last executing test programs: 5.741493516s ago: executing program 3 (id=3191): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0028010}) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0xacb00) ioctl$MON_IOCX_GETX(r3, 0x4018920a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x100b28, 0x9, 0x27fffffe, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 5.223568256s ago: executing program 4 (id=3193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.875166238s ago: executing program 3 (id=3195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c0ff000000000ff8800", 0x15}, {&(0x7f0000000640)="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", 0x30a}], 0x2}, 0x4005) 3.08289562s ago: executing program 4 (id=3197): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x64040005, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@discard}, {@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001900)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.646645445s ago: executing program 1 (id=3204): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.646327925s ago: executing program 1 (id=3205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0x98}, 0x1, 0x1000000}, 0x0) 2.628708471s ago: executing program 1 (id=3206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x20000084) 2.539689734s ago: executing program 1 (id=3207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.432821313s ago: executing program 1 (id=3208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x2000005, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x7, 0x2, 0x80000001, 0x400, 0x800, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x5, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xa, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffffa, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x2, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x4, 0xe, 0x8000, 0x6, 0x45c, 0x80, 0x3, 0xae, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xb, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x6, 0x4, 0x7, 0x485e, 0xa89, 0x0, 0x6, 0x7, 0x7, 0x101, 0x2d5421e5, 0x67ccdc5e, 0x10000, 0xffffffff, 0xa, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0xffffffff, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x5, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x5, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x4, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.338794665s ago: executing program 3 (id=3196): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, 0x0, 0x9) 2.304051528s ago: executing program 1 (id=3209): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x4) 2.21030062s ago: executing program 4 (id=3210): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaf4d6f62254675668acd6316970aaaaaaaaaa0086dd6000000000140600fe80000000feffffffffffffff00000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r2}, 0x38) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7bea, 0x17, 0xfffb, 0x2, 0x7, 0x5, 0x10}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x80) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0xffffffffffffffc7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40", 0x19}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1d8, 0x518, 0xe8, 0x1d8, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x95}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x36}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x61, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) 2.200036258s ago: executing program 0 (id=3211): socket(0x200000000000011, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.090491147s ago: executing program 0 (id=3212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c031500000000ff840000000000000002125ce882cbf490d908f1523ffe", 0x29}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="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", 0xcac}], 0x3}, 0x4005) 1.979670785s ago: executing program 2 (id=3213): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000000, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.876503865s ago: executing program 2 (id=3214): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.806424601s ago: executing program 0 (id=3215): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.739084499s ago: executing program 0 (id=3216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0x98}, 0x1, 0x1000000}, 0x0) 1.725679246s ago: executing program 4 (id=3217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1401, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) 1.663640354s ago: executing program 0 (id=3218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@orlov}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) 1.661214373s ago: executing program 2 (id=3219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x20001000, 0x6, 0x9, 0x0, 0x5, 0x8}, {0x0, 0x0, 0x800, 0x2}, 0x200, 0x0, 0x1, 0x1, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in6=@loopback, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 1.64396783s ago: executing program 2 (id=3220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x404}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x34}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.311632595s ago: executing program 3 (id=3221): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x64040005, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000400)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@discard}, {@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001900)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.291658961s ago: executing program 2 (id=3222): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0028010}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0xacb00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x100b28, 0x9, 0x27fffffe, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 959.385947ms ago: executing program 3 (id=3223): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)="00a2", 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) 833.035572ms ago: executing program 4 (id=3224): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000000, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 723.742011ms ago: executing program 4 (id=3225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x20000084) 579.346703ms ago: executing program 0 (id=3226): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) 19.861404ms ago: executing program 3 (id=3227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() sync() getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, 0x0, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) 0s ago: executing program 2 (id=3228): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xee00]) fchown(r2, 0x0, r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x931766f6359eed41) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0800080007000100000014000000456f001c00660000401190780a010102ac1414124e244e1600089078"], 0x2a) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x1}}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000200)=[{r0, 0x441}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x7]}, 0x8) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) close(r7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='nolazytime\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) kernel console output (not intermixed with test programs): T10705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.597735][T10705] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.610065][T10705] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2531: bg 0: block 112: padding at end of block bitmap is not set [ 187.633174][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.703836][T10714] loop1: detected capacity change from 0 to 1024 [ 187.712770][T10714] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.731926][T10714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.744329][T10714] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.756376][T10714] EXT4-fs (loop1): shut down requested (2) [ 187.763444][T10714] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 187.780235][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.169046][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.423303][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 188.441145][T10730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10730 comm=syz.0.2538 [ 188.473304][T10730] netlink: 'syz.0.2538': attribute type 1 has an invalid length. [ 188.501375][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2538'. [ 188.531565][T10730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.628895][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 188.628910][ T28] audit: type=1326 audit(2000000011.899:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 188.697598][ T28] audit: type=1326 audit(2000000011.949:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 188.721984][ T28] audit: type=1326 audit(2000000011.949:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 188.747763][T10732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.930107][ T28] audit: type=1326 audit(2000000011.949:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 188.963986][ T28] audit: type=1326 audit(2000000011.949:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 189.025712][ T28] audit: type=1326 audit(2000000011.949:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 189.053522][T10745] set_capacity_and_notify: 1 callbacks suppressed [ 189.053538][T10745] loop4: detected capacity change from 0 to 1024 [ 189.069618][T10745] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.080382][ T28] audit: type=1326 audit(2000000011.949:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 189.117860][ T28] audit: type=1326 audit(2000000011.959:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f542d89c799 code=0x7ffc0000 [ 189.152524][T10745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.164764][T10745] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.194303][ T28] audit: type=1326 audit(2000000011.959:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f542d89c502 code=0x7ffc0000 [ 189.201752][T10745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2542: bg 0: block 112: padding at end of block bitmap is not set [ 189.217784][ T28] audit: type=1326 audit(2000000011.959:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f542d85cfce code=0x7ffc0000 [ 189.446335][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.492614][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.514070][T10754] SET target dimension over the limit! [ 189.521059][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.549052][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.577499][T10759] loop7: detected capacity change from 0 to 16384 [ 189.739456][T10764] loop2: detected capacity change from 0 to 512 [ 189.746122][T10764] EXT4-fs: Ignoring removed orlov option [ 189.778492][T10764] EXT4-fs (loop2): 1 truncate cleaned up [ 189.784611][T10764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.941809][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 190.002294][T10774] loop1: detected capacity change from 0 to 128 [ 190.021621][T10774] EXT4-fs: Ignoring removed oldalloc option [ 190.022232][ T7558] udevd[7558]: incorrect ext4 checksum on /dev/loop1 [ 190.036924][T10774] ext4: Unknown parameter 'smackfsdef' [ 190.055351][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop1 [ 190.297213][T10780] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 190.720176][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.987994][T10794] loop3: detected capacity change from 0 to 1024 [ 190.998164][T10794] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.507269][T10794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.555442][T10794] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.592636][T10794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2555: bg 0: block 112: padding at end of block bitmap is not set [ 191.676097][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.864774][T10806] SET target dimension over the limit! [ 191.927570][T10809] hub 8-0:1.0: USB hub found [ 191.935019][T10809] hub 8-0:1.0: 8 ports detected [ 191.961046][T10809] netlink: 'syz.2.2557': attribute type 10 has an invalid length. [ 191.969914][T10809] macvlan1: entered allmulticast mode [ 191.976442][T10809] veth1_vlan: entered allmulticast mode [ 191.983966][T10809] team0: Port device macvlan1 added [ 192.121404][T10815] syzkaller0: entered promiscuous mode [ 192.127087][T10815] syzkaller0: entered allmulticast mode [ 192.134631][T10815] 0: reclassify loop, rule prio 0, protocol 800 [ 192.349817][T10819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2564'. [ 192.697975][T10827] loop1: detected capacity change from 0 to 4096 [ 192.777543][T10827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.297873][T10836] loop3: detected capacity change from 0 to 512 [ 193.319653][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.382041][T10836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.525953][T10842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.714472][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.734778][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 193.818385][T10859] syzkaller0: entered promiscuous mode [ 193.829549][T10859] syzkaller0: entered allmulticast mode [ 193.847002][T10859] 0: reclassify loop, rule prio 0, protocol 800 [ 193.915374][T10862] loop0: detected capacity change from 0 to 4096 [ 193.969307][T10865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2575'. [ 193.987417][T10862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.182711][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.194105][T10871] Set syz1 is full, maxelem 65536 reached [ 194.235711][T10871] SET target dimension over the limit! [ 194.257032][T10875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2577'. [ 194.629031][T10881] loop2: detected capacity change from 0 to 512 [ 194.671421][T10881] EXT4-fs: Ignoring removed orlov option [ 194.698481][T10881] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.890473][T10881] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2582: corrupted in-inode xattr: e_value size too large [ 194.927386][T10881] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.929097][T10881] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2582: couldn't read orphan inode 15 (err -117) [ 194.938673][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 194.938700][ C0] EXT4-fs (loop2): initial error at time 2000000018: ext4_iget_extra_inode:5025: inode 15 [ 194.939016][ C0] EXT4-fs (loop2): last error at time 2000000018: ext4_iget_extra_inode:5025: inode 15 [ 194.991556][T10881] loop2: lost filesystem error report for type 5 error -117 [ 195.006198][T10881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.039445][T10886] netlink: 'syz.0.2583': attribute type 2 has an invalid length. [ 195.059094][T10886] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2583'. [ 195.185477][T10881] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 12: comm syz.2.2582: lblock 3 mapped to illegal pblock 12 (length 1) [ 195.200033][T10888] loop0: detected capacity change from 0 to 128 [ 195.449035][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2587'. [ 195.489510][T10899] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.525645][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.631733][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 195.658971][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 195.675434][T10923] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2590'. [ 195.689326][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10922 comm=syz.4.2593 [ 195.735954][T10922] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 195.820977][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2593'. [ 195.866691][T10931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.455023][T10942] loop4: detected capacity change from 0 to 1024 [ 196.504207][T10942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.571753][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 196.571845][ T28] audit: type=1400 audit(2000000019.839:492): avc: denied { setattr } for pid=10947 comm="syz.1.2597" name="file0" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 196.630130][T10942] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.662020][T10942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.826809][T10952] loop1: detected capacity change from 0 to 128 [ 196.950200][T10952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.970218][T10952] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.044919][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.095079][T10970] loop0: detected capacity change from 0 to 764 [ 197.143999][T10973] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 197.703428][T11002] loop1: detected capacity change from 0 to 1024 [ 197.714806][T11002] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.789382][T10999] hub 8-0:1.0: USB hub found [ 197.853186][T11002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.872067][T11002] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.874630][T11005] netlink: 'syz.4.2611': attribute type 10 has an invalid length. [ 197.892089][T10999] hub 8-0:1.0: 8 ports detected [ 197.905484][T11005] macvlan1: entered allmulticast mode [ 197.913957][T11002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2614: bg 0: block 112: padding at end of block bitmap is not set [ 197.915565][T11005] veth1_vlan: entered allmulticast mode [ 197.936670][T11005] macvlan1: entered promiscuous mode [ 197.943787][T11005] team0: Port device macvlan1 added [ 198.077701][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.167472][T11021] __nla_validate_parse: 4 callbacks suppressed [ 198.167605][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 198.494681][T11020] loop1: detected capacity change from 0 to 512 [ 198.571909][T11020] EXT4-fs: Ignoring removed orlov option [ 198.589022][T11020] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.657216][T11020] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2618: corrupted in-inode xattr: e_value size too large [ 198.676631][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 198.691079][T11020] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.692858][T11020] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2618: couldn't read orphan inode 15 (err -117) [ 198.702728][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 198.702778][ C1] EXT4-fs (loop1): initial error at time 2000000021: ext4_iget_extra_inode:5025: inode 15 [ 198.702988][ C1] EXT4-fs (loop1): last error at time 2000000021: ext4_iget_extra_inode:5025: inode 15 [ 198.810333][T11020] loop1: lost filesystem error report for type 5 error -117 [ 198.818186][T11020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.014337][T11020] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.2618: lblock 3 mapped to illegal pblock 12 (length 1) [ 199.126715][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 199.155879][T11057] loop2: detected capacity change from 0 to 128 [ 199.172345][T11057] EXT4-fs: Ignoring removed oldalloc option [ 199.184278][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 199.185452][T11057] ext4: Unknown parameter 'smackfsdef' [ 199.204462][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2631'. [ 199.286461][T11063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11063 comm=syz.0.2631 [ 199.320028][T11063] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 199.329768][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 199.347148][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.389441][T11061] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.394403][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 199.408969][T11068] syzkaller1: entered promiscuous mode [ 199.426492][T11068] syzkaller1: entered allmulticast mode [ 199.434379][T11063] 8021q: adding VLAN 0 to HW filter on device bond7 [ 199.441303][T11075] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 199.726805][T11077] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 199.750144][T11087] loop0: detected capacity change from 0 to 4096 [ 199.760409][T11077] macvlan1: entered allmulticast mode [ 199.773781][T11087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.797040][T11077] veth1_vlan: entered allmulticast mode [ 199.879176][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.889165][T11077] team0: Port device macvlan1 added [ 200.137925][T11097] loop0: detected capacity change from 0 to 512 [ 200.226698][T11097] EXT4-fs: Ignoring removed orlov option [ 200.321099][T11097] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.386190][T11097] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2641: corrupted in-inode xattr: e_value size too large [ 200.401282][T11097] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.403069][T11097] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2641: couldn't read orphan inode 15 (err -117) [ 200.412662][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 200.412818][ C1] EXT4-fs (loop0): initial error at time 2000000023: ext4_iget_extra_inode:5025: inode 15 [ 200.413056][ C1] EXT4-fs (loop0): last error at time 2000000023: ext4_iget_extra_inode:5025: inode 15 [ 200.452866][T11097] loop0: lost filesystem error report for type 5 error -117 [ 200.459889][T11097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.555893][T11097] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.2641: lblock 3 mapped to illegal pblock 12 (length 1) [ 200.761530][T11106] loop3: detected capacity change from 0 to 512 [ 200.799916][T11106] EXT4-fs: Ignoring removed orlov option [ 200.851118][T11106] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.905483][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.941247][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 200.952261][T11113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11113 comm=syz.0.2646 [ 200.996210][T11106] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.2644: corrupted in-inode xattr: e_value size too large [ 201.090821][T11120] syz.1.2648 (11120): attempted to duplicate a private mapping with mremap. This is not supported. [ 201.103363][T11121] netlink: 'syz.0.2646': attribute type 1 has an invalid length. [ 201.111576][T11106] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.113009][T11106] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2644: couldn't read orphan inode 15 (err -117) [ 201.122542][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 201.122692][ C1] EXT4-fs (loop3): initial error at time 2000000024: ext4_iget_extra_inode:5025: inode 15 [ 201.122862][ C1] EXT4-fs (loop3): last error at time 2000000024: ext4_iget_extra_inode:5025: inode 15 [ 201.182124][T11106] loop3: lost filesystem error report for type 5 error -117 [ 201.184063][T11120] loop1: detected capacity change from 0 to 164 [ 201.204323][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2646'. [ 201.217270][T11114] loop2: detected capacity change from 0 to 512 [ 201.224554][T11114] EXT4-fs: Ignoring removed orlov option [ 201.238980][T11114] EXT4-fs (loop2): 1 truncate cleaned up [ 201.249267][T11114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.281197][T11106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.312854][T11120] Unable to read rock-ridge attributes [ 201.334250][T11113] 8021q: adding VLAN 0 to HW filter on device bond8 [ 201.362484][T11120] isofs_fill_super: root inode is not a directory. Corrupted media? [ 201.381895][T11122] syzkaller1: entered promiscuous mode [ 201.390570][T11122] syzkaller1: entered allmulticast mode [ 201.400702][T11120] loop1: detected capacity change from 0 to 256 [ 201.423778][T11120] FAT-fs (loop1): Directory bread(block 64) failed [ 201.443944][T11120] FAT-fs (loop1): Directory bread(block 65) failed [ 201.459890][T11120] FAT-fs (loop1): Directory bread(block 66) failed [ 201.466934][T11120] FAT-fs (loop1): Directory bread(block 67) failed [ 201.488162][T11106] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.2644: lblock 3 mapped to illegal pblock 12 (length 1) [ 201.490664][T11120] FAT-fs (loop1): Directory bread(block 68) failed [ 201.510563][T11131] loop0: detected capacity change from 0 to 4096 [ 201.512414][T11120] FAT-fs (loop1): Directory bread(block 69) failed [ 201.524178][T11120] FAT-fs (loop1): Directory bread(block 70) failed [ 201.531169][T11120] FAT-fs (loop1): Directory bread(block 71) failed [ 201.547458][T11131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.558547][T11120] FAT-fs (loop1): Directory bread(block 72) failed [ 201.566841][T11120] FAT-fs (loop1): Directory bread(block 73) failed [ 201.578803][ T28] audit: type=1400 audit(2000000024.849:493): avc: denied { write } for pid=11133 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.655119][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.687066][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 201.727177][T11147] loop4: detected capacity change from 0 to 1024 [ 201.737818][T11147] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.812561][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.832939][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.851200][T11147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.863524][T11147] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.879560][T11147] EXT4-fs (loop4): shut down requested (2) [ 201.888492][T11147] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 201.911070][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.951503][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 201.976296][T11161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11161 comm=syz.4.2660 [ 201.999357][T11161] netlink: 'syz.4.2660': attribute type 1 has an invalid length. [ 202.029802][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2657'. [ 202.060714][T11161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.100245][T11167] loop3: detected capacity change from 0 to 1024 [ 202.111571][T11167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.127613][T11175] loop2: detected capacity change from 0 to 4096 [ 202.158459][T11167] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.172694][T11175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.196448][T11167] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.239414][T11184] Unable to read rock-ridge attributes [ 202.277058][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.356185][T11184] isofs_fill_super: root inode is not a directory. Corrupted media? [ 202.389343][T11184] FAT-fs (loop4): Directory bread(block 64) failed [ 202.405004][T11184] FAT-fs (loop4): Directory bread(block 65) failed [ 202.447655][T11184] FAT-fs (loop4): Directory bread(block 66) failed [ 202.477948][T11184] FAT-fs (loop4): Directory bread(block 67) failed [ 202.496878][T11184] FAT-fs (loop4): Directory bread(block 68) failed [ 202.511606][T11184] FAT-fs (loop4): Directory bread(block 69) failed [ 202.523627][T11184] FAT-fs (loop4): Directory bread(block 70) failed [ 202.530914][T11184] FAT-fs (loop4): Directory bread(block 71) failed [ 202.537591][T11184] FAT-fs (loop4): Directory bread(block 72) failed [ 202.544509][T11184] FAT-fs (loop4): Directory bread(block 73) failed [ 202.646403][T11195] netlink: 'syz.4.2670': attribute type 2 has an invalid length. [ 202.718749][T11196] EXT4-fs: Ignoring removed orlov option [ 202.901798][T11196] EXT4-fs (loop0): 1 truncate cleaned up [ 202.908848][T11196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.183484][T11203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.227931][T11203] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.353259][T11218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.496253][T11225] __nla_validate_parse: 4 callbacks suppressed [ 203.496290][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 203.598249][T11231] Unable to read rock-ridge attributes [ 203.610009][T11231] isofs_fill_super: root inode is not a directory. Corrupted media? [ 203.736975][T11237] netlink: 'syz.4.2681': attribute type 10 has an invalid length. [ 203.744980][T11237] veth1_vlan: left allmulticast mode [ 203.912439][T11239] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.343144][T11249] EXT4-fs: Ignoring removed orlov option [ 204.350721][T11249] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.393472][T11249] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2685: corrupted in-inode xattr: e_value size too large [ 204.450112][T11249] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.451792][T11249] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2685: couldn't read orphan inode 15 (err -117) [ 204.461182][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 204.461223][ C1] EXT4-fs (loop2): initial error at time 2000000027: ext4_iget_extra_inode:5025: inode 15 [ 204.461483][ C1] EXT4-fs (loop2): last error at time 2000000027: ext4_iget_extra_inode:5025: inode 15 [ 204.530244][T11249] loop2: lost filesystem error report for type 5 error -117 [ 204.649296][T11266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2688'. [ 204.758254][T11267] EXT4-fs: Ignoring removed orlov option [ 205.169092][T11267] EXT4-fs (loop4): 1 truncate cleaned up [ 205.210713][T11271] set_capacity_and_notify: 10 callbacks suppressed [ 205.210729][T11271] loop3: detected capacity change from 0 to 4096 [ 205.269716][T11249] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 12: comm syz.2.2685: lblock 3 mapped to illegal pblock 12 (length 1) [ 205.349254][T11280] syzkaller0: entered promiscuous mode [ 205.355386][T11280] syzkaller0: entered allmulticast mode [ 205.383807][T11280] 0: reclassify loop, rule prio 0, protocol 800 [ 205.503795][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'. [ 205.752768][T11310] netlink: 'syz.1.2700': attribute type 27 has an invalid length. [ 205.780124][T11285] chnl_net:caif_netlink_parms(): no params data found [ 205.794128][T11310] veth1_vlan: left allmulticast mode [ 205.799598][T11310] macvlan1: left allmulticast mode [ 205.851664][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.859564][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.867626][T11285] bridge_slave_0: entered allmulticast mode [ 205.874422][T11285] bridge_slave_0: entered promiscuous mode [ 205.881486][T11285] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.888584][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.896536][T11285] bridge_slave_1: entered allmulticast mode [ 205.903045][T11285] bridge_slave_1: entered promiscuous mode [ 205.923166][T11285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.941666][T11285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.968511][T11285] team0: Port device team_slave_0 added [ 205.975410][T11285] team0: Port device team_slave_1 added [ 205.991706][T11285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.998784][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.040291][T11285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.059538][T11285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.076457][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.127719][T11285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.181079][T11285] hsr_slave_0: entered promiscuous mode [ 206.192681][T11285] hsr_slave_1: entered promiscuous mode [ 206.205350][T11285] debugfs: 'hsr0' already exists in 'hsr' [ 206.217712][T11285] Cannot create hsr debugfs directory [ 206.333650][T11285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.354088][T11285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.433066][T11285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.452057][T11285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.601012][T11285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.611603][T11285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.634966][T11329] syzkaller0: entered promiscuous mode [ 206.640545][T11329] syzkaller0: entered allmulticast mode [ 206.647480][T11329] 0: reclassify loop, rule prio 0, protocol 800 [ 206.683269][T11285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.700382][T11285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.779558][T11285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.788734][T11285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.797806][T11285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.806858][T11285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.822453][T11331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2703'. [ 207.033662][T11285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.108915][T11285] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.128389][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.135544][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.166628][ T2221] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.168248][T11342] loop0: detected capacity change from 0 to 512 [ 207.173786][ T2221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.192276][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 207.199812][T11285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.237998][T11342] EXT4-fs: Ignoring removed orlov option [ 207.240044][T11285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.249246][T11342] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.336425][T11285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.355343][T11342] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2707: corrupted in-inode xattr: e_value size too large [ 207.394724][T11342] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.396409][T11342] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2707: couldn't read orphan inode 15 (err -117) [ 207.406139][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 207.406271][ C1] EXT4-fs (loop0): initial error at time 2000000030: ext4_iget_extra_inode:5025: inode 15 [ 207.406361][ C1] EXT4-fs (loop0): last error at time 2000000030: ext4_iget_extra_inode:5025: inode 15 [ 207.449588][T11342] loop0: lost filesystem error report for type 5 error -117 [ 207.674403][T11342] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.2707: lblock 3 mapped to illegal pblock 12 (length 1) [ 207.713814][T11285] veth0_vlan: entered promiscuous mode [ 207.724299][T11285] veth1_vlan: entered promiscuous mode [ 207.740402][T11285] veth0_macvtap: entered promiscuous mode [ 207.749745][T11285] veth1_macvtap: entered promiscuous mode [ 207.766039][T11285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.784801][T11285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.814915][ T2221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.823955][ T2221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.845297][ T2221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.861521][ T2221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.881583][ T28] audit: type=1400 audit(2000000031.159:494): avc: denied { mounton } for pid=11285 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 207.924015][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'. [ 207.940562][T11386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11386 comm=syz.4.2695 [ 207.976132][T11386] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 207.990272][T11386] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2695'. [ 208.009984][T11386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'. [ 208.221662][T11405] loop0: detected capacity change from 0 to 512 [ 208.339641][T11413] loop2: detected capacity change from 0 to 1024 [ 208.350749][T11413] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.399438][T11413] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.483177][T11405] EXT4-fs: Ignoring removed orlov option [ 208.560003][T11413] EXT4-fs (loop2): shut down requested (2) [ 208.589444][T11413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 208.620029][T11413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 208.630160][T11405] EXT4-fs (loop0): 1 truncate cleaned up [ 208.895093][T11418] loop3: detected capacity change from 0 to 512 [ 208.931338][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 208.938781][T11418] EXT4-fs: Ignoring removed orlov option [ 208.959123][T11418] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.106408][T11418] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.2722: corrupted in-inode xattr: e_value size too large [ 209.131574][T11418] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.140016][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 209.151364][T11418] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2722: couldn't read orphan inode 15 (err -117) [ 209.155583][ C1] EXT4-fs (loop3): initial error at time 2000000032: ext4_iget_extra_inode:5025: inode 15 [ 209.155626][ C1] EXT4-fs (loop3): last error at time 2000000032: ext4_iget_extra_inode:5025: inode 15 [ 209.258243][ T28] audit: type=1400 audit(2000000032.519:495): avc: denied { getopt } for pid=11429 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.286488][T11418] loop3: lost filesystem error report for type 5 error -117 [ 209.339362][T11434] netlink: 'syz.4.2727': attribute type 2 has an invalid length. [ 209.357971][T11434] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2727'. [ 209.522808][T11436] loop4: detected capacity change from 0 to 128 [ 209.642957][T11443] loop0: detected capacity change from 0 to 1024 [ 209.651704][T11443] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.662018][T11443] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.673529][T11443] EXT4-fs (loop0): shut down requested (2) [ 209.679708][T11443] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 209.688627][T11443] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 209.833917][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 209.932558][T11457] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2733'. [ 210.038352][T11464] netlink: 'syz.3.2736': attribute type 27 has an invalid length. [ 210.235335][T11464] vlan0: left promiscuous mode [ 210.260598][T11464] macvtap1: left promiscuous mode [ 210.270481][T11464] macvtap1: left allmulticast mode [ 210.300118][T11464] macvtap2: left promiscuous mode [ 210.308263][T11464] macvtap2: left allmulticast mode [ 210.351226][T11464] macvtap3: left promiscuous mode [ 210.358209][T11464] macvtap3: left allmulticast mode [ 210.368266][T11464] bridge2: left promiscuous mode [ 210.379448][T11464] bridge2: left allmulticast mode [ 210.418752][T11464] macvtap4: left promiscuous mode [ 210.440724][T11464] macvtap4: left allmulticast mode [ 210.464672][T11464] macvtap5: left promiscuous mode [ 210.484888][T11464] macvtap5: left allmulticast mode [ 210.510710][T11464] macvtap6: left promiscuous mode [ 210.547102][T11464] macvtap6: left allmulticast mode [ 210.588936][T11464] macvtap7: left promiscuous mode [ 210.619644][T11464] macvtap7: left allmulticast mode [ 210.656408][T11464] team0: left allmulticast mode [ 210.686934][T11464] team0: left promiscuous mode [ 210.715563][T11464] macvtap8: left promiscuous mode [ 210.749882][T11464] macvtap8: left allmulticast mode [ 210.796866][T11464] bond0: left allmulticast mode [ 210.839423][T11464] bond0: left promiscuous mode [ 210.869073][T11464] macvtap9: left promiscuous mode [ 210.881880][T11464] macvtap9: left allmulticast mode [ 210.898417][ T9652] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.922402][ T9652] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 210.955150][ T9652] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.971898][ T9652] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 210.992689][ T9652] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 211.003015][ T9652] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.012075][ T9652] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 211.229641][T11495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2740'. [ 211.344562][ T9652] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.997035][T11518] syzkaller0: entered promiscuous mode [ 212.002566][T11518] syzkaller0: entered allmulticast mode [ 212.009280][T11518] 0: reclassify loop, rule prio 0, protocol 800 [ 212.188154][T11520] syzkaller1: entered promiscuous mode [ 212.194113][T11520] syzkaller1: entered allmulticast mode [ 212.204456][T11522] netlink: 'syz.4.2754': attribute type 27 has an invalid length. [ 212.242428][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.249677][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.718870][T11539] IPVS: sh: FWM 3 0x00000003 - no destination available [ 212.845017][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.864162][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.905504][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 212.922857][T10096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.931877][T10096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.945228][T10096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.954551][T10096] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.188631][T11556] loop3: detected capacity change from 0 to 512 [ 213.196067][T11556] EXT4-fs: Ignoring removed orlov option [ 213.307837][T11559] syzkaller0: entered promiscuous mode [ 213.318667][T11559] syzkaller0: entered allmulticast mode [ 213.328134][T11559] 0: reclassify loop, rule prio 0, protocol 800 [ 213.346895][T11556] EXT4-fs (loop3): 1 truncate cleaned up [ 213.353895][T11556] EXT4-fs mount: 22 callbacks suppressed [ 213.353943][T11556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.398313][T11565] loop2: detected capacity change from 0 to 128 [ 213.414839][T11564] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2766'. [ 213.426195][ T28] audit: type=1400 audit(2000000036.679:496): avc: denied { read write } for pid=11561 comm="syz.0.2766" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.479163][T11565] EXT4-fs: Ignoring removed oldalloc option [ 213.499905][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 213.531582][ T28] audit: type=1400 audit(2000000036.679:497): avc: denied { open } for pid=11561 comm="syz.0.2766" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.531641][T11565] ext4: Unknown parameter 'smackfsdef' [ 213.555397][ T28] audit: type=1400 audit(2000000036.789:498): avc: denied { map } for pid=11561 comm="syz.0.2766" path="socket:[32971]" dev="sockfs" ino=32971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.555470][ T28] audit: type=1400 audit(2000000036.789:499): avc: denied { accept } for pid=11561 comm="syz.0.2766" path="socket:[32971]" dev="sockfs" ino=32971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.652024][T11566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2765'. [ 213.707054][ T28] audit: type=1400 audit(2000000036.879:500): avc: denied { connect } for pid=11561 comm="syz.0.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.735729][ T28] audit: type=1400 audit(2000000037.009:501): avc: denied { accept } for pid=11561 comm="syz.0.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.834545][T11575] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.108846][ T28] audit: type=1400 audit(2000000037.229:502): avc: denied { write } for pid=11573 comm="syz.1.2770" lport=59523 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.181299][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.122202][T11607] hub 8-0:1.0: USB hub found [ 215.131828][T11602] loop2: detected capacity change from 0 to 512 [ 215.138664][T11607] hub 8-0:1.0: 8 ports detected [ 215.172614][T11602] EXT4-fs: Ignoring removed orlov option [ 215.188196][T11602] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.193400][T11608] netlink: 'syz.3.2777': attribute type 10 has an invalid length. [ 215.213482][T11608] macvlan1: entered allmulticast mode [ 215.223705][T11608] veth1_vlan: entered allmulticast mode [ 215.240637][T11608] team0: Port device macvlan1 added [ 215.301207][T11602] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2779: corrupted in-inode xattr: e_value size too large [ 215.319731][T11611] syzkaller0: entered promiscuous mode [ 215.327309][T11611] syzkaller0: entered allmulticast mode [ 215.344353][T11602] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.346589][T11602] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2779: couldn't read orphan inode 15 (err -117) [ 215.356181][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 215.356378][ C1] EXT4-fs (loop2): initial error at time 2000000038: ext4_iget_extra_inode:5025: inode 15 [ 215.356770][ C1] EXT4-fs (loop2): last error at time 2000000038: ext4_iget_extra_inode:5025: inode 15 [ 215.360324][T11611] 0: reclassify loop, rule prio 0, protocol 800 [ 215.372255][T11602] loop2: lost filesystem error report for type 5 error -117 [ 215.419298][T11602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.501566][T11602] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 12: comm syz.2.2779: lblock 3 mapped to illegal pblock 12 (length 1) [ 215.575690][T11613] loop1: detected capacity change from 0 to 1024 [ 215.594605][T11613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.616906][T11613] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.664441][T11613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 215.889132][T11621] loop0: detected capacity change from 0 to 512 [ 215.896532][T11621] EXT4-fs: Ignoring removed orlov option [ 215.978354][T11621] EXT4-fs (loop0): 1 truncate cleaned up [ 215.984749][T11621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.017083][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.289494][T11624] loop2: detected capacity change from 0 to 128 [ 216.301838][T11624] EXT4-fs: Ignoring removed oldalloc option [ 216.308277][T11624] ext4: Unknown parameter 'smackfsdef' [ 216.351206][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 216.515474][T11632] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 216.844090][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.274451][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 217.276920][T11636] IPVS: sh: FWM 3 0x00000003 - no destination available [ 217.284016][T11641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.324393][T11641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.450131][T11646] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 217.470658][T11646] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2790'. [ 217.645918][T11653] loop1: detected capacity change from 0 to 512 [ 217.660618][T11653] EXT4-fs: Ignoring removed orlov option [ 217.667609][T11653] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.867660][T11653] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2793: corrupted in-inode xattr: e_value size too large [ 217.953677][T11653] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.957606][T11653] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2793: couldn't read orphan inode 15 (err -117) [ 217.967613][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 217.967691][ C1] EXT4-fs (loop1): initial error at time 2000000041: ext4_iget_extra_inode:5025: inode 15 [ 217.967792][ C1] EXT4-fs (loop1): last error at time 2000000041: ext4_iget_extra_inode:5025: inode 15 [ 218.104187][T11653] loop1: lost filesystem error report for type 5 error -117 [ 218.114334][T11653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.338123][T11668] hub 8-0:1.0: USB hub found [ 218.342961][T11668] hub 8-0:1.0: 8 ports detected [ 218.351811][T11668] netlink: 'syz.2.2795': attribute type 10 has an invalid length. [ 218.817932][T11668] veth1_vlan: left allmulticast mode [ 218.824716][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.877936][T11675] loop0: detected capacity change from 0 to 512 [ 218.892977][T11675] EXT4-fs: Ignoring removed orlov option [ 218.898836][T11675] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.951607][T11675] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2799: corrupted in-inode xattr: e_value size too large [ 218.965822][T11675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.965976][T11675] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2799: couldn't read orphan inode 15 (err -117) [ 218.975123][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 218.975145][ C0] EXT4-fs (loop0): initial error at time 2000000042: ext4_iget_extra_inode:5025: inode 15 [ 218.975178][ C0] EXT4-fs (loop0): last error at time 2000000042: ext4_iget_extra_inode:5025: inode 15 [ 219.012948][T11675] loop0: lost filesystem error report for type 5 error -117 [ 219.013619][T11675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.071927][T11675] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.2799: lblock 3 mapped to illegal pblock 12 (length 1) [ 219.142426][T11689] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 219.159037][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 219.168124][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 219.177606][T11689] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2802'. [ 219.211728][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'. [ 219.323307][T11703] SET target dimension over the limit! [ 219.399729][T11708] netlink: 'syz.3.2808': attribute type 2 has an invalid length. [ 219.411669][T11708] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2808'. [ 219.613202][T11712] loop3: detected capacity change from 0 to 128 [ 219.813071][T11696] Set syz1 is full, maxelem 65536 reached [ 219.829252][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.916728][T11726] syzkaller0: entered promiscuous mode [ 219.922278][T11726] syzkaller0: entered allmulticast mode [ 219.966127][T11729] netlink: 'syz.4.2814': attribute type 1 has an invalid length. [ 220.045649][T11720] IPVS: sh: FWM 3 0x00000003 - no destination available [ 220.077241][T11732] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2814'. [ 220.194157][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 220.241926][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 220.327426][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.356258][T11752] loop1: detected capacity change from 0 to 512 [ 220.362749][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.373464][T11749] SET target dimension over the limit! [ 220.390564][T11752] EXT4-fs: Ignoring removed orlov option [ 220.396307][T11752] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.476059][T11752] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2820: corrupted in-inode xattr: e_value size too large [ 220.520138][T11752] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.532242][T11752] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2820: couldn't read orphan inode 15 (err -117) [ 220.541457][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 220.541487][ C0] EXT4-fs (loop1): initial error at time 2000000043: ext4_iget_extra_inode:5025: inode 15 [ 220.541531][ C0] EXT4-fs (loop1): last error at time 2000000043: ext4_iget_extra_inode:5025: inode 15 [ 220.579966][T11752] loop1: lost filesystem error report for type 5 error -117 [ 220.580860][T11752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.609357][T11747] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.2820: lblock 3 mapped to illegal pblock 12 (length 1) [ 220.799150][T11767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11767 comm=syz.3.2825 [ 220.811947][T11767] netlink: 'syz.3.2825': attribute type 1 has an invalid length. [ 220.829518][T11767] 8021q: adding VLAN 0 to HW filter on device bond10 [ 220.859162][T11770] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 220.873510][T11770] 8021q: adding VLAN 0 to HW filter on device bond11 [ 220.911493][T11773] syzkaller0: entered promiscuous mode [ 220.917036][T11773] syzkaller0: entered allmulticast mode [ 221.130283][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.373566][T11790] SET target dimension over the limit! [ 221.652590][T11796] loop2: detected capacity change from 0 to 512 [ 221.710474][T11796] EXT4-fs: Ignoring removed orlov option [ 221.760572][T11796] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.791033][T11796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2834: corrupted in-inode xattr: e_value size too large [ 221.805504][T11796] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.807028][T11796] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2834: couldn't read orphan inode 15 (err -117) [ 221.816693][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 221.816731][ C0] EXT4-fs (loop2): initial error at time 2000000045: ext4_iget_extra_inode:5025: inode 15 [ 221.816914][ C0] EXT4-fs (loop2): last error at time 2000000045: ext4_iget_extra_inode:5025: inode 15 [ 221.857088][T11796] loop2: lost filesystem error report for type 5 error -117 [ 221.866693][T11796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.142945][T11804] netlink: 'syz.1.2837': attribute type 1 has an invalid length. [ 222.184268][T11804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.254980][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.267941][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.293916][ T28] audit: type=1326 audit(2000000045.569:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.320755][T11806] loop4: detected capacity change from 0 to 512 [ 222.328500][ T28] audit: type=1326 audit(2000000045.589:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.346956][T11806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.364150][ T28] audit: type=1326 audit(2000000045.589:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.364176][ T28] audit: type=1326 audit(2000000045.589:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.364207][ T28] audit: type=1326 audit(2000000045.589:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.435129][ T28] audit: type=1326 audit(2000000045.589:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa9e29fc799 code=0x7ffc0000 [ 222.438530][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.458923][ T28] audit: type=1326 audit(2000000045.589:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9e29fc502 code=0x7ffc0000 [ 222.491021][ T28] audit: type=1326 audit(2000000045.589:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9e29bcfce code=0x7ffc0000 [ 222.514388][ T28] audit: type=1326 audit(2000000045.599:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa9e29fc5c7 code=0x7ffc0000 [ 222.538146][ T28] audit: type=1326 audit(2000000045.599:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11801 comm="syz.4.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9e29bcfce code=0x7ffc0000 [ 222.591317][T11818] __nla_validate_parse: 7 callbacks suppressed [ 222.591333][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2842'. [ 222.934504][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 222.944041][T11834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11834 comm=syz.3.2849 [ 222.957082][T11834] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 222.972125][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2849'. [ 222.987560][T11834] 8021q: adding VLAN 0 to HW filter on device bond12 [ 223.020017][T11838] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 223.033306][T11285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.035749][T11838] 8021q: adding VLAN 0 to HW filter on device bond13 [ 223.063857][T11838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2850'. [ 223.115363][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2853'. [ 223.133032][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.156436][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.314019][T11849] loop4: detected capacity change from 0 to 1024 [ 223.334024][T11849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.346368][T11849] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.352912][T11856] loop0: detected capacity change from 0 to 512 [ 223.358557][T11849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 223.376823][T11856] EXT4-fs: Ignoring removed orlov option [ 223.383763][T11856] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.412148][T11856] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2858: corrupted in-inode xattr: e_value size too large [ 223.427021][T11856] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.428942][T11856] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2858: couldn't read orphan inode 15 (err -117) [ 223.438461][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 223.438490][ C0] EXT4-fs (loop0): initial error at time 2000000046: ext4_iget_extra_inode:5025: inode 15 [ 223.438668][ C0] EXT4-fs (loop0): last error at time 2000000046: ext4_iget_extra_inode:5025: inode 15 [ 223.482046][T11856] loop0: lost filesystem error report for type 5 error -117 [ 223.490948][T11856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.524770][T11856] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.2858: lblock 3 mapped to illegal pblock 12 (length 1) [ 223.686794][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 223.710898][T11867] netlink: 'syz.2.2860': attribute type 32 has an invalid length. [ 223.742577][T11870] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 223.745763][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 223.772097][T11870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.783082][T11873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11873 comm=syz.1.2861 [ 223.796571][T11870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2863'. [ 223.808026][T11873] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 223.842880][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'. [ 223.854933][T11873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.886832][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2865'. [ 223.926284][T11878] loop3: detected capacity change from 0 to 512 [ 223.937922][T11878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.110598][T11856] syz.0.2858 (11856) used greatest stack depth: 9416 bytes left [ 224.119439][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.308325][T11904] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 224.353169][T11904] 8021q: adding VLAN 0 to HW filter on device bond8 [ 224.666180][T11916] hub 8-0:1.0: USB hub found [ 224.671031][T11916] hub 8-0:1.0: 8 ports detected [ 224.682917][T11916] netlink: 'syz.0.2876': attribute type 10 has an invalid length. [ 224.691024][T11916] macvlan1: entered allmulticast mode [ 224.697380][T11916] veth1_vlan: entered allmulticast mode [ 224.707186][T11916] team0: Port device macvlan1 added [ 224.979563][T11922] loop1: detected capacity change from 0 to 1024 [ 225.046515][T11922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.078980][T11922] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.093021][T11922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.137273][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.300747][T11916] syz.0.2876 (11916) used greatest stack depth: 9400 bytes left [ 225.471051][T11931] loop3: detected capacity change from 0 to 512 [ 225.514933][T11931] EXT4-fs: Ignoring removed orlov option [ 225.522170][T11931] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.554022][T11931] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.2881: corrupted in-inode xattr: e_value size too large [ 225.564913][T11942] tipc: Started in network mode [ 225.569717][T11931] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.575920][T11931] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2881: couldn't read orphan inode 15 (err -117) [ 225.579425][T11942] tipc: Node identity 8a1cf313a3da, cluster identity 4711 [ 225.585532][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 225.585562][ C0] EXT4-fs (loop3): initial error at time 2000000048: ext4_iget_extra_inode:5025: inode 15 [ 225.604505][T11935] IPVS: sh: FWM 3 0x00000003 - no destination available [ 225.604659][ C0] [ 225.611922][T11942] tipc: Enabled bearer , priority 0 [ 225.621370][ C0] EXT4-fs (loop3): last error at time 2000000048: ext4_iget_extra_inode:5025: inode 15 [ 225.649253][T11931] loop3: lost filesystem error report for type 5 error -117 [ 225.651373][T11944] syzkaller0: entered promiscuous mode [ 225.664296][T11944] syzkaller0: entered allmulticast mode [ 225.671838][T11931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.707941][T11942] tipc: Resetting bearer [ 225.741244][T11940] tipc: Resetting bearer [ 225.752726][T11931] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.2881: lblock 3 mapped to illegal pblock 12 (length 1) [ 225.768345][T11940] tipc: Disabling bearer [ 225.823497][T11949] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 225.866887][T11949] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.918310][T11960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11960 comm=syz.4.2891 [ 225.934325][T11960] netlink: 'syz.4.2891': attribute type 1 has an invalid length. [ 225.961105][T11960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.968661][T11968] syzkaller1: entered promiscuous mode [ 225.974372][T11968] syzkaller1: entered allmulticast mode [ 226.084390][T11972] hub 8-0:1.0: USB hub found [ 226.089544][T11972] hub 8-0:1.0: 8 ports detected [ 226.101457][T11972] netlink: 'syz.0.2893': attribute type 10 has an invalid length. [ 226.118684][T11972] veth1_vlan: left allmulticast mode [ 226.236616][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.555785][T11979] loop1: detected capacity change from 0 to 1024 [ 226.582061][T11979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.595265][T11979] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.606550][T11979] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.672902][T11989] loop3: detected capacity change from 0 to 512 [ 226.746555][T11989] EXT4-fs: Ignoring removed orlov option [ 226.772535][T11989] EXT4-fs (loop3): 1 truncate cleaned up [ 226.778772][T11989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.003586][T12008] loop2: detected capacity change from 0 to 128 [ 227.017228][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 227.019071][T12008] EXT4-fs: Ignoring removed oldalloc option [ 227.070172][T12008] ext4: Unknown parameter 'smackfsdef' [ 227.179436][T12010] syzkaller1: entered promiscuous mode [ 227.189901][T12010] syzkaller1: entered allmulticast mode [ 227.226268][T12012] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 227.273957][T12015] loop1: detected capacity change from 0 to 512 [ 227.313007][T12015] EXT4-fs: Ignoring removed orlov option [ 227.324242][T12015] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.432437][T12015] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2908: corrupted in-inode xattr: e_value size too large [ 227.447374][T12015] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.448577][T12015] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2908: couldn't read orphan inode 15 (err -117) [ 227.458367][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 227.458437][ C0] EXT4-fs (loop1): initial error at time 2000000050: ext4_iget_extra_inode:5025: inode 15 [ 227.458637][ C0] EXT4-fs (loop1): last error at time 2000000050: ext4_iget_extra_inode:5025: inode 15 [ 227.530226][T12015] loop1: lost filesystem error report for type 5 error -117 [ 227.537491][T12015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.682003][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.718328][T12015] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.2908: lblock 3 mapped to illegal pblock 12 (length 1) [ 228.108435][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.412090][ T3315] syz_tun (unregistering): left allmulticast mode [ 228.807583][ T41] bond1 (unregistering): (slave geneve2): Releasing active interface [ 229.048145][T12078] SET target dimension over the limit! [ 229.087224][T12083] loop2: detected capacity change from 0 to 128 [ 229.124289][T12083] EXT4-fs: Ignoring removed oldalloc option [ 229.145305][T12083] ext4: Unknown parameter 'smackfsdef' [ 229.149332][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop2 [ 229.282994][ T41] bond0 (unregistering): Released all slaves [ 229.303854][ T41] bond1 (unregistering): Released all slaves [ 229.313253][T12091] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.475889][ T41] bond2 (unregistering): Released all slaves [ 229.484753][ T41] bond3 (unregistering): Released all slaves [ 229.493530][ T41] bond4 (unregistering): Released all slaves [ 229.502511][ T41] bond5 (unregistering): Released all slaves [ 229.510869][ T41] bond6 (unregistering): Released all slaves [ 229.519674][ T41] bond7 (unregistering): Released all slaves [ 229.535022][ T41] bond8 (unregistering): Released all slaves [ 229.544619][ T41] bond9 (unregistering): Released all slaves [ 229.593307][T12052] chnl_net:caif_netlink_parms(): no params data found [ 229.620320][ T41] tipc: Disabling bearer [ 229.634406][ T41] tipc: Left network mode [ 229.728943][ T41] hsr_slave_0: left promiscuous mode [ 229.734888][ T41] hsr_slave_1: left promiscuous mode [ 229.750722][ T41] team0 (unregistering): Port device macvlan1 removed [ 229.823675][T12128] __nla_validate_parse: 7 callbacks suppressed [ 229.823690][T12128] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2932'. [ 229.853477][T12052] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.860851][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.869635][T12052] bridge_slave_0: entered allmulticast mode [ 229.876225][T12052] bridge_slave_0: entered promiscuous mode [ 229.884577][T12052] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.893292][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.900592][T12052] bridge_slave_1: entered allmulticast mode [ 229.907304][T12052] bridge_slave_1: entered promiscuous mode [ 230.003687][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.014228][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.037322][T12052] team0: Port device team_slave_0 added [ 230.044797][T12052] team0: Port device team_slave_1 added [ 230.056445][T12144] loop0: detected capacity change from 0 to 164 [ 230.089287][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.101565][T12144] Unable to read rock-ridge attributes [ 230.117634][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.144326][T12144] isofs_fill_super: root inode is not a directory. Corrupted media? [ 230.161443][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.172929][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.179906][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.228983][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.365341][T12052] hsr_slave_0: entered promiscuous mode [ 230.389171][T12052] hsr_slave_1: entered promiscuous mode [ 230.827324][T12052] debugfs: 'hsr0' already exists in 'hsr' [ 230.833243][T12052] Cannot create hsr debugfs directory [ 230.848320][T12176] tipc: Enabled bearer , priority 0 [ 230.866472][T12177] syzkaller0: entered promiscuous mode [ 230.873837][T12177] syzkaller0: entered allmulticast mode [ 230.893209][T12171] tipc: Resetting bearer [ 230.917318][T12170] tipc: Resetting bearer [ 230.935931][T12170] tipc: Disabling bearer [ 231.038003][T12198] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2943'. [ 231.172275][T12207] loop0: detected capacity change from 0 to 128 [ 231.188467][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop0 [ 231.201020][T12207] EXT4-fs: Ignoring removed oldalloc option [ 231.213092][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop0 [ 231.226544][T12207] ext4: Unknown parameter 'smackfsdef' [ 231.607778][T12215] loop2: detected capacity change from 0 to 512 [ 231.696577][T12052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.757976][T12215] EXT4-fs: Ignoring removed orlov option [ 231.824804][T12052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.895375][T12052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.922253][T12215] EXT4-fs (loop2): 1 truncate cleaned up [ 231.950330][T12052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.967388][T12215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.102475][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.112829][T12238] IPVS: sh: FWM 3 0x00000003 - no destination available [ 232.130275][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.162312][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.169396][T10096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.294686][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.301883][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.378666][T12262] loop0: detected capacity change from 0 to 512 [ 232.434810][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.498588][T12262] EXT4-fs: Ignoring removed orlov option [ 232.547167][T12262] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.585785][T12298] syzkaller0: entered promiscuous mode [ 232.605700][T12298] syzkaller0: entered allmulticast mode [ 232.632084][T12298] 0: reclassify loop, rule prio 0, protocol 800 [ 232.642956][T12262] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2952: corrupted in-inode xattr: e_value size too large [ 232.659459][T12052] veth0_vlan: entered promiscuous mode [ 232.685744][T12052] veth1_vlan: entered promiscuous mode [ 232.759399][T12052] veth0_macvtap: entered promiscuous mode [ 232.766434][T12262] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.770021][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 232.786266][ C0] EXT4-fs (loop0): initial error at time 2000000056: ext4_iget_extra_inode:5025: inode 15 [ 232.796765][ C0] EXT4-fs (loop0): last error at time 2000000056: ext4_iget_extra_inode:5025: inode 15 [ 232.825995][T12052] veth1_macvtap: entered promiscuous mode [ 232.830716][T12313] loop3: detected capacity change from 0 to 128 [ 232.838903][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.849383][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.858546][T12313] EXT4-fs: Ignoring removed oldalloc option [ 232.862533][T12262] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2952: couldn't read orphan inode 15 (err -117) [ 232.878589][T12313] ext4: Unknown parameter 'smackfsdef' [ 232.879262][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.903498][T10096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.940353][T10096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.966827][T10096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.975857][T12262] loop0: lost filesystem error report for type 5 error -117 [ 232.987778][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 233.002685][T10096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.007557][T12262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.051380][T12318] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2960'. [ 233.115740][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 233.126507][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.208804][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.341239][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.350394][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.436763][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.538057][T12330] syzkaller0: entered promiscuous mode [ 233.545017][T12330] syzkaller0: entered allmulticast mode [ 233.841499][T12341] IPVS: sh: FWM 3 0x00000003 - no destination available [ 233.863460][T12340] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2968'. [ 233.913221][T12343] syzkaller0: entered promiscuous mode [ 233.918767][T12343] syzkaller0: entered allmulticast mode [ 233.927324][T12340] loop0: detected capacity change from 0 to 128 [ 233.935879][T12343] 0: reclassify loop, rule prio 0, protocol 800 [ 234.181715][T12351] loop0: detected capacity change from 0 to 512 [ 234.198561][T12351] EXT4-fs: Ignoring removed orlov option [ 234.205819][T12351] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.230784][T12351] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2972: corrupted in-inode xattr: e_value size too large [ 234.245502][T12351] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.248574][T12351] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2972: couldn't read orphan inode 15 (err -117) [ 234.258345][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 234.258460][ C0] EXT4-fs (loop0): initial error at time 2000000057: ext4_iget_extra_inode:5025: inode 15 [ 234.258532][ C0] EXT4-fs (loop0): last error at time 2000000057: ext4_iget_extra_inode:5025: inode 15 [ 234.301209][T12351] loop0: lost filesystem error report for type 5 error -117 [ 234.308894][T12351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.394044][T12359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.505087][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 234.534128][T12371] syzkaller0: entered promiscuous mode [ 234.549878][T12371] syzkaller0: entered allmulticast mode [ 234.858053][T12381] syzkaller0: entered promiscuous mode [ 234.863673][T12381] syzkaller0: entered allmulticast mode [ 234.871300][T12381] 0: reclassify loop, rule prio 0, protocol 800 [ 234.878667][T12383] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2983'. [ 234.906778][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.973942][T12385] loop3: detected capacity change from 0 to 128 [ 235.031736][T12390] syzkaller1: entered promiscuous mode [ 235.037336][T12390] syzkaller1: entered allmulticast mode [ 235.073349][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 235.220189][T12404] syzkaller0: entered promiscuous mode [ 235.235479][T12404] syzkaller0: entered allmulticast mode [ 235.363715][T12415] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2996'. [ 235.408714][T12411] loop1: detected capacity change from 0 to 512 [ 235.428512][T12411] EXT4-fs: Ignoring removed orlov option [ 235.437030][T12411] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.459469][T12419] loop0: detected capacity change from 0 to 128 [ 235.468704][T12411] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.2994: corrupted in-inode xattr: e_value size too large [ 235.484760][T12411] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.485950][T12411] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2994: couldn't read orphan inode 15 (err -117) [ 235.495930][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 235.496057][ C0] EXT4-fs (loop1): initial error at time 2000000058: ext4_iget_extra_inode:5025: inode 15 [ 235.496127][ C0] EXT4-fs (loop1): last error at time 2000000058: ext4_iget_extra_inode:5025: inode 15 [ 235.536676][T12411] loop1: lost filesystem error report for type 5 error -117 [ 235.559233][T12411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.760467][T12425] syzkaller0: entered promiscuous mode [ 235.766172][T12425] syzkaller0: entered allmulticast mode [ 235.778711][T12425] 0: reclassify loop, rule prio 0, protocol 800 [ 235.903173][T12052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.958173][T12442] syzkaller1: entered promiscuous mode [ 236.963764][T12442] syzkaller1: entered allmulticast mode [ 237.089258][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 237.137085][T12452] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 237.170018][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 237.185855][T12458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12458 comm=syz.3.3009 [ 237.208810][T12458] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 237.219704][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 237.237148][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'. [ 237.247463][T12458] 8021q: adding VLAN 0 to HW filter on device bond14 [ 237.295169][T12465] syzkaller0: entered promiscuous mode [ 237.301132][T12465] syzkaller0: entered allmulticast mode [ 237.428435][T12470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3008'. [ 237.456671][T12469] loop0: detected capacity change from 0 to 512 [ 237.528933][T12469] EXT4-fs: Ignoring removed orlov option [ 237.549488][T12469] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.566845][T12475] loop4: detected capacity change from 0 to 128 [ 237.575606][T12476] syzkaller0: entered promiscuous mode [ 237.581144][T12476] syzkaller0: entered allmulticast mode [ 237.587518][T12475] EXT4-fs: Ignoring removed oldalloc option [ 237.600485][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop4 [ 237.609420][T12475] ext4: Unknown parameter 'smackfsdef' [ 237.617744][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop4 [ 238.622205][T12469] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3011: corrupted in-inode xattr: e_value size too large [ 238.642937][T12469] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.644246][T12469] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3011: couldn't read orphan inode 15 (err -117) [ 238.653891][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 238.653927][ C1] EXT4-fs (loop0): initial error at time 2000000061: ext4_iget_extra_inode:5025: inode 15 [ 238.654053][ C1] EXT4-fs (loop0): last error at time 2000000061: ext4_iget_extra_inode:5025: inode 15 [ 238.693998][T12469] loop0: lost filesystem error report for type 5 error -117 [ 238.734136][T12469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.944299][T12469] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.3011: lblock 3 mapped to illegal pblock 12 (length 1) [ 239.294775][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.389685][T12507] syzkaller0: entered promiscuous mode [ 239.395333][T12507] syzkaller0: entered allmulticast mode [ 239.448537][T12510] netlink: 'syz.0.3021': attribute type 27 has an invalid length. [ 239.549672][T12510] macvlan1: left allmulticast mode [ 239.671239][T10588] IPVS: starting estimator thread 0... [ 239.778408][T12520] IPVS: using max 2400 ests per chain, 120000 per kthread [ 239.798926][T12528] loop4: detected capacity change from 0 to 512 [ 239.834119][T12528] EXT4-fs: Ignoring removed orlov option [ 239.841855][T12528] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.868130][T12528] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3031: corrupted in-inode xattr: e_value size too large [ 239.885398][T12528] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.886995][T12528] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3031: couldn't read orphan inode 15 (err -117) [ 239.896659][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 239.896763][ C1] EXT4-fs (loop4): initial error at time 2000000063: ext4_iget_extra_inode:5025: inode 15 [ 239.896891][ C1] EXT4-fs (loop4): last error at time 2000000063: ext4_iget_extra_inode:5025: inode 15 [ 239.939098][T12528] loop4: lost filesystem error report for type 5 error -117 [ 239.946497][T12528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.092280][T12540] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 12: comm syz.4.3031: lblock 3 mapped to illegal pblock 12 (length 1) [ 240.298629][T12547] syzkaller0: entered promiscuous mode [ 240.304602][T12547] syzkaller0: entered allmulticast mode [ 240.330320][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 240.404393][T12551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12551 comm=syz.0.3036 [ 240.428861][T12551] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 240.480446][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3036'. [ 240.581628][T12528] syz.4.3031 (12528) used greatest stack depth: 9352 bytes left [ 240.623860][T11285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.637832][T12552] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.712805][T12561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 240.869812][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 241.476925][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 241.616878][T12595] netlink: 'syz.2.3046': attribute type 27 has an invalid length. [ 241.628865][T12595] vlan0: left promiscuous mode [ 241.634239][T12595] macvlan1: left allmulticast mode [ 241.651086][T12595] macvtap1: left promiscuous mode [ 241.656318][T12595] macvtap1: left allmulticast mode [ 241.661944][T12595] macvtap2: left promiscuous mode [ 241.667054][T12595] macvtap2: left allmulticast mode [ 241.672702][T12595] macvtap3: left promiscuous mode [ 241.677923][T12595] macvtap3: left allmulticast mode [ 241.699202][T12595] macvtap4: left promiscuous mode [ 241.711913][T12595] macvtap4: left allmulticast mode [ 241.724359][T12595] macvtap5: left promiscuous mode [ 241.729626][T12595] macvtap5: left allmulticast mode [ 241.740822][T12595] macvtap6: left promiscuous mode [ 241.745982][T12595] macvtap6: left allmulticast mode [ 241.751506][T12595] macvtap8: left promiscuous mode [ 241.756697][T12595] macvtap8: left allmulticast mode [ 241.765467][T12595] macvtap9: left promiscuous mode [ 241.771242][T12595] macvtap9: left allmulticast mode [ 241.834644][T12600] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3048'. [ 241.844973][T12595] macvtap10: left promiscuous mode [ 241.850375][T12595] macvtap10: left allmulticast mode [ 241.857410][T12595] macvtap11: left promiscuous mode [ 241.863065][T12595] macvtap11: left allmulticast mode [ 241.881504][T12595] bond0: left allmulticast mode [ 241.899835][T12602] loop4: detected capacity change from 0 to 128 [ 241.918303][T12595] bond0: left promiscuous mode [ 241.939916][T12595] macvtap7: left promiscuous mode [ 242.118869][T12595] macvtap7: left allmulticast mode [ 242.222913][T12604] loop0: detected capacity change from 0 to 512 [ 242.251913][T12604] EXT4-fs: Ignoring removed orlov option [ 242.259538][T12604] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.271281][T12604] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3049: corrupted in-inode xattr: e_value size too large [ 242.295404][T12604] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.297342][T12604] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3049: couldn't read orphan inode 15 (err -117) [ 242.306753][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 242.306781][ C1] EXT4-fs (loop0): initial error at time 2000000065: ext4_iget_extra_inode:5025: inode 15 [ 242.307150][ C1] EXT4-fs (loop0): last error at time 2000000065: ext4_iget_extra_inode:5025: inode 15 [ 242.346192][T12604] loop0: lost filesystem error report for type 5 error -117 [ 242.387299][T12604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.408136][T12607] syzkaller0: entered promiscuous mode [ 242.424608][T12607] syzkaller0: entered allmulticast mode [ 242.530614][T12604] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.3049: lblock 3 mapped to illegal pblock 12 (length 1) [ 242.774803][T12609] chnl_net:caif_netlink_parms(): no params data found [ 242.819729][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.826951][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.834234][T12609] bridge_slave_0: entered allmulticast mode [ 242.840893][T12609] bridge_slave_0: entered promiscuous mode [ 242.847952][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.855350][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.862624][T12609] bridge_slave_1: entered allmulticast mode [ 242.869205][T12609] bridge_slave_1: entered promiscuous mode [ 242.886925][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.897562][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.923709][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.938067][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3056'. [ 242.941949][T12609] team0: Port device team_slave_0 added [ 242.954280][T12609] team0: Port device team_slave_1 added [ 242.982281][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.989314][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.070111][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.081816][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.088792][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.127746][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.178969][T12645] loop1: detected capacity change from 0 to 512 [ 243.186199][T12645] EXT4-fs: Ignoring removed orlov option [ 243.916559][T12609] hsr_slave_0: entered promiscuous mode [ 243.923091][T12609] hsr_slave_1: entered promiscuous mode [ 243.929217][T12609] debugfs: 'hsr0' already exists in 'hsr' [ 243.935086][T12609] Cannot create hsr debugfs directory [ 244.034838][T12645] EXT4-fs (loop1): 1 truncate cleaned up [ 244.041066][T12645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.156427][T12661] syzkaller0: entered promiscuous mode [ 244.162077][T12661] syzkaller0: entered allmulticast mode [ 244.266744][T12052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.436206][T12677] syzkaller0: entered promiscuous mode [ 244.442269][T12677] syzkaller0: entered allmulticast mode [ 244.551278][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'. [ 244.587535][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 244.716391][ T12] bond0 (unregistering): Released all slaves [ 244.723935][ T12] bond1 (unregistering): (slave veth5): Releasing active interface [ 244.732527][ T12] bond1 (unregistering): Released all slaves [ 244.742060][ T12] bond2 (unregistering): Released all slaves [ 244.751609][ T12] bond3 (unregistering): Released all slaves [ 244.760617][ T12] bond4 (unregistering): Released all slaves [ 244.939080][ T12] tipc: Left network mode [ 245.100633][ T12] hsr_slave_0: left promiscuous mode [ 245.137966][ T12] hsr_slave_1: left promiscuous mode [ 245.305559][ T12] team0 (unregistering): Port device macvlan1 removed [ 245.426250][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3076'. [ 245.462862][T12732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 245.559075][T12609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.570816][T12609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.581834][T12609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.592083][T12609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.743457][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.763920][ T12] IPVS: stop unused estimator thread 0... [ 245.770607][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.788650][T12609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.799182][T12609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.860704][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.868015][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.880760][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.887907][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.990909][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.131611][T12609] veth0_vlan: entered promiscuous mode [ 246.144772][T12792] IPVS: fo: FWM 3 0x00000003 - no destination available [ 246.147712][T12609] veth1_vlan: entered promiscuous mode [ 246.185272][T12609] veth0_macvtap: entered promiscuous mode [ 246.194568][T12609] veth1_macvtap: entered promiscuous mode [ 246.230465][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.243142][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.255108][T12817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.272187][ T9652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.281054][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.299429][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.317692][T12821] loop1: detected capacity change from 0 to 512 [ 246.326790][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.337903][T12821] EXT4-fs: Ignoring removed orlov option [ 246.345931][T12821] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.362668][T12821] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3089: corrupted in-inode xattr: e_value size too large [ 246.377311][T12821] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.377490][T12821] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3089: couldn't read orphan inode 15 (err -117) [ 246.386655][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 246.386685][ C1] EXT4-fs (loop1): initial error at time 2000000069: ext4_iget_extra_inode:5025: inode 15 [ 246.386718][ C1] EXT4-fs (loop1): last error at time 2000000069: ext4_iget_extra_inode:5025: inode 15 [ 246.427295][T12821] loop1: lost filesystem error report for type 5 error -117 [ 246.427792][T12821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.453980][T12821] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.3089: lblock 3 mapped to illegal pblock 12 (length 1) [ 246.590424][T12052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.608783][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 246.728329][T12843] loop2: detected capacity change from 0 to 764 [ 246.793622][T12845] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3090'. [ 246.829284][T12843] netlink: 'syz.2.3096': attribute type 9 has an invalid length. [ 246.850073][T12843] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3096'. [ 246.878623][T12851] loop1: detected capacity change from 0 to 128 [ 247.170755][T12861] loop3: detected capacity change from 0 to 512 [ 247.177904][T12861] EXT4-fs: Ignoring removed orlov option [ 247.197384][T12861] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.210931][T12856] syzkaller0: entered promiscuous mode [ 247.216436][T12856] syzkaller0: entered allmulticast mode [ 247.228135][T12861] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.3099: corrupted in-inode xattr: e_value size too large [ 247.242645][T12861] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.243062][T12861] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3099: couldn't read orphan inode 15 (err -117) [ 247.252216][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 247.252243][ C1] EXT4-fs (loop3): initial error at time 2000000070: ext4_iget_extra_inode:5025: inode 15 [ 247.252267][ C1] EXT4-fs (loop3): last error at time 2000000070: ext4_iget_extra_inode:5025: inode 15 [ 247.290155][T12861] loop3: lost filesystem error report for type 5 error -117 [ 247.290686][T12861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.313702][T12861] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.3099: lblock 3 mapped to illegal pblock 12 (length 1) [ 247.351590][T12872] netlink: 'syz.1.3100': attribute type 32 has an invalid length. [ 247.435653][T12849] chnl_net:caif_netlink_parms(): no params data found [ 247.559804][T12893] loop1: detected capacity change from 0 to 764 [ 247.580796][T12849] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.587994][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.595555][T12849] bridge_slave_0: entered allmulticast mode [ 247.602156][T12849] bridge_slave_0: entered promiscuous mode [ 247.630211][ T41] bond1 (unregistering): (slave geneve2): Releasing active interface [ 247.660290][T12893] netlink: 'syz.1.3106': attribute type 9 has an invalid length. [ 247.668271][T12893] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3106'. [ 247.976801][ T41] bond0 (unregistering): Released all slaves [ 247.984073][ T41] bond1 (unregistering): Released all slaves [ 247.992039][ T41] bond2 (unregistering): Released all slaves [ 248.000007][ T41] bond3 (unregistering): Released all slaves [ 248.008861][ T41] bond4 (unregistering): Released all slaves [ 248.018236][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.019385][ T41] bond5 (unregistering): Released all slaves [ 248.035804][ T41] bond6 (unregistering): Released all slaves [ 248.050712][T12914] loop3: detected capacity change from 0 to 164 [ 248.051052][ T41] bond7 (unregistering): Released all slaves [ 248.057738][T12914] Unable to read rock-ridge attributes [ 248.068621][T12914] isofs_fill_super: root inode is not a directory. Corrupted media? [ 248.074287][ T41] bond8 (unregistering): Released all slaves [ 248.086628][T12914] loop3: detected capacity change from 0 to 256 [ 248.092760][ T41] bond9 (unregistering): Released all slaves [ 248.107346][T12914] FAT-fs (loop3): Directory bread(block 64) failed [ 248.123221][T12849] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.129806][T12914] FAT-fs (loop3): Directory bread(block 65) failed [ 248.130923][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.137356][T12914] FAT-fs (loop3): Directory bread(block 66) failed [ 248.144464][T12849] bridge_slave_1: entered allmulticast mode [ 248.150608][T12914] FAT-fs (loop3): Directory bread(block 67) failed [ 248.157383][T12849] bridge_slave_1: entered promiscuous mode [ 248.163491][T12914] FAT-fs (loop3): Directory bread(block 68) failed [ 248.177897][T12914] FAT-fs (loop3): Directory bread(block 69) failed [ 248.184913][T12914] FAT-fs (loop3): Directory bread(block 70) failed [ 248.192063][T12914] FAT-fs (loop3): Directory bread(block 71) failed [ 248.192337][T12849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.198687][T12914] FAT-fs (loop3): Directory bread(block 72) failed [ 248.208687][ T41] tipc: Left network mode [ 248.220998][T12914] FAT-fs (loop3): Directory bread(block 73) failed [ 248.221309][T12849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.240157][ T41] hsr_slave_0: left promiscuous mode [ 248.245971][ T41] hsr_slave_1: left promiscuous mode [ 248.298015][ T41] team0 (unregistering): Port device macvlan1 removed [ 248.388845][T12935] netlink: 'syz.3.3110': attribute type 32 has an invalid length. [ 248.516938][T12849] team0: Port device team_slave_0 added [ 248.527972][T12849] team0: Port device team_slave_1 added [ 248.577184][T12849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.592906][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.629483][T12849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.645433][T12849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.661416][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.720972][T12849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.759881][T12849] hsr_slave_0: entered promiscuous mode [ 248.768496][T12849] hsr_slave_1: entered promiscuous mode [ 248.774654][T12849] debugfs: 'hsr0' already exists in 'hsr' [ 248.782367][T12849] Cannot create hsr debugfs directory [ 248.793416][ T41] IPVS: stop unused estimator thread 0... [ 248.971093][T12983] hub 8-0:1.0: USB hub found [ 248.976061][T12983] hub 8-0:1.0: 8 ports detected [ 248.990091][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 248.994244][T12983] netlink: 'syz.2.3120': attribute type 10 has an invalid length. [ 249.035285][T12983] macvlan1: entered allmulticast mode [ 249.043929][T12983] veth1_vlan: entered allmulticast mode [ 249.058808][T12983] team0: Port device macvlan1 added [ 249.231712][T13001] syzkaller1: entered promiscuous mode [ 249.237925][T13001] syzkaller1: entered allmulticast mode [ 249.690780][T12983] syz.2.3120 (12983) used greatest stack depth: 9208 bytes left [ 249.770727][T13007] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.773370][T12972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.791042][T12849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.831691][T12849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.853006][T13019] loop1: detected capacity change from 0 to 164 [ 251.861976][T12849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.884994][T13019] Unable to read rock-ridge attributes [ 251.904470][T13019] isofs_fill_super: root inode is not a directory. Corrupted media? [ 251.929988][T12849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.944041][T13019] loop1: detected capacity change from 0 to 256 [ 251.970824][T13016] syzkaller0: entered promiscuous mode [ 251.980347][T13016] syzkaller0: entered allmulticast mode [ 251.995890][T13016] 0: reclassify loop, rule prio 0, protocol 800 [ 252.003097][T13019] FAT-fs (loop1): Directory bread(block 64) failed [ 252.012442][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 252.023138][T13019] FAT-fs (loop1): Directory bread(block 65) failed [ 252.029765][T13019] FAT-fs (loop1): Directory bread(block 66) failed [ 252.036909][T13019] FAT-fs (loop1): Directory bread(block 67) failed [ 252.043718][T13019] FAT-fs (loop1): Directory bread(block 68) failed [ 252.051341][T13019] FAT-fs (loop1): Directory bread(block 69) failed [ 252.057863][T13019] FAT-fs (loop1): Directory bread(block 70) failed [ 252.064737][T13019] FAT-fs (loop1): Directory bread(block 71) failed [ 252.071532][T13019] FAT-fs (loop1): Directory bread(block 72) failed [ 252.078247][T13019] FAT-fs (loop1): Directory bread(block 73) failed [ 252.087294][T13048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13048 comm=syz.2.3139 [ 252.110269][T13048] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 252.162736][T13044] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3139'. [ 252.190755][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3139'. [ 252.201867][T13058] syzkaller0: entered promiscuous mode [ 252.220056][T13058] syzkaller0: entered allmulticast mode [ 252.279336][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.298415][T12849] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.325300][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.332488][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.345582][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.352691][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.394511][T13086] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.419082][T12849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.429737][T12849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.505864][T12849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.581882][T12849] veth0_vlan: entered promiscuous mode [ 252.590395][T12849] veth1_vlan: entered promiscuous mode [ 252.609034][T12849] veth0_macvtap: entered promiscuous mode [ 252.617675][T12849] veth1_macvtap: entered promiscuous mode [ 252.629383][T12849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.642272][T12849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.654485][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.663663][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.673675][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.685687][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.281439][T13074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.317477][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3152'. [ 255.341145][T13160] syzkaller0: entered promiscuous mode [ 255.346732][T13160] syzkaller0: entered allmulticast mode [ 255.382965][T13160] 0: reclassify loop, rule prio 0, protocol 800 [ 255.396042][T13169] loop4: detected capacity change from 0 to 512 [ 255.396956][T13159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13159 comm=syz.3.3152 [ 255.415369][T13169] EXT4-fs: Ignoring removed orlov option [ 255.415976][T13166] netlink: 'syz.0.3155': attribute type 27 has an invalid length. [ 255.429034][T13169] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.442342][T13169] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3156: corrupted in-inode xattr: e_value size too large [ 255.458871][T13169] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.459079][T13169] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3156: couldn't read orphan inode 15 (err -117) [ 255.467426][T13159] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 255.468260][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 255.487933][T13170] loop2: detected capacity change from 0 to 764 [ 255.494203][ C1] EXT4-fs (loop4): initial error at time 2000000078: ext4_iget_extra_inode:5025: inode 15 [ 255.510555][ C1] EXT4-fs (loop4): last error at time 2000000078: ext4_iget_extra_inode:5025: inode 15 [ 255.520391][T13173] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3152'. [ 255.520621][T13169] loop4: lost filesystem error report for type 5 error -117 [ 255.531179][T13169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.557000][T13169] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 12: comm syz.4.3156: lblock 3 mapped to illegal pblock 12 (length 1) [ 255.579217][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3152'. [ 255.580345][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.595310][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.626518][T13176] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3157'. [ 255.637076][T13166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.647988][T13166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.688626][T13174] 8021q: adding VLAN 0 to HW filter on device bond15 [ 255.698097][ T203] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.733244][ T203] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.746118][ T203] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.756476][ T203] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.823161][T13194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3161'. [ 255.877537][T13198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.895796][T13194] loop3: detected capacity change from 0 to 128 [ 255.923015][T13198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.955960][T13199] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 255.986272][T13198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.022742][T13198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.077461][ T203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.088421][ T203] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.099704][ T203] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.110680][ T203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.229824][T11285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.815674][T13222] syzkaller0: entered promiscuous mode [ 256.821221][T13222] syzkaller0: entered allmulticast mode [ 256.828256][T13222] 0: reclassify loop, rule prio 0, protocol 800 [ 258.982150][T13202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.087973][T13244] tipc: Started in network mode [ 259.096964][T13244] tipc: Node identity fa444e454eaf, cluster identity 4711 [ 259.116249][T13244] tipc: Enabled bearer , priority 0 [ 259.139617][T13251] syzkaller0: entered promiscuous mode [ 259.166114][T13251] syzkaller0: entered allmulticast mode [ 259.188379][T13254] netlink: 'syz.4.3176': attribute type 27 has an invalid length. [ 259.194067][T13244] tipc: Resetting bearer [ 259.204382][T13243] tipc: Resetting bearer [ 259.220522][T13243] tipc: Disabling bearer [ 259.469121][T13259] hub 8-0:1.0: USB hub found [ 259.526575][T13260] netlink: 'syz.3.3180': attribute type 10 has an invalid length. [ 259.563239][T13259] hub 8-0:1.0: 8 ports detected [ 259.648406][T13260] veth1_vlan: left allmulticast mode [ 259.674021][T13267] syzkaller0: entered promiscuous mode [ 259.679593][T13267] syzkaller0: entered allmulticast mode [ 259.688175][T13267] tipc: Enabled bearer , priority 0 [ 259.695689][T13266] tipc: Resetting bearer [ 259.703530][T13266] tipc: Disabling bearer [ 259.957829][T13277] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.707510][T13308] syzkaller0: entered promiscuous mode [ 260.713159][T13308] syzkaller0: entered allmulticast mode [ 260.923315][T13310] syzkaller0: entered promiscuous mode [ 260.928868][T13310] syzkaller0: entered allmulticast mode [ 261.047919][T13313] syzkaller0: entered promiscuous mode [ 261.053502][T13313] syzkaller0: entered allmulticast mode [ 261.319510][T13315] chnl_net:caif_netlink_parms(): no params data found [ 261.354520][T13315] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.361632][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.368815][T13315] bridge_slave_0: entered allmulticast mode [ 261.375399][T13315] bridge_slave_0: entered promiscuous mode [ 261.382022][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.389131][T13315] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.396334][T13315] bridge_slave_1: entered allmulticast mode [ 261.403139][T13315] bridge_slave_1: entered promiscuous mode [ 261.420557][T13315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.431052][T13315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.448643][T13315] team0: Port device team_slave_0 added [ 261.455097][T13315] team0: Port device team_slave_1 added [ 261.468757][T13315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.475722][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.501665][T13315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.514374][T13315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.521403][T13315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.547503][T13315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.573684][T13315] hsr_slave_0: entered promiscuous mode [ 261.579664][T13315] hsr_slave_1: entered promiscuous mode [ 261.585727][T13315] debugfs: 'hsr0' already exists in 'hsr' [ 261.591505][T13315] Cannot create hsr debugfs directory [ 261.662973][ T203] bond1 (unregistering): (slave geneve2): Releasing active interface [ 262.000763][ T203] bond0 (unregistering): Released all slaves [ 262.008081][ T203] bond1 (unregistering): Released all slaves [ 262.016161][ T203] bond2 (unregistering): Released all slaves [ 262.024531][ T203] bond3 (unregistering): (slave veth3): Releasing active interface [ 262.032453][ T203] batadv1: entered promiscuous mode [ 262.038498][ T203] bond3 (unregistering): (slave batadv1): Releasing active interface [ 262.049456][ T203] bond3 (unregistering): Released all slaves [ 262.057451][ T203] bond4 (unregistering): Released all slaves [ 262.065478][ T203] bond5 (unregistering): Released all slaves [ 262.073413][ T203] bond6 (unregistering): Released all slaves [ 262.081470][ T203] bond7 (unregistering): Released all slaves [ 262.089093][ T203] bond8 (unregistering): Released all slaves [ 262.097658][ T203] bond9 (unregistering): Released all slaves [ 262.105585][ T203] bond10 (unregistering): Released all slaves [ 262.113854][ T203] bond11 (unregistering): Released all slaves [ 262.122071][ T203] bond12 (unregistering): Released all slaves [ 262.129748][ T203] bond13 (unregistering): Released all slaves [ 262.138257][ T203] bond14 (unregistering): Released all slaves [ 262.146626][ T203] bond15 (unregistering): Released all slaves [ 262.185360][ T203] tipc: Left network mode [ 262.192230][ T203] hsr_slave_0: left promiscuous mode [ 262.197868][ T203] hsr_slave_1: left promiscuous mode [ 262.214049][ T203] team0 (unregistering): Port device macvlan1 removed [ 262.473428][ T203] IPVS: stop unused estimator thread 0... [ 262.802831][T13271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.815627][T13315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.846945][T13315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.862638][T13335] loop4: detected capacity change from 0 to 512 [ 262.869516][T13335] EXT4-fs: Ignoring removed orlov option [ 262.885024][T13315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.912757][T13315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.919611][T13335] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.941200][T13334] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3199'. [ 262.941252][T13335] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3197: corrupted in-inode xattr: e_value size too large [ 262.965205][T13335] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.965323][T13335] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3197: couldn't read orphan inode 15 (err -117) [ 262.968763][T13351] netlink: 'syz.0.3198': attribute type 27 has an invalid length. [ 262.974500][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 262.974517][ C1] EXT4-fs (loop4): initial error at time 2000000086: ext4_iget_extra_inode:5025: inode 15 [ 262.974545][ C1] EXT4-fs (loop4): last error at time 2000000086: ext4_iget_extra_inode:5025 [ 263.000754][T13353] loop1: detected capacity change from 0 to 128 [ 263.010483][ C1] : inode 15 [ 263.010713][T13335] loop4: lost filesystem error report for type 5 error -117 [ 263.032379][T13335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.073374][T13335] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 12: comm syz.4.3197: lblock 3 mapped to illegal pblock 12 (length 1) [ 263.094261][T13315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.107698][T13315] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.118393][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.125500][T10096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.154813][T13315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.170187][T13315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.183041][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.190139][T10096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.256857][T13315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.349633][T13315] veth0_vlan: entered promiscuous mode [ 263.361762][T13399] tipc: Started in network mode [ 263.366958][T13399] tipc: Node identity 6e7ee2cba79f, cluster identity 4711 [ 263.374987][T13399] tipc: Enabled bearer , priority 0 [ 263.382101][T13315] veth1_vlan: entered promiscuous mode [ 263.388889][T13399] syzkaller0: entered promiscuous mode [ 263.394465][T13399] syzkaller0: entered allmulticast mode [ 263.405000][T13399] tipc: Resetting bearer [ 263.411798][T13398] tipc: Resetting bearer [ 263.418554][T13398] tipc: Disabling bearer [ 263.429533][T13315] veth0_macvtap: entered promiscuous mode [ 263.436924][T13315] veth1_macvtap: entered promiscuous mode [ 263.446509][T13315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.457380][T13315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.471495][ T203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.492503][ T203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.503233][ T203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.512290][ T203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.523135][T13403] syzkaller0: entered promiscuous mode [ 263.528653][T13403] syzkaller0: entered allmulticast mode [ 263.537733][T13403] tipc: Enabled bearer , priority 0 [ 263.546228][T13402] tipc: Resetting bearer [ 263.554222][T13402] tipc: Disabling bearer [ 263.704255][T11285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.901409][T13418] syzkaller0: entered promiscuous mode [ 263.938398][T13418] syzkaller0: entered allmulticast mode [ 263.967782][T13418] 0: reclassify loop, rule prio 0, protocol 800 [ 264.402852][T13441] loop4: detected capacity change from 0 to 512 [ 264.409751][T13441] EXT4-fs: Ignoring removed orlov option [ 264.435343][T13441] EXT4-fs (loop4): 1 truncate cleaned up [ 264.442278][T13441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.675056][T13445] loop3: detected capacity change from 0 to 512 [ 264.730671][T13445] EXT4-fs: Ignoring removed orlov option [ 264.758487][T13445] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.775560][T13449] loop0: detected capacity change from 0 to 512 [ 264.784694][T13445] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.3221: corrupted in-inode xattr: e_value size too large [ 264.800006][T13445] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.803887][T13445] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3221: couldn't read orphan inode 15 (err -117) [ 264.810318][T13449] EXT4-fs: Ignoring removed orlov option [ 264.813061][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 264.836852][ C1] EXT4-fs (loop3): initial error at time 2000000088: ext4_iget_extra_inode:5025: inode 15 [ 264.846771][ C1] EXT4-fs (loop3): last error at time 2000000088: ext4_iget_extra_inode:5025: inode 15 [ 264.859072][T13449] EXT4-fs (loop0): 1 truncate cleaned up [ 264.860010][T13445] loop3: lost filesystem error report for type 5 error -117 [ 264.865589][T13445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.886499][T13449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.908434][T13445] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 12: comm syz.3.3221: lblock 3 mapped to illegal pblock 12 (length 1) [ 264.955715][T13315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.084018][T11285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.335052][T12849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.003263][T10098] ================================================================== [ 266.011386][T10098] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 266.018682][T10098] [ 266.021010][T10098] read-write to 0xffff8881087aab48 of 8 bytes by task 13470 on cpu 0: [ 266.029167][T10098] xas_clear_mark+0x91/0x180 [ 266.033775][T10098] __folio_start_writeback+0x257/0x370 [ 266.039242][T10098] __block_write_full_folio+0x53a/0x8f0 [ 266.044793][T10098] block_write_full_folio+0x2c1/0x2e0 [ 266.050184][T10098] blkdev_writepages+0x88/0x100 [ 266.055050][T10098] do_writepages+0x1c6/0x310 [ 266.059642][T10098] filemap_fdatawrite+0x100/0x140 [ 266.064676][T10098] sync_bdevs+0x1a2/0x260 [ 266.069006][T10098] __ia32_sys_sync+0x81/0xb0 [ 266.073596][T10098] x64_sys_call+0x2f3a/0x3020 [ 266.078268][T10098] do_syscall_64+0x12c/0x370 [ 266.082865][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.088746][T10098] [ 266.091053][T10098] read to 0xffff8881087aab48 of 8 bytes by task 10098 on cpu 1: [ 266.098664][T10098] xas_find_marked+0x213/0x620 [ 266.103411][T10098] filemap_get_folios_tag+0xfa/0x510 [ 266.108686][T10098] writeback_iter+0x4bb/0x830 [ 266.113364][T10098] blkdev_writepages+0xa7/0x100 [ 266.118210][T10098] do_writepages+0x1c6/0x310 [ 266.122804][T10098] __writeback_single_inode+0x80/0x860 [ 266.128269][T10098] writeback_sb_inodes+0x4fe/0xaf0 [ 266.133388][T10098] __writeback_inodes_wb+0x94/0x1a0 [ 266.138580][T10098] wb_writeback+0x272/0x5d0 [ 266.143079][T10098] wb_workfn+0x4fd/0x970 [ 266.147311][T10098] process_scheduled_works+0x4de/0x9e0 [ 266.152760][T10098] worker_thread+0x581/0x770 [ 266.157342][T10098] kthread+0x22a/0x280 [ 266.161398][T10098] ret_from_fork+0x150/0x360 [ 266.165984][T10098] ret_from_fork_asm+0x1a/0x30 [ 266.170744][T10098] [ 266.173053][T10098] value changed: 0xfffffffc00000000 -> 0xfffffff000000000 [ 266.180146][T10098] [ 266.182451][T10098] Reported by Kernel Concurrency Sanitizer on: [ 266.188606][T10098] CPU: 1 UID: 0 PID: 10098 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 266.198222][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.208262][T10098] Workqueue: writeback wb_workfn (flush-7:7) [ 266.214240][T10098] ================================================================== [ 266.328613][T13408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.758973][T10098] bridge_slave_1: left allmulticast mode [ 266.767626][T10098] bridge_slave_1: left promiscuous mode [ 266.773752][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.782510][T10098] bridge_slave_0: left allmulticast mode [ 266.789169][T10098] bridge_slave_0: left promiscuous mode [ 266.795227][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.853580][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.862919][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.872102][T10098] bond0 (unregistering): Released all slaves [ 266.911529][T10098] hsr_slave_0: left promiscuous mode [ 266.917197][T10098] hsr_slave_1: left promiscuous mode [ 266.923643][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.931382][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.969709][T10098] team0 (unregistering): Port device team_slave_1 removed [ 266.981359][T10098] team0 (unregistering): Port device team_slave_0 removed [ 267.304071][T10098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.363498][T10098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.422366][T10098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.462793][T10098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.717098][T10098] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.741723][T10098] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.793571][T10098] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.832810][T10098] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.895624][T10098] bridge_slave_1: left allmulticast mode [ 267.901422][T10098] bridge_slave_1: left promiscuous mode [ 267.907067][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.914858][T10098] bridge_slave_0: left allmulticast mode [ 267.920817][T10098] bridge_slave_0: left promiscuous mode [ 267.926468][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.934832][T10098] bridge_slave_1: left allmulticast mode [ 267.940597][T10098] bridge_slave_1: left promiscuous mode [ 267.946207][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.954122][T10098] bridge_slave_0: left allmulticast mode [ 267.959741][T10098] bridge_slave_0: left promiscuous mode [ 267.965643][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.973769][T10098] bridge_slave_1: left allmulticast mode [ 267.979442][T10098] bridge_slave_1: left promiscuous mode [ 267.985085][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.992861][T10098] bridge_slave_0: left allmulticast mode [ 267.998551][T10098] bridge_slave_0: left promiscuous mode [ 268.004347][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.122707][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.132517][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.142026][T10098] bond0 (unregistering): Released all slaves [ 268.202599][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.211876][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.230436][T10098] bond0 (unregistering): Released all slaves [ 268.237519][T10098] bond1 (unregistering): Released all slaves [ 268.332298][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.342013][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.351435][T10098] bond0 (unregistering): Released all slaves [ 268.396587][T10098] tipc: Left network mode [ 268.401170][T10098] tipc: Left network mode [ 268.405913][T10098] tipc: Left network mode [ 268.415301][T10098] hsr_slave_0: left promiscuous mode [ 268.421112][T10098] hsr_slave_1: left promiscuous mode [ 268.426718][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.435801][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.443826][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.451464][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.461177][T10098] hsr_slave_0: left promiscuous mode [ 268.466894][T10098] hsr_slave_1: left promiscuous mode [ 268.474237][T10098] hsr_slave_0: left promiscuous mode [ 268.480093][T10098] hsr_slave_1: left promiscuous mode [ 268.489283][T10098] veth1_macvtap: left promiscuous mode [ 268.494795][T10098] veth0_macvtap: left promiscuous mode [ 268.500349][T10098] veth1_vlan: left allmulticast mode [ 268.505615][T10098] veth1_vlan: left promiscuous mode [ 268.510849][T10098] veth0_vlan: left promiscuous mode [ 268.517082][T10098] veth1_macvtap: left promiscuous mode [ 268.523122][T10098] veth0_macvtap: left promiscuous mode [ 268.528639][T10098] veth1_vlan: left promiscuous mode [ 268.533854][T10098] veth0_vlan: left promiscuous mode [ 268.604247][T10098] team0 (unregistering): Port device macvlan1 removed [ 268.626067][T10098] team0 (unregistering): Port device team_slave_1 removed [ 268.635104][T10098] team0 (unregistering): Port device team_slave_0 removed [ 268.685205][T10098] team0 (unregistering): Port device team_slave_1 removed [ 268.695366][T10098] team0 (unregistering): Port device team_slave_0 removed [ 268.740734][T10098] team0 (unregistering): Port device team_slave_1 removed [ 268.749862][T10098] team0 (unregistering): Port device team_slave_0 removed [ 269.324320][T10098] IPVS: stop unused estimator thread 0... [ 269.384549][T10098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.438377][T10098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.497004][T10098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.532424][T10098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.590367][T10098] bridge_slave_1: left allmulticast mode [ 269.596025][T10098] bridge_slave_1: left promiscuous mode [ 269.602007][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.609701][T10098] bridge_slave_0: left allmulticast mode [ 269.615391][T10098] bridge_slave_0: left promiscuous mode [ 269.621122][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.751869][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.761708][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.771448][T10098] bond0 (unregistering): Released all slaves [ 269.818174][T10098] hsr_slave_0: left promiscuous mode [ 269.824186][T10098] hsr_slave_1: left promiscuous mode [ 269.830337][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.837772][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.845851][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.853703][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.864793][T10098] veth1_macvtap: left promiscuous mode [ 269.870458][T10098] veth0_macvtap: left promiscuous mode [ 269.876017][T10098] veth1_vlan: left promiscuous mode [ 269.881845][T10098] veth0_vlan: left promiscuous mode [ 269.938143][T10098] team0 (unregistering): Port device team_slave_1 removed [ 269.947275][T10098] team0 (unregistering): Port device team_slave_0 removed