.234197][T11760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.239659][T11771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.265910][T11771] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.268581][ T29] audit: type=1400 audit(1755709068.572:4018): avc: denied { read } for pid=11759 comm="syz.5.2969" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 220.300148][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.319028][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.341344][T11775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.342296][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'. [ 220.360542][T11779] loop0: detected capacity change from 0 to 512 [ 220.444907][ T29] audit: type=1326 audit(1755709068.752:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11783 comm="syz.2.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192d2bebe9 code=0x7ffc0000 [ 220.470610][T11779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.493397][T11779] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.541997][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.565599][T11798] loop2: detected capacity change from 0 to 512 [ 220.580534][T11802] loop0: detected capacity change from 0 to 1024 [ 220.588539][T11798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.601994][T11798] EXT4-fs (loop2): 1 truncate cleaned up [ 220.604462][T11802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.608132][T11798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.632439][T11804] loop5: detected capacity change from 0 to 128 [ 220.639849][T11802] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 220.663843][T11804] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.667067][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.678786][T11804] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.685908][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.716709][T11811] loop0: detected capacity change from 0 to 128 [ 220.726071][T11811] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.740216][T11811] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.751714][T11440] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.771475][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.787855][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 220.849506][T11828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.876705][T11835] loop5: detected capacity change from 0 to 1024 [ 221.022222][T11835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.036266][T11835] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.2997: missing EA_INODE flag [ 221.049432][T11835] EXT4-fs (loop5): Remounting filesystem read-only [ 221.067922][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.402458][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3004'. [ 221.494398][T11872] loop3: detected capacity change from 0 to 1024 [ 221.509850][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.533057][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.564847][T11885] loop5: detected capacity change from 0 to 1024 [ 221.580329][T11885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.594332][T11885] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.3017: missing EA_INODE flag [ 221.606396][T11885] EXT4-fs (loop5): Remounting filesystem read-only [ 221.650364][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.791804][T11906] loop0: detected capacity change from 0 to 512 [ 221.807479][T11906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.824643][T11906] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 221.832707][T11906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 221.842301][T11906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.854143][T11906] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.868739][T11906] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 221.908812][T11906] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3026: bg 0: block 40: padding at end of block bitmap is not set [ 221.934661][T11906] EXT4-fs (loop0): Remounting filesystem read-only [ 221.942265][T11906] EXT4-fs (loop0): 1 truncate cleaned up [ 221.948368][T11906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.975550][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.003249][T11918] loop2: detected capacity change from 0 to 128 [ 222.015082][T11917] loop0: detected capacity change from 0 to 1024 [ 222.022308][T11918] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.031003][T11917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.038663][T11918] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.064987][T11917] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 222.092828][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.110153][T11169] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.126826][T11927] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 222.195005][T11941] loop5: detected capacity change from 0 to 512 [ 222.199276][T11943] loop2: detected capacity change from 0 to 1024 [ 222.202511][T11941] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.219808][T11943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.219837][T11941] EXT4-fs (loop5): 1 truncate cleaned up [ 222.220221][T11941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.238029][T11943] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3042: missing EA_INODE flag [ 222.261616][T11943] EXT4-fs (loop2): Remounting filesystem read-only [ 222.270556][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.283483][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.302552][ C1] hrtimer: interrupt took 36980 ns [ 222.320216][T11954] loop4: detected capacity change from 0 to 128 [ 222.331254][T11955] loop5: detected capacity change from 0 to 512 [ 222.331425][T11954] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.338360][T11955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.361510][T11954] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.373842][T11955] EXT4-fs (loop5): 1 truncate cleaned up [ 222.379919][T11955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.390766][T11961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 222.427840][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.440959][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.444158][T11967] loop2: detected capacity change from 0 to 512 [ 222.457106][T11967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.485155][T11967] EXT4-fs (loop2): 1 truncate cleaned up [ 222.491730][T11967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.520596][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.540651][T11979] loop2: detected capacity change from 0 to 1024 [ 222.551130][T11979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.565492][T11988] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 222.565649][T11979] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3056: missing EA_INODE flag [ 222.588782][T11979] EXT4-fs (loop2): Remounting filesystem read-only [ 222.604224][T11993] loop3: detected capacity change from 0 to 512 [ 222.610933][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.631223][T11993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.644948][T11993] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.672061][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.042661][T12008] loop0: detected capacity change from 0 to 512 [ 223.060955][T12008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.073561][T12008] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.096058][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.261657][T12022] loop0: detected capacity change from 0 to 512 [ 223.269459][T12022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.289879][T12022] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 223.297941][T12022] System zones: 0-2, 18-18, 34-34 [ 223.303742][T12022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.316253][T12022] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.354015][T12028] loop4: detected capacity change from 0 to 512 [ 223.362178][T12028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.374709][T12028] EXT4-fs (loop4): 1 truncate cleaned up [ 223.383716][T12028] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3076: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 223.405272][T12028] EXT4-fs (loop4): Remounting filesystem read-only [ 223.426185][T12035] loop4: detected capacity change from 0 to 512 [ 223.440694][T12035] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.594996][T12051] loop3: detected capacity change from 0 to 128 [ 223.603313][T12051] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.942391][T12079] loop3: detected capacity change from 0 to 512 [ 223.966054][T12081] loop2: detected capacity change from 0 to 512 [ 224.002528][T12081] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.056852][T12090] __nla_validate_parse: 4 callbacks suppressed [ 224.056866][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3092'. [ 224.092506][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 224.101447][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 224.110423][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 224.118840][T12097] loop2: detected capacity change from 0 to 128 [ 224.126679][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3091'. [ 224.135741][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3091'. [ 224.217048][T12104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.237503][T12109] loop0: detected capacity change from 0 to 512 [ 224.255222][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 224.255234][ T29] audit: type=1326 audit(1755709072.562:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151eccebe9 code=0x7ffc0000 [ 224.282626][T12111] tipc: Started in network mode [ 224.289664][ T29] audit: type=1326 audit(1755709072.562:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.5.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151eccebe9 code=0x7ffc0000 [ 224.292621][T12109] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.313363][T12111] tipc: Node identity 96cecac2a85b, cluster identity 4711 [ 224.330986][T12111] tipc: Enabled bearer , priority 0 [ 224.375156][T12110] tipc: Resetting bearer [ 224.394052][T12110] tipc: Disabling bearer [ 224.463822][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3108'. [ 224.560965][T12139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.611216][T12144] loop4: detected capacity change from 0 to 1024 [ 224.631628][T12145] loop2: detected capacity change from 0 to 1024 [ 224.638331][T12145] EXT4-fs: Ignoring removed i_version option [ 224.666092][T12144] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3113: missing EA_INODE flag [ 224.678013][T12145] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.678542][T12144] EXT4-fs (loop4): Remounting filesystem read-only [ 224.699058][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3114'. [ 224.708070][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3114'. [ 224.718729][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3114'. [ 224.741366][T12145] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3111: Invalid block bitmap block 0 in block_group 0 [ 224.774967][T12156] loop5: detected capacity change from 0 to 128 [ 224.781679][T12145] Quota error (device loop2): write_blk: dquota write failed [ 224.789109][T12145] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 224.800200][T12156] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.801775][T12145] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3111: Failed to acquire dquot type 0 [ 224.833615][T12145] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3111: Freeing blocks not in datazone - block = 0, count = 4096 [ 224.836146][T12161] loop4: detected capacity change from 0 to 128 [ 224.854179][T12145] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3111: Invalid inode bitmap blk 0 in block_group 0 [ 224.867727][T12145] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 224.867792][ T3463] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 224.867813][ T3463] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 224.877398][T12145] EXT4-fs (loop2): 1 orphan inode deleted [ 224.988011][T12175] loop5: detected capacity change from 0 to 1024 [ 225.027582][T12175] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.3126: missing EA_INODE flag [ 225.045784][T12175] EXT4-fs (loop5): Remounting filesystem read-only [ 225.178422][T12182] lo speed is unknown, defaulting to 1000 [ 225.235639][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.268119][T12182] chnl_net:caif_netlink_parms(): no params data found [ 225.286189][T12200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.323172][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.370769][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.377908][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.385213][T12182] bridge_slave_0: entered allmulticast mode [ 225.394408][T12182] bridge_slave_0: entered promiscuous mode [ 225.406982][ T51] bond0: (slave netdevsim1): Releasing backup interface [ 225.416948][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 225.427492][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.439707][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.446755][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.455616][T12182] bridge_slave_1: entered allmulticast mode [ 225.462235][T12182] bridge_slave_1: entered promiscuous mode [ 225.485914][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.570282][T12182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.615660][T12182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.643120][T12222] loop5: detected capacity change from 0 to 512 [ 225.663168][ T51] bridge_slave_1: left allmulticast mode [ 225.668916][ T51] bridge_slave_1: left promiscuous mode [ 225.674587][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.685261][T12222] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.723410][ T51] bridge_slave_0: left allmulticast mode [ 225.729238][ T51] bridge_slave_0: left promiscuous mode [ 225.734897][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.939905][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.949970][ T51] bond_slave_0: left promiscuous mode [ 225.956676][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.965910][ T51] bond_slave_1: left promiscuous mode [ 225.973888][ T51] bond0 (unregistering): Released all slaves [ 225.982556][ T51] bond1 (unregistering): Released all slaves [ 226.003306][T12241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.012760][T12244] syzkaller0: entered promiscuous mode [ 226.018290][T12244] syzkaller0: entered allmulticast mode [ 226.036806][T12182] team0: Port device team_slave_0 added [ 226.042696][ T51] tipc: Left network mode [ 226.057516][T12182] team0: Port device team_slave_1 added [ 226.076777][ T51] hsr_slave_0: left promiscuous mode [ 226.084607][ T51] hsr_slave_1: left promiscuous mode [ 226.108864][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.116353][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.129472][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.136878][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.148277][ T51] team_slave_0: left promiscuous mode [ 226.153734][ T51] team_slave_1: left promiscuous mode [ 226.160674][ T51] veth1_macvtap: left promiscuous mode [ 226.166201][ T51] veth0_macvtap: left promiscuous mode [ 226.171796][ T51] veth1_vlan: left promiscuous mode [ 226.177079][ T51] veth0_vlan: left promiscuous mode [ 226.273730][ T51] team0 (unregistering): Port device team_slave_1 removed [ 226.285268][ T51] team0 (unregistering): Port device team_slave_0 removed [ 226.326850][T12182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.333871][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.359800][T12182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.371800][T12182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.378758][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.404723][T12182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.441625][T12268] loop4: detected capacity change from 0 to 512 [ 226.454962][T12182] hsr_slave_0: entered promiscuous mode [ 226.460970][T12182] hsr_slave_1: entered promiscuous mode [ 226.473673][T12268] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.505183][T12276] loop2: detected capacity change from 0 to 128 [ 226.521423][T12276] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.562614][T12279] syzkaller0: entered promiscuous mode [ 226.568102][T12279] syzkaller0: entered allmulticast mode [ 226.652791][T12293] loop5: detected capacity change from 0 to 1024 [ 226.660628][T12296] loop4: detected capacity change from 0 to 1024 [ 226.685938][T12293] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.3167: missing EA_INODE flag [ 226.698355][T12293] EXT4-fs (loop5): Remounting filesystem read-only [ 226.724414][T12304] loop4: detected capacity change from 0 to 2048 [ 226.731342][T12304] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.765410][T12312] loop5: detected capacity change from 0 to 128 [ 226.776966][T12314] loop2: detected capacity change from 0 to 1024 [ 226.780040][T12312] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.786919][T12317] loop4: detected capacity change from 0 to 512 [ 226.801180][T12317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.812188][T12317] EXT4-fs (loop4): 1 truncate cleaned up [ 226.849566][T12324] syzkaller0: entered promiscuous mode [ 226.855059][T12324] syzkaller0: entered allmulticast mode [ 226.866829][T12317] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3174: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 226.890016][T12317] EXT4-fs (loop4): Remounting filesystem read-only [ 226.897043][T12326] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.956479][T12182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.965539][T12182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.975502][T12182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.986395][T12182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.031675][T12342] loop2: detected capacity change from 0 to 512 [ 227.037460][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.052272][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.061724][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.068854][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.076803][T12342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.086559][T12182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.096991][T12182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.112795][T12342] EXT4-fs (loop2): 1 truncate cleaned up [ 227.113660][T12344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.128305][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.135383][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.157802][T12342] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.3182: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.179933][T12342] EXT4-fs (loop2): Remounting filesystem read-only [ 227.246560][T12362] loop2: detected capacity change from 0 to 512 [ 227.250764][T12182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.261571][T12362] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.273969][T12361] loop4: detected capacity change from 0 to 512 [ 227.288340][T12362] EXT4-fs (loop2): 1 truncate cleaned up [ 227.297934][T12361] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.361485][T12362] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.3187: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.368263][T12182] veth0_vlan: entered promiscuous mode [ 227.387999][T12362] EXT4-fs (loop2): Remounting filesystem read-only [ 227.396674][T12182] veth1_vlan: entered promiscuous mode [ 227.421743][T12182] veth0_macvtap: entered promiscuous mode [ 227.444654][T12182] veth1_macvtap: entered promiscuous mode [ 227.461823][T12182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.471822][T12182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.482712][ T8089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.497243][T12387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.523387][ T8089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.551163][ T3463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.567796][ T3463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.576144][T12398] loop4: detected capacity change from 0 to 1024 [ 227.597351][T12403] loop5: detected capacity change from 0 to 512 [ 227.630952][T12403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.649544][T12403] EXT4-fs (loop5): 1 truncate cleaned up [ 227.660907][T12403] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.3203: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.677043][T12398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3202: missing EA_INODE flag [ 227.682354][T12403] EXT4-fs (loop5): Remounting filesystem read-only [ 227.709792][T12398] EXT4-fs (loop4): Remounting filesystem read-only [ 227.775412][T12433] loop2: detected capacity change from 0 to 512 [ 227.805699][T12440] loop4: detected capacity change from 0 to 128 [ 227.813007][T12433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.829554][T12440] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.855460][T12433] EXT4-fs (loop2): 1 truncate cleaned up [ 227.973303][T12462] loop0: detected capacity change from 0 to 1024 [ 227.991596][T12466] loop2: detected capacity change from 0 to 512 [ 227.999095][T12468] loop4: detected capacity change from 0 to 512 [ 228.003317][T12462] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 228.022475][T12466] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.091303][T12483] loop2: detected capacity change from 0 to 512 [ 228.098033][T12483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.109510][T12483] EXT4-fs (loop2): 1 truncate cleaned up [ 228.144823][T12487] syzkaller0: entered promiscuous mode [ 228.150357][T12487] syzkaller0: entered allmulticast mode [ 228.350972][T12510] loop0: detected capacity change from 0 to 512 [ 228.357654][T12510] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.374167][T12510] EXT4-fs (loop0): 1 truncate cleaned up [ 228.523568][T12516] lo speed is unknown, defaulting to 1000 [ 228.707684][ T384] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.737228][T12516] chnl_net:caif_netlink_parms(): no params data found [ 228.780762][ T384] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.859987][ T384] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.960807][ T384] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.027284][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.034540][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.097079][T12516] bridge_slave_0: entered allmulticast mode [ 229.126385][T12516] bridge_slave_0: entered promiscuous mode [ 229.197094][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.204176][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.282811][T12516] bridge_slave_1: entered allmulticast mode [ 229.344415][T12516] bridge_slave_1: entered promiscuous mode [ 229.416422][ T384] bridge_slave_1: left allmulticast mode [ 229.422212][ T384] bridge_slave_1: left promiscuous mode [ 229.427872][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.449916][ T29] audit: type=1326 audit(1755709077.752:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12559 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 229.473486][ T29] audit: type=1326 audit(1755709077.752:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12559 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b495ebe9 code=0x7ffc0000 [ 229.498842][T12529] hub 8-0:1.0: USB hub found [ 229.503468][T12529] hub 8-0:1.0: 8 ports detected [ 229.530010][ T384] bridge_slave_0: left allmulticast mode [ 229.535692][ T384] bridge_slave_0: left promiscuous mode [ 229.541391][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.714908][ T384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.726556][ T384] bond_slave_0: left promiscuous mode [ 229.733353][ T384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.745596][ T384] bond_slave_1: left promiscuous mode [ 229.752412][ T384] bond0 (unregistering): Released all slaves [ 229.770999][ T384] bond1 (unregistering): Released all slaves [ 229.788355][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.847532][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.856722][ T384] tipc: Left network mode [ 229.907974][T12516] team0: Port device team_slave_0 added [ 229.917568][T12516] team0: Port device team_slave_1 added [ 229.957356][ T384] hsr_slave_0: left promiscuous mode [ 229.966232][ T384] hsr_slave_1: left promiscuous mode [ 229.972253][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.979719][ T384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.987251][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.994659][ T384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.013041][ T384] veth1_to_hsr: left allmulticast mode [ 230.018740][ T384] veth1_to_hsr: left promiscuous mode [ 230.025847][ T384] team_slave_0: left promiscuous mode [ 230.027058][ T29] audit: type=1400 audit(1755709078.332:4029): avc: denied { create } for pid=12583 comm="syz.4.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 230.031236][ T384] team_slave_1: left promiscuous mode [ 230.032780][ T384] veth1_macvtap: left promiscuous mode [ 230.063291][ T384] veth0_macvtap: left promiscuous mode [ 230.069070][ T384] veth1_vlan: left promiscuous mode [ 230.074635][ T384] veth0_vlan: left promiscuous mode [ 230.135876][ T384] team0 (unregistering): Port device team_slave_1 removed [ 230.146423][ T384] team0 (unregistering): Port device team_slave_0 removed [ 230.182549][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.189583][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.205850][T12593] loop4: detected capacity change from 0 to 512 [ 230.215680][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.216025][T12576] lo speed is unknown, defaulting to 1000 [ 230.223859][T12593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.233578][ T3409] lo speed is unknown, defaulting to 1000 [ 230.240680][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.248203][ T3409] syz2: Port: 1 Link DOWN [ 230.253798][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.290940][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.295552][T12593] EXT4-fs (loop4): 1 truncate cleaned up [ 230.355331][T12593] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.3265: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 230.380929][T12516] hsr_slave_0: entered promiscuous mode [ 230.397174][T12516] hsr_slave_1: entered promiscuous mode [ 230.404580][T12593] EXT4-fs (loop4): Remounting filesystem read-only [ 230.411402][T12516] debugfs: 'hsr0' already exists in 'hsr' [ 230.417142][T12516] Cannot create hsr debugfs directory [ 230.450837][T12604] __nla_validate_parse: 37 callbacks suppressed [ 230.450850][T12604] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3269'. [ 230.467577][T12604] bond0: option downdelay: invalid value (18446744073709551615) [ 230.475299][T12604] bond0: option downdelay: allowed values 0 - 2147483647 [ 230.511806][T12609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.535212][T12612] syzkaller0: entered promiscuous mode [ 230.537489][T12614] loop3: detected capacity change from 0 to 512 [ 230.541034][T12612] syzkaller0: entered allmulticast mode [ 230.549225][T12614] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.564967][T12614] EXT4-fs (loop3): 1 truncate cleaned up [ 230.588041][T12617] loop3: detected capacity change from 0 to 128 [ 230.595945][T12617] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.673929][T12626] loop3: detected capacity change from 0 to 512 [ 230.762776][T12623] syzkaller0: entered promiscuous mode [ 230.768693][T12623] syzkaller0: entered allmulticast mode [ 230.770113][T12626] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.874735][T12516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.884751][T12516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.895023][T12516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.904612][T12516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.952594][T12516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.965942][T12516] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.031299][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.038422][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.047936][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.055090][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.182184][T12647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3281'. [ 231.192234][T12647] bond0: option downdelay: invalid value (18446744073709551615) [ 231.199961][T12647] bond0: option downdelay: allowed values 0 - 2147483647 [ 231.236325][T12516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.251919][T12653] loop2: detected capacity change from 0 to 1024 [ 231.308019][T12662] loop4: detected capacity change from 0 to 1024 [ 231.313203][T12516] veth0_vlan: entered promiscuous mode [ 231.334609][T12516] veth1_vlan: entered promiscuous mode [ 231.346357][T12662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 231.350097][T12516] veth0_macvtap: entered promiscuous mode [ 231.363592][T12662] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 231.369972][T12516] veth1_macvtap: entered promiscuous mode [ 231.378608][T12662] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.378608][T12662] [ 231.390162][T12516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.393956][T12662] EXT4-fs (loop4): Total free blocks count 0 [ 231.407065][T12662] EXT4-fs (loop4): Free/Dirty block details [ 231.409726][T12670] syzkaller0: entered promiscuous mode [ 231.413050][T12662] EXT4-fs (loop4): free_blocks=20480 [ 231.418460][T12670] syzkaller0: entered allmulticast mode [ 231.423821][T12662] EXT4-fs (loop4): dirty_blocks=80 [ 231.423837][T12662] EXT4-fs (loop4): Block reservation details [ 231.423848][T12662] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 231.435169][T12516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.456886][ T384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.465942][ T384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.478936][ T384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.497558][ T384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.524295][T12674] loop4: detected capacity change from 0 to 1024 [ 231.643965][ T3307] syz_tun (unregistering): left promiscuous mode [ 231.648863][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3292'. [ 231.659445][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3292'. [ 231.707360][T12700] loop2: detected capacity change from 0 to 512 [ 231.720576][T12700] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.752558][T12707] loop0: detected capacity change from 0 to 1024 [ 231.786809][T12707] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 231.811606][T12707] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 231.823932][T12707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.823932][T12707] [ 231.833608][T12707] EXT4-fs (loop0): Total free blocks count 0 [ 231.839710][T12707] EXT4-fs (loop0): Free/Dirty block details [ 231.845596][T12707] EXT4-fs (loop0): free_blocks=20480 [ 231.850909][T12707] EXT4-fs (loop0): dirty_blocks=80 [ 231.856088][T12707] EXT4-fs (loop0): Block reservation details [ 231.862087][T12707] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 231.884397][T12719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.903786][T12707] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 231.916165][T12707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 231.916165][T12707] [ 231.944664][T12726] syzkaller0: entered promiscuous mode [ 231.950210][T12726] syzkaller0: entered allmulticast mode [ 232.004158][ T5916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.015664][T12691] chnl_net:caif_netlink_parms(): no params data found [ 232.024055][T12736] loop2: detected capacity change from 0 to 512 [ 232.051448][T12736] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.053938][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3307'. [ 232.092029][T12691] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.099160][T12691] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.109154][T12691] bridge_slave_0: entered allmulticast mode [ 232.115657][T12691] bridge_slave_0: entered promiscuous mode [ 232.125868][T12750] loop2: detected capacity change from 0 to 1024 [ 232.133071][T12691] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.140141][T12691] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.148874][T12691] bridge_slave_1: entered allmulticast mode [ 232.156057][T12691] bridge_slave_1: entered promiscuous mode [ 232.164671][ T5916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.205078][T12691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.215519][T12691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.236331][ T5916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.266211][T12691] team0: Port device team_slave_0 added [ 232.285732][T12691] team0: Port device team_slave_1 added [ 232.307411][ T5916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.308021][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3321'. [ 232.337967][T12691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.344994][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.371049][T12691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.383456][T12691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.390450][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.416382][T12691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.461810][T12782] tipc: Started in network mode [ 232.466725][T12782] tipc: Node identity 32baf0404e8d, cluster identity 4711 [ 232.474023][T12782] tipc: Enabled bearer , priority 0 [ 232.489487][T12769] tipc: Resetting bearer [ 232.500534][T12769] tipc: Disabling bearer [ 232.515596][T12691] hsr_slave_0: entered promiscuous mode [ 232.522990][T12691] hsr_slave_1: entered promiscuous mode [ 232.529233][T12691] debugfs: 'hsr0' already exists in 'hsr' [ 232.534965][T12691] Cannot create hsr debugfs directory [ 232.653220][ T5916] bridge_slave_1: left allmulticast mode [ 232.658906][ T5916] bridge_slave_1: left promiscuous mode [ 232.664517][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.692594][ T5916] bridge_slave_0: left allmulticast mode [ 232.698259][ T5916] bridge_slave_0: left promiscuous mode [ 232.703973][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.946189][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3331'. [ 232.955244][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3331'. [ 233.132692][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.146748][ T5916] bond_slave_0: left promiscuous mode [ 233.155565][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.166718][ T5916] bond_slave_1: left promiscuous mode [ 233.173353][ T5916] bond0 (unregistering): Released all slaves [ 233.185797][ T5916] bond1 (unregistering): Released all slaves [ 233.195859][ T5916] bond2 (unregistering): Released all slaves [ 233.206518][ T5916] bond3 (unregistering): Released all slaves [ 233.221511][T12813] tipc: Enabled bearer , priority 0 [ 233.249349][T12809] tipc: Resetting bearer [ 233.283370][T12808] tipc: Disabling bearer [ 233.311167][ T5916] tipc: Left network mode [ 233.322067][T12819] tipc: Enabled bearer , priority 0 [ 233.348637][ T5916] batadv_slave_0: left promiscuous mode [ 233.356308][ T5916] hsr_slave_0: left promiscuous mode [ 233.362797][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.370384][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.378275][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.385687][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.397081][ T5916] team_slave_0: left promiscuous mode [ 233.402581][ T5916] team_slave_1: left promiscuous mode [ 233.408422][ T5916] veth1_macvtap: left promiscuous mode [ 233.415273][ T5916] veth0_macvtap: left promiscuous mode [ 233.420940][ T5916] veth1_vlan: left promiscuous mode [ 233.426199][ T5916] veth0_vlan: left promiscuous mode [ 233.543637][ T5916] team0 (unregistering): Port device team_slave_1 removed [ 233.553726][ T5916] team0 (unregistering): Port device team_slave_0 removed [ 233.603299][T12818] tipc: Resetting bearer [ 233.616870][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.625361][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.673100][ T29] audit: type=1400 audit(1755709081.922:4030): avc: denied { watch watch_reads } for pid=12820 comm="syz.0.3337" path="/15/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.696572][ T29] audit: type=1400 audit(1755709081.922:4031): avc: denied { read write } for pid=12820 comm="syz.0.3337" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.720167][ T29] audit: type=1400 audit(1755709081.922:4032): avc: denied { open } for pid=12820 comm="syz.0.3337" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.743665][ T29] audit: type=1400 audit(1755709081.922:4033): avc: denied { ioctl } for pid=12820 comm="syz.0.3337" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.795395][T12818] tipc: Disabling bearer [ 234.597796][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3342'. [ 234.606878][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3342'. [ 234.733995][T12691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.751975][T12691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.770517][T12691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.787851][T12691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.884617][T12851] syzkaller0: entered promiscuous mode [ 234.890171][T12851] syzkaller0: entered allmulticast mode [ 234.978561][T12861] syzkaller0: entered promiscuous mode [ 234.984259][T12861] syzkaller0: entered allmulticast mode [ 235.025880][T12691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.037930][T12691] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.047551][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.054622][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.077033][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.084205][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.111412][T12691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.121997][T12691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.191284][T12691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.431688][T12891] tipc: Started in network mode [ 235.436645][T12891] tipc: Node identity 9eeb4761fe7c, cluster identity 4711 [ 235.443822][T12891] tipc: Enabled bearer , priority 0 [ 235.453191][T12890] tipc: Resetting bearer [ 235.492530][T12890] tipc: Disabling bearer [ 235.630176][T12691] veth0_vlan: entered promiscuous mode [ 235.637727][T12691] veth1_vlan: entered promiscuous mode [ 235.656511][T12691] veth0_macvtap: entered promiscuous mode [ 235.665969][T12691] veth1_macvtap: entered promiscuous mode [ 235.684709][T12691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.694775][T12691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.706503][ T384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.717035][ T384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.734389][ T384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.746039][ T384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.799912][T12910] syzkaller0: entered promiscuous mode [ 235.805403][T12910] syzkaller0: entered allmulticast mode [ 235.929688][T12922] loop5: detected capacity change from 0 to 512 [ 235.936400][T12922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.948925][T12922] EXT4-fs (loop5): 1 truncate cleaned up [ 236.039575][T12932] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3368'. [ 236.126533][T12943] veth0_vlan: entered allmulticast mode [ 236.208311][T12947] ÿÿÿÿÿÿ: renamed from vlan1 [ 236.303609][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.312301][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.845691][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.854242][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.206209][T13000] tipc: Started in network mode [ 237.211128][T13000] tipc: Node identity 1ecc39f1bb21, cluster identity 4711 [ 237.218267][T13000] tipc: Enabled bearer , priority 0 [ 237.226897][T12996] tipc: Resetting bearer [ 237.255646][T12996] tipc: Disabling bearer [ 237.445676][T13025] tipc: Enabled bearer , priority 0 [ 237.452886][T13025] syzkaller0: entered promiscuous mode [ 237.458357][T13025] syzkaller0: entered allmulticast mode [ 237.471111][T13025] tipc: Resetting bearer [ 237.485441][T13024] tipc: Resetting bearer [ 237.492812][T13024] tipc: Disabling bearer [ 237.686895][T13036] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 237.787609][T13048] veth0_vlan: entered allmulticast mode [ 238.311768][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.320455][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.714289][T13085] tipc: Enabled bearer , priority 0 [ 238.721707][T13084] tipc: Resetting bearer [ 238.732802][T13084] tipc: Disabling bearer [ 239.142544][T13098] tipc: Enabled bearer , priority 0 [ 239.149894][T13098] syzkaller0: entered promiscuous mode [ 239.155389][T13098] syzkaller0: entered allmulticast mode [ 239.168117][T13098] tipc: Resetting bearer [ 239.175207][T13097] tipc: Resetting bearer [ 239.183635][T13097] tipc: Disabling bearer [ 239.270826][T13107] bridge0: port 3(team0) entered blocking state [ 239.277675][T13107] bridge0: port 3(team0) entered disabled state [ 239.285246][T13107] team0: entered allmulticast mode [ 239.290964][T13107] team_slave_0: entered allmulticast mode [ 239.296776][T13107] team_slave_1: entered allmulticast mode [ 239.309637][T13107] team0: entered promiscuous mode [ 239.314901][T13107] team_slave_0: entered promiscuous mode [ 239.321620][T13107] team_slave_1: entered promiscuous mode [ 239.329502][T13107] bridge0: port 3(team0) entered blocking state [ 239.336031][T13107] bridge0: port 3(team0) entered forwarding state [ 239.343886][T13105] tipc: Started in network mode [ 239.348998][T13105] tipc: Node identity b624ce786cde, cluster identity 4711 [ 239.356154][T13105] tipc: Enabled bearer , priority 0 [ 239.368447][T13104] tipc: Resetting bearer [ 239.380473][T13104] tipc: Disabling bearer [ 239.412832][T13110] tipc: Enabled bearer , priority 0 [ 239.420158][T13109] tipc: Resetting bearer [ 239.431587][T13109] tipc: Disabling bearer [ 239.454210][T13112] ±ÿ: renamed from bond_slave_0 (while UP) [ 239.481396][T13116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3443'. [ 239.693470][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.702047][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.483337][T13160] veth0_vlan: entered allmulticast mode [ 240.545157][T13163] tipc: Enabled bearer , priority 0 [ 240.552792][T13163] syzkaller0: entered promiscuous mode [ 240.558353][T13163] syzkaller0: entered allmulticast mode [ 240.569044][T13163] tipc: Resetting bearer [ 240.579435][T13164] ÿÿÿÿÿÿ: renamed from vlan1 [ 240.587874][T13162] tipc: Resetting bearer [ 240.595738][T13162] tipc: Disabling bearer [ 240.792900][T13191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.896230][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3478'. [ 241.212196][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.220859][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.629705][T13237] tipc: Enabled bearer , priority 0 [ 241.637200][T13236] tipc: Resetting bearer [ 241.652534][T13236] tipc: Disabling bearer [ 241.682074][T13241] bridge0: port 3(team0) entered blocking state [ 241.690952][T13241] bridge0: port 3(team0) entered disabled state [ 241.698978][T13241] team0: entered allmulticast mode [ 241.704318][T13241] team_slave_0: entered allmulticast mode [ 241.710596][T13241] team_slave_1: entered allmulticast mode [ 241.725551][T13241] team0: entered promiscuous mode [ 241.731191][T13241] team_slave_0: entered promiscuous mode [ 241.737470][T13241] team_slave_1: entered promiscuous mode [ 241.745264][T13241] bridge0: port 3(team0) entered blocking state [ 241.751736][T13241] bridge0: port 3(team0) entered forwarding state [ 241.786891][T13245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3496'. [ 242.005199][T13261] bridge0: port 3(team0) entered blocking state [ 242.013127][T13261] bridge0: port 3(team0) entered disabled state [ 242.021175][T13261] team0: entered allmulticast mode [ 242.026495][T13261] team_slave_0: entered allmulticast mode [ 242.033226][T13261] team_slave_1: entered allmulticast mode [ 242.051294][T13261] team0: entered promiscuous mode [ 242.056535][T13261] team_slave_0: entered promiscuous mode [ 242.063044][T13261] team_slave_1: entered promiscuous mode [ 242.070373][T13261] bridge0: port 3(team0) entered blocking state [ 242.077143][T13261] bridge0: port 3(team0) entered forwarding state [ 242.660513][T13293] ±ÿ: renamed from bond_slave_0 (while UP) [ 242.989423][T13309] hub 8-0:1.0: USB hub found [ 242.994165][T13309] hub 8-0:1.0: 8 ports detected [ 243.638336][T13327] syzkaller0: entered promiscuous mode [ 243.643876][T13327] syzkaller0: entered allmulticast mode [ 243.690972][T13330] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 244.074125][T13344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.279310][T13358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.377491][ T29] audit: type=1400 audit(1755709092.682:4034): avc: denied { write } for pid=13365 comm="syz.3.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 245.149856][T13401] bridge0: port 3(team0) entered disabled state [ 245.156248][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.163471][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.170774][T13401] bridge0: entered allmulticast mode [ 245.380956][T13416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3556'. [ 245.534801][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 245.543818][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 245.913481][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.921980][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.252970][T13459] syzkaller0: entered promiscuous mode [ 246.258469][T13459] syzkaller0: entered allmulticast mode [ 246.400566][T13468] tipc: Enabled bearer , priority 0 [ 246.407741][T13468] syzkaller0: entered promiscuous mode [ 246.413360][T13468] syzkaller0: entered allmulticast mode [ 246.419623][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 246.431468][T13468] tipc: Resetting bearer [ 246.439813][T13466] tipc: Resetting bearer [ 246.446911][T13466] tipc: Disabling bearer [ 246.619601][T13481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3577'. [ 246.684039][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3579'. [ 246.693128][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3579'. [ 246.778313][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 247.091964][T13506] loop2: detected capacity change from 0 to 1024 [ 247.164020][T13506] EXT4-fs: Ignoring removed i_version option [ 247.190737][T13506] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.296308][T13506] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3587: Invalid block bitmap block 0 in block_group 0 [ 247.346252][T13506] Quota error (device loop2): write_blk: dquota write failed [ 247.353741][T13506] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 247.365559][T13506] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3587: Failed to acquire dquot type 0 [ 247.377129][T13506] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3587: Freeing blocks not in datazone - block = 0, count = 4096 [ 247.391809][T13506] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3587: Invalid inode bitmap blk 0 in block_group 0 [ 247.406982][T13506] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 247.416668][ T8089] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 247.425634][ T8089] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 247.438306][T13506] EXT4-fs (loop2): 1 orphan inode deleted [ 247.568191][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3592'. [ 247.577241][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3592'. [ 248.126883][T13565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.136869][T13619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.469211][T11169] EXT4-fs unmount: 88 callbacks suppressed [ 249.469224][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.899796][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.907032][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.924641][T13659] bridge0: entered allmulticast mode [ 249.984595][T13659] bridge_slave_1: left allmulticast mode [ 249.990409][T13659] bridge_slave_1: left promiscuous mode [ 249.996079][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.009105][T13659] bridge_slave_0: left allmulticast mode [ 250.014798][T13659] bridge_slave_0: left promiscuous mode [ 250.020531][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.183005][T13673] syzkaller0: entered promiscuous mode [ 250.188559][T13673] syzkaller0: entered allmulticast mode [ 251.395482][T13742] tipc: Enabled bearer , priority 0 [ 251.410145][T13742] syzkaller0: entered promiscuous mode [ 251.415653][T13742] syzkaller0: entered allmulticast mode [ 251.430309][T13742] tipc: Resetting bearer [ 251.442337][T13740] tipc: Resetting bearer [ 251.462549][T13740] tipc: Disabling bearer [ 251.488655][T13746] bridge0: port 3(team0) entered blocking state [ 251.495144][T13746] bridge0: port 3(team0) entered disabled state [ 251.502475][T13746] team0: entered allmulticast mode [ 251.507722][T13746] team_slave_0: entered allmulticast mode [ 251.514660][T13746] team_slave_1: entered allmulticast mode [ 251.584984][T13746] team0: left allmulticast mode [ 251.590145][T13746] team_slave_0: left allmulticast mode [ 251.595757][T13746] team_slave_1: left allmulticast mode [ 251.682268][T13751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.977419][T13769] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3676'. [ 251.987688][T13769] bond0: Unable to set down delay as MII monitoring is disabled [ 252.144008][T13789] Driver unsupported XDP return value 0 on prog (id 928) dev N/A, expect packet loss! [ 252.914481][T13815] hub 8-0:1.0: USB hub found [ 252.919325][T13815] hub 8-0:1.0: 8 ports detected [ 253.014274][T13819] bridge: RTM_NEWNEIGH with invalid ether address [ 253.255137][T13824] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3697'. [ 253.289620][ T29] audit: type=1400 audit(1755709101.582:4035): avc: denied { write } for pid=13825 comm="syz.3.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 253.314659][T13828] veth0_vlan: entered allmulticast mode [ 253.442206][T13834] team0: left allmulticast mode [ 253.447141][T13834] team_slave_0: left allmulticast mode [ 253.452676][T13834] team_slave_1: left allmulticast mode [ 253.458132][T13834] team0: left promiscuous mode [ 253.462900][T13834] team_slave_0: left promiscuous mode [ 253.468355][T13834] team_slave_1: left promiscuous mode [ 253.473965][T13834] bridge0: port 3(team0) entered disabled state [ 253.592466][T13834] bridge_slave_1: left allmulticast mode [ 253.598186][T13834] bridge_slave_1: left promiscuous mode [ 253.603843][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.663297][T13834] bridge_slave_0: left allmulticast mode [ 253.669068][T13834] bridge_slave_0: left promiscuous mode [ 253.674764][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.900952][T13843] bridge: RTM_NEWNEIGH with invalid ether address [ 253.919087][T13844] syzkaller0: entered promiscuous mode [ 253.924578][T13844] syzkaller0: entered allmulticast mode [ 254.218808][ T29] audit: type=1400 audit(1755709102.532:4036): avc: denied { mounton } for pid=13856 comm="syz.3.3712" path="/109/file0" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.241710][T13857] 9pnet_fd: Insufficient options for proto=fd [ 254.937161][T13887] 9pnet_fd: Insufficient options for proto=fd [ 255.206771][T13899] hub 8-0:1.0: USB hub found [ 255.211665][T13899] hub 8-0:1.0: 8 ports detected [ 255.373185][T13898] loop2: detected capacity change from 0 to 1024 [ 255.429640][T13898] EXT4-fs: Ignoring removed i_version option [ 255.486847][T13898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 255.585642][T13898] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3727: Invalid block bitmap block 0 in block_group 0 [ 255.703484][T13898] Quota error (device loop2): write_blk: dquota write failed [ 255.710996][T13898] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 255.788416][T13898] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3727: Failed to acquire dquot type 0 [ 255.832791][T13898] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3727: Freeing blocks not in datazone - block = 0, count = 4096 [ 255.880577][T13898] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3727: Invalid inode bitmap blk 0 in block_group 0 [ 255.947036][T13898] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 255.967196][T13898] EXT4-fs (loop2): 1 orphan inode deleted [ 255.977555][T13898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.104032][ T31] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 256.113111][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 256.407504][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.416042][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.111048][T13955] hub 8-0:1.0: USB hub found [ 257.115813][T13955] hub 8-0:1.0: 8 ports detected [ 257.137495][T13954] syzkaller0: entered promiscuous mode [ 257.143147][T13954] syzkaller0: entered allmulticast mode [ 258.210497][T13981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.261256][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.847361][T14048] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3785'. [ 260.921484][ T29] audit: type=1400 audit(1755709109.232:4037): avc: denied { bind } for pid=14086 comm="syz.5.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.978046][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 261.087704][ T29] audit: type=1400 audit(1755709109.392:4038): avc: denied { execute } for pid=14110 comm="syz.5.3806" path="/249/cpu.stat" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.257894][ T29] audit: type=1400 audit(1755709109.562:4039): avc: denied { read } for pid=14121 comm="syz.0.3809" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.280765][ T29] audit: type=1400 audit(1755709109.562:4040): avc: denied { open } for pid=14121 comm="syz.0.3809" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.385783][ T29] audit: type=1400 audit(1755709109.692:4041): avc: denied { unmount } for pid=14131 comm="syz.2.3813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.426583][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3815'. [ 261.619068][T14150] bridge0: port 3(team0) entered disabled state [ 261.625552][T14150] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.632740][T14150] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.672003][T14150] bridge0: entered allmulticast mode [ 261.680045][T14162] team0: left allmulticast mode [ 261.684942][T14162] team_slave_0: left allmulticast mode [ 261.690524][T14162] team_slave_1: left allmulticast mode [ 261.696097][T14162] team0: left promiscuous mode [ 261.700865][T14162] team_slave_0: left promiscuous mode [ 261.706289][T14162] team_slave_1: left promiscuous mode [ 261.711993][T14162] bridge0: port 3(team0) entered disabled state [ 261.725606][T14162] bridge_slave_1: left allmulticast mode [ 261.731288][T14162] bridge_slave_1: left promiscuous mode [ 261.737011][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.748354][T14162] bridge_slave_0: left allmulticast mode [ 261.754228][T14162] bridge_slave_0: left promiscuous mode [ 261.760198][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.810995][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 262.297708][T14206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3843'. [ 262.385029][T14206] bond0: Unable to set down delay as MII monitoring is disabled [ 262.606740][T14257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3860'. [ 262.617475][T14257] bond0: Unable to set down delay as MII monitoring is disabled [ 262.762813][T14273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3866'. [ 263.580276][T14346] netlink: 'syz.2.3896': attribute type 5 has an invalid length. [ 263.588107][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3896'. [ 263.607011][T14346] bond0: Unable to set down delay as MII monitoring is disabled [ 263.646322][T14357] bridge: RTM_NEWNEIGH with invalid ether address [ 263.664209][T14358] ÿÿÿÿÿÿ: renamed from vlan1 [ 263.842582][T14388] netlink: 'syz.5.3914': attribute type 5 has an invalid length. [ 263.850443][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3914'. [ 263.969358][T14388] bond0: Unable to set down delay as MII monitoring is disabled [ 264.713828][T14428] hub 8-0:1.0: USB hub found [ 264.718891][T14428] hub 8-0:1.0: 8 ports detected [ 265.481903][T14451] veth0_vlan: entered allmulticast mode [ 265.541486][T14451] ÿÿÿÿÿÿ: renamed from vlan1 [ 265.710714][ T29] audit: type=1400 audit(1755709114.012:4042): avc: denied { setopt } for pid=14463 comm="syz.5.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.730520][ T29] audit: type=1400 audit(1755709114.022:4043): avc: denied { bind } for pid=14463 comm="syz.5.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.750020][ T29] audit: type=1400 audit(1755709114.022:4044): avc: denied { listen } for pid=14463 comm="syz.5.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.970836][ T29] audit: type=1400 audit(1755709114.082:4045): avc: denied { connect } for pid=14463 comm="syz.5.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.990736][ T29] audit: type=1400 audit(1755709114.102:4046): avc: denied { write } for pid=14463 comm="syz.5.3944" path="socket:[44191]" dev="sockfs" ino=44191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.296609][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'. [ 266.667713][T14529] hub 8-0:1.0: USB hub found [ 266.672454][T14529] hub 8-0:1.0: 8 ports detected [ 267.042476][T14545] ±ÿ: renamed from bond_slave_0 (while UP) [ 267.797765][T14565] syzkaller1: entered promiscuous mode [ 267.803541][T14565] syzkaller1: entered allmulticast mode [ 269.493174][T14620] bridge: RTM_NEWNEIGH with invalid ether address [ 269.521507][T14623] loop3: detected capacity change from 0 to 1024 [ 269.541384][T14623] EXT4-fs: Ignoring removed i_version option [ 269.556121][T14623] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 269.570822][T14628] tipc: Enabled bearer , priority 0 [ 269.584528][T14628] tipc: Resetting bearer [ 269.592475][T14623] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4006: Invalid block bitmap block 0 in block_group 0 [ 269.607876][T14623] Quota error (device loop3): write_blk: dquota write failed [ 269.615289][T14623] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 269.627196][T14627] tipc: Disabling bearer [ 269.635201][T14623] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4006: Failed to acquire dquot type 0 [ 269.721947][T14623] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4006: Freeing blocks not in datazone - block = 0, count = 4096 [ 269.804100][T14623] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4006: Invalid inode bitmap blk 0 in block_group 0 [ 269.818599][ T12] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 269.827559][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 269.866211][T14623] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 269.890291][T14623] EXT4-fs (loop3): 1 orphan inode deleted [ 269.904114][T14623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.329184][ T29] audit: type=1400 audit(1755709118.632:4047): avc: denied { create } for pid=14667 comm="syz.4.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.349347][ T29] audit: type=1400 audit(1755709118.632:4048): avc: denied { read } for pid=14667 comm="syz.4.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.879794][ T29] audit: type=1400 audit(1755709118.732:4049): avc: denied { execute_no_trans } for pid=14684 comm="syz.5.4034" path="/300/file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.169961][ T29] audit: type=1400 audit(1755709119.472:4050): avc: denied { bind } for pid=14708 comm="syz.4.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.189830][ T29] audit: type=1400 audit(1755709119.472:4051): avc: denied { write } for pid=14708 comm="syz.4.4044" path="socket:[43882]" dev="sockfs" ino=43882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.373121][T14721] tipc: Enabled bearer , priority 0 [ 271.386377][T14721] tipc: Resetting bearer [ 271.417622][T14720] tipc: Disabling bearer [ 271.734966][T14743] ±ÿ: renamed from bond_slave_0 (while UP) [ 272.118619][ T29] audit: type=1400 audit(1755709120.422:4052): avc: denied { shutdown } for pid=14758 comm="syz.5.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.202726][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'. [ 272.235048][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4070'. [ 272.244528][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4070'. [ 272.480475][T14806] tipc: Enabled bearer , priority 0 [ 272.490501][T14806] tipc: Resetting bearer [ 272.497792][T14805] tipc: Disabling bearer [ 272.529660][T12182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.199999][T14840] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4086'. [ 274.264987][T14884] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4097'. [ 274.655665][T14922] bridge: RTM_NEWNEIGH with invalid ether address [ 274.793819][T14943] tipc: Enabling of bearer rejected, failed to enable media [ 275.184631][T15001] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4129'. [ 276.224991][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 276.262611][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 276.862743][T15152] tipc: Enabling of bearer rejected, failed to enable media [ 277.327705][T15164] tipc: Enabled bearer , priority 0 [ 277.358671][T15164] syzkaller0: entered promiscuous mode [ 277.364251][T15164] syzkaller0: entered allmulticast mode [ 277.401943][T15164] tipc: Resetting bearer [ 277.408618][T15163] tipc: Resetting bearer [ 277.419158][T15163] tipc: Disabling bearer [ 277.495310][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4199'. [ 277.505696][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4199'. [ 277.622627][T15185] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4202'. [ 277.631656][T15185] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4202'. [ 277.701273][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4208'. [ 277.713369][T15195] team_slave_0: entered promiscuous mode [ 277.719039][T15195] team_slave_1: entered promiscuous mode [ 277.751208][T15195] macvtap1: entered promiscuous mode [ 277.756610][T15195] team0: entered promiscuous mode [ 277.761850][T15195] macvtap1: entered allmulticast mode [ 277.767317][T15195] team0: entered allmulticast mode [ 277.772502][T15195] team_slave_0: entered allmulticast mode [ 277.778217][T15195] team_slave_1: entered allmulticast mode [ 277.795426][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4208'. [ 277.795978][T15195] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 277.914886][T15200] team0: left allmulticast mode [ 277.919937][T15200] team_slave_0: left allmulticast mode [ 277.925451][T15200] team_slave_1: left allmulticast mode [ 277.930968][T15200] team0: left promiscuous mode [ 277.935959][T15200] team_slave_0: left promiscuous mode [ 277.941361][T15200] team_slave_1: left promiscuous mode [ 277.975542][T15210] bridge: RTM_NEWNEIGH with invalid ether address [ 278.104478][T15224] tipc: Enabling of bearer rejected, failed to enable media [ 279.044899][T15258] hub 8-0:1.0: USB hub found [ 279.049574][T15258] hub 8-0:1.0: 8 ports detected [ 279.622386][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4242'. [ 279.674657][T15283] team_slave_0: entered promiscuous mode [ 279.680389][T15283] team_slave_1: entered promiscuous mode [ 279.711718][T15283] macvtap2: entered promiscuous mode [ 279.717174][T15283] team0: entered promiscuous mode [ 279.722570][T15283] macvtap2: entered allmulticast mode [ 279.727943][T15283] team0: entered allmulticast mode [ 279.733082][T15283] team_slave_0: entered allmulticast mode [ 279.738849][T15283] team_slave_1: entered allmulticast mode [ 279.808189][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4242'. [ 279.828283][T15283] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 279.856947][T15294] team0: left allmulticast mode [ 279.861880][T15294] team_slave_0: left allmulticast mode [ 279.867386][T15294] team_slave_1: left allmulticast mode [ 279.872860][T15294] team0: left promiscuous mode [ 279.877820][T15294] team_slave_0: left promiscuous mode [ 279.883204][T15294] team_slave_1: left promiscuous mode [ 280.955201][T15371] hub 8-0:1.0: USB hub found [ 280.959908][T15371] hub 8-0:1.0: 8 ports detected [ 281.902805][ T29] audit: type=1400 audit(1755709130.212:4053): avc: denied { bind } for pid=15411 comm="syz.0.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.591505][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 282.668976][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4288'. [ 282.760657][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.767883][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.775567][T15445] bridge0: entered allmulticast mode [ 282.791807][T15445] bridge_slave_1: left allmulticast mode [ 282.797465][T15445] bridge_slave_1: left promiscuous mode [ 282.803429][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.879211][T15445] bridge_slave_0: left allmulticast mode [ 282.884896][T15445] bridge_slave_0: left promiscuous mode [ 282.890641][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.901095][T15464] hub 8-0:1.0: USB hub found [ 283.906036][T15464] hub 8-0:1.0: 8 ports detected [ 285.488962][T15477] random: crng reseeded on system resumption [ 285.497331][ T29] audit: type=1400 audit(1755709133.802:4054): avc: denied { append } for pid=15465 comm="syz.0.4300" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 285.520661][ T29] audit: type=1400 audit(1755709133.802:4055): avc: denied { open } for pid=15465 comm="syz.0.4300" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 285.588754][T15481] tipc: Enabled bearer , priority 0 [ 285.721473][T15481] tipc: Resetting bearer [ 285.889646][T15479] tipc: Disabling bearer [ 286.726278][T15517] loop5: detected capacity change from 0 to 512 [ 286.743174][T15517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.769181][T15517] EXT4-fs (loop5): 1 truncate cleaned up [ 286.837954][T15517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.983647][T15517] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.4319: invalid fast symlink length 39 [ 287.097650][T15517] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.4319: invalid fast symlink length 39 [ 287.186846][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.328962][T15531] tipc: Enabled bearer , priority 0 [ 287.511213][T15531] tipc: Resetting bearer [ 287.518958][T15530] tipc: Disabling bearer [ 288.044087][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 288.057804][T15559] dummy0: entered promiscuous mode [ 288.064143][T15559] macvtap1: entered promiscuous mode [ 288.069817][T15559] macvtap1: entered allmulticast mode [ 288.075858][T15559] dummy0: entered allmulticast mode [ 288.095358][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 288.586540][T15583] syzkaller0: entered promiscuous mode [ 288.592131][T15583] syzkaller0: entered allmulticast mode [ 289.702661][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'. [ 289.731583][T15619] team_slave_0: entered promiscuous mode [ 289.737271][T15619] team_slave_1: entered promiscuous mode [ 289.756891][T15619] macvtap1: entered promiscuous mode [ 289.762361][T15619] team0: entered promiscuous mode [ 289.767600][T15619] macvtap1: entered allmulticast mode [ 289.773125][T15619] team0: entered allmulticast mode [ 289.778271][T15619] team_slave_0: entered allmulticast mode [ 289.784068][T15619] team_slave_1: entered allmulticast mode [ 289.809472][T15619] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 290.382591][T15651] syzkaller0: entered promiscuous mode [ 290.388094][T15651] syzkaller0: entered allmulticast mode [ 290.774722][T15678] loop4: detected capacity change from 0 to 512 [ 290.781930][T15678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.793984][T15678] EXT4-fs (loop4): 1 truncate cleaned up [ 290.800313][T15678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.827497][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.850447][T15681] syzkaller0: entered promiscuous mode [ 290.856035][T15681] syzkaller0: entered allmulticast mode [ 292.333428][T15724] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4395'. [ 292.354125][T15724] tipc: Enabled bearer , priority 0 [ 292.365557][T15724] syzkaller0: entered promiscuous mode [ 292.371168][T15724] syzkaller0: entered allmulticast mode [ 292.385783][T15724] tipc: Resetting bearer [ 292.557260][T15723] tipc: Resetting bearer [ 292.580902][T15723] tipc: Disabling bearer [ 293.882085][T15779] random: crng reseeded on system resumption [ 293.891274][ T29] audit: type=1400 audit(1755709142.202:4056): avc: denied { ioctl } for pid=15777 comm="syz.0.4417" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 294.094169][T15790] syzkaller0: entered promiscuous mode [ 294.099719][T15790] syzkaller0: entered allmulticast mode [ 294.159257][ T29] audit: type=1400 audit(1755709142.462:4057): avc: denied { read } for pid=15781 comm="syz.5.4418" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.183661][ T29] audit: type=1400 audit(1755709142.462:4058): avc: denied { open } for pid=15781 comm="syz.5.4418" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.208435][ T29] audit: type=1400 audit(1755709142.462:4059): avc: denied { ioctl } for pid=15781 comm="syz.5.4418" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.436722][T15795] loop3: detected capacity change from 0 to 512 [ 294.466396][T15795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.533923][T15795] EXT4-fs (loop3): 1 truncate cleaned up [ 294.543014][T15795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.602582][T12182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.279960][T15839] tipc: Enabled bearer , priority 0 [ 295.287035][T15839] syzkaller0: entered promiscuous mode [ 295.292694][T15839] syzkaller0: entered allmulticast mode [ 295.335561][T15839] tipc: Resetting bearer [ 295.390821][T15837] tipc: Resetting bearer [ 295.404250][T15837] tipc: Disabling bearer [ 298.122529][T15940] syzkaller0: entered promiscuous mode [ 298.128049][T15940] syzkaller0: entered allmulticast mode [ 298.763231][T15989] loop2: detected capacity change from 0 to 1024 [ 298.782781][T15989] EXT4-fs: Ignoring removed i_version option [ 298.867430][T15989] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 299.008955][T15998] hub 8-0:1.0: USB hub found [ 299.013804][T15998] hub 8-0:1.0: 8 ports detected [ 299.058598][T15989] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4494: Invalid block bitmap block 0 in block_group 0 [ 299.648002][T15989] Quota error (device loop2): write_blk: dquota write failed [ 299.655452][T15989] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 299.901282][T15989] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4494: Failed to acquire dquot type 0 [ 300.000087][T15989] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4494: Freeing blocks not in datazone - block = 0, count = 4096 [ 300.126959][T15989] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4494: Invalid inode bitmap blk 0 in block_group 0 [ 300.139918][ T3463] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 300.148995][ T3463] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 300.408776][T15989] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 300.939957][T15989] EXT4-fs (loop2): 1 orphan inode deleted [ 301.030996][T15989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.278124][T16063] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4518'. [ 301.355910][T16056] random: crng reseeded on system resumption [ 302.025475][T16093] tipc: Enabled bearer , priority 0 [ 302.042621][T16093] syzkaller0: entered promiscuous mode [ 302.048185][T16093] syzkaller0: entered allmulticast mode [ 302.072983][T16092] tipc: Resetting bearer [ 302.084988][T16092] tipc: Disabling bearer [ 302.393144][T16100] random: crng reseeded on system resumption [ 303.235730][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 303.247691][T16124] macvtap2: entered promiscuous mode [ 303.253140][T16124] macvtap2: entered allmulticast mode [ 303.269516][T16124] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 303.289786][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 303.582315][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4545'. [ 303.634249][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4545'. [ 303.641124][T16136] ±ÿ: entered promiscuous mode [ 303.648178][T16136] bond_slave_1: entered promiscuous mode [ 303.737181][T16136] macvtap3: entered promiscuous mode [ 303.742531][T16136] bond0: entered promiscuous mode [ 303.744126][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.747928][T16136] macvtap3: entered allmulticast mode [ 303.762613][T16136] bond0: entered allmulticast mode [ 303.767729][T16136] ±ÿ: entered allmulticast mode [ 303.772596][T16136] bond_slave_1: entered allmulticast mode [ 303.779356][T16136] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 303.787618][T16137] bond0: left allmulticast mode [ 303.792532][T16137] ±ÿ: left allmulticast mode [ 303.797110][T16137] bond_slave_1: left allmulticast mode [ 303.802603][T16137] bond0: left promiscuous mode [ 303.807758][T16137] ±ÿ: left promiscuous mode [ 303.812304][T16137] bond_slave_1: left promiscuous mode [ 304.246089][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4556'. [ 304.271858][T16167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4556'. [ 304.326428][ T29] audit: type=1400 audit(1755709152.632:4060): avc: denied { read } for pid=16169 comm="syz.2.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 304.961844][T16181] random: crng reseeded on system resumption [ 305.743124][ T51] bridge_slave_1: left allmulticast mode [ 305.748862][ T51] bridge_slave_1: left promiscuous mode [ 305.754537][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.765073][ T51] bridge_slave_0: left allmulticast mode [ 305.770826][ T51] bridge_slave_0: left promiscuous mode [ 305.776582][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.974082][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.990902][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.000590][ T51] bond0 (unregistering): Released all slaves [ 306.049577][ T51] tipc: Left network mode [ 306.057105][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 306.071374][ T51] hsr_slave_0: left promiscuous mode [ 306.079739][ T51] hsr_slave_1: left promiscuous mode [ 306.088448][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.095892][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.118727][T16220] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4574'. [ 306.131703][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.139115][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.163955][ T51] team_slave_0: left promiscuous mode [ 306.169413][ T51] team_slave_1: left promiscuous mode [ 306.174883][ T51] veth1_macvtap: left promiscuous mode [ 306.180517][ T51] veth0_macvtap: left promiscuous mode [ 306.186119][ T51] veth1_vlan: left promiscuous mode [ 306.191890][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 306.201286][ T51] veth0_vlan: left promiscuous mode [ 306.293775][ T51] team0 (unregistering): Port device team_slave_1 removed [ 306.315631][ T51] team0 (unregistering): Port device team_slave_0 removed [ 306.762158][T16215] macvtap3: entered promiscuous mode [ 306.767616][T16215] macvtap3: entered allmulticast mode [ 306.787968][T16215] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 306.905941][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4580'. [ 306.954485][T16238] dummy0: entered promiscuous mode [ 306.970400][T16238] macvtap4: entered promiscuous mode [ 306.975751][T16238] macvtap4: entered allmulticast mode [ 307.216641][T16238] dummy0: entered allmulticast mode [ 307.342482][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4580'. [ 311.026990][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 311.039909][T16387] dummy0: entered promiscuous mode [ 311.064538][T16387] macvtap1: entered promiscuous mode [ 311.070013][T16387] macvtap1: entered allmulticast mode [ 311.085072][T16387] dummy0: entered allmulticast mode [ 311.124740][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 311.257780][ T36] IPVS: starting estimator thread 0... [ 311.294014][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 311.322944][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 311.348854][T16405] IPVS: using max 2832 ests per chain, 141600 per kthread [ 311.566633][T16421] loop0: detected capacity change from 0 to 128 [ 311.710228][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 311.724715][T16433] ±ÿ: entered promiscuous mode [ 311.729540][T16433] bond_slave_1: entered promiscuous mode [ 311.735659][T16433] macvtap2: entered promiscuous mode [ 311.740962][T16433] bond0: entered promiscuous mode [ 311.746332][T16433] macvtap2: entered allmulticast mode [ 311.751696][T16433] bond0: entered allmulticast mode [ 311.756779][T16433] ±ÿ: entered allmulticast mode [ 311.761620][T16433] bond_slave_1: entered allmulticast mode [ 311.768347][T16433] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 311.775627][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 311.784688][T16436] bond0: left allmulticast mode [ 311.789551][T16436] ±ÿ: left allmulticast mode [ 311.794162][T16436] bond_slave_1: left allmulticast mode [ 311.799660][T16436] bond0: left promiscuous mode [ 311.804705][T16436] ±ÿ: left promiscuous mode [ 311.809424][T16436] bond_slave_1: left promiscuous mode [ 311.960330][T16446] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4655'. [ 312.054181][T16446] tipc: Enabled bearer , priority 0 [ 312.101890][T16446] syzkaller0: entered promiscuous mode [ 312.107397][T16446] syzkaller0: entered allmulticast mode [ 312.342463][T16446] tipc: Resetting bearer [ 312.362732][T16442] tipc: Resetting bearer [ 312.378030][T16442] tipc: Disabling bearer [ 313.466029][ T36] IPVS: starting estimator thread 0... [ 313.512945][T16516] bridge: RTM_NEWNEIGH with invalid ether address [ 313.579371][T16513] IPVS: using max 2544 ests per chain, 127200 per kthread [ 314.428116][T16546] hub 8-0:1.0: USB hub found [ 314.433024][T16546] hub 8-0:1.0: 8 ports detected [ 314.456328][T16545] syzkaller0: entered promiscuous mode [ 314.461855][T16545] syzkaller0: entered allmulticast mode [ 315.947390][T16576] syzkaller0: entered promiscuous mode [ 315.952954][T16576] syzkaller0: entered allmulticast mode [ 316.515649][T16610] tipc: Enabling of bearer rejected, failed to enable media [ 318.206750][T16627] hub 8-0:1.0: USB hub found [ 318.211488][T16627] hub 8-0:1.0: 8 ports detected [ 318.700092][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4728'. [ 318.732718][T16648] ±ÿ: entered promiscuous mode [ 318.737509][T16648] bond_slave_1: entered promiscuous mode [ 318.764538][T16648] macvtap3: entered promiscuous mode [ 318.769870][T16648] bond0: entered promiscuous mode [ 318.775063][T16648] macvtap3: entered allmulticast mode [ 318.780489][T16648] bond0: entered allmulticast mode [ 318.785582][T16648] ±ÿ: entered allmulticast mode [ 318.790486][T16648] bond_slave_1: entered allmulticast mode [ 318.843198][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4728'. [ 318.880597][T16648] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 318.911533][T16651] bond0: left allmulticast mode [ 318.916493][T16651] ±ÿ: left allmulticast mode [ 318.921170][T16651] bond_slave_1: left allmulticast mode [ 318.926696][T16651] bond0: left promiscuous mode [ 318.931690][T16651] ±ÿ: left promiscuous mode [ 318.936217][T16651] bond_slave_1: left promiscuous mode [ 319.008037][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4734'. [ 319.653903][T16705] hub 8-0:1.0: USB hub found [ 319.658796][T16705] hub 8-0:1.0: 8 ports detected [ 321.492002][T16763] syzkaller0: entered promiscuous mode [ 321.497506][T16763] syzkaller0: entered allmulticast mode [ 321.681749][T16780] random: crng reseeded on system resumption [ 322.556254][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4781'. [ 322.599525][T16800] tipc: Enabling of bearer rejected, failed to enable media [ 322.643596][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4781'. [ 322.665942][T16805] syzkaller0: entered promiscuous mode [ 322.671477][T16805] syzkaller0: entered allmulticast mode [ 322.735073][T16795] ±ÿ: entered promiscuous mode [ 322.739931][T16795] bond_slave_1: entered promiscuous mode [ 322.772091][T16793] hub 8-0:1.0: USB hub found [ 322.776756][T16793] hub 8-0:1.0: 8 ports detected [ 322.793301][T16795] macvtap4: entered promiscuous mode [ 322.798703][T16795] bond0: entered promiscuous mode [ 322.804177][T16795] macvtap4: entered allmulticast mode [ 322.809568][T16795] bond0: entered allmulticast mode [ 322.814687][T16795] ±ÿ: entered allmulticast mode [ 322.819537][T16795] bond_slave_1: entered allmulticast mode [ 322.839095][T16795] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 322.852063][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'. [ 322.862962][T16803] bond0: left allmulticast mode [ 322.867818][T16803] ±ÿ: left allmulticast mode [ 322.872503][T16803] bond_slave_1: left allmulticast mode [ 322.877957][T16803] bond0: left promiscuous mode [ 322.883065][T16803] ±ÿ: left promiscuous mode [ 322.887565][T16803] bond_slave_1: left promiscuous mode [ 322.906564][T16809] ±ÿ: entered promiscuous mode [ 322.911375][T16809] bond_slave_1: entered promiscuous mode [ 322.932069][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'. [ 322.953401][T16809] macvtap1: entered promiscuous mode [ 322.958728][T16809] bond0: entered promiscuous mode [ 322.963976][T16809] macvtap1: entered allmulticast mode [ 322.969359][T16809] bond0: entered allmulticast mode [ 322.974456][T16809] ±ÿ: entered allmulticast mode [ 322.979344][T16809] bond_slave_1: entered allmulticast mode [ 322.989206][T16809] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 323.030863][T16811] bond0: left allmulticast mode [ 323.035795][T16811] ±ÿ: left allmulticast mode [ 323.040421][T16811] bond_slave_1: left allmulticast mode [ 323.045882][T16811] bond0: left promiscuous mode [ 323.050867][T16811] ±ÿ: left promiscuous mode [ 323.055367][T16811] bond_slave_1: left promiscuous mode [ 323.772697][T16819] random: crng reseeded on system resumption [ 324.794819][ T29] audit: type=1400 audit(1755709173.102:4061): avc: denied { recv } for pid=16845 comm="syz.2.4795" saddr=10.128.0.163 src=37776 daddr=10.128.0.160 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.102783][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4800'. [ 325.129835][T16877] ±ÿ: entered promiscuous mode [ 325.134766][T16877] bond_slave_1: entered promiscuous mode [ 325.156985][T16877] macvtap5: entered promiscuous mode [ 325.162323][T16877] bond0: entered promiscuous mode [ 325.167640][T16877] macvtap5: entered allmulticast mode [ 325.173058][T16877] bond0: entered allmulticast mode [ 325.178234][T16877] ±ÿ: entered allmulticast mode [ 325.183089][T16877] bond_slave_1: entered allmulticast mode [ 325.226382][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4800'. [ 325.227589][T16877] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 325.265978][T16880] bond0: left allmulticast mode [ 325.270888][T16880] ±ÿ: left allmulticast mode [ 325.275466][T16880] bond_slave_1: left allmulticast mode [ 325.280992][T16880] bond0: left promiscuous mode [ 325.285938][T16880] ±ÿ: left promiscuous mode [ 325.290469][T16880] bond_slave_1: left promiscuous mode [ 326.103205][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 327.174240][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4825'. [ 327.450603][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.468667][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.484153][T16980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4830'. [ 327.550564][T16978] random: crng reseeded on system resumption [ 328.147796][T16997] bridge: RTM_NEWNEIGH with invalid ether address [ 329.553422][T17044] loop3: detected capacity change from 0 to 128 [ 329.741651][T17054] hub 8-0:1.0: USB hub found [ 329.746728][T17054] hub 8-0:1.0: 8 ports detected [ 330.133858][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4856'. [ 330.748251][T17081] loop5: detected capacity change from 0 to 128 [ 332.727973][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 332.995830][T17117] loop4: detected capacity change from 0 to 128 [ 333.331584][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4887'. [ 333.446866][T17144] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4886'. [ 333.495124][T17166] hub 8-0:1.0: USB hub found [ 333.500899][T17166] hub 8-0:1.0: 8 ports detected [ 334.552084][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4902'. [ 335.007266][T17215] random: crng reseeded on system resumption [ 335.372720][T17244] syzkaller0: entered promiscuous mode [ 335.378247][T17244] syzkaller0: entered allmulticast mode [ 335.842725][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4913'. [ 336.902994][T17298] hub 8-0:1.0: USB hub found [ 336.907819][T17298] hub 8-0:1.0: 8 ports detected [ 337.477226][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.485881][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.880064][T17309] bridge: RTM_NEWNEIGH with invalid ether address [ 338.861988][T17332] bridge: RTM_NEWNEIGH with invalid ether address [ 339.367210][T17356] hub 8-0:1.0: USB hub found [ 339.371928][T17356] hub 8-0:1.0: 8 ports detected [ 340.654756][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4958'. [ 341.042344][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4970'. [ 341.175460][T17427] hub 8-0:1.0: USB hub found [ 341.180191][T17427] hub 8-0:1.0: 8 ports detected [ 342.884303][T17472] loop0: detected capacity change from 0 to 128 [ 343.237462][T17478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.246191][T17478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.828747][ T29] audit: type=1400 audit(1755709192.142:4062): avc: denied { read } for pid=17485 comm="syz.5.4997" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.852191][ T29] audit: type=1400 audit(1755709192.142:4063): avc: denied { open } for pid=17485 comm="syz.5.4997" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.969218][ T29] audit: type=1400 audit(1755709192.182:4064): avc: denied { ioctl } for pid=17485 comm="syz.5.4997" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 346.565084][T17572] syzkaller0: entered promiscuous mode [ 346.570689][T17572] syzkaller0: entered allmulticast mode [ 346.679532][T17576] loop5: detected capacity change from 0 to 4096 [ 346.799896][T17576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.245941][T17589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.324005][T17589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.552703][T17589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5029'. [ 348.132358][T17600] loop2: detected capacity change from 0 to 128 [ 348.240262][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.507145][T17648] loop5: detected capacity change from 0 to 512 [ 349.553962][T17648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 349.586171][T17648] EXT4-fs (loop5): 1 truncate cleaned up [ 349.593014][T17648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.651078][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.671303][T17655] hub 8-0:1.0: USB hub found [ 349.676340][T17655] hub 8-0:1.0: 8 ports detected [ 349.787400][T17661] syzkaller0: entered promiscuous mode [ 349.792980][T17661] syzkaller0: entered allmulticast mode [ 351.981675][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5052'. [ 352.029345][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5052'. [ 353.246232][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 353.274069][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 354.739236][T17726] loop4: detected capacity change from 0 to 4096 [ 354.838677][T17727] hub 8-0:1.0: USB hub found [ 354.968543][T17727] hub 8-0:1.0: 8 ports detected [ 355.769998][T17726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.021880][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.064207][ T29] audit: type=1400 audit(1755709204.372:4065): avc: denied { create } for pid=17739 comm="syz.3.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.118997][ T29] audit: type=1400 audit(1755709204.402:4066): avc: denied { setopt } for pid=17739 comm="syz.3.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.176546][T17740] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.231655][ T29] audit: type=1400 audit(1755709204.542:4067): avc: denied { bind } for pid=17739 comm="syz.3.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.301527][T17748] loop2: detected capacity change from 0 to 4096 [ 356.369025][T17748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.822318][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.051580][T17789] loop3: detected capacity change from 0 to 128 [ 358.411634][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.420111][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.354810][T17802] loop4: detected capacity change from 0 to 512 [ 360.375889][T17802] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.479277][T17802] EXT4-fs (loop4): 1 truncate cleaned up [ 360.496428][T17802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.542035][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.615641][T17820] loop5: detected capacity change from 0 to 128 [ 360.659487][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'. [ 361.573277][T17833] syzkaller0: entered promiscuous mode [ 361.578819][T17833] syzkaller0: entered allmulticast mode [ 362.595230][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'. [ 363.615794][ T29] audit: type=1400 audit(1755709211.702:4068): avc: denied { create } for pid=17853 comm="syz.5.5104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.923113][T17873] syzkaller0: entered promiscuous mode [ 363.928650][T17873] syzkaller0: entered allmulticast mode [ 366.114364][T17919] tipc: Enabled bearer , priority 0 [ 366.123520][T17919] tipc: Resetting bearer [ 366.146105][T17918] tipc: Disabling bearer [ 366.546211][T17930] loop2: detected capacity change from 0 to 8192 [ 367.372209][T17952] loop2: detected capacity change from 0 to 512 [ 367.434061][T17952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.465408][T17958] tipc: Enabled bearer , priority 0 [ 367.472891][T17952] EXT4-fs (loop2): 1 truncate cleaned up [ 367.474120][T17958] tipc: Resetting bearer [ 367.483429][T17952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.497731][T17956] tipc: Disabling bearer [ 367.515084][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.571381][T17965] loop0: detected capacity change from 0 to 512 [ 367.578177][T17965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 367.590239][T17965] EXT4-fs (loop0): 1 truncate cleaned up [ 367.596177][T17965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.622377][T12516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.733385][T17971] loop0: detected capacity change from 0 to 1024 [ 367.751451][T17971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.767743][ T29] audit: type=1400 audit(1755709216.072:4069): avc: denied { setattr } for pid=17970 comm="syz.0.5147" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.811517][T17971] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 367.835306][T12516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.834309][T18013] loop5: detected capacity change from 0 to 8192 [ 369.578271][T18046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.586768][T18046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.931772][T18050] tipc: Enabled bearer , priority 0 [ 369.939010][T18050] syzkaller0: entered promiscuous mode [ 369.944545][T18050] syzkaller0: entered allmulticast mode [ 369.964199][T18050] tipc: Resetting bearer [ 369.971449][T18049] tipc: Resetting bearer [ 369.978621][T18049] tipc: Disabling bearer [ 370.092090][T18056] hub 8-0:1.0: USB hub found [ 370.096903][T18056] hub 8-0:1.0: 8 ports detected [ 371.099889][T18084] loop5: detected capacity change from 0 to 4096 [ 371.113663][T18084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.754004][T18092] loop3: detected capacity change from 0 to 4096 [ 372.789542][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.806093][T18092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.809554][T12182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.958995][T18124] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5200'. [ 376.386252][T18155] loop4: detected capacity change from 0 to 4096 [ 376.453429][T18155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.298407][T18168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.338226][T18168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.537448][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.726159][T18172] loop0: detected capacity change from 0 to 8192 [ 378.317310][T18190] loop5: detected capacity change from 0 to 512 [ 378.387152][T18190] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 378.483236][T18190] EXT4-fs (loop5): 1 truncate cleaned up [ 378.524995][T18190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.876667][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.388243][T18204] loop4: detected capacity change from 0 to 512 [ 379.430636][T18204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.464495][T18204] EXT4-fs (loop4): 1 truncate cleaned up [ 379.479228][T18204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.509594][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 379.540677][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.3.5230 [ 379.559108][T12691] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.750360][T18229] loop5: detected capacity change from 0 to 512 [ 379.767394][T18229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 379.829210][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.837654][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.924726][T18229] EXT4-fs (loop5): 1 truncate cleaned up [ 379.939476][T18229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.069839][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.222180][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5242'. [ 380.254232][T18249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18249 comm=syz.5.5243 [ 380.984363][T18273] loop0: detected capacity change from 0 to 128 [ 381.027936][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5256'. [ 381.402156][T18297] loop2: detected capacity change from 0 to 1024 [ 381.414879][T18297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.490759][T18297] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 381.623412][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.564900][T18313] loop4: detected capacity change from 0 to 8192 [ 383.060648][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5272'. [ 384.302301][T18362] loop5: detected capacity change from 0 to 4096 [ 384.371086][T18362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.230620][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5286'. [ 385.523979][T18388] loop0: detected capacity change from 0 to 1024 [ 385.570191][T18388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.623597][T18388] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 385.815626][T11440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.850320][T12516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.314186][T18416] tipc: Enabled bearer , priority 0 [ 386.343592][T18416] syzkaller0: entered promiscuous mode [ 386.349104][T18416] syzkaller0: entered allmulticast mode [ 386.409136][T18416] tipc: Resetting bearer [ 386.427442][T18415] tipc: Resetting bearer [ 386.437530][T18415] tipc: Disabling bearer [ 387.234478][T18461] tipc: Enabled bearer , priority 0 [ 387.251070][T18461] syzkaller0: entered promiscuous mode [ 387.256605][T18461] syzkaller0: entered allmulticast mode [ 387.290640][T18461] tipc: Resetting bearer [ 387.297119][T18460] tipc: Resetting bearer [ 387.307248][T18460] tipc: Disabling bearer [ 387.677220][T18470] loop5: detected capacity change from 0 to 8192 [ 387.925602][T18470] ================================================================== [ 387.933712][T18470] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 387.940836][T18470] [ 387.943147][T18470] write to 0xffff888106db9602 of 2 bytes by task 18473 on cpu 1: [ 387.950853][T18470] fat16_ent_put+0x28/0x60 [ 387.955285][T18470] fat_ent_write+0x69/0xe0 [ 387.959711][T18470] fat_chain_add+0x15d/0x440 [ 387.964301][T18470] fat_get_block+0x46c/0x5e0 [ 387.968881][T18470] __block_write_begin_int+0x3fd/0xf90 [ 387.974347][T18470] cont_write_begin+0x5fc/0x970 [ 387.979202][T18470] fat_write_begin+0x4f/0xe0 [ 387.983796][T18470] generic_perform_write+0x184/0x490 [ 387.989081][T18470] __generic_file_write_iter+0x9e/0x120 [ 387.994629][T18470] generic_file_write_iter+0x8d/0x2f0 [ 388.000015][T18470] vfs_write+0x52a/0x960 [ 388.004258][T18470] ksys_write+0xda/0x1a0 [ 388.008488][T18470] __x64_sys_write+0x40/0x50 [ 388.013081][T18470] x64_sys_call+0x27fe/0x2ff0 [ 388.017759][T18470] do_syscall_64+0xd2/0x200 [ 388.022264][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.028152][T18470] [ 388.030467][T18470] read to 0xffff888106db9600 of 512 bytes by task 18470 on cpu 0: [ 388.038262][T18470] fat_mirror_bhs+0x1df/0x320 [ 388.042947][T18470] fat_alloc_clusters+0x98b/0xa80 [ 388.047972][T18470] fat_get_block+0x258/0x5e0 [ 388.052556][T18470] __block_write_begin_int+0x3fd/0xf90 [ 388.058028][T18470] cont_write_begin+0x5fc/0x970 [ 388.062878][T18470] fat_write_begin+0x4f/0xe0 [ 388.067467][T18470] cont_write_begin+0x1ad/0x970 [ 388.072316][T18470] fat_write_begin+0x4f/0xe0 [ 388.076906][T18470] generic_cont_expand_simple+0xb0/0x150 [ 388.082541][T18470] fat_cont_expand+0x3e/0x170 [ 388.087219][T18470] fat_setattr+0x2a5/0x8a0 [ 388.091637][T18470] notify_change+0x809/0x890 [ 388.096230][T18470] do_ftruncate+0x34b/0x450 [ 388.100732][T18470] __x64_sys_ftruncate+0x68/0xc0 [ 388.105665][T18470] x64_sys_call+0x2d52/0x2ff0 [ 388.110338][T18470] do_syscall_64+0xd2/0x200 [ 388.114839][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.120729][T18470] [ 388.123040][T18470] Reported by Kernel Concurrency Sanitizer on: [ 388.129197][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.5.5320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 388.139875][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.149922][T18470] ==================================================================