last executing test programs: 7m33.486881534s ago: executing program 32 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x14, &(0x7f0000000040)={@random="f60db9be9ce2", @multicast, @val={@void}, {@generic={0x88a8, "c1df"}}}, 0x0) 6m49.54302756s ago: executing program 33 (id=1158): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 5m59.259084185s ago: executing program 34 (id=2826): unshare(0x22020600) r0 = epoll_create1(0x0) fgetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792ef88dabc07f5ddc5827450bc27a943fcd0f0e929d4bc9ee4faabfeb2f1e79557b7a7046ee258ad349bb4019a61c7957a30b869902904f6b017c5058d6f5b642adfe9af70975fd57e01d7ea06e02d1cf9e95a2b3d6d412f7385f674b5e65685b0e637d69fac0cb735ae7f2a8ec6b2fe0a736f9712801974687733439616a3b9ffa34b229b846ca1cd12890108d59703fccf1da237b1e2af5847f91f8794690c26930d8a8da61f61ea065cd875985ae0cfea8aefd0463f0c5bdadd6c2484c9b85aea454944b1a8c1a6fa40daffdb88ffc2aa59306105a5faceb87d0111de6dde5c42d9ffb172fd7a5572e031ba2a649b85ce2c1bae9704479"], 0x0, 0x0) 5m29.121125487s ago: executing program 35 (id=3858): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 5m19.646168389s ago: executing program 36 (id=4198): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffc2, @mcast1, 0x7}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x20}}}}}}, 0x0) 5m19.048387178s ago: executing program 37 (id=4204): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 5m3.916113109s ago: executing program 38 (id=4694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) 4m48.43895446s ago: executing program 39 (id=5225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'pim6reg1\x00'}) 4m45.543397434s ago: executing program 40 (id=5298): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff}) setrlimit(0x8, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) mlockall(0x7) 4m22.474288841s ago: executing program 41 (id=6064): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 4m22.44281486s ago: executing program 42 (id=6067): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x550e, &(0x7f0000006b80)="$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") 4m19.616304685s ago: executing program 43 (id=6150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') 4m16.308857129s ago: executing program 44 (id=6253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x90) r1 = memfd_create(&(0x7f0000000640)='@&)#\n*)\\\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 4m8.184193303s ago: executing program 45 (id=6572): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x5fe}}, {@nouid32}, {@nombcache}]}, 0xfe, 0x450, &(0x7f0000000d80)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) 3m44.547544238s ago: executing program 46 (id=7221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) rt_sigqueueinfo(0x0, 0x2, 0x0) 2m50.288479675s ago: executing program 47 (id=9275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 2m24.617788376s ago: executing program 48 (id=9605): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb23c", 0x8, 0x4000084, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 2m19.077234425s ago: executing program 49 (id=10215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 2m8.629215175s ago: executing program 50 (id=10600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2m6.194336481s ago: executing program 51 (id=10699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 1m53.990071027s ago: executing program 52 (id=11203): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x5, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m35.052523022s ago: executing program 53 (id=11937): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000433fac88850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m16.240220936s ago: executing program 54 (id=12111): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010102}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 1m6.636819377s ago: executing program 55 (id=12810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 57.33762515s ago: executing program 56 (id=13157): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 48.788255673s ago: executing program 57 (id=13461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 47.867898131s ago: executing program 58 (id=13479): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c100000224e0000000000", 0x58}], 0x1) 43.787024594s ago: executing program 59 (id=13610): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 35.043783277s ago: executing program 60 (id=13987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 34.795025907s ago: executing program 61 (id=13989): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = dup(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r3, &(0x7f0000003100)={0x50}, 0x50) tee(r2, r1, 0x50, 0x4) 32.471755222s ago: executing program 8 (id=14077): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414bb00000000000000000000000000000000000000000000000000000000ff0300000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/312], 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x0) 32.429018812s ago: executing program 8 (id=14081): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000) epoll_create(0x3) epoll_create(0x2) 32.198302802s ago: executing program 62 (id=14091): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00030200000002037c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 32.087281122s ago: executing program 8 (id=14104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) nanosleep(&(0x7f00000003c0), 0x0) 32.014744871s ago: executing program 63 (id=14092): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40010000, 0x0, 0x0) 31.964848621s ago: executing program 8 (id=14096): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0b], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) 31.950880111s ago: executing program 8 (id=14097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 31.806872671s ago: executing program 64 (id=14095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 31.6012267s ago: executing program 65 (id=14098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 31.18713998s ago: executing program 8 (id=14113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 31.160601629s ago: executing program 66 (id=14113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21.547065281s ago: executing program 1 (id=14525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x24, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21.530621931s ago: executing program 1 (id=14526): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 21.481041591s ago: executing program 1 (id=14527): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 21.403172171s ago: executing program 1 (id=14531): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4c4, &(0x7f0000003700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 21.274852251s ago: executing program 1 (id=14534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.167061871s ago: executing program 1 (id=14540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 21.150189201s ago: executing program 67 (id=14540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.531147236s ago: executing program 4 (id=15016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x28, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @void, @val={0xc, 0x99, {0x8, 0x4e}}}}}, 0x28}}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x819840, &(0x7f0000000100)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 8.381263556s ago: executing program 4 (id=15027): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x9}) 8.268269696s ago: executing program 4 (id=15030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}}, 0x0) 8.220177116s ago: executing program 4 (id=15033): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x10540b, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40042, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 8.034361006s ago: executing program 4 (id=15042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 7.819122345s ago: executing program 4 (id=15049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 7.774610785s ago: executing program 68 (id=15049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 5.900930042s ago: executing program 2 (id=15142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9) 5.850687301s ago: executing program 2 (id=15146): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000080)) 5.806709681s ago: executing program 2 (id=15148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0c8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 5.366508831s ago: executing program 2 (id=15167): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x10540b, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40042, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 5.24677296s ago: executing program 2 (id=15171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x48}, 0x4) 5.13115522s ago: executing program 2 (id=15172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000000000000000500030000000000050002"], 0x3c}}, 0x0) 5.1233527s ago: executing program 69 (id=15172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000000000000000500030000000000050002"], 0x3c}}, 0x0) 3.908451458s ago: executing program 5 (id=15201): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x6, 0x70880160, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x24522716a989086f}}, 0x50) 3.884061628s ago: executing program 5 (id=15203): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$netlink(0x10, 0x3, 0xa) pselect6(0x2a00, 0x0, 0x0, &(0x7f0000000140)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x3fffc00000000000, 0x0, 0x4}, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 3.728237317s ago: executing program 5 (id=15208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r2, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 3.727774667s ago: executing program 5 (id=15209): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x10540b, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40042, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 3.648995957s ago: executing program 5 (id=15210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c030000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x36c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.519174357s ago: executing program 5 (id=15213): process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlockall(0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 3.515677177s ago: executing program 70 (id=15213): process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlockall(0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 1.431356163s ago: executing program 7 (id=15290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) 1.386821773s ago: executing program 7 (id=15293): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c001500000070"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x9, 0x1}}, 0xb8}}, 0x0) 1.358579423s ago: executing program 7 (id=15295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) pivot_root(0x0, 0x0) 1.291159812s ago: executing program 7 (id=15297): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.058441602s ago: executing program 7 (id=15301): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x20000001, 0x0, 0x1, 0x4, "907f0000ffffe5d58ddfffff1e277f7fffeb00"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xffff, 0x19}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xff) 886.935232ms ago: executing program 7 (id=15304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0xffffff31, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x25, @lang_id={0x0, 0x3, 0x409}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 583.061791ms ago: executing program 9 (id=15311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2060, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 545.891042ms ago: executing program 9 (id=15313): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 507.526111ms ago: executing program 9 (id=15314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x9, 0x20, 0x2, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x20000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 460.177951ms ago: executing program 9 (id=15316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x26, 0x0, [{0x3, 0xff, 0x1, 0xfff}, {0x6, 0x8c, 0x3, 0x8}, {0x9, 0x2, 0xe, 0x3}, {0xfaf, 0x2, 0x1, 0xec}, {0x9, 0x9, 0xe, 0x7f}, {0xf523, 0x7, 0xf, 0x2}, {0x7ed, 0x1, 0x6, 0x58}, {0xbbd5, 0x82, 0x9, 0x81}, {0x9, 0x1, 0x0, 0xff9}, {0x5, 0x5, 0x1, 0x5}, {0x8, 0x3, 0x4, 0x8}, {0x7, 0x8, 0x5}, {0xc, 0xe7, 0xa, 0x66}, {0x5, 0x1, 0x5}, {0x623a, 0x0, 0x8, 0x8}, {0x2, 0x7, 0xa5, 0x7}, {0x7, 0x7, 0x6, 0x8}, {0x81, 0x4, 0x1, 0xa}, {0x5, 0xdc, 0x7}, {0x0, 0xff, 0xe7, 0x3}, {0x7, 0x5, 0x8f, 0xce}, {0x1, 0x1, 0x9, 0x3}, {0xfff8, 0x5, 0x80, 0x1}, {0x4d42, 0x7a, 0x9, 0x5}, {0x4, 0x5, 0x9, 0x80}, {0x9f, 0x2, 0xde, 0x8}, {0x0, 0x2, 0x51, 0x4}, {0x6, 0x5, 0x5, 0x20a}, {0x800, 0x40, 0x80, 0x953}, {0x4, 0x2e, 0xb, 0x10}, {0x0, 0x3, 0x6b}, {0x8, 0x4, 0x5, 0x6}, {0x2, 0xc3, 0x7, 0x1a17}, {0x3bc4, 0x8, 0xf, 0x2}, {0x7ff, 0xcb, 0xc, 0x1ff}, {0x7, 0x79, 0x4, 0x1}, {0x6, 0x9, 0x97, 0x10000}, {0x3ff, 0xc, 0xff, 0x2}, {0x3, 0xf, 0x0, 0x3}, {0x2, 0xc0, 0x4}, {0x6, 0x0, 0x6, 0x8001}, {0x6, 0x6, 0xff, 0x8}, {0x92, 0xf7, 0x3, 0x3ff}, {0x2, 0xfd, 0xd, 0xfffffff8}, {0xfde1, 0x6, 0x0, 0x8}, {0x5, 0x1, 0x6, 0x9}, {0xc0, 0x5, 0x3, 0x1000}, {0x0, 0x6, 0x2, 0x1}, {0x0, 0x8, 0x0, 0x6}, {0x1, 0x7, 0x9, 0x3}, {0xc000, 0x0, 0x8, 0x1}, {0x9, 0x7, 0xff, 0x401}, {0xb1aa, 0x3, 0xd4}, {0x3, 0x87, 0xbf}, {0xa, 0x7, 0xf, 0xfffffffd}, {0xf, 0x4, 0x1}, {0x9, 0x10, 0x2, 0xfffffff7}, {0x3, 0x43, 0x7, 0x8}, {0x9, 0xe0, 0xad}, {0x8, 0x10, 0x40, 0xffff}, {0x6, 0x2, 0x9, 0x4}, {0x6, 0x7, 0xe, 0xfffffffb}, {0x40, 0x7, 0xe2, 0x8}, {0x200, 0x7f, 0x9, 0xedd}], {0xfffffffffffffffb}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x2, 0xa0}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x2}, {0x3, 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 407.498941ms ago: executing program 9 (id=15319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 404.726901ms ago: executing program 6 (id=15320): accept$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syslog(0x3, &(0x7f0000000500)=""/218, 0xda) 384.975311ms ago: executing program 9 (id=15321): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0xff}, 0xe) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 302.157791ms ago: executing program 6 (id=15325): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 281.774611ms ago: executing program 6 (id=15327): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) r2 = openat(r1, &(0x7f0000000340)='.\x00', 0x0, 0x131) lseek(r2, 0x0, 0x0) 266.533491ms ago: executing program 6 (id=15329): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x29) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 199.448471ms ago: executing program 3 (id=15335): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 199.224131ms ago: executing program 0 (id=15336): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) 161.650651ms ago: executing program 3 (id=15337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x709d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 124.65801ms ago: executing program 0 (id=15338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 102.40872ms ago: executing program 0 (id=15339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd5df}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 93.02735ms ago: executing program 3 (id=15340): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) 83.562561ms ago: executing program 0 (id=15341): r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{r1, r2+60000000}, {0x0, 0x9}}, 0x0) 56.548491ms ago: executing program 3 (id=15342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) 36.226781ms ago: executing program 3 (id=15343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 35.92134ms ago: executing program 6 (id=15344): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 24.1899ms ago: executing program 3 (id=15345): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 23.87462ms ago: executing program 0 (id=15346): r0 = socket$packet(0x11, 0x2, 0x300) gettid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a000000000000001142"], 0x0) 10.76831ms ago: executing program 6 (id=15347): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x4, 0x3, 0x66, 0x7, 0x4, 0xcb, 0x4, @multicast2, @multicast1}}}}}}, 0x0) 0s ago: executing program 0 (id=15348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 0][ T313] EXT4-fs (loop4): dirty_blocks=32 [ 440.982560][ T8] device bridge_slave_1 left promiscuous mode [ 440.983240][ T313] EXT4-fs (loop4): Block reservation details [ 440.988505][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.027886][ T8] device bridge_slave_0 left promiscuous mode [ 441.049610][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.058113][ T8] device veth1_macvtap left promiscuous mode [ 441.074006][ T8] device veth0_vlan left promiscuous mode [ 441.193994][T32130] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.196363][T32134] loop3: detected capacity change from 0 to 40427 [ 441.201042][T32130] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.208611][T32134] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 441.222511][T32134] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 441.231386][T32134] F2FS-fs (loop3): invalid crc value [ 441.253602][T32134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 441.320869][T32134] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 441.328187][T32134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 441.374057][T31784] syz-executor: attempt to access beyond end of device [ 441.374057][T31784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.410843][T32157] loop8: detected capacity change from 0 to 1024 [ 441.417256][T32157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.511335][T32169] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.518347][T32169] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.698612][T32189] loop6: detected capacity change from 0 to 128 [ 441.719741][T32189] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 441.728292][T32189] ext4 filesystem being mounted at /877/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 441.729218][T32192] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 441.784646][T21853] EXT4-fs (loop6): unmounting filesystem. [ 441.905999][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 441.906016][ T28] audit: type=1400 audit(2000000346.078:3755): avc: denied { ioctl } for pid=32208 comm="syz.3.13656" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=151171 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 441.945559][ T28] audit: type=1400 audit(2000000346.121:3756): avc: denied { watch watch_reads } for pid=32210 comm="syz.4.13658" path="/syzcgroup/unified/syz4" dev="ramfs" ino=127936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 442.009184][ T28] audit: type=1400 audit(2000000346.196:3757): avc: denied { mount } for pid=32218 comm="syz.4.13660" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 442.032463][ T28] audit: type=1400 audit(2000000346.218:3758): avc: denied { unmount } for pid=32218 comm="syz.4.13660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 442.066855][ T28] audit: type=1400 audit(2000000346.250:3759): avc: denied { create } for pid=32221 comm="syz.4.13661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.086435][ T28] audit: type=1400 audit(2000000346.250:3760): avc: denied { ioctl } for pid=32221 comm="syz.4.13661" path="socket:[150430]" dev="sockfs" ino=150430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.112011][ T28] audit: type=1400 audit(2000000346.250:3761): avc: denied { connect } for pid=32221 comm="syz.4.13661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.136397][ T28] audit: type=1400 audit(2000000346.250:3762): avc: denied { write } for pid=32221 comm="syz.4.13661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.156124][ T28] audit: type=1400 audit(2000000346.325:3763): avc: denied { unmount } for pid=32094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 442.231246][ T28] audit: type=1400 audit(2000000346.432:3764): avc: denied { mount } for pid=32233 comm="syz.4.13667" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 442.435492][ T1105] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 442.603748][ T1105] usb 2-1: Using ep0 maxpacket: 8 [ 442.612635][ T1105] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 442.623895][T32239] loop6: detected capacity change from 0 to 2048 [ 442.630187][ T1105] usb 2-1: config 179 has no interface number 0 [ 442.636342][ T1105] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 442.647242][ T1105] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 442.658397][ T1105] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.669360][ T1105] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 442.680563][ T1105] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 442.681669][T32239] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 442.693587][ T1105] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 442.710858][ T1105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.718933][T32239] ext4 filesystem being mounted at /879/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.731339][T32228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.762458][T21853] EXT4-fs (loop6): unmounting filesystem. [ 442.857992][T32267] binder_alloc: binder_alloc_mmap_handler: 32264 20fff000-21000000 already mapped failed -16 [ 442.933133][T32269] loop3: detected capacity change from 0 to 2048 [ 442.963608][T32269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 442.967717][T32278] syz.8.13685[32278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.972125][T32278] syz.8.13685[32278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.972302][T32269] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.032844][T31784] EXT4-fs (loop3): unmounting filesystem. [ 443.086575][T32290] input: syz0 as /devices/virtual/input/input78 [ 443.196913][T32308] loop6: detected capacity change from 0 to 1024 [ 443.233210][T32308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 443.299031][T32320] binder: 32319:32320 ioctl c0306201 200003c0 returned -22 [ 443.306431][T21853] EXT4-fs (loop6): unmounting filesystem. [ 443.402496][T32342] loop6: detected capacity change from 0 to 256 [ 443.419271][T32342] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 443.421261][T32345] loop8: detected capacity change from 0 to 128 [ 443.454227][T32349] loop4: detected capacity change from 0 to 256 [ 443.475591][T32349] FAT-fs (loop4): Directory bread(block 64) failed [ 443.503079][T32349] FAT-fs (loop4): Directory bread(block 65) failed [ 443.510370][T32356] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.516763][T32349] FAT-fs (loop4): Directory bread(block 66) failed [ 443.525693][T32360] loop3: detected capacity change from 0 to 1024 [ 443.525977][T32349] FAT-fs (loop4): Directory bread(block 67) failed [ 443.532119][T32356] FAT-fs (loop13): unable to read boot sector [ 443.545415][T32360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 443.546394][T32349] FAT-fs (loop4): Directory bread(block 68) failed [ 443.565284][T32349] FAT-fs (loop4): Directory bread(block 69) failed [ 443.572367][T32349] FAT-fs (loop4): Directory bread(block 70) failed [ 443.579319][T32360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 443.588066][T32349] FAT-fs (loop4): Directory bread(block 71) failed [ 443.588115][T32349] FAT-fs (loop4): Directory bread(block 72) failed [ 443.588136][T32349] FAT-fs (loop4): Directory bread(block 73) failed [ 443.616152][ T812] usb 2-1: USB disconnect, device number 37 [ 443.616277][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 443.630150][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.685850][T31784] EXT4-fs (loop3): unmounting filesystem. [ 443.745759][T32382] tmpfs: Unknown parameter '' [ 443.792224][T32391] loop1: detected capacity change from 0 to 256 [ 443.813022][T32391] exfat: Deprecated parameter 'namecase' [ 443.832184][T32391] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 443.848435][T32400] loop6: detected capacity change from 0 to 256 [ 443.881334][T32400] FAT-fs (loop6): Directory bread(block 64) failed [ 443.888797][T32400] FAT-fs (loop6): Directory bread(block 65) failed [ 443.897896][T32400] FAT-fs (loop6): Directory bread(block 66) failed [ 443.904308][T32400] FAT-fs (loop6): Directory bread(block 67) failed [ 443.910770][T32400] FAT-fs (loop6): Directory bread(block 68) failed [ 443.917146][T32400] FAT-fs (loop6): Directory bread(block 69) failed [ 443.923649][T32400] FAT-fs (loop6): Directory bread(block 70) failed [ 443.930103][T32400] FAT-fs (loop6): Directory bread(block 71) failed [ 443.954858][T32400] FAT-fs (loop6): Directory bread(block 72) failed [ 443.961383][T32400] FAT-fs (loop6): Directory bread(block 73) failed [ 443.969859][T32404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13743'. [ 444.000481][T32408] loop1: detected capacity change from 0 to 512 [ 444.006854][T32408] EXT4-fs: Ignoring removed mblk_io_submit option [ 444.013516][T32408] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 444.023903][T32408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 444.045689][T32408] System zones: 1-12 [ 444.055369][T32408] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.13744: corrupted in-inode xattr [ 444.078008][T32408] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.13744: couldn't read orphan inode 15 (err -117) [ 444.078944][T32418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13748'. [ 444.091448][T32408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 444.138642][T32094] EXT4-fs (loop1): unmounting filesystem. [ 444.270375][T32447] syz.6.13762[32447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.270458][T32447] syz.6.13762[32447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.286279][T32449] loop1: detected capacity change from 0 to 512 [ 444.311369][T32449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.320752][T32449] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.339772][T32449] EXT4-fs (loop1): shut down requested (2) [ 444.352376][T32094] EXT4-fs (loop1): unmounting filesystem. [ 444.390098][T32462] loop1: detected capacity change from 0 to 256 [ 444.397623][T32462] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.437982][T32469] input: syz0 as /devices/virtual/input/input79 [ 444.481703][T32473] netlink: 'syz.1.13772': attribute type 1 has an invalid length. [ 444.500022][T32475] loop1: detected capacity change from 0 to 256 [ 444.553700][T32483] input: syz1 as /devices/virtual/input/input80 [ 444.585664][T32487] input: syz1 as /devices/virtual/input/input81 [ 444.591840][T32487] input: failed to attach handler leds to device input81, error: -6 [ 444.634085][T32491] 9pnet_fd: Insufficient options for proto=fd [ 444.745549][T32506] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.754703][T32506] FAT-fs (loop9): unable to read boot sector [ 444.767648][T32506] loop4: detected capacity change from 0 to 512 [ 444.795964][T32506] EXT4-fs (loop4): orphan cleanup on readonly fs [ 444.807203][T32506] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.13790: invalid block [ 444.827105][T32506] EXT4-fs (loop4): Remounting filesystem read-only [ 444.836068][T32506] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.13790: invalid indirect mapped block 4294967295 (level 1) [ 444.863453][T32506] EXT4-fs (loop4): Remounting filesystem read-only [ 444.875743][T32506] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.13790: invalid indirect mapped block 4294967295 (level 1) [ 444.890444][T32506] EXT4-fs (loop4): Remounting filesystem read-only [ 444.905556][T32506] EXT4-fs (loop4): 2 truncates cleaned up [ 444.911165][T32506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 444.920504][T32512] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.922751][T32506] EXT4-fs (loop4): unmounting filesystem. [ 444.928622][T32512] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.943203][T32512] device bridge_slave_0 entered promiscuous mode [ 444.950797][T32512] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.957785][T32512] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.965504][T32512] device bridge_slave_1 entered promiscuous mode [ 445.043587][T32533] 9pnet_fd: Insufficient options for proto=fd [ 445.060525][T32512] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.067415][T32512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.074532][T32512] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.081385][T32512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.120509][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.130433][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.137623][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.157532][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.165991][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.172871][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.186773][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.194955][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.201801][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.233360][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.241185][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.263910][T32512] device veth0_vlan entered promiscuous mode [ 445.271059][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.279421][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.287404][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.296292][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.306418][T32563] netem: change failed [ 445.326235][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.344424][T32512] device veth1_macvtap entered promiscuous mode [ 445.355379][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.375089][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.432156][T32578] device lo entered promiscuous mode [ 445.445401][T32578] device tunl0 entered promiscuous mode [ 445.452993][T32578] device gre0 entered promiscuous mode [ 445.459136][T32578] device gretap0 entered promiscuous mode [ 445.465276][T32578] device erspan0 entered promiscuous mode [ 445.471210][T32578] device ip_vti0 entered promiscuous mode [ 445.479417][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13826'. [ 445.483580][T32578] device ip6_vti0 entered promiscuous mode [ 445.494473][T32578] device sit0 entered promiscuous mode [ 445.500734][T32578] device ip6tnl0 entered promiscuous mode [ 445.506897][T32578] device ip6gre0 entered promiscuous mode [ 445.512988][T32578] device syz_tun entered promiscuous mode [ 445.519121][T32578] device ip6gretap0 entered promiscuous mode [ 445.525458][T32578] device bridge0 entered promiscuous mode [ 445.531606][T32578] device vcan0 entered promiscuous mode [ 445.537019][T32578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.553081][T32578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.560647][T32578] device dummy0 entered promiscuous mode [ 445.568247][T32578] device veth0 entered promiscuous mode [ 445.576982][T32578] device veth1 entered promiscuous mode [ 445.583205][T32578] device wg0 entered promiscuous mode [ 445.589123][T32578] device wg1 entered promiscuous mode [ 445.594794][T32578] device wg2 entered promiscuous mode [ 445.600407][T32578] device veth0_to_bridge entered promiscuous mode [ 445.607725][T32578] device veth1_to_bridge entered promiscuous mode [ 445.624251][T32578] device veth0_to_bond entered promiscuous mode [ 445.630693][T32578] device bond_slave_0 entered promiscuous mode [ 445.642680][T32578] device veth1_to_bond entered promiscuous mode [ 445.649356][T32578] device bond_slave_1 entered promiscuous mode [ 445.655997][T32578] device veth0_to_team entered promiscuous mode [ 445.662955][T32578] device team_slave_0 entered promiscuous mode [ 445.669698][T32578] device veth1_to_team entered promiscuous mode [ 445.676414][T32578] device team_slave_1 entered promiscuous mode [ 445.683043][T32578] device veth0_to_batadv entered promiscuous mode [ 445.689833][T32578] device batadv_slave_0 entered promiscuous mode [ 445.696295][T32578] device veth1_to_batadv entered promiscuous mode [ 445.702760][ T6] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 445.710928][T32578] device batadv_slave_1 entered promiscuous mode [ 445.717809][T32578] device xfrm0 entered promiscuous mode [ 445.723485][T32578] device veth0_to_hsr entered promiscuous mode [ 445.731420][T32578] device hsr_slave_0 entered promiscuous mode [ 445.737916][T32578] device veth1_to_hsr entered promiscuous mode [ 445.744602][T32578] device hsr_slave_1 entered promiscuous mode [ 445.751102][T32578] device veth1_virt_wifi entered promiscuous mode [ 445.757938][T32578] device veth0_virt_wifi entered promiscuous mode [ 445.764699][T32578] device veth1_vlan entered promiscuous mode [ 445.771353][T32578] device vlan0 entered promiscuous mode [ 445.777241][T32578] device vlan1 entered promiscuous mode [ 445.783465][T32578] device veth0_macvtap entered promiscuous mode [ 445.789769][T32578] device macsec0 entered promiscuous mode [ 445.800172][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.810094][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.818199][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.828025][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.865376][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.877768][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.893764][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.903784][ T6] usb 9-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 445.912744][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.921255][ T6] usb 9-1: config 0 descriptor?? [ 445.969070][ T8] device bridge_slave_1 left promiscuous mode [ 445.975062][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.983082][ T8] device bridge_slave_0 left promiscuous mode [ 445.992984][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.026738][T32630] xt_bpf: check failed: parse error [ 446.283410][T32660] loop1: detected capacity change from 0 to 1024 [ 446.305244][ T6] hid-rmi 0003:06CB:81A7.005D: item fetching failed at offset 2/5 [ 446.313969][T32660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 446.322666][ T6] hid-rmi 0003:06CB:81A7.005D: parse failed [ 446.328624][ T6] hid-rmi: probe of 0003:06CB:81A7.005D failed with error -22 [ 446.414344][T32512] EXT4-fs (loop1): unmounting filesystem. [ 446.431650][T32681] loop1: detected capacity change from 0 to 1024 [ 446.456246][T32681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 446.465000][T32681] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.489470][T32512] EXT4-fs (loop1): unmounting filesystem. [ 446.501039][ T6] usb 9-1: USB disconnect, device number 9 [ 446.574139][T32703] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 446.583475][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 446.583492][ T28] audit: type=1400 audit(2000000351.099:3833): avc: denied { relabelto } for pid=32702 comm="syz.3.13879" name="NETLINK" dev="sockfs" ino=153289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 446.682553][T32711] kvm: MWAIT instruction emulated as NOP! [ 447.052454][T32738] loop8: detected capacity change from 0 to 512 [ 447.059942][T32738] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 447.068144][T32738] EXT4-fs (loop8): orphan cleanup on readonly fs [ 447.074782][T32738] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 447.084814][T32738] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 447.094118][T32738] EXT4-fs error (device loop8): ext4_acquire_dquot:6788: comm syz.8.13895: Failed to acquire dquot type 1 [ 447.105783][T32738] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.13895: bg 0: block 40: padding at end of block bitmap is not set [ 447.120039][T32738] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 447.128889][T32738] EXT4-fs (loop8): 1 truncate cleaned up [ 447.349731][ T28] audit: type=1400 audit(2000000351.926:3834): avc: denied { mount } for pid=304 comm="syz.3.13909" name="/" dev="ramfs" ino=152540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 447.523900][ T28] audit: type=1400 audit(2000000352.108:3835): avc: denied { bind } for pid=327 comm="syz.6.13919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.544415][ T28] audit: type=1400 audit(2000000352.108:3836): avc: denied { name_bind } for pid=327 comm="syz.6.13919" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 447.576251][ T28] audit: type=1400 audit(2000000352.108:3837): avc: denied { node_bind } for pid=327 comm="syz.6.13919" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 447.604095][ T28] audit: type=1400 audit(2000000352.162:3838): avc: denied { setopt } for pid=327 comm="syz.6.13919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.654460][ T28] audit: type=1400 audit(2000000352.194:3839): avc: denied { create } for pid=329 comm="syz.1.13920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 447.679920][ T344] loop6: detected capacity change from 0 to 512 [ 447.686360][ T28] audit: type=1400 audit(2000000352.194:3840): avc: denied { write } for pid=329 comm="syz.1.13920" path="socket:[153460]" dev="sockfs" ino=153460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 447.718753][ T344] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 447.730350][ T344] EXT4-fs (loop6): orphan cleanup on readonly fs [ 447.739729][ T344] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 447.754620][ T344] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 447.761193][T31356] Bluetooth: hci0: command 0x1003 tx timeout [ 447.767181][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 447.767385][ T344] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #16: comm syz.6.13927: iget: immutable or append flags not allowed on symlinks [ 447.787583][ T344] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.13927: couldn't read orphan inode 16 (err -117) [ 447.823293][ T351] loop4: detected capacity change from 0 to 256 [ 448.054419][ T394] device vlan2 entered promiscuous mode [ 448.122688][ T401] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 448.225095][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.242272][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.256992][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.272221][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.279722][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.287019][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.294485][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.301814][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.309225][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.316528][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.330328][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.336315][ T428] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 448.338424][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.353558][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.362405][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.370027][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.377430][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.384890][ T39] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 448.393013][ T39] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 448.640651][ T457] overlayfs: failed to clone upperpath [ 448.646834][ T457] overlayfs: failed to clone lowerpath [ 448.653170][ T457] overlayfs: failed to clone lowerpath [ 448.656088][ T460] loop8: detected capacity change from 0 to 256 [ 448.669741][ T460] FAT-fs (loop8): Directory bread(block 64) failed [ 448.676371][ T460] FAT-fs (loop8): Directory bread(block 65) failed [ 448.682910][ T460] FAT-fs (loop8): Directory bread(block 66) failed [ 448.689222][ T460] FAT-fs (loop8): Directory bread(block 67) failed [ 448.695634][ T460] FAT-fs (loop8): Directory bread(block 68) failed [ 448.701922][ T460] FAT-fs (loop8): Directory bread(block 69) failed [ 448.708258][ T460] FAT-fs (loop8): Directory bread(block 70) failed [ 448.714622][ T460] FAT-fs (loop8): Directory bread(block 71) failed [ 448.721021][ T460] FAT-fs (loop8): Directory bread(block 72) failed [ 448.727516][ T460] FAT-fs (loop8): Directory bread(block 73) failed [ 448.797514][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13981'. [ 448.953646][ T481] device lo entered promiscuous mode [ 448.964246][ T481] device tunl0 entered promiscuous mode [ 448.970390][ T481] device gre0 entered promiscuous mode [ 448.980454][ T481] device gretap0 entered promiscuous mode [ 448.986847][ T481] device erspan0 entered promiscuous mode [ 448.993560][ T481] device ip_vti0 entered promiscuous mode [ 448.999633][ T481] device ip6_vti0 entered promiscuous mode [ 449.006115][ T481] device sit0 entered promiscuous mode [ 449.018979][ T481] device ip6tnl0 entered promiscuous mode [ 449.030419][ T481] device ip6gre0 entered promiscuous mode [ 449.040813][ T481] device syz_tun entered promiscuous mode [ 449.047316][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 449.063340][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 449.078023][ T481] device ip6gretap0 entered promiscuous mode [ 449.084696][ T481] device bridge0 entered promiscuous mode [ 449.091140][ T481] device vcan0 entered promiscuous mode [ 449.100220][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.110284][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.117434][ T481] device dummy0 entered promiscuous mode [ 449.123793][ T481] device veth0 entered promiscuous mode [ 449.130883][ T481] device veth1 entered promiscuous mode [ 449.137218][ T481] device wg0 entered promiscuous mode [ 449.143608][ T481] device wg1 entered promiscuous mode [ 449.152352][ T481] device wg2 entered promiscuous mode [ 449.158218][ T481] device veth0_to_bridge entered promiscuous mode [ 449.165524][ T481] device veth1_to_bridge entered promiscuous mode [ 449.172545][ T481] device veth0_to_bond entered promiscuous mode [ 449.179424][ T481] device bond_slave_0 entered promiscuous mode [ 449.185698][ T481] device veth1_to_bond entered promiscuous mode [ 449.198481][ T481] device bond_slave_1 entered promiscuous mode [ 449.210123][ T481] device veth0_to_team entered promiscuous mode [ 449.216891][ T481] device team_slave_0 entered promiscuous mode [ 449.234351][ T481] device veth1_to_team entered promiscuous mode [ 449.247905][ T481] device team_slave_1 entered promiscuous mode [ 449.254855][ T481] device veth0_to_batadv entered promiscuous mode [ 449.276546][ T481] device batadv_slave_0 entered promiscuous mode [ 449.286487][ T481] device veth1_to_batadv entered promiscuous mode [ 449.293308][ T481] device batadv_slave_1 entered promiscuous mode [ 449.300218][ T481] device xfrm0 entered promiscuous mode [ 449.306561][ T481] device veth0_to_hsr entered promiscuous mode [ 449.313725][ T481] device hsr_slave_0 entered promiscuous mode [ 449.326697][ T481] device veth1_to_hsr entered promiscuous mode [ 449.333905][ T481] device hsr_slave_1 entered promiscuous mode [ 449.340418][ T481] device veth1_virt_wifi entered promiscuous mode [ 449.353723][ T481] device veth0_virt_wifi entered promiscuous mode [ 449.360964][ T481] device veth1_vlan entered promiscuous mode [ 449.367339][ T481] device veth0_vlan left promiscuous mode [ 449.374105][ T481] device veth0_vlan entered promiscuous mode [ 449.381493][ T481] device vlan0 entered promiscuous mode [ 449.387201][ T481] device vlan1 entered promiscuous mode [ 449.394292][ T481] device veth1_macvtap left promiscuous mode [ 449.400441][ T481] device veth1_macvtap entered promiscuous mode [ 449.407072][ T481] device veth0_macvtap entered promiscuous mode [ 449.413642][ T481] device macsec0 entered promiscuous mode [ 449.419800][ T481] device tun0 entered promiscuous mode [ 449.425507][ T481] device xfrm1 entered promiscuous mode [ 449.435863][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.443122][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.452553][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.472797][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.479653][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.492083][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.500756][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.510864][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.517717][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.521492][ T522] loop8: detected capacity change from 0 to 1024 [ 449.525087][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.539539][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 449.547549][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.555594][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 449.563884][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.572276][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.580786][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.588906][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.597024][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.605494][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.613838][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.622065][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.632018][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.648614][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.656675][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.667902][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.669688][ T535] loop8: detected capacity change from 0 to 512 [ 449.676016][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.684070][ T535] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.14012: inline data xattr refers to an external xattr inode [ 449.698675][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.705623][ T535] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.14012: couldn't read orphan inode 12 (err -117) [ 449.718131][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.734197][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.742215][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.751542][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.759007][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.766390][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.775267][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.783530][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.792152][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.953301][ T559] overlayfs: maximum fs stacking depth exceeded [ 449.995674][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.002543][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.017737][ T512] device bridge_slave_0 entered promiscuous mode [ 450.025236][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.032523][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.040177][ T512] device bridge_slave_1 entered promiscuous mode [ 450.195999][ T589] overlayfs: maximum fs stacking depth exceeded [ 450.210298][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.218118][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.290036][ T603] 9pnet: p9_errstr2errno: server reported unknown error  [ 450.315960][ T605] loop4: detected capacity change from 0 to 512 [ 450.334977][ T605] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 450.349112][ T605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 450.355951][ T605] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 450.372420][ T605] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 450.379552][ T605] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.14041: iget: immutable or append flags not allowed on symlinks [ 450.395066][ T605] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.14041: couldn't read orphan inode 16 (err -117) [ 450.442963][ T618] loop4: detected capacity change from 0 to 512 [ 450.466163][ T618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.549538][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.557230][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.573165][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.582156][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.590262][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.596391][ T620] loop6: detected capacity change from 0 to 40427 [ 450.597125][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.610798][ T620] F2FS-fs (loop6): fault_type options not supported [ 450.617930][ T620] F2FS-fs (loop6): invalid crc value [ 450.624549][ T620] F2FS-fs (loop6): Found nat_bits in checkpoint [ 450.631514][ T618] ext4 filesystem being mounted at /1597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.650063][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.658536][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.666984][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.673959][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.681427][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.690281][ T620] F2FS-fs (loop6): Start checkpoint disabled! [ 450.696948][ T620] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 450.706494][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.714442][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.723491][ T620] F2FS-fs (loop6): switch discard_unit option is not allowed [ 450.731278][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.742682][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.761671][ T313] kworker/u4:3: attempt to access beyond end of device [ 450.761671][ T313] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 450.762364][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.783122][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.792991][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.793416][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.806383][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.815705][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.828717][ T512] device veth0_vlan entered promiscuous mode [ 450.839088][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.841402][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.851948][ T634] loop8: detected capacity change from 0 to 256 [ 450.859903][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.864846][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.874209][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.883994][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.884142][ T634] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 450.903019][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.907171][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.910371][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.925362][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.931435][ T512] device veth1_macvtap entered promiscuous mode [ 450.943283][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.952730][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.957071][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.963204][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.972629][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.984646][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.992706][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 450.993968][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.000116][ T6] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 451.010125][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.022833][ T6] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 451.039596][ T639] xt_bpf: check failed: parse error [ 451.068175][ T643] loop4: detected capacity change from 0 to 256 [ 451.084450][ T643] FAT-fs (loop4): bogus logical sector size 128 [ 451.103953][ T645] SELinux: failed to load policy [ 451.128799][ T643] FAT-fs (loop4): Can't find a valid FAT filesystem [ 451.169861][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.177401][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.199300][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.206528][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.225424][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.232832][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.233107][ T665] incfs: Error accessing: ./file0. [ 451.250086][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.262005][ T665] incfs: mount failed -20 [ 451.264015][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.276679][ T670] loop4: detected capacity change from 0 to 256 [ 451.285022][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.298823][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.310103][ T670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14069'. [ 451.319510][ T670] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14069'. [ 451.321626][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.341908][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.353592][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.364765][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 451.364784][ T28] audit: type=1400 audit(2000000356.228:3861): avc: denied { connect } for pid=652 comm="syz.3.14061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 451.397110][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.417631][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.434611][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.449818][ T6] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 451.458611][ T679] loop4: detected capacity change from 0 to 256 [ 451.472712][ T6] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz0 [ 451.491100][ T679] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.567874][ T695] 9pnet: p9_errstr2errno: server reported unknown error  [ 451.633495][ T28] audit: type=1400 audit(2000000356.518:3862): avc: denied { watch watch_reads } for pid=705 comm="syz.6.14086" path="/952" dev="tmpfs" ino=4993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.714394][ T714] loop6: detected capacity change from 0 to 256 [ 451.722373][ T714] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.841876][ T719] device lo entered promiscuous mode [ 451.847909][ T719] device tunl0 entered promiscuous mode [ 451.853970][ T719] device gre0 entered promiscuous mode [ 451.860601][ T719] device gretap0 entered promiscuous mode [ 451.867434][ T719] device erspan0 entered promiscuous mode [ 451.873674][ T719] device ip_vti0 entered promiscuous mode [ 451.879826][ T719] device ip6_vti0 entered promiscuous mode [ 451.896894][ T719] device ip6tnl0 entered promiscuous mode [ 451.906911][ T719] device ip6gre0 entered promiscuous mode [ 451.917826][ T719] device syz_tun entered promiscuous mode [ 451.924296][ T719] device ip6gretap0 entered promiscuous mode [ 451.931458][ T719] device bridge0 entered promiscuous mode [ 451.938910][ T719] device vcan0 entered promiscuous mode [ 451.944750][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.952306][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.960316][ T719] device dummy0 entered promiscuous mode [ 451.970156][ T719] device veth0 entered promiscuous mode [ 451.976432][ T719] device veth1 entered promiscuous mode [ 451.982514][ T726] input: syz1 as /devices/virtual/input/input82 [ 451.990052][ T719] device wg0 entered promiscuous mode [ 451.996691][ T719] device wg1 entered promiscuous mode [ 452.002143][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 452.009481][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 452.029563][ T719] device wg2 entered promiscuous mode [ 452.038473][ T719] device veth0_to_bridge entered promiscuous mode [ 452.045684][ T719] device veth1_to_bridge entered promiscuous mode [ 452.052904][ T719] device veth0_to_bond entered promiscuous mode [ 452.060671][ T719] device bond_slave_0 entered promiscuous mode [ 452.067065][ T719] device veth1_to_bond entered promiscuous mode [ 452.073862][ T719] device bond_slave_1 entered promiscuous mode [ 452.080134][ T719] device veth0_to_team entered promiscuous mode [ 452.088167][ T719] device team_slave_0 entered promiscuous mode [ 452.094480][ T719] device veth1_to_team entered promiscuous mode [ 452.101138][ T719] device team_slave_1 entered promiscuous mode [ 452.107614][ T719] device veth0_to_batadv entered promiscuous mode [ 452.114555][ T719] device batadv_slave_0 entered promiscuous mode [ 452.121242][ T719] device veth1_to_batadv entered promiscuous mode [ 452.128024][ T719] device batadv_slave_1 entered promiscuous mode [ 452.134947][ T719] device xfrm0 entered promiscuous mode [ 452.141419][ T719] device veth0_to_hsr entered promiscuous mode [ 452.148227][ T719] device hsr_slave_0 entered promiscuous mode [ 452.154387][ T719] device veth1_to_hsr entered promiscuous mode [ 452.161218][ T719] device hsr_slave_1 entered promiscuous mode [ 452.168262][ T719] device veth1_virt_wifi entered promiscuous mode [ 452.175994][ T719] device veth1_vlan entered promiscuous mode [ 452.182313][ T719] device veth0_vlan left promiscuous mode [ 452.187975][ T719] device veth0_vlan entered promiscuous mode [ 452.195255][ T719] device vlan0 entered promiscuous mode [ 452.200982][ T719] device vlan1 entered promiscuous mode [ 452.206656][ T719] device veth1_macvtap left promiscuous mode [ 452.212559][ T719] device veth1_macvtap entered promiscuous mode [ 452.220182][ T719] device veth0_macvtap entered promiscuous mode [ 452.226796][ T719] device macsec0 entered promiscuous mode [ 452.232917][ T719] device ip6tnl1 entered promiscuous mode [ 452.239002][ T719] device syztnl0 entered promiscuous mode [ 452.245062][ T719] device vlan2 entered promiscuous mode [ 452.250966][ T719] device macsec1 entered promiscuous mode [ 452.256772][ T719] device bridge1 entered promiscuous mode [ 452.266999][ T719] device macsec2 entered promiscuous mode [ 452.273648][ T719] device ip6gre1 entered promiscuous mode [ 452.290460][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 452.298234][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 452.305573][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.313041][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.321133][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.328018][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.335534][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 452.344684][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.352783][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.359773][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.376242][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 452.389803][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 452.401203][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 452.415914][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 452.436979][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.455238][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.466306][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 452.478199][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.498875][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 452.528430][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 452.542202][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.551780][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.562199][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.571302][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.583862][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.592063][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.600124][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.608466][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.616837][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.625252][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.633230][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.640977][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.648301][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.655851][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.664524][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.679945][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 452.687994][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 452.702866][ T747] netlink: 'syz.3.14107': attribute type 1 has an invalid length. [ 452.719388][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 452.835222][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.842393][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.850332][ T748] device bridge_slave_0 entered promiscuous mode [ 452.859655][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.866668][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.874021][ T748] device bridge_slave_1 entered promiscuous mode [ 452.949982][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.956854][ T748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.963986][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.970912][ T748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.039475][ T774] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.047253][ T774] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.054610][ T774] device bridge_slave_0 entered promiscuous mode [ 453.065951][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.072876][ T774] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.080165][ T774] device bridge_slave_1 entered promiscuous mode [ 453.086565][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.094118][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.101641][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.128528][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.136799][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.143624][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.160815][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.168867][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.175710][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.212460][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.225494][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.253562][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.269840][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.278170][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.286246][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.301587][ T748] device veth0_vlan entered promiscuous mode [ 453.313482][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.324949][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.333201][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.340020][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.348704][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.364209][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.372192][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.379022][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.389396][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.405378][ T748] device veth1_macvtap entered promiscuous mode [ 453.413998][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.424311][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.434520][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.449278][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.484270][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.492778][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.493255][ T785] loop1: detected capacity change from 0 to 128 [ 453.506714][ T8] device bridge_slave_1 left promiscuous mode [ 453.512840][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.522692][ T8] device bridge_slave_0 left promiscuous mode [ 453.528850][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.539625][ T8] device veth1_macvtap left promiscuous mode [ 453.545571][ T8] device veth0_vlan left promiscuous mode [ 453.690950][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.702357][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.710584][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.718690][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.726782][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.735316][ T774] device veth0_vlan entered promiscuous mode [ 453.745578][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.753647][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.763204][ T774] device veth1_macvtap entered promiscuous mode [ 453.774084][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.783006][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.791603][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.801828][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.810050][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.889945][ T800] loop1: detected capacity change from 0 to 2048 [ 453.909576][ T805] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.929031][ T805] FAT-fs (loop7): unable to read boot sector [ 453.999673][ T28] audit: type=1400 audit(2000000359.050:3863): avc: denied { append } for pid=825 comm="syz.6.14127" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 454.066777][ T28] audit: type=1400 audit(2000000359.125:3864): avc: denied { shutdown } for pid=837 comm="syz.0.14144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.111699][ T28] audit: type=1400 audit(2000000359.157:3865): avc: denied { bind } for pid=837 comm="syz.0.14144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.346722][ T28] audit: type=1400 audit(2000000359.425:3866): avc: denied { watch watch_reads } for pid=892 comm="syz.4.14170" path="/1625/file1" dev="tmpfs" ino=8487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.371059][ T890] tmpfs: Unknown parameter 'nolazytimep' [ 454.525478][ T919] netlink: 'syz.4.14182': attribute type 13 has an invalid length. [ 454.546244][ T919] gretap0: refused to change device tx_queue_len [ 454.566289][ T919] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 454.588877][ T28] audit: type=1400 audit(2000000359.683:3867): avc: denied { bind } for pid=926 comm="syz.1.14186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.625752][ T28] audit: type=1400 audit(2000000359.683:3868): avc: denied { name_bind } for pid=926 comm="syz.1.14186" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 454.661883][ T28] audit: type=1400 audit(2000000359.683:3869): avc: denied { node_bind } for pid=926 comm="syz.1.14186" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 454.719186][ T28] audit: type=1400 audit(2000000359.790:3870): avc: denied { sqpoll } for pid=936 comm="syz.4.14192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 454.814460][ T960] tipc: Started in network mode [ 454.822631][ T960] tipc: Node identity 2, cluster identity 4711 [ 454.829173][ T960] tipc: Node number set to 2 [ 455.130612][ T1005] netlink: 'syz.6.14223': attribute type 13 has an invalid length. [ 455.154308][ T1005] gretap0: refused to change device tx_queue_len [ 455.161300][ T1005] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 455.225176][ T1011] loop6: detected capacity change from 0 to 128 [ 455.391231][ T812] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 455.522047][ T314] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 455.559237][ T812] usb 5-1: Using ep0 maxpacket: 32 [ 455.565420][ T812] usb 5-1: config 254 has an invalid interface number: 205 but max is 0 [ 455.573746][ T812] usb 5-1: config 254 has no interface number 0 [ 455.581829][ T812] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 455.590976][ T812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.598922][ T812] usb 5-1: Product: syz [ 455.602972][ T812] usb 5-1: Manufacturer: syz [ 455.607320][ T812] usb 5-1: SerialNumber: syz [ 455.718796][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.729849][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.739719][ T314] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 455.748681][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.757266][ T314] usb 2-1: config 0 descriptor?? [ 455.805724][ T39] usb 5-1: USB disconnect, device number 46 [ 455.960185][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 456.139818][ T314] hid-rmi 0003:06CB:81A7.0061: item fetching failed at offset 2/5 [ 456.152694][ T314] hid-rmi 0003:06CB:81A7.0061: parse failed [ 456.158505][ T314] hid-rmi: probe of 0003:06CB:81A7.0061 failed with error -22 [ 456.338568][ T300] usb 2-1: USB disconnect, device number 38 [ 456.349302][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 456.349314][ T28] audit: type=1400 audit(2000000361.582:3873): avc: denied { remount } for pid=1055 comm="syz.3.14247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 456.408263][ T1062] incfs: Options parsing error. -22 [ 456.414361][ T1062] incfs: mount failed -22 [ 456.451943][ T1067] loop4: detected capacity change from 0 to 4096 [ 456.465994][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.14253: corrupted inode contents [ 456.478088][ T1067] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #15: comm syz.4.14253: mark_inode_dirty error [ 456.490668][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.14253: corrupted inode contents [ 456.503716][ T1067] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.14253: mark_inode_dirty error [ 456.515087][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.14253: corrupted inode contents [ 456.527679][ T1067] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.14253: mark_inode_dirty error [ 456.539969][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.14253: corrupted inode contents [ 456.552026][ T1067] EXT4-fs error (device loop4): ext4_truncate:4313: inode #15: comm syz.4.14253: mark_inode_dirty error [ 456.563440][ T1067] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.14253: couldn't truncate inode 15 (err -117) [ 456.606110][ T1083] SELinux: policydb version 0 does not match my version range 15-33 [ 456.614518][ T1083] SELinux: failed to load policy [ 456.833005][ T28] audit: type=1400 audit(2000000362.097:3874): avc: denied { append } for pid=1124 comm="syz.1.14278" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 457.140683][ T1166] block device autoloading is deprecated and will be removed. [ 457.150209][ T1166] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 457.209007][ T28] audit: type=1400 audit(2000000362.504:3875): avc: denied { nlmsg_read } for pid=1169 comm="syz.1.14299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.209011][ T1170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14299'. [ 457.302701][ T1181] netlink: 'syz.1.14304': attribute type 12 has an invalid length. [ 457.312344][ T1181] netlink: 'syz.1.14304': attribute type 29 has an invalid length. [ 457.320302][ T1181] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14304'. [ 457.330364][ T1181] netlink: 'syz.1.14304': attribute type 1 has an invalid length. [ 457.338354][ T1181] netlink: 'syz.1.14304': attribute type 2 has an invalid length. [ 457.346224][ T1181] netlink: 39 bytes leftover after parsing attributes in process `syz.1.14304'. [ 457.394033][ T1194] syz.3.14310[1194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.394137][ T1194] syz.3.14310[1194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.584533][ T1207] loop1: detected capacity change from 0 to 40427 [ 457.604821][ T1207] F2FS-fs (loop1): invalid crc value [ 457.611527][ T1207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 457.659588][ T1207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 457.679461][ T28] audit: type=1400 audit(2000000363.009:3876): avc: denied { read write } for pid=774 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.729852][ T1207] syz.1.14316: attempt to access beyond end of device [ 457.729852][ T1207] loop1: rw=2049, sector=53248, nr_sectors = 32 limit=40427 [ 457.744378][ T28] audit: type=1400 audit(2000000363.019:3877): avc: denied { open } for pid=774 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.768348][ T28] audit: type=1400 audit(2000000363.019:3878): avc: denied { ioctl } for pid=774 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1475 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.866343][ T748] syz-executor: attempt to access beyond end of device [ 457.866343][ T748] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 457.891046][ T1247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14332'. [ 458.020523][ T1259] netlink: 'syz.0.14339': attribute type 12 has an invalid length. [ 458.028804][ T1259] netlink: 'syz.0.14339': attribute type 29 has an invalid length. [ 458.048887][ T1259] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14339'. [ 458.115478][ T1267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14343'. [ 458.153699][ T1275] incfs: Options parsing error. -22 [ 458.163102][ T1275] incfs: mount failed -22 [ 458.244638][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.309227][ T28] audit: type=1326 audit(2000000363.684:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.3.14353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c8a78cd29 code=0x0 [ 458.364199][ T28] audit: type=1400 audit(2000000363.738:3880): avc: denied { unmount } for pid=21853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 458.622668][ T5272] Bluetooth: hci1: Frame reassembly failed (-84) [ 458.653940][ T1305] loop4: detected capacity change from 0 to 40427 [ 458.660915][ T1305] F2FS-fs (loop4): fault_injection options not supported [ 458.668494][ T1305] F2FS-fs (loop4): invalid crc value [ 458.674821][ T1305] F2FS-fs (loop4): Found nat_bits in checkpoint [ 458.723568][ T1305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 458.770056][T14265] syz-executor: attempt to access beyond end of device [ 458.770056][T14265] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 458.978919][ T1299] loop6: detected capacity change from 0 to 131072 [ 458.986015][ T1299] F2FS-fs (loop6): Test dummy encryption mode enabled [ 458.993694][ T1299] F2FS-fs (loop6): invalid crc value [ 459.000384][ T1299] F2FS-fs (loop6): Found nat_bits in checkpoint [ 459.050763][ T1299] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 459.273030][ T1353] loop4: detected capacity change from 0 to 2048 [ 459.291231][ T1359] input: syz1 as /devices/virtual/input/input84 [ 459.308188][ T1353] Alternate GPT is invalid, using primary GPT. [ 459.315397][ T1353] loop4: p2 p3 p7 [ 459.320650][ T28] audit: type=1400 audit(2000000364.768:3881): avc: denied { relabelto } for pid=1360 comm="syz.6.14381" name="NETLINK" dev="sockfs" ino=157752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 459.436929][ T1368] tipc: Enabling of bearer rejected, failed to enable media [ 459.572044][ T1391] xt_hashlimit: size too large, truncated to 1048576 [ 459.586220][ T1392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14394'. [ 459.717806][ T1404] tipc: Enabling of bearer rejected, failed to enable media [ 459.754565][ T1408] loop6: detected capacity change from 0 to 512 [ 459.773507][ T1408] EXT4-fs mount: 16 callbacks suppressed [ 459.773528][ T1408] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 459.789300][ T1408] ext4 filesystem being mounted at /995/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.818928][T21853] EXT4-fs (loop6): unmounting filesystem. [ 459.994618][ T1442] loop4: detected capacity change from 0 to 1024 [ 460.001732][ T1442] EXT4-fs: Ignoring removed nobh option [ 460.007210][ T1442] EXT4-fs: Ignoring removed nobh option [ 460.012977][ T1442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.043860][ T1442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 460.058052][ T28] audit: type=1400 audit(2000000365.551:3882): avc: denied { ioctl } for pid=1441 comm="syz.4.14417" path="/1713/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.097212][T14265] EXT4-fs (loop4): unmounting filesystem. [ 460.135158][ T4676] Bluetooth: hci0: command 0x1003 tx timeout [ 460.135229][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.170158][ T1453] IPv6: sit1: Disabled Multicast RS [ 460.188195][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14423'. [ 460.196704][ T1458] loop6: detected capacity change from 0 to 2048 [ 460.197264][ T1456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14423'. [ 460.214497][ T1456] device wireguard0 entered promiscuous mode [ 460.222005][ T1458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 460.230772][ T1458] ext4 filesystem being mounted at /1004/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.277051][T21853] EXT4-fs (loop6): unmounting filesystem. [ 460.442256][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14437'. [ 460.454105][ T1490] device wireguard0 entered promiscuous mode [ 460.464672][ T1475] loop4: detected capacity change from 0 to 40427 [ 460.471543][ T1475] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 460.478485][ T1475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 460.486632][ T1475] F2FS-fs (loop4): heap/no_heap options were deprecated [ 460.494319][ T1475] F2FS-fs (loop4): invalid crc value [ 460.506575][ T1475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 460.508120][T31356] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 460.512802][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 460.649408][ T1475] F2FS-fs (loop4): Start checkpoint disabled! [ 460.662174][ T1475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 460.669183][ T1475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 460.766182][ T316] kworker/u4:4: attempt to access beyond end of device [ 460.766182][ T316] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 460.836186][ T1545] loop6: detected capacity change from 0 to 128 [ 460.856991][ T1545] syz.6.14462: attempt to access beyond end of device [ 460.856991][ T1545] loop6: rw=2049, sector=153, nr_sectors = 3 limit=128 [ 460.908112][ T316] kworker/u4:4: attempt to access beyond end of device [ 460.908112][ T316] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 461.166693][ T1590] loop1: detected capacity change from 0 to 1024 [ 461.173907][ T1590] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 461.182229][ T1590] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 461.199939][ T1590] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 461.210523][ T1590] journal_init_common: Cannot get buffer for journal superblock [ 461.219976][ T1590] EXT4-fs (loop1): Could not load journal inode [ 461.382430][ T1611] xt_hashlimit: size too large, truncated to 1048576 [ 461.531930][ T1619] loop0: detected capacity change from 0 to 2048 [ 461.552200][ T1619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 461.570273][ T774] EXT4-fs (loop0): unmounting filesystem. [ 462.104783][ T1635] loop1: detected capacity change from 0 to 2048 [ 462.114974][ T1635] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.128293][ T1635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 462.157156][ T1635] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.1.14501: path /62/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=916 fake=0 [ 462.212369][ T1649] __nla_validate_parse: 2 callbacks suppressed [ 462.212387][ T1649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14506'. [ 462.227295][ T748] EXT4-fs (loop1): unmounting filesystem. [ 462.312538][ T1665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1665 comm=syz.0.14509 [ 462.358776][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 462.358793][ T28] audit: type=1400 audit(2000000624.037:3895): avc: denied { accept } for pid=1670 comm="syz.4.14517" path="socket:[158272]" dev="sockfs" ino=158272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.405894][ T1681] netlink: '+}[@': attribute type 3 has an invalid length. [ 462.582892][ T1702] loop1: detected capacity change from 0 to 512 [ 462.603250][ T1702] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.14531: bad orphan inode 11 [ 462.618732][ T1702] ext4_test_bit(bit=10, block=4) = 1 [ 462.620499][ T1707] loop4: detected capacity change from 0 to 128 [ 462.623949][ T1702] is_bad_inode(inode)=0 [ 462.635567][ T1702] NEXT_ORPHAN(inode)=2080374784 [ 462.640235][ T1702] max_ino=32 [ 462.643488][ T1702] i_nlink=0 [ 462.646667][ T1702] EXT4-fs (loop1): 1 truncate cleaned up [ 462.652400][ T1702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 462.665943][ T1707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 462.680955][ T1707] ext4 filesystem being mounted at /1741/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.717008][T14265] EXT4-fs (loop4): unmounting filesystem. [ 462.756353][ T748] EXT4-fs (loop1): unmounting filesystem. [ 462.857795][ T1727] loop4: detected capacity change from 0 to 256 [ 462.876663][ T1727] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 462.896816][ T1727] exFAT-fs (loop4): hint_cluster is invalid (17) [ 462.976601][ T1729] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.983553][ T1729] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.991013][ T1729] device bridge_slave_0 entered promiscuous mode [ 463.003694][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.010656][ T1729] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.028341][ T1729] device bridge_slave_1 entered promiscuous mode [ 463.158684][ T1733] loop4: detected capacity change from 0 to 40427 [ 463.182361][ T1733] F2FS-fs (loop4): fault_injection options not supported [ 463.194336][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.201227][ T1729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.208415][ T1729] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.215166][ T1729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.223618][ T1733] F2FS-fs (loop4): Image doesn't support compression [ 463.231607][ T1733] F2FS-fs (loop4): Image doesn't support compression [ 463.238912][ T1733] F2FS-fs (loop4): fault_type options not supported [ 463.246410][ T1733] F2FS-fs (loop4): invalid crc value [ 463.257930][ T1733] F2FS-fs (loop4): Found nat_bits in checkpoint [ 463.323903][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.334960][ T1743] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.359129][ T1743] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.406854][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.415040][ T1733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 463.424586][ T1743] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.431461][ T1743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.456020][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.473715][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.480592][ T1743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.488486][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.497081][ T1743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.521621][T14265] syz-executor: attempt to access beyond end of device [ 463.521621][T14265] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.542787][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.564083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 463.574878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.588793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.603713][ T1729] device veth0_vlan entered promiscuous mode [ 463.623882][ T1758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.641196][ T1729] device veth1_macvtap entered promiscuous mode [ 463.655171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.665393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.698354][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.706824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.721684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.731388][ T28] audit: type=1400 audit(2000000625.517:3896): avc: denied { read } for pid=1788 comm="syz.7.14541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.767105][ T28] audit: type=1400 audit(2000000625.550:3897): avc: denied { bind } for pid=1790 comm="syz.4.14554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 463.938953][ T313] device bridge_slave_1 left promiscuous mode [ 463.945025][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.954898][ T313] device bridge_slave_0 left promiscuous mode [ 463.966310][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.984494][ T313] device veth1_macvtap left promiscuous mode [ 464.000249][ T313] device veth0_vlan left promiscuous mode [ 464.051085][ T1808] loop7: detected capacity change from 0 to 40427 [ 464.072383][ T1808] F2FS-fs (loop7): fault_type options not supported [ 464.093559][ T1808] F2FS-fs (loop7): invalid crc value [ 464.101046][ T1808] F2FS-fs (loop7): Found nat_bits in checkpoint [ 464.114392][ T1823] loop4: detected capacity change from 0 to 512 [ 464.122223][ T1823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.169125][ T1823] EXT4-fs (loop4): 1 truncate cleaned up [ 464.174880][ T1823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.183665][ T1808] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 464.191526][ T28] audit: type=1400 audit(2000000626.014:3898): avc: denied { watch } for pid=1822 comm="syz.4.14569" path="/1752/file2" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.240254][T14265] EXT4-fs (loop4): unmounting filesystem. [ 464.255125][ T1808] netlink: 'syz.7.14562': attribute type 11 has an invalid length. [ 464.317633][ T1835] loop4: detected capacity change from 0 to 4096 [ 464.359842][ T1835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.528133][T14265] EXT4-fs (loop4): unmounting filesystem. [ 464.568536][ T1844] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14575'. [ 464.596006][ T1844] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14575'. [ 464.755238][ T1877] loop4: detected capacity change from 0 to 128 [ 464.827944][ T1885] overlayfs: missing 'lowerdir' [ 464.849259][ T1895] loop4: detected capacity change from 0 to 128 [ 464.855860][ T1895] EXT4-fs: Ignoring removed nobh option [ 464.865955][ T1895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 464.874625][ T1895] ext4 filesystem being mounted at /1760/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.907021][ T28] audit: type=1400 audit(2000000626.781:3899): avc: denied { unmount } for pid=14265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 464.908585][T14265] EXT4-fs (loop4): unmounting filesystem. [ 464.932021][ T28] audit: type=1400 audit(2000000626.814:3900): avc: denied { read write } for pid=21853 comm="syz-executor" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.957659][ T28] audit: type=1400 audit(2000000626.814:3901): avc: denied { open } for pid=21853 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.982423][ T28] audit: type=1400 audit(2000000626.814:3902): avc: denied { ioctl } for pid=21853 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.008422][ T28] audit: type=1400 audit(2000000626.900:3903): avc: denied { create } for pid=1905 comm="syz.6.14604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 465.038924][ T28] audit: type=1400 audit(2000000626.922:3904): avc: denied { bpf } for pid=1909 comm="syz.4.14605" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 465.157419][ T1923] loop6: detected capacity change from 0 to 4096 [ 465.166748][ T1923] EXT4-fs (loop6): unsupported descriptor size 1344 [ 465.332085][ T1951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14625'. [ 465.689971][ T2015] IPv6: sit1: Disabled Multicast RS [ 465.898720][ T2033] loop6: detected capacity change from 0 to 2048 [ 465.928797][ T2033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 465.943031][ T2033] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 465.966848][T21853] EXT4-fs (loop6): unmounting filesystem. [ 466.103821][ T2007] loop4: detected capacity change from 0 to 131072 [ 466.110914][ T2007] F2FS-fs (loop4): Test dummy encryption mode enabled [ 466.118482][ T2007] F2FS-fs (loop4): invalid crc value [ 466.143138][ T2007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 466.214270][ T2007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.297959][ T2048] loop6: detected capacity change from 0 to 40427 [ 466.304707][ T2048] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 466.312287][ T2048] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 466.321061][ T2048] F2FS-fs (loop6): invalid crc value [ 466.355421][ T2048] F2FS-fs (loop6): Found nat_bits in checkpoint [ 466.410655][ T2048] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 466.417568][ T2048] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 466.457422][ T2048] syz.6.14669: attempt to access beyond end of device [ 466.457422][ T2048] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 466.575002][ T2074] overlayfs: missing 'lowerdir' [ 466.724323][ T2086] input: syz0 as /devices/virtual/input/input85 [ 466.978899][ T2111] syz.4.14694[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.978954][ T2111] syz.4.14694[2111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.008500][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 467.008517][ T28] audit: type=1400 audit(2000000629.050:3989): avc: denied { create } for pid=2112 comm="syz.4.14695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.045453][ T28] audit: type=1400 audit(2000000629.071:3990): avc: denied { bind } for pid=2112 comm="syz.4.14695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.064861][ T28] audit: type=1400 audit(2000000629.071:3991): avc: denied { name_bind } for pid=2112 comm="syz.4.14695" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 467.099309][ T28] audit: type=1400 audit(2000000629.071:3992): avc: denied { node_bind } for pid=2112 comm="syz.4.14695" saddr=::1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 467.134371][ T28] audit: type=1400 audit(2000000629.125:3993): avc: denied { read write } for pid=774 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 467.158141][ T28] audit: type=1400 audit(2000000629.125:3994): avc: denied { open } for pid=774 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 467.182305][ T28] audit: type=1400 audit(2000000629.125:3995): avc: denied { ioctl } for pid=774 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1475 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 467.227593][ T2123] loop4: detected capacity change from 0 to 256 [ 467.235167][ T28] audit: type=1400 audit(2000000629.298:3996): avc: denied { mounton } for pid=2122 comm="syz.4.14700" path="/1792/bus" dev="tmpfs" ino=9360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 467.260225][ T2123] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3f486145, utbl_chksum : 0xe619d30d) [ 467.277832][ T28] audit: type=1400 audit(2000000629.341:3997): avc: denied { mount } for pid=2122 comm="syz.4.14700" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 467.305760][ T28] audit: type=1400 audit(2000000629.341:3998): avc: denied { watch watch_reads } for pid=2122 comm="syz.4.14700" path="/1792/bus" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.569169][ T2141] loop4: detected capacity change from 0 to 512 [ 467.581853][ T2141] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.14708: casefold flag without casefold feature [ 467.594620][ T2141] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.14708: couldn't read orphan inode 15 (err -117) [ 467.608019][ T2141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 467.630656][T14265] EXT4-fs (loop4): unmounting filesystem. [ 467.700052][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14716'. [ 467.713687][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14716'. [ 467.859630][ T2168] loop4: detected capacity change from 0 to 40427 [ 467.866425][ T2168] F2FS-fs (loop4): fault_type options not supported [ 467.873572][ T2168] F2FS-fs (loop4): invalid crc value [ 467.879771][ T2168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 467.915919][ T2168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 467.943601][ T2168] netlink: 'syz.4.14720': attribute type 11 has an invalid length. [ 468.325006][ T2231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14759'. [ 468.326290][ T2233] loop7: detected capacity change from 0 to 512 [ 468.345855][ T2233] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 468.365013][ T2233] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.14749: corrupted in-inode xattr [ 468.380973][ T2233] EXT4-fs warning (device loop7): ext4_xattr_set_entry:1723: inode #15: comm syz.7.14749: unable to update i_inline_off [ 468.393620][ T2233] EXT4-fs (loop7): 1 truncate cleaned up [ 468.399377][ T2233] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 468.423849][ T1729] EXT4-fs (loop7): unmounting filesystem. [ 468.447798][ T2246] loop4: detected capacity change from 0 to 1024 [ 468.456564][ T2246] EXT4-fs: Ignoring removed nobh option [ 468.461952][ T2246] EXT4-fs: Ignoring removed bh option [ 468.468404][ T2246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 468.496335][ T2246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 468.525769][T14265] EXT4-fs (loop4): unmounting filesystem. [ 469.604733][ T2280] overlayfs: failed to clone upperpath [ 469.662853][ T2278] loop4: detected capacity change from 0 to 8192 [ 469.753808][ T2304] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 469.918279][ T2314] loop7: detected capacity change from 0 to 512 [ 469.924814][ T2314] EXT4-fs: Ignoring removed oldalloc option [ 469.931491][ T2314] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 469.941063][ T2314] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 469.950055][ T2314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0002] [ 469.958397][ T2314] System zones: 0-2, 18-18, 34-34 [ 469.971308][ T2314] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 469.982383][ T2314] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.14784: bad orphan inode 15 [ 469.992582][ T2314] ext4_test_bit(bit=14, block=18) = 1 [ 469.998036][ T2314] is_bad_inode(inode)=0 [ 470.002073][ T2314] NEXT_ORPHAN(inode)=2264924160 [ 470.007150][ T2314] max_ino=32 [ 470.010314][ T2314] i_nlink=0 [ 470.014718][ T2314] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 470.029725][ T2323] loop0: detected capacity change from 0 to 512 [ 470.034954][ T2314] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.14784: bg 0: block 80: padding at end of block bitmap is not set [ 470.051373][ T2314] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 470.060407][ T2314] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 470.069615][ T2323] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.14788: inode #1: comm syz.0.14788: iget: illegal inode # [ 470.086650][ T2323] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.14788: error while reading EA inode 1 err=-117 [ 470.100572][ T2323] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.14788: inode #1: comm syz.0.14788: iget: illegal inode # [ 470.113886][ T2323] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.14788: error while reading EA inode 1 err=-117 [ 470.126411][ T2323] EXT4-fs (loop0): 1 orphan inode deleted [ 470.132010][ T2323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 470.154807][ T774] EXT4-fs (loop0): unmounting filesystem. [ 470.203613][ T2338] xt_hashlimit: size too large, truncated to 1048576 [ 470.683114][ T2386] loop0: detected capacity change from 0 to 4096 [ 470.686016][ T1729] EXT4-fs (loop7): unmounting filesystem. [ 470.705836][ T2386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 470.741950][ T774] EXT4-fs (loop0): unmounting filesystem. [ 471.238413][ T2441] loop6: detected capacity change from 0 to 512 [ 471.259033][ T2441] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 471.294215][ T2441] EXT4-fs (loop6): 1 truncate cleaned up [ 471.308797][ T2441] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 471.355037][ T2426] loop4: detected capacity change from 0 to 40427 [ 471.362129][ T2426] F2FS-fs (loop4): heap/no_heap options were deprecated [ 471.369225][ T2426] F2FS-fs (loop4): fault_type options not supported [ 471.376131][ T2426] F2FS-fs (loop4): Image doesn't support compression [ 471.382292][T21853] EXT4-fs (loop6): unmounting filesystem. [ 471.389129][ T2426] F2FS-fs (loop4): invalid crc value [ 471.412211][ T2426] F2FS-fs (loop4): Found nat_bits in checkpoint [ 471.531610][ T2426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 471.661956][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 471.661973][ T28] audit: type=1400 audit(2000000634.081:4109): avc: denied { read write } for pid=2471 comm="syz.6.14853" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 471.676292][ T2475] netlink: 'syz.0.14855': attribute type 2 has an invalid length. [ 471.703877][ T2475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14855'. [ 471.703990][ T28] audit: type=1400 audit(2000000634.113:4110): avc: denied { open } for pid=2471 comm="syz.6.14853" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 471.717683][ T2476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14854'. [ 471.736360][ T28] audit: type=1400 audit(2000000634.113:4111): avc: denied { mount } for pid=2471 comm="syz.6.14853" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 471.765302][ T2476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14854'. [ 471.775507][ T2481] syz.7.14858[2481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.775585][ T2481] syz.7.14858[2481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.781250][ T28] audit: type=1400 audit(2000000634.124:4112): avc: denied { unmount } for pid=21853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 471.818339][ T2477] netlink: 'syz.0.14855': attribute type 2 has an invalid length. [ 471.826310][ T2477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14855'. [ 471.835783][T14265] syz-executor: attempt to access beyond end of device [ 471.835783][T14265] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 471.883038][ T28] audit: type=1400 audit(2000000634.274:4113): avc: denied { ioctl } for pid=2480 comm="syz.7.14858" path="socket:[161321]" dev="sockfs" ino=161321 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.908399][ T28] audit: type=1400 audit(2000000634.306:4114): avc: denied { mounton } for pid=2486 comm="syz.6.14861" path="/1092/file0" dev="tmpfs" ino=5727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 471.997762][ T2501] loop7: detected capacity change from 0 to 512 [ 472.004063][ T2501] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.015822][ T2501] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 472.044088][ T2501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 472.051853][ T2501] System zones: 1-12 [ 472.084849][ T2501] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.14867: corrupted in-inode xattr [ 472.123053][ T2501] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.14867: couldn't read orphan inode 15 (err -117) [ 472.174535][ T2501] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 472.243479][ T1729] EXT4-fs (loop7): unmounting filesystem. [ 472.336954][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.346074][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.354906][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.363763][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.372601][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.381453][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.390317][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.399158][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.408017][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.416859][ T2523] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 472.558339][ T2534] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.595886][ T2534] FAT-fs (loop4): unable to read boot sector [ 472.635819][ T28] audit: type=1400 audit(2000000635.122:4115): avc: denied { setopt } for pid=2544 comm="syz.6.14886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.636271][ T2545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14886'. [ 472.675193][ T28] audit: type=1400 audit(2000000635.122:4116): avc: denied { ioctl } for pid=2544 comm="syz.6.14886" path="socket:[161439]" dev="sockfs" ino=161439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.736471][ T28] audit: type=1400 audit(2000000635.208:4117): avc: denied { create } for pid=2552 comm="syz.0.14889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.776819][ T28] audit: type=1400 audit(2000000635.208:4118): avc: denied { setopt } for pid=2552 comm="syz.0.14889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.885151][ T2582] loop6: detected capacity change from 0 to 2048 [ 472.906668][ T2582] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 472.926596][ T2582] ext4 filesystem being mounted at /1100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.973393][T21853] EXT4-fs (loop6): unmounting filesystem. [ 473.033295][ T2595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14906'. [ 473.219367][ T2621] netlink: 520 bytes leftover after parsing attributes in process `syz.6.14918'. [ 473.287503][ T2629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14922'. [ 473.369684][ T2639] syz.0.14926[2639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.369781][ T2639] syz.0.14926[2639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.707837][ T2690] loop4: detected capacity change from 0 to 1024 [ 473.726643][ T2690] EXT4-fs: Ignoring removed bh option [ 473.726663][ T2692] incfs: Options parsing error. -22 [ 473.732137][ T2690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 473.737031][ T2692] incfs: mount failed -22 [ 473.763507][ T2690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.793819][ T2690] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.14948: Allocating blocks 481-513 which overlap fs metadata [ 473.797056][ T2701] loop0: detected capacity change from 0 to 256 [ 473.823774][ T2690] EXT4-fs (loop4): Remounting filesystem read-only [ 473.853390][T14265] EXT4-fs (loop4): unmounting filesystem. [ 474.080506][ T2732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2732 comm=syz.3.14963 [ 474.302963][ T2753] loop6: detected capacity change from 0 to 256 [ 474.312948][ T2753] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xd3fc6e3e, utbl_chksum : 0xe619d30d) [ 474.325982][ T2753] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 474.521817][ T2772] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 474.793954][ T2787] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 474.837483][ T2791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14990'. [ 475.228077][ T2797] loop0: detected capacity change from 0 to 40427 [ 475.241726][ T2797] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 475.260961][ T2797] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 475.276557][ T2797] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 475.297810][ T2797] F2FS-fs (loop0): Found nat_bits in checkpoint [ 475.365663][ T2797] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 475.373858][ T2838] futex_wake_op: syz.4.15011 tries to shift op by 32; fix this program [ 475.382453][ T2797] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 475.580702][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.580735][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.604122][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.612594][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.622982][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.630636][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.668020][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.675788][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.683278][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.707110][ T2797] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 475.716067][ T2879] netlink: 'syz.7.15029': attribute type 1 has an invalid length. [ 475.732510][ T2879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15029'. [ 475.791441][ T2883] loop4: detected capacity change from 0 to 2048 [ 475.824498][ T2891] loop6: detected capacity change from 0 to 512 [ 475.849646][ T2883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 475.862171][ T2898] loop7: detected capacity change from 0 to 512 [ 475.878529][ T2898] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 475.896886][ T2891] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.15035: casefold flag without casefold feature [ 475.921281][ T2898] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 475.937074][ T2891] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.15035: couldn't read orphan inode 15 (err -117) [ 475.948997][ T2898] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 475.968479][ T2891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 475.970483][ T2898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 475.987049][T29638] EXT4-fs (loop4): unmounting filesystem. [ 475.996461][ T2898] System zones: 0-2, 18-18, 34-34 [ 476.002532][ T2898] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 476.017223][ T2898] EXT4-fs (loop7): 1 truncate cleaned up [ 476.022698][ T2898] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 476.071854][ T2917] loop0: detected capacity change from 0 to 1024 [ 476.079197][ T2917] EXT4-fs: Ignoring removed orlov option [ 476.082210][T21853] EXT4-fs (loop6): unmounting filesystem. [ 476.085093][ T2917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.092060][ T1729] EXT4-fs (loop7): unmounting filesystem. [ 476.104652][ T2766] tipc: Disabling bearer [ 476.121766][ T2766] tipc: Left network mode [ 476.138222][ T2917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 476.154556][ T2917] System zones: 0-1, 3-36 [ 476.160222][ T2917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 476.181999][ T2917] EXT4-fs (loop0): shut down requested (2) [ 476.221976][ T774] EXT4-fs (loop0): unmounting filesystem. [ 476.379971][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 476.379991][ T28] audit: type=1400 audit(2000000639.145:4230): avc: denied { write } for pid=2950 comm="syz.7.15062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.434425][ T2955] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 476.446645][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.456051][ T28] audit: type=1400 audit(2000000639.220:4231): avc: denied { relabelto } for pid=2954 comm="syz.0.15063" name="memory.events" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 476.493298][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.509983][ T2941] device bridge_slave_0 entered promiscuous mode [ 476.520517][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.527751][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.534653][ T28] audit: type=1400 audit(2000000639.220:4232): avc: denied { associate } for pid=2954 comm="syz.0.15063" name="memory.events" dev="tmpfs" ino=512 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 476.565393][ T2941] device bridge_slave_1 entered promiscuous mode [ 476.575752][ T28] audit: type=1400 audit(2000000639.284:4233): avc: denied { unlink } for pid=774 comm="syz-executor" name="memory.events" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 476.641026][ T28] audit: type=1400 audit(2000000639.424:4234): avc: denied { read write } for pid=2965 comm="syz.0.15067" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 476.670340][ T28] audit: type=1400 audit(2000000639.424:4235): avc: denied { open } for pid=2965 comm="syz.0.15067" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 476.717639][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.724544][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.731666][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.732642][ T28] audit: type=1400 audit(2000000639.424:4236): avc: denied { mount } for pid=2965 comm="syz.0.15067" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 476.738498][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.864170][ T28] audit: type=1400 audit(2000000639.660:4237): avc: denied { block_suspend } for pid=2991 comm="syz.7.15080" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.923151][ T28] audit: type=1400 audit(2000000639.724:4238): avc: denied { lock } for pid=2998 comm="syz.7.15083" path="socket:[162760]" dev="sockfs" ino=162760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 477.026609][ T28] audit: type=1400 audit(2000000639.831:4239): avc: denied { write } for pid=3006 comm="syz.0.15087" name="igmp" dev="proc" ino=4026532579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 477.039698][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.061069][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.069758][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.100690][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.113310][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.122015][ T1771] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.128917][ T1771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.142394][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.150973][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.159047][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.165921][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.179429][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.188336][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.196295][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.204301][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.232277][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.241050][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.256883][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.264703][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.273054][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.280418][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.295192][ T2941] device veth0_vlan entered promiscuous mode [ 477.311536][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.323522][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.337583][ T2941] device veth1_macvtap entered promiscuous mode [ 477.365372][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.373928][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.392213][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.403131][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.417269][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.493512][ T3048] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 477.550555][ T3056] loop2: detected capacity change from 0 to 512 [ 477.564999][ T3056] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.581400][ T3056] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.15107: invalid block [ 477.593072][ T3056] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.15107: invalid indirect mapped block 10 (level 1) [ 477.606621][ T3056] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.15107: invalid indirect mapped block 8 (level 1) [ 477.620123][ T3056] EXT4-fs (loop2): 1 truncate cleaned up [ 477.625653][ T3056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 477.653875][ T2941] EXT4-fs (loop2): unmounting filesystem. [ 477.742308][ T3071] loop2: detected capacity change from 0 to 256 [ 477.805141][ T3078] 9pnet: Could not find request transport: rdma [ 478.370489][ T3154] netlink: 192 bytes leftover after parsing attributes in process `syz.7.15153'. [ 478.475799][ T3141] input: syz0 as /devices/virtual/input/input86 [ 478.559840][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.629169][ T3183] loop2: detected capacity change from 0 to 2048 [ 478.672696][ T3183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 478.776382][ T2941] EXT4-fs (loop2): unmounting filesystem. [ 479.089419][ T3202] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.108348][ T3202] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.122840][ T3202] device bridge_slave_0 entered promiscuous mode [ 479.137759][ T3202] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.154719][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.175086][ T3202] device bridge_slave_1 entered promiscuous mode [ 479.272580][ T3202] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.279598][ T3202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.286766][ T3202] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.293657][ T3202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.329030][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.339076][ T2766] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.356092][ T2766] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.373162][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.389654][ T2766] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.396529][ T2766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.423997][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.441981][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.448893][ T2766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.483274][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.512781][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.526955][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.536326][ T3212] 9pnet_fd: Insufficient options for proto=fd [ 479.552231][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.574864][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.587390][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.611964][ T3202] device veth0_vlan entered promiscuous mode [ 479.703046][ T3202] device veth1_macvtap entered promiscuous mode [ 479.716531][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.738493][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.748606][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.772131][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.790057][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.932379][ T3247] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.958909][ T1755] device bridge_slave_1 left promiscuous mode [ 479.966360][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.975006][ T1755] device bridge_slave_0 left promiscuous mode [ 479.983046][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.992772][ T1755] device veth1_macvtap left promiscuous mode [ 480.006441][ T1755] device veth0_vlan left promiscuous mode [ 480.258031][ T3281] loop5: detected capacity change from 0 to 2048 [ 480.285956][ T3281] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 480.397455][ T3202] EXT4-fs (loop5): unmounting filesystem. [ 480.602262][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.609119][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.620024][ T3296] device bridge_slave_0 entered promiscuous mode [ 480.639178][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.659936][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.667388][ T3296] device bridge_slave_1 entered promiscuous mode [ 480.787422][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.794823][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.803781][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.812320][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.820391][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.827299][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.839754][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.852531][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.861043][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.869036][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.875897][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.894406][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.911905][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.928344][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.937823][ T1755] device bridge_slave_1 left promiscuous mode [ 480.943807][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.952002][ T1755] device bridge_slave_0 left promiscuous mode [ 480.958080][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.966885][ T1755] device veth1_macvtap left promiscuous mode [ 480.974303][ T1755] device veth0_vlan left promiscuous mode [ 481.064920][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.072967][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.091755][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.099954][ T3296] device veth0_vlan entered promiscuous mode [ 481.114538][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.124318][ T3296] device veth1_macvtap entered promiscuous mode [ 481.136016][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.144488][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.161704][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.172838][ T3330] loop6: detected capacity change from 0 to 256 [ 481.174054][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.314759][ T3349] loop6: detected capacity change from 0 to 2048 [ 481.332943][ T3349] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 481.341332][ T3349] ext4 filesystem being mounted at /1171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.356240][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 481.356257][ T28] audit: type=1400 audit(2000000644.488:4286): avc: denied { ioctl } for pid=3348 comm="syz.6.15238" path="/1171/file0/file0/file0" dev="loop6" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 481.397971][T21853] EXT4-fs (loop6): unmounting filesystem. [ 481.440076][ T28] audit: type=1400 audit(2000000644.573:4287): avc: denied { read write } for pid=3357 comm="syz.6.15241" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.465169][ T28] audit: type=1400 audit(2000000644.573:4288): avc: denied { open } for pid=3357 comm="syz.6.15241" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.490312][ T28] audit: type=1400 audit(2000000644.573:4289): avc: denied { ioctl } for pid=3357 comm="syz.6.15241" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.551485][ T28] audit: type=1400 audit(2000000644.681:4290): avc: denied { ioctl } for pid=3365 comm="syz.9.15245" path="socket:[165157]" dev="sockfs" ino=165157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.667333][ T3384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15252'. [ 481.687841][ T3386] netlink: 'syz.0.15254': attribute type 1 has an invalid length. [ 481.710567][ T3386] netlink: 'syz.0.15254': attribute type 2 has an invalid length. [ 481.728835][ T3394] netlink: 'syz.0.15254': attribute type 1 has an invalid length. [ 481.745490][ T3394] netlink: 'syz.0.15254': attribute type 2 has an invalid length. [ 481.753438][ T3384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15252'. [ 481.919697][ T3415] loop9: detected capacity change from 0 to 512 [ 481.926463][ T28] audit: type=1400 audit(2000000645.099:4291): avc: denied { wake_alarm } for pid=3417 comm="syz.6.15268" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.958066][ T3415] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 481.974578][ T3415] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.15267: bad orphan inode 131083 [ 481.986813][ T3415] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 481.998238][ T28] audit: type=1400 audit(2000000645.174:4292): avc: denied { rename } for pid=3414 comm="syz.9.15267" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.057726][ T3296] EXT4-fs (loop9): unmounting filesystem. [ 482.071222][ T28] audit: type=1400 audit(2000000645.239:4293): avc: denied { mounton } for pid=3429 comm="syz.0.15272" path="/119/file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 482.099165][ T3430] 9pnet_fd: p9_fd_create_tcp (3430): problem connecting socket to 127.0.0.1 [ 482.112340][ T28] audit: type=1326 audit(2000000645.282:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3434 comm="syz.9.15274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa11c78cd29 code=0x0 [ 482.150205][ T3438] loop6: detected capacity change from 0 to 2048 [ 482.162594][ T3438] EXT4-fs: Ignoring removed bh option [ 482.183854][ T3438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 482.224249][ T3438] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 482.239221][ T3438] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 482.240240][ T28] audit: type=1400 audit(2000000645.432:4295): avc: denied { bind } for pid=3450 comm="syz.7.15281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 482.251576][ T3438] EXT4-fs (loop6): This should not happen!! Data will be lost [ 482.251576][ T3438] [ 482.287712][ T3438] EXT4-fs (loop6): Total free blocks count 0 [ 482.295629][ T3438] EXT4-fs (loop6): Free/Dirty block details [ 482.301491][ T3438] EXT4-fs (loop6): free_blocks=2415919104 [ 482.307077][ T3438] EXT4-fs (loop6): dirty_blocks=16 [ 482.312067][ T3438] EXT4-fs (loop6): Block reservation details [ 482.318305][ T3438] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 482.380292][T21853] EXT4-fs (loop6): unmounting filesystem. [ 482.435484][ T3464] loop6: detected capacity change from 0 to 512 [ 482.442515][ T3464] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.449422][ T3466] loop7: detected capacity change from 0 to 16 [ 482.456112][ T3466] erofs: (device loop7): mounted with root inode @ nid 36. [ 482.468704][ T3464] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.15288: invalid block [ 482.492569][ T3464] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.15288: invalid indirect mapped block 10 (level 1) [ 482.511050][ T3464] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.15288: invalid indirect mapped block 8 (level 1) [ 482.525371][ T3464] EXT4-fs (loop6): 1 truncate cleaned up [ 482.531096][ T3464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 482.552947][T21853] EXT4-fs (loop6): unmounting filesystem. [ 482.905759][ T3496] loop9: detected capacity change from 0 to 1024 [ 482.912216][ T3496] EXT4-fs: Ignoring removed nobh option [ 482.949806][ T3496] EXT4-fs: Ignoring removed bh option [ 482.968463][ T3496] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 482.992387][ T3448] loop0: detected capacity change from 0 to 131072 [ 482.999700][ T3448] F2FS-fs (loop0): fault_type options not supported [ 483.006569][ T3448] F2FS-fs (loop0): Test dummy encryption mode enabled [ 483.014233][ T3448] F2FS-fs (loop0): invalid crc value [ 483.037410][ T3448] F2FS-fs (loop0): Found nat_bits in checkpoint [ 483.040528][ T3496] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3841: comm syz.9.15300: Allocating blocks 385-513 which overlap fs metadata [ 483.092141][ T3509] EXT4-fs (loop9): pa ffff888131d391f8: logic 496, phys. 129, len 24 [ 483.100099][ T3509] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 483.118471][ T3448] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 483.474294][ T3531] netlink: 'syz.9.15314': attribute type 11 has an invalid length. [ 483.526537][ T3536] xt_hashlimit: max too large, truncated to 1048576 [ 483.537102][ T3536] xt_bpf: check failed: parse error [ 483.627724][ T3552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 483.636568][ T3552] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.644757][ T3552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 483.708049][ T3562] 9pnet_fd: Insufficient options for proto=fd [ 483.777822][ T3577] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 483.786475][ T3577] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.794627][ T3577] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 483.975579][ T3603] BUG: unable to handle page fault for address: ffffde206507d92b [ 483.983130][ T3603] #PF: supervisor read access in kernel mode [ 483.988948][ T3603] #PF: error_code(0x0000) - not-present page [ 483.994760][ T3603] PGD 10002a067 P4D 10002a067 PUD 0 [ 484.000060][ T3603] Oops: 0000 [#1] PREEMPT SMP KASAN [ 484.005090][ T3603] CPU: 0 PID: 3603 Comm: syz.6.15347 Tainted: G W 6.1.118-syzkaller-00025-gef4fb40b87a9 #0 [ 484.016284][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.026177][ T3603] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 484.031562][ T3603] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 46 f0 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 484.051000][ T3603] RSP: 0018:ffffc90000edf7a8 EFLAGS: 00010a06 [ 484.056897][ T3603] RAX: dffffc0000000000 RBX: ffffffff8674a890 RCX: 0000000000080000 [ 484.064709][ T3603] RDX: ffffc9000c53e000 RSI: 000000000000006a RDI: 000000000000006b [ 484.072519][ T3603] RBP: ffffc90000edf7e0 R08: ffffffff81980bce R09: ffffffff8414c0e2 [ 484.080337][ T3603] R10: 0000000000000004 R11: ffff88814a072880 R12: ffff8881f6e00000 [ 484.088145][ T3603] R13: 1fffe2206507d92b R14: ffff1103283ec958 R15: ffff8881315ec900 [ 484.095957][ T3603] FS: 00007fa90e4b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 484.104740][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.111144][ T3603] CR2: ffffde206507d92b CR3: 000000010e727000 CR4: 00000000003506b0 [ 484.118957][ T3603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.126768][ T3603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.134580][ T3603] Call Trace: [ 484.137722][ T3603] [ 484.140569][ T3603] ? __die_body+0x62/0xb0 [ 484.144733][ T3603] ? __die+0x7e/0x90 [ 484.148464][ T3603] ? page_fault_oops+0x7f9/0xa90 [ 484.153246][ T3603] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 484.158632][ T3603] ? __kasan_check_write+0x14/0x20 [ 484.163575][ T3603] ? __set_page_owner_handle+0x38a/0x3d0 [ 484.169032][ T3603] ? is_prefetch+0x47a/0x6d0 [ 484.173471][ T3603] ? __kasan_check_write+0x14/0x20 [ 484.178411][ T3603] ? prep_compound_page+0x189/0x390 [ 484.183442][ T3603] ? kernelmode_fixup_or_oops+0xb9/0xd0 [ 484.188822][ T3603] ? __bad_area_nosemaphore+0xc2/0x610 [ 484.194122][ T3603] ? bad_area_nosemaphore+0x2d/0x40 [ 484.199154][ T3603] ? do_kern_addr_fault+0x69/0x80 [ 484.204014][ T3603] ? exc_page_fault+0x505/0x6d0 [ 484.208700][ T3603] ? asm_exc_page_fault+0x27/0x30 [ 484.213564][ T3603] ? xdp_do_redirect+0x502/0xc60 [ 484.218333][ T3603] ? cpu_map_enqueue+0xce/0x370 [ 484.223018][ T3603] ? cpu_map_enqueue+0x113/0x370 [ 484.227794][ T3603] ? cpu_map_enqueue+0xdc/0x370 [ 484.232478][ T3603] xdp_do_redirect+0x5b0/0xc60 [ 484.237092][ T3603] tun_xdp_act+0xdb/0xc00 [ 484.241277][ T3603] ? avc_denied+0x1b0/0x1b0 [ 484.245587][ T3603] ? finish_task_switch+0x207/0x7b0 [ 484.250624][ T3603] ? tun_flow_update+0x560/0x560 [ 484.255394][ T3603] ? copy_page_from_iter+0x23b/0x2b0 [ 484.260517][ T3603] tun_get_user+0xb35/0x3a90 [ 484.264942][ T3603] ? tun_get_user+0x7e6/0x3a90 [ 484.269544][ T3603] ? tun_do_read+0x2000/0x2000 [ 484.274227][ T3603] ? ref_tracker_alloc+0x31d/0x450 [ 484.279173][ T3603] ? file_has_perm+0x508/0x6c0 [ 484.283776][ T3603] ? futex_wait_setup+0x330/0x330 [ 484.288641][ T3603] ? tun_get+0xe9/0x120 [ 484.292629][ T3603] tun_chr_write_iter+0x129/0x210 [ 484.297491][ T3603] vfs_write+0xaf6/0xed0 [ 484.301572][ T3603] ? file_end_write+0x1c0/0x1c0 [ 484.306254][ T3603] ? do_futex+0x55a/0x9a0 [ 484.310423][ T3603] ? __fget_files+0x2cb/0x330 [ 484.314971][ T3603] ? __fdget_pos+0x204/0x390 [ 484.319359][ T3603] ? ksys_write+0x77/0x2c0 [ 484.323614][ T3603] ksys_write+0x199/0x2c0 [ 484.327782][ T3603] ? __ia32_sys_read+0x90/0x90 [ 484.332381][ T3603] ? fpregs_restore_userregs+0x130/0x290 [ 484.337846][ T3603] __x64_sys_write+0x7b/0x90 [ 484.342272][ T3603] x64_sys_call+0x2f/0x9a0 [ 484.346524][ T3603] do_syscall_64+0x3b/0xb0 [ 484.350781][ T3603] ? clear_bhb_loop+0x55/0xb0 [ 484.355293][ T3603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.361018][ T3603] RIP: 0033:0x7fa90d58b7df [ 484.365285][ T3603] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 484.384831][ T3603] RSP: 002b:00007fa90e4b4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 484.393219][ T3603] RAX: ffffffffffffffda RBX: 00007fa90d7a5fa0 RCX: 00007fa90d58b7df [ 484.401115][ T3603] RDX: 000000000000003e RSI: 00000000200004c0 RDI: 00000000000000c8 [ 484.408937][ T3603] RBP: 00007fa90d60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 484.416747][ T3603] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000000 [ 484.424552][ T3603] R13: 0000000000000000 R14: 00007fa90d7a5fa0 R15: 00007ffe1cd506c8 [ 484.432366][ T3603] [ 484.435230][ T3603] Modules linked in: [ 484.438969][ T3603] CR2: ffffde206507d92b [ 484.442969][ T3603] ---[ end trace 0000000000000000 ]--- [ 484.448245][ T3603] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 484.453626][ T3603] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 46 f0 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 484.473067][ T3603] RSP: 0018:ffffc90000edf7a8 EFLAGS: 00010a06 [ 484.478976][ T3603] RAX: dffffc0000000000 RBX: ffffffff8674a890 RCX: 0000000000080000 [ 484.486779][ T3603] RDX: ffffc9000c53e000 RSI: 000000000000006a RDI: 000000000000006b [ 484.494679][ T3603] RBP: ffffc90000edf7e0 R08: ffffffff81980bce R09: ffffffff8414c0e2 [ 484.502491][ T3603] R10: 0000000000000004 R11: ffff88814a072880 R12: ffff8881f6e00000 [ 484.510309][ T3603] R13: 1fffe2206507d92b R14: ffff1103283ec958 R15: ffff8881315ec900 [ 484.518109][ T3603] FS: 00007fa90e4b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 484.526877][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.533300][ T3603] CR2: ffffde206507d92b CR3: 000000010e727000 CR4: 00000000003506b0 [ 484.541114][ T3603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.548922][ T3603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.556747][ T3603] Kernel panic - not syncing: Fatal exception in interrupt [ 484.564097][ T3603] Kernel Offset: disabled [ 484.568234][ T3603] Rebooting in 86400 seconds..