last executing test programs: 4m20.218700154s ago: executing program 1 (id=856): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @multicast2}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 4m19.290522214s ago: executing program 1 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x700, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) writev(r6, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4m18.397019102s ago: executing program 1 (id=874): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000041300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000000000a0060803b", @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4m18.380644393s ago: executing program 1 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4000044, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 4m18.22871061s ago: executing program 1 (id=877): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f00000013c0)='./file0\x00', 0x0, 0x206002, 0x0) 4m18.22826405s ago: executing program 1 (id=878): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) 4m3.185997148s ago: executing program 32 (id=878): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) 3m50.356030621s ago: executing program 3 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) writev(r6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3m49.46103498s ago: executing program 3 (id=1189): socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@errors_remount}, {@resuid}, {@usrquota}, {@noinit_itable}, {@abort}, {@dax}, {@noacl}]}, 0x0, 0x5c0, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 3m48.474198133s ago: executing program 3 (id=1191): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r3, 0x0, 0x80, 0x8) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1, 0x1) 3m46.714485818s ago: executing program 3 (id=1236): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000dc0)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(0x0, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) fallocate(r0, 0x0, 0xbf5, 0x2000402) 3m46.632984332s ago: executing program 3 (id=1243): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c20f0, 0x0) 3m46.352128484s ago: executing program 3 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) 3m31.336956501s ago: executing program 33 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) 15.179496036s ago: executing program 4 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 15.07555359s ago: executing program 4 (id=3956): socket(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc2, 0x0, 0x7fff0005}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0x20800, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15.056625251s ago: executing program 4 (id=3957): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) connect$bt_sco(r6, &(0x7f0000000000), 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r8, &(0x7f0000000100)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x1, @b={0x9, 0x4, 0x1, 0x8, {0x8a, "88c08c7cf4689f9b651471ed785a978ad6d226f17046d6792012b5ee80186a91d349efe0d9eb202d6be78b1f545800dd8530b1e4d8aaa7b4b7c72b5ed2d8e8fb4af7f58c9ca84240f6854d38ea9ec3a8ca0fd013778fd377f69b4a8de2170c7b53c8fc319702758499418d6c9f0e0c9fe0975c9ba98e7793d89b2e7bcb7e270bcb43eee66e1630450079"}, 0x1}}, 0x93) write$nci(r8, &(0x7f0000000080)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x1, {0x1, 0x0, 0x1}}, 0x6) 13.94145354s ago: executing program 4 (id=3965): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 13.882263702s ago: executing program 4 (id=3968): io_uring_setup(0x3205, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x2}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 13.654278612s ago: executing program 4 (id=3974): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 13.613533274s ago: executing program 34 (id=3974): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) 3.273583739s ago: executing program 6 (id=4091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) r1 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/248, 0xf8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/109, 0x6d}], 0x1}, 0x8}], 0x2, 0x100, 0x0) 3.112522416s ago: executing program 6 (id=4096): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) syz_emit_ethernet(0x14, &(0x7f0000000140)=ANY=[], 0x0) 3.067891648s ago: executing program 6 (id=4099): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/41, 0x29) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2801, &(0x7f0000000300)=ANY=[], 0x25, 0x357, &(0x7f0000000280)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.579814739s ago: executing program 2 (id=4121): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 2.56494494s ago: executing program 7 (id=4122): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 2.533529561s ago: executing program 7 (id=4123): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000040000"], 0x50) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.487285563s ago: executing program 2 (id=4124): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) syz_emit_ethernet(0x14, &(0x7f0000000140)=ANY=[], 0x0) 2.486879253s ago: executing program 2 (id=4125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 2.368776468s ago: executing program 7 (id=4126): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) 2.08579284s ago: executing program 6 (id=4130): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240, 0x38) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 1.87498142s ago: executing program 0 (id=4133): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.87475051s ago: executing program 6 (id=4134): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r1, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7], 0x3c}}, 0x0) 1.843326791s ago: executing program 6 (id=4137): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) memfd_create(0x0, 0x3) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) tkill(r3, 0x13) 1.837040911s ago: executing program 0 (id=4138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 1.712007316s ago: executing program 0 (id=4139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.64203556s ago: executing program 0 (id=4140): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x40000000, 0xdd, 0x479c28ea, 0x1, 0x4, 0xb}) 1.407852009s ago: executing program 7 (id=4142): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00'}) socket$inet6(0x10, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) 1.307454244s ago: executing program 2 (id=4143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f19", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="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", 0x221}], 0x1}}], 0x2, 0x2090) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x2}], 0x1, 0x4020, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.015903166s ago: executing program 0 (id=4144): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x2) 842.839834ms ago: executing program 5 (id=4147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 807.837886ms ago: executing program 5 (id=4148): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 807.317735ms ago: executing program 5 (id=4149): syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xa06000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 654.585922ms ago: executing program 0 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 654.498182ms ago: executing program 35 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 547.901166ms ago: executing program 7 (id=4152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 477.28638ms ago: executing program 7 (id=4153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f0000000600)=""/6, 0x6}}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x9, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2d}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x3, 0x1, 0x8, 0x80, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000540)=""/124, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x5, 0x1}, 0x10, r2, r1, 0x0, &(0x7f0000000780)=[r3], 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x4, 0x5, 0x4d, 0x8, 0x0, 0xf4e, 0x20000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x4010, 0x2, 0x1, 0x2, 0x10000, 0x4, 0xa57d, 0x0, 0x4, 0x0, 0xf06}, 0x0, 0xd, r6, 0x8) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 446.125721ms ago: executing program 2 (id=4154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 353.819545ms ago: executing program 2 (id=4155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/41, 0x29) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2801, &(0x7f0000000300)=ANY=[], 0x25, 0x357, &(0x7f0000000280)="$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") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 254.08065ms ago: executing program 5 (id=4156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16}) tkill(r1, 0x7) 63.760688ms ago: executing program 5 (id=4157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 0s ago: executing program 5 (id=4158): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026", 0x7) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): l. Quota mode: writeback. [ 171.515792][ T9028] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.553298][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.205055][ T9047] loop5: detected capacity change from 0 to 1024 [ 172.211921][ T9047] EXT4-fs: Ignoring removed orlov option [ 172.222521][ T9047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.997641][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.091068][ T9073] syzkaller0: entered promiscuous mode [ 173.096603][ T9073] syzkaller0: entered allmulticast mode [ 173.193360][ T9080] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2034'. [ 173.265536][ T29] audit: type=1400 audit(1764199976.504:353): avc: denied { create } for pid=9079 comm="syz.2.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.326888][ T9092] loop6: detected capacity change from 0 to 128 [ 173.333505][ T9093] loop5: detected capacity change from 0 to 512 [ 173.339981][ T9092] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.352983][ T9092] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.362842][ T9093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.476907][ T9093] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.712085][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.211108][ T7414] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.343831][ T9124] netlink: 340 bytes leftover after parsing attributes in process `syz.6.2050'. [ 174.591023][ T29] audit: type=1400 audit(1764199977.824:354): avc: denied { getattr } for pid=9138 comm="syz.4.2057" path="socket:[21727]" dev="sockfs" ino=21727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.639108][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2058'. [ 174.701850][ T29] audit: type=1400 audit(1764199977.944:355): avc: denied { write } for pid=9144 comm="syz.6.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.891753][ T9153] netlink: 340 bytes leftover after parsing attributes in process `syz.6.2062'. [ 175.650021][ T9180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.986884][ T9185] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2075'. [ 176.083307][ T9187] loop6: detected capacity change from 0 to 512 [ 176.106562][ T9187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.166290][ T9187] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.250780][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.470347][ T9210] netlink: 'syz.5.2086': attribute type 10 has an invalid length. [ 176.521417][ T9217] netlink: 'syz.5.2086': attribute type 10 has an invalid length. [ 176.524477][ T9210] team0: Port device dummy0 added [ 176.553466][ T9217] team0: Port device dummy0 removed [ 176.562251][ T9217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.596262][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2090'. [ 176.606037][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2090'. [ 176.618041][ T9219] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.2090'. [ 176.774864][ T29] audit: type=1400 audit(1764199980.014:356): avc: denied { ioctl } for pid=9235 comm="syz.4.2097" path="socket:[21911]" dev="sockfs" ino=21911 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.815054][ T9236] netlink: 'syz.4.2097': attribute type 10 has an invalid length. [ 176.838027][ T9236] bond0: (slave bond_slave_0): Releasing backup interface [ 177.385426][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 178.512243][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 178.634008][ T9291] hub 2-0:1.0: USB hub found [ 178.639311][ T9291] hub 2-0:1.0: 8 ports detected [ 179.284350][ T9321] netlink: 'syz.4.2130': attribute type 10 has an invalid length. [ 179.330569][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.348880][ T9321] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.070886][ T9408] syzkaller0: entered promiscuous mode [ 180.076527][ T9408] syzkaller0: entered allmulticast mode [ 180.116337][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2166'. [ 180.915708][ T9462] loop6: detected capacity change from 0 to 512 [ 180.934470][ T9462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.947471][ T9462] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.090371][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.162971][ T9476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.766561][ T9529] loop5: detected capacity change from 0 to 512 [ 182.782756][ T9529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.795742][ T9529] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.849705][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.418803][ T9572] loop6: detected capacity change from 0 to 512 [ 183.458678][ T9572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.472549][ T9572] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.509806][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.831703][ T9596] syzkaller0: entered promiscuous mode [ 183.837255][ T9596] syzkaller0: entered allmulticast mode [ 184.703300][ T9635] syzkaller0: entered promiscuous mode [ 184.708832][ T9635] syzkaller0: entered allmulticast mode [ 185.214888][ T9657] loop5: detected capacity change from 0 to 512 [ 185.242789][ T9657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.255933][ T9657] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.523280][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.688986][ T9669] syzkaller0: entered promiscuous mode [ 185.694605][ T9669] syzkaller0: entered allmulticast mode [ 187.055343][ T9710] loop6: detected capacity change from 0 to 512 [ 187.073172][ T9710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.095072][ T9710] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.112705][ T9719] netlink: 'syz.4.2286': attribute type 2 has an invalid length. [ 187.120528][ T9719] netlink: 'syz.4.2286': attribute type 8 has an invalid length. [ 187.128492][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2286'. [ 187.162480][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.773026][ T9749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.780288][ T9749] IPv6: NLM_F_CREATE should be set when creating new route [ 188.531634][ T9762] loop0: detected capacity change from 0 to 512 [ 188.566713][ T9762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.627295][ T9762] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.711795][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.126463][ T9786] syzkaller0: entered promiscuous mode [ 189.132009][ T9786] syzkaller0: entered allmulticast mode [ 191.328554][ T9871] loop0: detected capacity change from 0 to 1024 [ 191.337374][ T9871] EXT4-fs: Ignoring removed orlov option [ 191.351341][ T9871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.429190][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.326632][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 192.407165][ T9934] loop0: detected capacity change from 0 to 512 [ 192.435670][ T9934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.458413][ T9934] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.564050][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.632744][ T9982] loop5: detected capacity change from 0 to 512 [ 193.723877][ T9982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.752665][ T9982] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.094546][ T9996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.144347][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.172089][T10031] loop6: detected capacity change from 0 to 1024 [ 195.178727][T10031] EXT4-fs: Ignoring removed orlov option [ 195.202940][T10031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.589181][T10043] loop5: detected capacity change from 0 to 512 [ 195.603992][T10043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.616877][T10043] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.681296][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.993968][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.891280][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2430'. [ 199.013913][T10155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.756359][T10175] loop6: detected capacity change from 0 to 512 [ 199.938616][T10175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.978224][T10175] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.085690][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.480707][T10219] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2471'. [ 201.588554][ T29] audit: type=1400 audit(1764200004.824:357): avc: denied { create } for pid=10250 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.613134][ T29] audit: type=1400 audit(1764200004.834:358): avc: denied { ioctl } for pid=10250 comm="syz.5.2483" path="socket:[25126]" dev="sockfs" ino=25126 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.638747][ T29] audit: type=1400 audit(1764200004.854:359): avc: denied { write } for pid=10250 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 202.060532][T10276] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2492'. [ 203.420780][T10303] loop0: detected capacity change from 0 to 512 [ 203.442325][T10299] hub 2-0:1.0: USB hub found [ 203.482042][T10299] hub 2-0:1.0: 8 ports detected [ 203.557569][T10303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.712363][T10303] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.848576][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.200503][T10364] loop5: detected capacity change from 0 to 512 [ 205.235676][T10364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.267090][T10364] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.643635][T10382] hub 2-0:1.0: USB hub found [ 205.648578][T10382] hub 2-0:1.0: 8 ports detected [ 205.665439][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.366198][T10427] loop5: detected capacity change from 0 to 512 [ 207.764572][T10427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.831645][T10427] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.014851][T10441] hub 2-0:1.0: USB hub found [ 208.019545][T10441] hub 2-0:1.0: 8 ports detected [ 208.046497][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.343191][T10469] loop5: detected capacity change from 0 to 512 [ 208.385897][T10469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.418601][T10469] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.480330][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.435211][ T29] audit: type=1400 audit(1764200016.674:360): avc: denied { read } for pid=10662 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.458564][T10668] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2636'. [ 214.785176][T10700] netlink: 'syz.5.2654': attribute type 21 has an invalid length. [ 215.760530][T10728] hub 2-0:1.0: USB hub found [ 215.765488][T10728] hub 2-0:1.0: 8 ports detected [ 215.782254][T10733] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.2666'. [ 217.107056][T10778] hub 2-0:1.0: USB hub found [ 217.112201][T10778] hub 2-0:1.0: 8 ports detected [ 218.941780][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2702'. [ 218.981988][T10835] loop5: detected capacity change from 0 to 128 [ 219.011446][T10835] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 219.075387][T10842] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 219.113132][T10835] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.654730][T10855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2711'. [ 219.913143][ T6334] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.297966][T10877] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 220.375652][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 220.447798][T10883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2723'. [ 221.905497][T10939] netlink: 'syz.5.2746': attribute type 1 has an invalid length. [ 222.467433][T10959] loop0: detected capacity change from 0 to 128 [ 222.475979][T10959] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 222.489117][T10959] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.349076][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.528396][T11001] syzkaller0: entered promiscuous mode [ 224.534024][T11001] syzkaller0: entered allmulticast mode [ 224.566698][T11014] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2773'. [ 224.657292][T11017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2773'. [ 224.737799][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2780'. [ 225.327797][T11043] hub 2-0:1.0: USB hub found [ 225.332590][T11043] hub 2-0:1.0: 8 ports detected [ 225.531429][T11051] hub 2-0:1.0: USB hub found [ 225.574333][T11051] hub 2-0:1.0: 8 ports detected [ 225.787547][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2791'. [ 225.814429][T11063] loop6: detected capacity change from 0 to 128 [ 225.822223][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2791'. [ 225.841473][T11063] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 225.866687][T11063] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.002155][T11069] syzkaller0: entered promiscuous mode [ 226.007706][T11069] syzkaller0: entered allmulticast mode [ 226.437959][T11098] hub 2-0:1.0: USB hub found [ 226.442870][T11098] hub 2-0:1.0: 8 ports detected [ 226.634977][T11101] hub 2-0:1.0: USB hub found [ 226.783484][T11101] hub 2-0:1.0: 8 ports detected [ 226.806082][ T7414] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.946350][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 226.963926][T11110] netlink: 'syz.6.2811': attribute type 1 has an invalid length. [ 227.998876][T11142] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 228.025459][T11145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2824'. [ 229.235660][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2838'. [ 229.418997][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2845'. [ 229.428556][T11203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2845'. [ 229.847166][T11211] hub 2-0:1.0: USB hub found [ 229.852073][T11211] hub 2-0:1.0: 8 ports detected [ 230.355381][T11219] syzkaller0: entered promiscuous mode [ 230.360942][T11219] syzkaller0: entered allmulticast mode [ 230.408783][T11231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2855'. [ 230.640771][T11246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2856'. [ 231.155837][T11254] capability: warning: `syz.4.2863' uses deprecated v2 capabilities in a way that may be insecure [ 231.621002][T11272] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2868'. [ 231.642556][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 231.791221][T11281] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 231.805662][ T2119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.885569][ T2119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.974496][T11290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2875'. [ 232.003780][ T2119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.046930][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2875'. [ 232.058867][T11262] chnl_net:caif_netlink_parms(): no params data found [ 232.083545][ T2119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.228711][T11262] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.235838][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.354365][T11262] bridge_slave_0: entered allmulticast mode [ 232.361421][T11262] bridge_slave_0: entered promiscuous mode [ 232.369151][T11262] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.376346][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.383645][T11262] bridge_slave_1: entered allmulticast mode [ 232.390302][T11262] bridge_slave_1: entered promiscuous mode [ 232.413635][T11262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.422963][ T2119] bridge_slave_1: left allmulticast mode [ 232.428659][ T2119] bridge_slave_1: left promiscuous mode [ 232.434490][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.451604][ T2119] bridge_slave_0: left allmulticast mode [ 232.457308][ T2119] bridge_slave_0: left promiscuous mode [ 232.463109][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.664087][ T2119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.675336][ T2119] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 232.692451][ T2119] bond0 (unregistering): Released all slaves [ 232.715508][T11262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.760563][T11314] syzkaller0: entered promiscuous mode [ 232.766255][T11314] syzkaller0: entered allmulticast mode [ 232.814077][ T2119] hsr_slave_0: left promiscuous mode [ 232.819905][ T2119] hsr_slave_1: left promiscuous mode [ 232.838344][ T2119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.845992][ T2119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.865874][ T2119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.873461][ T2119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.884424][ T2119] veth1_macvtap: left promiscuous mode [ 232.889965][ T2119] veth0_macvtap: left promiscuous mode [ 232.901353][ T2119] veth1_vlan: left promiscuous mode [ 232.906625][ T2119] veth0_vlan: left promiscuous mode [ 233.019238][ T2119] team0 (unregistering): Port device team_slave_1 removed [ 233.113628][T11262] team0: Port device team_slave_0 added [ 233.119435][T11329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2887'. [ 233.140545][T11262] team0: Port device team_slave_1 added [ 233.171319][T11332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2887'. [ 233.272177][T11262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.279196][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.305287][T11262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.376246][T11262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.383271][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.409227][T11262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.544636][ T2119] IPVS: stop unused estimator thread 0... [ 233.581238][T11262] hsr_slave_0: entered promiscuous mode [ 233.591009][T11262] hsr_slave_1: entered promiscuous mode [ 233.607805][T11262] debugfs: 'hsr0' already exists in 'hsr' [ 233.613652][T11262] Cannot create hsr debugfs directory [ 233.715784][T11364] netlink: 'syz.6.2901': attribute type 1 has an invalid length. [ 234.045136][T11262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.069516][T11262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.082618][ T29] audit: type=1400 audit(1764200037.314:361): avc: denied { listen } for pid=11376 comm="syz.5.2907" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.121225][T11262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.130156][T11262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.193978][T11262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.217530][T11262] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.248477][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.255686][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.273995][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.281189][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.416235][T11262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.426844][T11262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.548976][T11262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.651924][T11414] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 234.813668][T11262] veth0_vlan: entered promiscuous mode [ 234.844995][T11262] veth1_vlan: entered promiscuous mode [ 234.872567][T11262] veth0_macvtap: entered promiscuous mode [ 234.910277][T11262] veth1_macvtap: entered promiscuous mode [ 235.026758][T11262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.038063][T11262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.051728][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.092652][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.134112][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.160960][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.527816][T11455] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2928'. [ 235.825335][ T29] audit: type=1326 audit(1764200039.064:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 235.921172][ T29] audit: type=1326 audit(1764200039.064:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 235.944734][ T29] audit: type=1326 audit(1764200039.064:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862e16df90 code=0x7ffc0000 [ 235.968245][ T29] audit: type=1326 audit(1764200039.064:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 235.991789][ T29] audit: type=1326 audit(1764200039.064:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 236.015246][ T29] audit: type=1326 audit(1764200039.064:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 236.038582][ T29] audit: type=1326 audit(1764200039.064:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862e16f749 code=0x7ffc0000 [ 236.118698][T11461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2932'. [ 236.141520][T11461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2932'. [ 236.376046][T11451] Set syz1 is full, maxelem 65536 reached [ 236.555026][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2942'. [ 236.682816][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2941'. [ 237.640609][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 238.340713][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2959'. [ 238.907856][T11518] chnl_net:caif_netlink_parms(): no params data found [ 238.950236][T11553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2963'. [ 238.986192][T11553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2963'. [ 239.009752][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.016943][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.057501][T11518] bridge_slave_0: entered allmulticast mode [ 239.092052][T11563] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2967'. [ 239.162165][T11518] bridge_slave_0: entered promiscuous mode [ 239.169388][T11557] tipc: Started in network mode [ 239.174352][T11557] tipc: Node identity ac141441, cluster identity 4711 [ 239.181970][T11557] tipc: Enabled bearer , priority 10 [ 239.188396][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.195522][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.202767][T11518] bridge_slave_1: entered allmulticast mode [ 239.209393][T11518] bridge_slave_1: entered promiscuous mode [ 239.682357][ T2119] bond0 (unregistering): Released all slaves [ 239.701260][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.713269][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.737034][T11518] team0: Port device team_slave_0 added [ 239.746541][ T2119] hsr_slave_0: left promiscuous mode [ 239.752660][ T2119] hsr_slave_1: left promiscuous mode [ 240.033574][T11518] team0: Port device team_slave_1 added [ 240.083826][ T29] audit: type=1400 audit(1764200043.314:369): avc: denied { write } for pid=11581 comm="syz.4.2973" name="fib_trie" dev="proc" ino=4026532528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 240.117150][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.124168][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.150289][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.162584][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.169561][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.195694][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.206607][ T3401] tipc: Node number set to 2886997057 [ 240.232990][T11518] hsr_slave_0: entered promiscuous mode [ 240.239095][T11518] hsr_slave_1: entered promiscuous mode [ 240.245198][T11518] debugfs: 'hsr0' already exists in 'hsr' [ 240.250979][T11518] Cannot create hsr debugfs directory [ 240.415143][ T2119] IPVS: stop unused estimator thread 0... [ 240.577104][T11611] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.683569][T11611] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.768105][T11611] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.806674][T11518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.833953][T11518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.855423][T11611] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.893447][T11518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.912017][T11518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.039763][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.071115][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.103001][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.111736][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.126723][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.297978][ T29] audit: type=1400 audit(1764200044.534:370): avc: denied { bind } for pid=11656 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.362096][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3003'. [ 241.567521][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.580950][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.588133][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.660393][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.668157][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.979323][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.095380][T11684] hub 2-0:1.0: USB hub found [ 242.100102][T11684] hub 2-0:1.0: 8 ports detected [ 242.470806][T11518] veth0_vlan: entered promiscuous mode [ 242.489132][T11518] veth1_vlan: entered promiscuous mode [ 242.519115][T11518] veth0_macvtap: entered promiscuous mode [ 242.544197][T11518] veth1_macvtap: entered promiscuous mode [ 242.567443][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.603657][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.630177][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.653917][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.738937][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.757926][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.822800][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3010'. [ 242.868190][T11699] 9pnet_fd: Insufficient options for proto=fd [ 242.870436][ T29] audit: type=1400 audit(1764200046.104:371): avc: denied { mounton } for pid=11695 comm="syz.2.2952" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.945861][T11705] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3013'. [ 243.978196][T11728] loop5: detected capacity change from 0 to 128 [ 243.993722][T11728] FAT-fs (loop5): error, clusters badly computed (4 != 3) [ 243.993863][ T29] audit: type=1400 audit(1764200047.224:372): avc: denied { mount } for pid=11727 comm="syz.5.3022" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 244.000938][T11728] FAT-fs (loop5): Filesystem has been set read-only [ 244.001067][T11728] FAT-fs (loop5): error, clusters badly computed (5 != 4) [ 244.037103][T11728] FAT-fs (loop5): error, clusters badly computed (6 != 5) [ 244.108966][ T29] audit: type=1400 audit(1764200047.344:373): avc: denied { unmount } for pid=6334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 245.274646][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.321082][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.876332][ T29] audit: type=1400 audit(1764200049.114:374): avc: denied { connect } for pid=11775 comm="syz.2.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.995292][ T29] audit: type=1400 audit(1764200049.234:375): avc: denied { create } for pid=11775 comm="syz.2.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.014944][ T29] audit: type=1400 audit(1764200049.234:376): avc: denied { ioctl } for pid=11775 comm="syz.2.3041" path="socket:[30808]" dev="sockfs" ino=30808 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.041151][ T29] audit: type=1400 audit(1764200049.284:377): avc: denied { ioctl } for pid=11775 comm="syz.2.3041" path="socket:[30121]" dev="sockfs" ino=30121 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.093544][T11786] hub 2-0:1.0: USB hub found [ 246.098341][T11786] hub 2-0:1.0: 8 ports detected [ 246.176786][ T29] audit: type=1400 audit(1764200049.414:378): avc: denied { write } for pid=11775 comm="syz.2.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.101553][T11802] syzkaller0: entered promiscuous mode [ 247.107171][T11802] syzkaller0: entered allmulticast mode [ 247.287129][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.355082][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.446947][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3054'. [ 247.456621][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3054'. [ 247.712448][T11832] loop0: detected capacity change from 0 to 1024 [ 247.719420][T11832] EXT4-fs: Ignoring removed nobh option [ 247.725031][T11832] EXT4-fs: Ignoring removed bh option [ 247.744057][T11832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.763595][T11828] hub 2-0:1.0: USB hub found [ 247.768351][T11828] hub 2-0:1.0: 8 ports detected [ 247.788249][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.334790][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3066'. [ 248.344532][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3066'. [ 248.857570][T11866] loop0: detected capacity change from 0 to 128 [ 248.876393][T11866] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 248.919568][T11866] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.317170][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'. [ 249.428592][T11882] tipc: Started in network mode [ 249.433582][T11882] tipc: Node identity ac141441, cluster identity 4711 [ 249.516037][T11882] tipc: Enabled bearer , priority 10 [ 249.598854][T11884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3078'. [ 249.653275][T11884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3078'. [ 249.742902][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.899705][T11890] loop4: detected capacity change from 0 to 8192 [ 250.214594][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.405407][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.558721][T11921] hub 2-0:1.0: USB hub found [ 250.563511][T11921] hub 2-0:1.0: 8 ports detected [ 250.789187][ T52] bond0: (slave netdevsim1): Releasing backup interface [ 250.962513][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.400493][T11894] chnl_net:caif_netlink_parms(): no params data found [ 251.411750][ T3422] tipc: Node number set to 2886997057 [ 251.423983][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.477784][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3095'. [ 251.517483][T11941] loop5: detected capacity change from 0 to 1024 [ 251.524409][T11941] EXT4-fs: Ignoring removed nobh option [ 251.530138][T11941] EXT4-fs: Ignoring removed bh option [ 251.544591][T11941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.599189][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.606479][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.614025][T11894] bridge_slave_0: entered allmulticast mode [ 252.096873][T11894] bridge_slave_0: entered promiscuous mode [ 252.116843][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.130158][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.137426][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.150120][T11894] bridge_slave_1: entered allmulticast mode [ 252.156936][T11894] bridge_slave_1: entered promiscuous mode [ 252.197715][ T29] audit: type=1400 audit(1764200055.434:379): avc: denied { bind } for pid=11949 comm="syz.2.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.217559][ T29] audit: type=1400 audit(1764200055.434:380): avc: denied { getopt } for pid=11949 comm="syz.2.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.235522][T11960] loop5: detected capacity change from 0 to 2048 [ 252.251820][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.261184][ T52] geneve0: left allmulticast mode [ 252.266232][ T52] geneve0: left promiscuous mode [ 252.271709][ T52] bridge0: port 1(geneve0) entered disabled state [ 252.339629][ T52] bond0 (unregistering): Released all slaves [ 252.351782][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.379864][T11894] team0: Port device team_slave_0 added [ 252.387027][T11894] team0: Port device team_slave_1 added [ 252.406671][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.413711][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.439782][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.457936][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.465108][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.491144][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.511894][ T52] hsr_slave_0: left promiscuous mode [ 252.517638][ T52] hsr_slave_1: left promiscuous mode [ 252.563970][ T29] audit: type=1400 audit(1764200055.804:381): avc: denied { module_load } for pid=11970 comm="syz.2.3105" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 252.712142][T11975] loop4: detected capacity change from 0 to 1024 [ 252.739021][T11975] EXT4-fs: Ignoring removed nobh option [ 252.744714][T11975] EXT4-fs: Ignoring removed bh option [ 252.785972][T11975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.861579][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.988604][T11981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3108'. [ 253.005660][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3108'. [ 253.031688][T11894] hsr_slave_0: entered promiscuous mode [ 253.038596][T11894] hsr_slave_1: entered promiscuous mode [ 253.052177][T11894] debugfs: 'hsr0' already exists in 'hsr' [ 253.057934][T11894] Cannot create hsr debugfs directory [ 254.131234][T12004] netlink: 'syz.5.3114': attribute type 1 has an invalid length. [ 254.205568][T12012] loop4: detected capacity change from 0 to 1024 [ 254.213560][T12012] EXT4-fs: Ignoring removed nobh option [ 254.219182][T12012] EXT4-fs: Ignoring removed bh option [ 254.244194][T12012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.264506][ T52] IPVS: stop unused estimator thread 0... [ 254.302030][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.349981][T11894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.359651][T11894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.368849][T11894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.377917][T11894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.932781][ T29] audit: type=1400 audit(1764200058.174:382): avc: denied { getopt } for pid=12032 comm="syz.4.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.959456][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.974486][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.985197][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.992366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.023534][T11894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.033960][T11894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.571687][T12043] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 255.592256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.599355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.708818][T12056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3130'. [ 255.719854][T12056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3130'. [ 255.744814][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.020209][T11894] veth0_vlan: entered promiscuous mode [ 256.043658][T11894] veth1_vlan: entered promiscuous mode [ 256.168379][T11894] veth0_macvtap: entered promiscuous mode [ 256.182982][T11894] veth1_macvtap: entered promiscuous mode [ 256.194630][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.310275][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.133137][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.146750][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.165130][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.198154][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.629349][T12103] loop0: detected capacity change from 0 to 1024 [ 257.693742][T12103] EXT4-fs: Ignoring removed nobh option [ 257.699382][T12103] EXT4-fs: Ignoring removed bh option [ 257.783616][T12103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.967207][ T29] audit: type=1400 audit(1764200061.154:383): avc: denied { getopt } for pid=12113 comm="syz.2.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.006073][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.584396][T12121] netlink: 'syz.6.3151': attribute type 1 has an invalid length. [ 259.799899][T12138] hub 2-0:1.0: USB hub found [ 259.804917][T12138] hub 2-0:1.0: 8 ports detected [ 260.045198][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 260.228617][T12161] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3162'. [ 260.793024][T12163] sctp: [Deprecated]: syz.6.3160 (pid 12163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.793024][T12163] Use struct sctp_sack_info instead [ 261.069377][T12163] loop6: detected capacity change from 0 to 512 [ 261.107365][T12163] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 261.116480][T12163] EXT4-fs (loop6): orphan cleanup on readonly fs [ 261.128900][ T29] audit: type=1400 audit(1764200064.364:384): avc: denied { connect } for pid=12159 comm="syz.5.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.149622][T12163] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3160: bad orphan inode 15 [ 261.153465][ T29] audit: type=1400 audit(1764200064.384:385): avc: denied { ioctl } for pid=12159 comm="syz.5.3164" path="socket:[31870]" dev="sockfs" ino=31870 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.160215][T12163] ext4_test_bit(bit=14, block=18) = 1 [ 261.190255][T12163] is_bad_inode(inode)=0 [ 261.194446][T12163] NEXT_ORPHAN(inode)=1023 [ 261.198831][T12163] max_ino=32 [ 261.202053][T12163] i_nlink=0 [ 261.208646][T12163] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3160: bg 0: block 161: padding at end of block bitmap is not set [ 261.223235][T12163] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 261.232982][T12163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 261.489417][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.888730][T12192] hub 2-0:1.0: USB hub found [ 261.893557][T12192] hub 2-0:1.0: 8 ports detected [ 261.950384][T12194] loop4: detected capacity change from 0 to 256 [ 262.181169][T12194] FAT-fs (loop4): codepage cp936 not found [ 262.378683][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3177'. [ 262.440372][T12205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3177'. [ 262.482640][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'. [ 263.092252][T12204] loop2: detected capacity change from 0 to 32768 [ 263.127950][T12220] hub 2-0:1.0: USB hub found [ 263.132811][T12220] hub 2-0:1.0: 8 ports detected [ 263.195570][T12204] loop2: p1 p3 < p5 p6 > [ 263.227435][T12216] xt_CT: No such helper "netbios-ns" [ 263.237576][T12204] loop2: p5 start 117448704 is beyond EOD, truncated [ 263.518667][T12230] loop6: detected capacity change from 0 to 1024 [ 263.545311][T12230] EXT4-fs: Ignoring removed nobh option [ 263.550955][T12230] EXT4-fs: Ignoring removed bh option [ 263.635530][T12230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.881002][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.054989][ T29] audit: type=1400 audit(1764200068.294:386): avc: denied { name_bind } for pid=12254 comm="syz.6.3191" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 265.187711][T12259] hub 2-0:1.0: USB hub found [ 265.192667][T12259] hub 2-0:1.0: 8 ports detected [ 269.553841][ T29] audit: type=1400 audit(1764200072.794:387): avc: denied { write } for pid=12301 comm="syz.6.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.927118][T12352] loop5: detected capacity change from 0 to 512 [ 270.937829][T12350] loop2: detected capacity change from 0 to 1024 [ 270.958051][T12352] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.3220: invalid fast symlink length 39 [ 270.988604][T12357] loop4: detected capacity change from 0 to 512 [ 270.995725][T12357] EXT4-fs: Ignoring removed i_version option [ 271.001755][T12357] EXT4-fs: Ignoring removed bh option [ 271.008002][T12352] EXT4-fs (loop5): get root inode failed [ 271.013717][T12352] EXT4-fs (loop5): mount failed [ 271.021333][T12350] EXT4-fs: Ignoring removed nobh option [ 271.026927][T12350] EXT4-fs: Ignoring removed bh option [ 271.041265][T12357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.054592][T12357] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.452866][T12350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.566713][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.601002][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.985035][T12381] loop5: detected capacity change from 0 to 1024 [ 271.994294][T12381] EXT4-fs: dax option not supported [ 273.291686][T12403] loop6: detected capacity change from 0 to 1024 [ 273.302628][T12403] EXT4-fs: Ignoring removed nobh option [ 273.308325][T12403] EXT4-fs: Ignoring removed bh option [ 273.334360][T12403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.381256][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.636848][T12427] sctp: [Deprecated]: syz.5.3238 (pid 12427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.636848][T12427] Use struct sctp_sack_info instead [ 274.271416][T12438] syzkaller0: entered promiscuous mode [ 274.277017][T12438] syzkaller0: entered allmulticast mode [ 274.375687][T12450] loop5: detected capacity change from 0 to 1024 [ 274.390751][T12450] EXT4-fs: Ignoring removed nobh option [ 274.396397][T12450] EXT4-fs: Ignoring removed bh option [ 274.518603][T12450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.522043][T12456] sctp: [Deprecated]: syz.0.3252 (pid 12456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.522043][T12456] Use struct sctp_sack_info instead [ 274.564165][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.586865][T12487] sctp: [Deprecated]: syz.4.3260 (pid 12487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.586865][T12487] Use struct sctp_sack_info instead [ 276.292625][T12494] syzkaller0: entered promiscuous mode [ 276.298402][T12494] syzkaller0: entered allmulticast mode [ 276.363278][T12496] loop6: detected capacity change from 0 to 1024 [ 276.370091][T12496] EXT4-fs: Ignoring removed nobh option [ 276.375734][T12496] EXT4-fs: Ignoring removed bh option [ 276.390418][T12498] loop0: detected capacity change from 0 to 256 [ 276.404756][T12496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.481898][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.527582][ T29] audit: type=1400 audit(1764200079.764:388): avc: denied { getopt } for pid=12505 comm="syz.4.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.761620][T12540] loop0: detected capacity change from 0 to 1024 [ 277.763680][T12538] syzkaller0: entered promiscuous mode [ 277.768700][T12540] EXT4-fs: Ignoring removed nobh option [ 277.773513][T12538] syzkaller0: entered allmulticast mode [ 277.784786][T12540] EXT4-fs: Ignoring removed bh option [ 277.802592][T12540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.829783][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.878744][ T29] audit: type=1400 audit(1764200081.114:389): avc: denied { listen } for pid=12549 comm="syz.4.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.954673][T12555] loop0: detected capacity change from 0 to 128 [ 277.963223][T12555] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 278.427514][ T29] audit: type=1400 audit(1764200081.654:390): avc: denied { accept } for pid=12549 comm="syz.4.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.449287][T12555] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.558375][ T29] audit: type=1400 audit(1764200081.794:391): avc: denied { setattr } for pid=12554 comm="syz.0.3286" path="/31/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.719180][ T29] audit: type=1400 audit(1764200081.874:392): avc: denied { ioctl } for pid=12554 comm="syz.0.3286" path="/31/file1/file1" dev="loop0" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.743733][ T9] IPVS: starting estimator thread 0... [ 278.829762][T11894] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.871000][T12567] IPVS: using max 2352 ests per chain, 117600 per kthread [ 278.901631][T12579] loop2: detected capacity change from 0 to 1024 [ 278.916961][T12579] EXT4-fs: Ignoring removed nobh option [ 278.922677][T12579] EXT4-fs: Ignoring removed bh option [ 278.955415][T12579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.217531][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.761887][T12602] loop5: detected capacity change from 0 to 256 [ 280.768329][ T2967] IPVS: starting estimator thread 0... [ 280.880698][T12631] sctp: [Deprecated]: syz.5.3309 (pid 12631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.880698][T12631] Use struct sctp_sack_info instead [ 281.241111][T12624] IPVS: using max 2208 ests per chain, 110400 per kthread [ 281.334167][T12641] ip6erspan0: entered allmulticast mode [ 282.455728][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3326'. [ 283.004431][T12675] loop2: detected capacity change from 0 to 32768 [ 283.155280][T12675] loop2: p1 p3 < p5 p6 > [ 283.177316][T12675] loop2: p5 start 117448704 is beyond EOD, truncated [ 283.641522][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3338'. [ 283.702332][T12704] loop6: detected capacity change from 0 to 512 [ 283.772935][T12704] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.3339: invalid fast symlink length 39 [ 283.827045][T12704] EXT4-fs (loop6): get root inode failed [ 283.832778][T12704] EXT4-fs (loop6): mount failed [ 284.710064][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3349'. [ 284.999405][T12744] loop4: detected capacity change from 0 to 512 [ 285.006344][T12744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.023785][T12744] EXT4-fs (loop4): 1 truncate cleaned up [ 285.033100][T12744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.102849][T12751] EXT4-fs (loop4): shut down requested (1) [ 285.126340][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.253511][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 285.654950][T12785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.662220][T12785] IPv6: NLM_F_CREATE should be set when creating new route [ 285.669494][T12785] IPv6: NLM_F_CREATE should be set when creating new route [ 285.677334][T12785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.995160][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3373'. [ 287.438081][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 287.905929][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.914554][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.062799][T12852] hub 2-0:1.0: USB hub found [ 289.067539][T12852] hub 2-0:1.0: 8 ports detected [ 289.209370][T12860] loop0: detected capacity change from 0 to 4096 [ 289.218979][T12860] EXT4-fs: test_dummy_encryption option not supported [ 289.437693][T12870] process 'syz.0.3400' launched '/dev/fd/6' with NULL argv: empty string added [ 289.520912][ T29] audit: type=1400 audit(1764200092.674:393): avc: denied { execute } for pid=12869 comm="syz.0.3400" dev="tmpfs" ino=1419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.542185][ T29] audit: type=1400 audit(1764200092.744:394): avc: denied { execute_no_trans } for pid=12869 comm="syz.0.3400" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.609998][T12881] loop4: detected capacity change from 0 to 2048 [ 289.672492][T12881] GPT:first_usable_lbas don't match. [ 289.677845][T12881] GPT:34 != 290 [ 289.681366][T12881] GPT: Use GNU Parted to correct GPT errors. [ 289.687398][T12881] loop4: p1 p2 p3 [ 290.022265][T12886] hub 2-0:1.0: USB hub found [ 290.027284][T12886] hub 2-0:1.0: 8 ports detected [ 290.397876][ T29] audit: type=1326 audit(1764200093.634:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.6.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 290.462646][ T29] audit: type=1326 audit(1764200093.664:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.6.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 290.486234][ T29] audit: type=1326 audit(1764200093.664:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.6.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 290.509757][ T29] audit: type=1326 audit(1764200093.664:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.6.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 290.533232][ T29] audit: type=1326 audit(1764200093.664:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12895 comm="syz.6.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 291.920956][T12921] syzkaller0: entered promiscuous mode [ 291.926509][T12921] syzkaller0: entered allmulticast mode [ 293.331284][T12957] sctp: [Deprecated]: syz.6.3430 (pid 12957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.331284][T12957] Use struct sctp_sack_info instead [ 293.361310][T12960] loop4: detected capacity change from 0 to 512 [ 293.411816][T12960] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.3431: invalid fast symlink length 39 [ 293.425350][T12960] EXT4-fs (loop4): get root inode failed [ 293.431096][T12960] EXT4-fs (loop4): mount failed [ 293.504475][T12973] syzkaller0: entered promiscuous mode [ 293.510043][T12973] syzkaller0: entered allmulticast mode [ 294.602258][T13002] sctp: [Deprecated]: syz.4.3446 (pid 13002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.602258][T13002] Use struct sctp_sack_info instead [ 294.964403][T13025] sctp: [Deprecated]: syz.4.3458 (pid 13025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.964403][T13025] Use struct sctp_sack_info instead [ 295.738980][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3469'. [ 295.794882][T13065] sctp: [Deprecated]: syz.5.3471 (pid 13065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.794882][T13065] Use struct sctp_sack_info instead [ 296.470790][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3481'. [ 296.509115][T13092] loop6: detected capacity change from 0 to 2048 [ 296.523715][T13096] sctp: [Deprecated]: syz.4.3483 (pid 13096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.523715][T13096] Use struct sctp_sack_info instead [ 296.541826][T13092] GPT:first_usable_lbas don't match. [ 296.547141][T13092] GPT:34 != 290 [ 296.550622][T13092] GPT: Use GNU Parted to correct GPT errors. [ 296.556777][T13092] loop6: p1 p2 p3 [ 297.646421][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 297.836166][T13135] sctp: [Deprecated]: syz.5.3496 (pid 13135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.836166][T13135] Use struct sctp_sack_info instead [ 299.519289][T13166] loop0: detected capacity change from 0 to 4096 [ 299.535227][T13166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.583197][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.079500][T13182] tipc: Started in network mode [ 300.084440][T13182] tipc: Node identity 46, cluster identity 4711 [ 300.090785][T13182] tipc: Node number set to 70 [ 300.559620][T13201] hub 2-0:1.0: USB hub found [ 300.564551][T13201] hub 2-0:1.0: 8 ports detected [ 301.211157][ T2967] IPVS: starting estimator thread 0... [ 301.301268][T13213] IPVS: using max 2400 ests per chain, 120000 per kthread [ 301.519644][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.528819][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.991912][T13239] capability: warning: `syz.2.3530' uses 32-bit capabilities (legacy support in use) [ 302.596942][T13251] hub 2-0:1.0: USB hub found [ 302.601884][T13251] hub 2-0:1.0: 8 ports detected [ 303.601090][ T9] IPVS: starting estimator thread 0... [ 303.700989][T13266] IPVS: using max 2496 ests per chain, 124800 per kthread [ 303.956053][T13283] loop6: detected capacity change from 0 to 512 [ 303.964344][T13283] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.3546: invalid fast symlink length 39 [ 303.981096][T13283] EXT4-fs (loop6): get root inode failed [ 303.986784][T13283] EXT4-fs (loop6): mount failed [ 304.527364][T13297] hub 2-0:1.0: USB hub found [ 304.532181][T13297] hub 2-0:1.0: 8 ports detected [ 304.877630][T13301] loop5: detected capacity change from 0 to 4096 [ 304.900794][T13301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.932322][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.951762][T13313] sctp: [Deprecated]: syz.2.3558 (pid 13313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.951762][T13313] Use struct sctp_sack_info instead [ 305.162675][T13328] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 305.262781][T13331] loop5: detected capacity change from 0 to 512 [ 305.272551][T13331] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 305.281803][T13331] EXT4-fs (loop5): orphan cleanup on readonly fs [ 305.288472][T13331] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3561: bad orphan inode 15 [ 305.299028][T13331] ext4_test_bit(bit=14, block=18) = 1 [ 305.304681][T13331] is_bad_inode(inode)=0 [ 305.308841][T13331] NEXT_ORPHAN(inode)=1023 [ 305.313586][T13331] max_ino=32 [ 305.316792][T13331] i_nlink=0 [ 305.323147][T13331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3561: bg 0: block 161: padding at end of block bitmap is not set [ 305.338013][T13331] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 305.348052][T13331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.914992][T13339] loop2: detected capacity change from 0 to 512 [ 305.941703][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.952183][T13339] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.3565: invalid fast symlink length 39 [ 305.977105][T13339] EXT4-fs (loop2): get root inode failed [ 305.982878][T13339] EXT4-fs (loop2): mount failed [ 306.029768][T13345] tipc: Enabled bearer , priority 0 [ 306.045822][T13345] syzkaller0: entered promiscuous mode [ 306.051415][T13345] syzkaller0: entered allmulticast mode [ 306.084397][T13345] tipc: Resetting bearer [ 306.121318][T13344] tipc: Resetting bearer [ 306.132627][T13344] tipc: Disabling bearer [ 306.416620][T13356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.449440][T13356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.963911][T13364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.972798][T13364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.492382][T13376] usb usb4: usbfs: process 13376 (syz.0.3577) did not claim interface 0 before use [ 308.837097][T13401] hub 2-0:1.0: USB hub found [ 308.842192][T13401] hub 2-0:1.0: 8 ports detected [ 309.342215][T13412] usb usb4: usbfs: process 13412 (syz.5.3588) did not claim interface 0 before use [ 309.386876][ T29] audit: type=1400 audit(1764200112.624:400): avc: denied { mounton } for pid=13413 comm="syz.0.3589" path="/proc/269/task" dev="proc" ino=35774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 309.447879][T13423] sctp: [Deprecated]: syz.0.3593 (pid 13423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.447879][T13423] Use struct sctp_sack_info instead [ 309.700374][T13439] loop6: detected capacity change from 0 to 512 [ 309.706796][ T29] audit: type=1326 audit(1764200112.934:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 309.730571][ T29] audit: type=1326 audit(1764200112.934:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 309.754198][ T29] audit: type=1326 audit(1764200112.934:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a1cc0f749 code=0x7ffc0000 [ 309.777651][ T29] audit: type=1326 audit(1764200112.934:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a1cc0f783 code=0x7ffc0000 [ 309.800983][ T29] audit: type=1326 audit(1764200112.934:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a1cc0e1ff code=0x7ffc0000 [ 309.824286][ T29] audit: type=1326 audit(1764200112.934:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2a1cc0f7d7 code=0x7ffc0000 [ 309.847729][ T29] audit: type=1326 audit(1764200112.934:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a1cc0df90 code=0x7ffc0000 [ 309.871129][ T29] audit: type=1326 audit(1764200112.934:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a1cc0f34b code=0x7ffc0000 [ 310.056242][T13439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.066733][ T29] audit: type=1326 audit(1764200113.154:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a1cc0e3aa code=0x7ffc0000 [ 310.081753][T13439] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.122306][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.723482][T13459] sctp: [Deprecated]: syz.5.3605 (pid 13459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.723482][T13459] Use struct sctp_sack_info instead [ 310.832000][T13460] usb usb4: usbfs: process 13460 (syz.0.3604) did not claim interface 0 before use [ 311.776425][T13488] loop5: detected capacity change from 0 to 4096 [ 311.798340][T13493] sctp: [Deprecated]: syz.4.3617 (pid 13493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.798340][T13493] Use struct sctp_sack_info instead [ 311.831928][T13488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.995552][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.618510][T13507] syzkaller0: entered promiscuous mode [ 312.624124][T13507] syzkaller0: entered allmulticast mode [ 312.721377][T13511] usb usb4: usbfs: process 13511 (syz.6.3622) did not claim interface 0 before use [ 312.867366][T13532] loop4: detected capacity change from 0 to 1024 [ 312.877657][T13532] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 312.888838][T13532] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 312.896946][T13532] EXT4-fs (loop4): orphan cleanup on readonly fs [ 312.904165][T13532] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.3630: Freeing blocks not in datazone - block = 0, count = 4096 [ 312.918522][T13532] EXT4-fs (loop4): 1 orphan inode deleted [ 312.924973][T13532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.957138][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.053698][T13550] loop2: detected capacity change from 0 to 4096 [ 314.167354][T13550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.207418][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.584765][T13583] loop0: detected capacity change from 0 to 2048 [ 314.614095][T13583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.635633][T13583] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.782779][T13590] syzkaller0: entered promiscuous mode [ 314.788432][T13590] syzkaller0: entered allmulticast mode [ 314.815468][T13589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3649: bg 0: block 345: padding at end of block bitmap is not set [ 314.830379][T13589] EXT4-fs (loop0): Remounting filesystem read-only [ 314.837112][ T12] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 8: len 8: ext4_ext_map_blocks returned -30 [ 314.918694][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.028873][T13603] loop4: detected capacity change from 0 to 1024 [ 315.040414][T13603] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.051681][T13603] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 315.075937][T13603] EXT4-fs (loop4): orphan cleanup on readonly fs [ 315.105260][T13603] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.3654: Freeing blocks not in datazone - block = 0, count = 4096 [ 315.121695][T13603] EXT4-fs (loop4): 1 orphan inode deleted [ 315.134784][T13603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.251806][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.583206][T13626] syzkaller0: entered promiscuous mode [ 315.588880][T13626] syzkaller0: entered allmulticast mode [ 316.413809][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.422509][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.627016][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 316.627034][ T29] audit: type=1400 audit(1764200119.864:422): avc: denied { write } for pid=13654 comm="syz.5.3673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 316.937547][T13674] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 317.112606][T13678] tipc: Enabled bearer , priority 0 [ 317.251712][T13678] tipc: Resetting bearer [ 317.281250][T13679] syzkaller0: entered promiscuous mode [ 317.351440][T13677] tipc: Resetting bearer [ 317.368984][T13677] tipc: Disabling bearer [ 318.603468][T13720] tipc: Enabled bearer , priority 0 [ 318.640763][T13720] syzkaller0: entered promiscuous mode [ 318.646381][T13720] syzkaller0: entered allmulticast mode [ 318.695205][T13720] tipc: Resetting bearer [ 318.724247][T13715] tipc: Resetting bearer [ 318.731581][T13715] tipc: Disabling bearer [ 318.740599][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3699'. [ 318.805546][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3699'. [ 318.905290][ T29] audit: type=1400 audit(1764200122.144:423): avc: denied { associate } for pid=13731 comm="syz.4.3700" name="cpuset.effective_mems" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 320.076498][T13752] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 320.237483][ T29] audit: type=1400 audit(1764200123.474:424): avc: denied { setopt } for pid=13765 comm="syz.6.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.257678][ T29] audit: type=1400 audit(1764200123.474:425): avc: denied { read } for pid=13765 comm="syz.6.3711" path="socket:[37509]" dev="sockfs" ino=37509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.305401][T13771] loop6: detected capacity change from 0 to 256 [ 320.658778][T13792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.675371][T13773] chnl_net:caif_netlink_parms(): no params data found [ 320.681083][T13792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.709398][T11903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.786317][T13793] hub 2-0:1.0: USB hub found [ 320.791138][T13793] hub 2-0:1.0: 8 ports detected [ 320.873662][T11903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.014398][T11903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.082411][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.089541][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.094204][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.097086][T13773] bridge_slave_0: entered allmulticast mode [ 321.105728][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.111700][T13773] bridge_slave_0: entered promiscuous mode [ 321.130494][T11903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.141888][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.148963][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.156190][T13773] bridge_slave_1: entered allmulticast mode [ 321.162628][T13773] bridge_slave_1: entered promiscuous mode [ 321.195618][T13801] syzkaller0: entered promiscuous mode [ 321.201196][T13801] syzkaller0: entered allmulticast mode [ 321.215508][T13773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.226730][T13773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.269384][T13773] team0: Port device team_slave_0 added [ 321.276583][T13773] team0: Port device team_slave_1 added [ 321.304482][T13773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.311520][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.337467][T13773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.349061][T13773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.356155][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.382312][T13773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.456135][T13816] tipc: Enabled bearer , priority 0 [ 321.466456][T13816] syzkaller0: entered promiscuous mode [ 321.472002][T13816] syzkaller0: entered allmulticast mode [ 321.497677][T13773] hsr_slave_0: entered promiscuous mode [ 321.504076][T13773] hsr_slave_1: entered promiscuous mode [ 321.510024][T13773] debugfs: 'hsr0' already exists in 'hsr' [ 321.515874][T13773] Cannot create hsr debugfs directory [ 321.521833][T11903] bridge_slave_1: left allmulticast mode [ 321.527618][T11903] bridge_slave_1: left promiscuous mode [ 321.533354][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.619412][T13823] hub 2-0:1.0: USB hub found [ 321.624369][T13823] hub 2-0:1.0: 8 ports detected [ 321.933774][T11903] bridge_slave_0: left allmulticast mode [ 321.939649][T11903] bridge_slave_0: left promiscuous mode [ 321.945424][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.034958][T11903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.044921][T11903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.054613][T11903] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 322.064435][T11903] bond0 (unregistering): Released all slaves [ 322.073225][T13816] tipc: Resetting bearer [ 322.095700][T13815] tipc: Resetting bearer [ 322.104684][T13815] tipc: Disabling bearer [ 322.124525][T11903] tipc: Disabling bearer [ 322.129899][T11903] tipc: Left network mode [ 322.156432][T11903] hsr_slave_0: left promiscuous mode [ 322.162235][T11903] hsr_slave_1: left promiscuous mode [ 322.167973][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.175555][T11903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.183252][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.190673][T11903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.200416][T11903] veth1_macvtap: left promiscuous mode [ 322.206242][T11903] veth0_macvtap: left promiscuous mode [ 322.212119][T11903] veth1_vlan: left promiscuous mode [ 322.218089][T11903] veth0_vlan: left promiscuous mode [ 322.299686][T13854] loop4: detected capacity change from 0 to 512 [ 322.317899][T13854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.331290][T13854] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.378252][T11903] team0 (unregistering): Port device team_slave_1 removed [ 322.388375][T11903] team0 (unregistering): Port device team_slave_0 removed [ 322.433347][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.471981][T13841] syzkaller0: entered promiscuous mode [ 322.477492][T13841] syzkaller0: entered allmulticast mode [ 322.492940][T13860] loop6: detected capacity change from 0 to 2048 [ 322.526122][T13865] loop4: detected capacity change from 0 to 1024 [ 322.533269][T13860] GPT:first_usable_lbas don't match. [ 322.534225][T13865] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.538592][T13860] GPT:34 != 290 [ 322.538664][T13860] GPT: Use GNU Parted to correct GPT errors. [ 322.538773][T13860] loop6: p1 p2 p3 [ 322.549941][T13865] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 322.572620][T13865] EXT4-fs (loop4): orphan cleanup on readonly fs [ 322.579500][T13865] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.3741: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.593370][T13865] EXT4-fs (loop4): 1 orphan inode deleted [ 322.599543][T13865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.668127][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.499362][ T29] audit: type=1400 audit(1764200126.094:426): avc: denied { create } for pid=13867 comm="syz.2.3742" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.520229][ T29] audit: type=1400 audit(1764200126.094:427): avc: denied { write } for pid=13867 comm="syz.2.3742" name="file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.542650][ T29] audit: type=1400 audit(1764200126.094:428): avc: denied { open } for pid=13867 comm="syz.2.3742" path="/133/file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.566009][ T29] audit: type=1400 audit(1764200126.094:429): avc: denied { ioctl } for pid=13867 comm="syz.2.3742" path="/133/file0" dev="tmpfs" ino=698 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.666411][T13886] hub 2-0:1.0: USB hub found [ 323.671252][T13886] hub 2-0:1.0: 8 ports detected [ 323.733214][ T29] audit: type=1400 audit(1764200126.974:430): avc: denied { unlink } for pid=11518 comm="syz-executor" name="file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.875828][T11903] IPVS: stop unused estimator thread 0... [ 323.984251][T13773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.022208][T13773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.037338][T13773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.046828][T13773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.139374][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.160742][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.173937][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.181054][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.201414][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.208509][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.279476][T13773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.289872][T13773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.350344][T13910] loop6: detected capacity change from 0 to 2048 [ 324.372274][T13910] GPT:first_usable_lbas don't match. [ 324.377779][T13910] GPT:34 != 290 [ 324.381518][T13910] GPT: Use GNU Parted to correct GPT errors. [ 324.387799][T13910] loop6: p1 p2 p3 [ 324.433459][T13923] syzkaller0: entered promiscuous mode [ 324.439006][T13923] syzkaller0: entered allmulticast mode [ 324.455813][T13773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.473451][T13927] loop0: detected capacity change from 0 to 1024 [ 324.503804][T13927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 324.516511][T13927] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.531727][T13927] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.3758: lblock 3 mapped to illegal pblock 3 (length 3) [ 324.551991][T13927] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 324.564327][T13927] EXT4-fs (loop0): This should not happen!! Data will be lost [ 324.564327][T13927] [ 324.591517][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.752806][T13773] veth0_vlan: entered promiscuous mode [ 324.760992][T13773] veth1_vlan: entered promiscuous mode [ 324.778994][T13773] veth0_macvtap: entered promiscuous mode [ 324.786712][T13773] veth1_macvtap: entered promiscuous mode [ 324.798855][T13773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.810798][T13773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.898284][T11903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.964945][T11903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.023987][T11903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.099083][T13975] syzkaller0: entered promiscuous mode [ 325.104745][T13975] syzkaller0: entered allmulticast mode [ 325.116448][T11903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.487749][T13989] loop6: detected capacity change from 0 to 512 [ 325.500197][T13989] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 325.517924][T13989] EXT4-fs (loop6): orphan cleanup on readonly fs [ 325.525094][T13989] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3776: bad orphan inode 15 [ 325.538956][T13989] ext4_test_bit(bit=14, block=18) = 1 [ 325.544404][T13989] is_bad_inode(inode)=0 [ 325.548588][T13989] NEXT_ORPHAN(inode)=1023 [ 325.553103][T13989] max_ino=32 [ 325.556308][T13989] i_nlink=0 [ 325.560262][T13989] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3776: bg 0: block 161: padding at end of block bitmap is not set [ 325.574888][T13989] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 325.584892][T13989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 325.676104][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3781'. [ 325.952933][T14006] syzkaller0: entered promiscuous mode [ 325.958595][T14006] syzkaller0: entered allmulticast mode [ 326.212497][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.270391][ T29] audit: type=1400 audit(1764200129.504:431): avc: denied { unmount } for pid=11894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 326.377811][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.388414][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.548873][T14039] syzkaller0: entered promiscuous mode [ 326.554497][T14039] syzkaller0: entered allmulticast mode [ 326.816257][T14048] loop4: detected capacity change from 0 to 4096 [ 326.825033][T14048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.841313][T14046] loop6: detected capacity change from 0 to 512 [ 326.848386][T14046] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 326.857307][T14046] EXT4-fs (loop6): orphan cleanup on readonly fs [ 326.863965][T14046] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3799: bad orphan inode 15 [ 326.874238][T14046] ext4_test_bit(bit=14, block=18) = 1 [ 326.875461][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.879756][T14046] is_bad_inode(inode)=0 [ 326.892888][T14046] NEXT_ORPHAN(inode)=1023 [ 326.897293][T14046] max_ino=32 [ 326.900557][T14046] i_nlink=0 [ 326.903984][T14046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3799: bg 0: block 161: padding at end of block bitmap is not set [ 326.918678][T14046] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 326.928252][T14046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 327.125514][T14067] syzkaller0: entered promiscuous mode [ 327.131084][T14067] syzkaller0: entered allmulticast mode [ 327.258957][T14079] loop0: detected capacity change from 0 to 1024 [ 327.278182][T14079] EXT4-fs: Ignoring removed orlov option [ 327.290840][T14079] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 327.296964][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3806'. [ 327.312693][T14082] loop4: detected capacity change from 0 to 128 [ 327.324732][T14079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.353956][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.353956][T11903] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 327.387902][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.387902][T11903] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 327.432817][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.432817][T11903] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 327.467308][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.467308][T11903] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 327.510328][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.510328][T11903] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 327.524490][T14082] syz.4.3815: attempt to access beyond end of device [ 327.524490][T14082] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 327.539246][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.539246][T11903] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 327.553894][T14082] syz.4.3815: attempt to access beyond end of device [ 327.553894][T14082] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 327.567589][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.567589][T11903] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 327.582394][T11903] kworker/u8:8: attempt to access beyond end of device [ 327.582394][T11903] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 327.596800][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.660757][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.753921][T14099] loop6: detected capacity change from 0 to 512 [ 327.767164][T14099] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.3820: invalid fast symlink length 39 [ 327.795369][T14099] EXT4-fs (loop6): get root inode failed [ 327.801227][T14099] EXT4-fs (loop6): mount failed [ 327.817654][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 328.470660][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3828'. [ 328.485136][ T29] audit: type=1400 audit(1764200131.724:432): avc: denied { bind } for pid=14127 comm="syz.6.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.508866][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3831'. [ 328.668120][T14131] loop2: detected capacity change from 0 to 512 [ 328.857327][T14134] hub 2-0:1.0: USB hub found [ 328.862274][T14134] hub 2-0:1.0: 8 ports detected [ 329.083266][T14131] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 329.101990][T14131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 329.108983][T14131] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3830: bad orphan inode 15 [ 329.120095][T14131] ext4_test_bit(bit=14, block=18) = 1 [ 329.125525][T14131] is_bad_inode(inode)=0 [ 329.129721][T14131] NEXT_ORPHAN(inode)=1023 [ 329.134085][T14131] max_ino=32 [ 329.137291][T14131] i_nlink=0 [ 329.162756][T14131] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3830: bg 0: block 161: padding at end of block bitmap is not set [ 329.192911][T14140] rdma_op ffff88811d5f3580 conn xmit_rdma 0000000000000000 [ 329.250798][T14142] loop5: detected capacity change from 0 to 4096 [ 329.283044][T14142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.418224][T13773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.453788][T14146] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3837'. [ 329.519539][T14131] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 329.529331][T14131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 329.696631][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.719043][T14165] loop2: detected capacity change from 0 to 512 [ 329.726754][T14165] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.3845: invalid fast symlink length 39 [ 329.758521][T14165] EXT4-fs (loop2): get root inode failed [ 329.764345][T14165] EXT4-fs (loop2): mount failed [ 329.778599][T14168] 9pnet_virtio: no channels available for device [ 329.857189][T14179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.879300][T14179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.963242][T14184] vhci_hcd: invalid port number 96 [ 329.968402][T14184] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 329.975486][ T29] audit: type=1400 audit(1764200133.204:433): avc: denied { map } for pid=14181 comm="syz.4.3852" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 330.286816][T14200] loop2: detected capacity change from 0 to 128 [ 330.325005][T14200] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.372913][T14200] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.420068][T14200] EXT4-fs (loop2): shut down requested (0) [ 330.440950][ T29] audit: type=1400 audit(1764200133.654:434): avc: denied { append } for pid=14199 comm="syz.2.3859" path="/154/mnt/blkio.bfq.io_queued" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 330.518758][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.534691][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.548961][T11518] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.776327][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 330.876748][T14218] netlink: 'syz.6.3865': attribute type 12 has an invalid length. [ 330.936394][T14224] netlink: 'syz.6.3865': attribute type 12 has an invalid length. [ 331.046631][T14230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.155989][T14230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.612038][ T3422] IPVS: starting estimator thread 0... [ 331.701043][T14239] IPVS: using max 2352 ests per chain, 117600 per kthread [ 333.604569][T14290] tipc: Started in network mode [ 333.609487][T14290] tipc: Node identity eec22c256c6, cluster identity 4711 [ 333.616610][T14290] tipc: Enabled bearer , priority 0 [ 333.721957][T14298] syzkaller0: entered promiscuous mode [ 333.727514][T14298] syzkaller0: entered allmulticast mode [ 333.932812][T14287] tipc: Resetting bearer [ 333.951253][T14287] tipc: Disabling bearer [ 333.996329][T14307] loop4: detected capacity change from 0 to 1024 [ 334.003189][T14307] EXT4-fs: Ignoring removed orlov option [ 334.010298][T14307] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 334.023749][T14307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.205913][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.575045][T14321] hub 2-0:1.0: USB hub found [ 334.579883][T14321] hub 2-0:1.0: 8 ports detected [ 334.858164][T14320] loop4: detected capacity change from 0 to 4096 [ 334.908962][T14320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.982726][T11262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.348605][T14350] xt_CT: No such helper "netbios-ns" [ 335.791701][T14350] loop0: detected capacity change from 0 to 32768 [ 335.861872][T14350] loop0: p1 p3 < p5 p6 > [ 335.911987][T14350] loop0: p5 start 117448704 is beyond EOD, truncated [ 336.122182][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.132831][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.466325][T14379] hub 2-0:1.0: USB hub found [ 336.471267][T14379] hub 2-0:1.0: 8 ports detected [ 336.693942][T14381] netlink: 'syz.6.3924': attribute type 10 has an invalid length. [ 336.706454][T14381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.715139][T14381] team0: Port device bond0 added [ 336.969675][T14387] loop5: detected capacity change from 0 to 4096 [ 337.296516][T14387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.343802][T13773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.746095][T14399] tipc: Enabled bearer , priority 0 [ 337.754993][T14399] syzkaller0: entered promiscuous mode [ 337.760682][T14399] syzkaller0: entered allmulticast mode [ 337.771465][T14399] tipc: Resetting bearer [ 337.778127][T14397] tipc: Resetting bearer [ 337.788789][T14397] tipc: Disabling bearer [ 337.877031][T14413] loop5: detected capacity change from 0 to 1024 [ 337.884081][T14413] EXT4-fs: Ignoring removed nobh option [ 337.926176][T14413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.980638][T13773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.489816][T14437] loop0: detected capacity change from 0 to 4096 [ 338.536575][T14442] loop4: detected capacity change from 0 to 128 [ 338.542166][T14437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.565124][T14442] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 338.572370][T14442] FAT-fs (loop4): Filesystem has been set read-only [ 338.587824][T14442] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 338.595586][T14442] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 338.737566][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.426638][T14470] loop2: detected capacity change from 0 to 4096 [ 339.511837][T14470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.794914][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.776771][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3973'. [ 341.051160][T14518] syzkaller0: entered promiscuous mode [ 341.056670][T14518] syzkaller0: entered allmulticast mode [ 341.401434][T14519] chnl_net:caif_netlink_parms(): no params data found [ 341.463295][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.470449][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.478750][T14519] bridge_slave_0: entered allmulticast mode [ 341.486777][T14519] bridge_slave_0: entered promiscuous mode [ 341.494892][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.502223][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.509905][T14519] bridge_slave_1: entered allmulticast mode [ 341.517035][T14519] bridge_slave_1: entered promiscuous mode [ 341.548613][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.566134][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.597386][T14519] team0: Port device team_slave_0 added [ 341.605529][T14519] team0: Port device team_slave_1 added [ 341.623192][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.630283][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.656271][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.667897][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.674962][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.700950][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.760580][T14519] hsr_slave_0: entered promiscuous mode [ 341.767112][T14519] hsr_slave_1: entered promiscuous mode [ 341.773209][T14519] debugfs: 'hsr0' already exists in 'hsr' [ 341.778973][T14519] Cannot create hsr debugfs directory [ 342.418376][T14568] syzkaller0: entered promiscuous mode [ 342.424039][T14568] syzkaller0: entered allmulticast mode [ 342.590769][T14519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.623362][T14576] loop0: detected capacity change from 0 to 512 [ 342.638389][T14519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.672923][T14519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.691848][T14519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.704055][T14576] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 342.727409][T14576] EXT4-fs (loop0): orphan cleanup on readonly fs [ 342.743434][T14576] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3989: bad orphan inode 15 [ 342.754266][T14576] ext4_test_bit(bit=14, block=18) = 1 [ 342.759682][T14576] is_bad_inode(inode)=0 [ 342.762331][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.764111][T14576] NEXT_ORPHAN(inode)=1023 [ 342.775077][T14576] max_ino=32 [ 342.778288][T14576] i_nlink=0 [ 342.783366][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.792705][T14589] loop5: detected capacity change from 0 to 4096 [ 342.799297][T14589] EXT4-fs: test_dummy_encryption option not supported [ 342.801238][T14576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3989: bg 0: block 161: padding at end of block bitmap is not set [ 342.835281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.840458][T14576] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 342.842450][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.851880][T14576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 342.861245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.877269][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.978993][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.052772][T14573] syz.0.3989 (14573) used greatest stack depth: 9976 bytes left [ 343.190314][T14519] veth0_vlan: entered promiscuous mode [ 343.200188][T14519] veth1_vlan: entered promiscuous mode [ 343.233908][T14519] veth0_macvtap: entered promiscuous mode [ 343.241420][T14519] veth1_macvtap: entered promiscuous mode [ 343.253318][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.268890][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.278051][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.377107][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.394689][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.466720][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.476329][ T29] audit: type=1400 audit(1764200146.684:435): avc: denied { mount } for pid=14519 comm="syz-executor" name="/" dev="gadgetfs" ino=4680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 343.537797][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.694932][T14621] syzkaller0: entered promiscuous mode [ 343.700461][T14621] syzkaller0: entered allmulticast mode [ 343.715042][T14626] loop0: detected capacity change from 0 to 1024 [ 343.722681][T14626] EXT4-fs: Ignoring removed orlov option [ 343.728795][T14626] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 343.754101][T14626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.810659][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.104890][T14654] loop0: detected capacity change from 0 to 512 [ 344.112438][T14654] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 344.122011][T14654] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.128744][T14654] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4010: bad orphan inode 15 [ 344.139009][T14654] ext4_test_bit(bit=14, block=18) = 1 [ 344.144429][T14654] is_bad_inode(inode)=0 [ 344.148655][T14654] NEXT_ORPHAN(inode)=1023 [ 344.153085][T14654] max_ino=32 [ 344.156310][T14654] i_nlink=0 [ 344.159712][T14654] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4010: bg 0: block 161: padding at end of block bitmap is not set [ 344.174469][T14654] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 344.184494][T14654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 344.726618][T14661] loop5: detected capacity change from 0 to 1024 [ 344.733881][T14661] EXT4-fs: Ignoring removed orlov option [ 344.759589][T14661] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 344.788784][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.816711][T14661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.914547][T13773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.923705][T14668] syzkaller0: entered promiscuous mode [ 344.929239][T14668] syzkaller0: entered allmulticast mode [ 345.265259][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4030'. [ 345.288084][T14702] loop0: detected capacity change from 0 to 512 [ 345.346859][T14702] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 345.482956][T14702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 345.530930][T14702] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4027: bad orphan inode 15 [ 345.551788][T14702] ext4_test_bit(bit=14, block=18) = 1 [ 345.557217][T14702] is_bad_inode(inode)=0 [ 345.561468][T14702] NEXT_ORPHAN(inode)=1023 [ 345.565811][T14702] max_ino=32 [ 345.569049][T14702] i_nlink=0 [ 345.579061][T14702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4027: bg 0: block 161: padding at end of block bitmap is not set [ 345.611141][T14702] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 345.632677][T14702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 345.670491][T14714] loop5: detected capacity change from 0 to 256 [ 345.912736][T14721] loop6: detected capacity change from 0 to 512 [ 345.968572][T14721] msdos: Bad value for 'dmask' [ 345.974315][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.976487][T14719] syzkaller0: entered promiscuous mode [ 345.989112][T14719] syzkaller0: entered allmulticast mode [ 346.064587][T14728] loop6: detected capacity change from 0 to 4096 [ 346.076447][T14728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.096810][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4042'. [ 346.121299][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.286207][T14748] netlink: 'syz.0.4047': attribute type 12 has an invalid length. [ 346.414122][T14753] loop2: detected capacity change from 0 to 512 [ 346.421521][T14753] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 346.430801][T14753] EXT4-fs (loop2): orphan cleanup on readonly fs [ 346.437591][T14753] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4049: bad orphan inode 15 [ 346.473846][T14753] ext4_test_bit(bit=14, block=18) = 1 [ 346.479302][T14753] is_bad_inode(inode)=0 [ 346.483533][T14753] NEXT_ORPHAN(inode)=1023 [ 346.487913][T14753] max_ino=32 [ 346.491142][T14753] i_nlink=0 [ 346.578758][T14753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4049: bg 0: block 161: padding at end of block bitmap is not set [ 346.712825][T14753] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 346.798200][T14753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 346.934862][T14761] syzkaller0: entered promiscuous mode [ 346.940383][T14761] syzkaller0: entered allmulticast mode [ 347.151509][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.619273][T14779] hub 2-0:1.0: USB hub found [ 347.624015][T14779] hub 2-0:1.0: 8 ports detected [ 348.283773][T14785] loop6: detected capacity change from 0 to 4096 [ 348.300413][ T29] audit: type=1400 audit(1764200151.534:436): avc: denied { map } for pid=14786 comm="syz.0.4060" path="socket:[41443]" dev="sockfs" ino=41443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 348.348885][T14785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.381216][T14793] netlink: 'syz.0.4064': attribute type 12 has an invalid length. [ 348.516432][ T7414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.058506][T14818] loop7: detected capacity change from 0 to 512 [ 349.067501][T14818] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 349.121823][T14818] EXT4-fs (loop7): orphan cleanup on readonly fs [ 349.135844][T14818] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4066: bad orphan inode 15 [ 349.157236][T14818] ext4_test_bit(bit=14, block=18) = 1 [ 349.162685][T14818] is_bad_inode(inode)=0 [ 349.166864][T14818] NEXT_ORPHAN(inode)=1023 [ 349.171211][T14818] max_ino=32 [ 349.174439][T14818] i_nlink=0 [ 349.195520][T14818] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4066: bg 0: block 161: padding at end of block bitmap is not set [ 349.215365][T14818] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 349.237238][T14822] lo speed is unknown, defaulting to 1000 [ 349.243118][T14822] lo speed is unknown, defaulting to 1000 [ 349.249122][T14822] lo speed is unknown, defaulting to 1000 [ 349.255490][T14822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 349.262985][T14822] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 349.328832][T14818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 349.341629][T14822] lo speed is unknown, defaulting to 1000 [ 349.347925][T14822] lo speed is unknown, defaulting to 1000 [ 349.354177][T14822] lo speed is unknown, defaulting to 1000 [ 349.360407][T14822] lo speed is unknown, defaulting to 1000 [ 349.366671][T14822] lo speed is unknown, defaulting to 1000 [ 349.372889][T14822] lo speed is unknown, defaulting to 1000 [ 349.379581][T14822] lo speed is unknown, defaulting to 1000 [ 349.496256][T14830] hub 2-0:1.0: USB hub found [ 349.501229][T14830] hub 2-0:1.0: 8 ports detected [ 349.953034][T14846] loop5: detected capacity change from 0 to 256 [ 349.974968][T14519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.005851][ T29] audit: type=1400 audit(1764200153.244:437): avc: denied { read } for pid=14845 comm="syz.6.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.242187][T14879] IPv6: Can't replace route, no match found [ 351.370943][T14891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4098'. [ 351.417758][T14897] loop6: detected capacity change from 0 to 256 [ 351.433497][T14896] pim6reg1: entered promiscuous mode [ 351.438844][T14896] pim6reg1: entered allmulticast mode [ 351.467161][T14900] loop0: detected capacity change from 0 to 512 [ 351.481560][T14900] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 351.504658][T14900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.514422][T14900] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4094: bad orphan inode 15 [ 351.534815][T14900] ext4_test_bit(bit=14, block=18) = 1 [ 351.540274][T14900] is_bad_inode(inode)=0 [ 351.544464][T14900] NEXT_ORPHAN(inode)=1023 [ 351.548807][T14900] max_ino=32 [ 351.552088][T14900] i_nlink=0 [ 351.568025][T14900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4094: bg 0: block 161: padding at end of block bitmap is not set [ 351.590894][T14900] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 351.602886][T14900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 351.609946][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4110'. [ 351.652655][T14924] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4112'. [ 351.661752][T14922] loop2: detected capacity change from 0 to 4096 [ 351.679344][T14922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.712845][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.799230][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4118'. [ 351.864796][T14946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4122'. [ 352.159290][T11894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.542552][T14974] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4134'. [ 353.036009][T14989] loop0: detected capacity change from 0 to 512 [ 353.080532][T14994] loop5: detected capacity change from 0 to 256 [ 353.090530][T14989] EXT4-fs: Ignoring removed bh option [ 353.115380][T14989] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 353.192005][T14989] EXT4-fs (loop0): 1 truncate cleaned up [ 353.198244][T14989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.261777][T14989] lo speed is unknown, defaulting to 1000 [ 353.290358][T15000] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1868854125 (only 1 groups) [ 353.406453][T11894] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 353.418526][ T29] audit: type=1400 audit(1764200156.644:438): avc: denied { rmdir } for pid=11894 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.461454][T11894] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 353.615474][T15011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.624021][T15011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.692874][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.705027][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.753892][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.793982][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.844642][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.855719][T15013] lo speed is unknown, defaulting to 1000 [ 353.924962][ T12] bridge_slave_1: left allmulticast mode [ 353.930719][ T12] bridge_slave_1: left promiscuous mode [ 353.936433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.944670][ T12] bridge_slave_0: left allmulticast mode [ 353.950366][ T12] bridge_slave_0: left promiscuous mode [ 353.956060][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.985380][T15029] loop2: detected capacity change from 0 to 1024 [ 353.992508][T15029] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.005050][T15029] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 354.013659][T15029] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.020184][T15029] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.4154: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.035538][T15029] EXT4-fs (loop2): 1 orphan inode deleted [ 354.042208][T15029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.063475][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.072682][T11518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.082105][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.092085][ T12] bond0 (unregistering): Released all slaves [ 354.103127][T15013] chnl_net:caif_netlink_parms(): no params data found [ 354.123497][ T12] tipc: Left network mode [ 354.137906][ T12] hsr_slave_0: left promiscuous mode [ 354.144332][ T12] hsr_slave_1: left promiscuous mode [ 354.150024][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.157464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.167022][T15038] loop2: detected capacity change from 0 to 256 [ 354.173960][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.181388][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.192922][ T12] veth1_macvtap: left promiscuous mode [ 354.199065][ T12] veth0_macvtap: left promiscuous mode [ 354.204690][ T12] veth1_vlan: left promiscuous mode [ 354.210014][ T12] veth0_vlan: left promiscuous mode [ 354.292202][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.304122][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.383775][T15013] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.390887][T15013] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.399213][T15013] bridge_slave_0: entered allmulticast mode [ 354.413248][T15046] loop5: detected capacity change from 0 to 1024 [ 354.420407][T15046] EXT4-fs: Ignoring removed oldalloc option [ 354.426462][T15046] EXT4-fs: Ignoring removed bh option [ 354.432755][T15013] bridge_slave_0: entered promiscuous mode [ 354.439891][T15013] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.447011][T15013] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.454791][T15013] bridge_slave_1: entered allmulticast mode [ 354.461735][T15013] bridge_slave_1: entered promiscuous mode [ 354.474700][T15046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.494576][T15013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.505761][T15013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.541688][T15013] team0: Port device team_slave_0 added [ 354.552062][T15013] team0: Port device team_slave_1 added [ 354.597783][T15013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.604829][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.630805][T15013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.652969][T15013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.660005][T15013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.686077][T15013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.708829][ T12] IPVS: stop unused estimator thread 0... [ 354.755087][T15013] hsr_slave_0: entered promiscuous mode [ 354.762053][T15013] hsr_slave_1: entered promiscuous mode [ 354.768088][T15013] debugfs: 'hsr0' already exists in 'hsr' [ 354.773894][T15013] Cannot create hsr debugfs directory [ 354.781709][T15049] ================================================================== [ 354.789827][T15049] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 354.798111][T15049] [ 354.800451][T15049] write to 0xffff888106f235c0 of 4 bytes by task 15046 on cpu 1: [ 354.808180][T15049] writeback_single_inode+0x150/0x3f0 [ 354.813578][T15049] sync_inode_metadata+0x5b/0x90 [ 354.818549][T15049] generic_buffers_fsync_noflush+0xd9/0x120 [ 354.824474][T15049] ext4_sync_file+0x1ab/0x690 [ 354.829178][T15049] vfs_fsync_range+0x10d/0x130 [ 354.833978][T15049] ext4_buffered_write_iter+0x34f/0x3c0 [ 354.839549][T15049] ext4_file_write_iter+0x387/0xf60 [ 354.844766][T15049] iter_file_splice_write+0x666/0xa60 [ 354.850165][T15049] direct_splice_actor+0x156/0x2a0 [ 354.855302][T15049] splice_direct_to_actor+0x312/0x680 [ 354.860696][T15049] do_splice_direct+0xda/0x150 [ 354.865486][T15049] do_sendfile+0x380/0x650 [ 354.869936][T15049] __x64_sys_sendfile64+0x105/0x150 [ 354.875158][T15049] x64_sys_call+0x2bb4/0x3000 [ 354.879846][T15049] do_syscall_64+0xd2/0x200 [ 354.884361][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.890267][T15049] [ 354.892597][T15049] read to 0xffff888106f235c0 of 4 bytes by task 15049 on cpu 0: [ 354.900234][T15049] __mark_inode_dirty+0x191/0x750 [ 354.905279][T15049] mark_buffer_dirty+0x133/0x210 [ 354.910243][T15049] block_write_end+0x12d/0x210 [ 354.915022][T15049] ext4_write_end+0x134/0x730 [ 354.919724][T15049] ext4_da_write_end+0x65/0x800 [ 354.924603][T15049] generic_perform_write+0x312/0x490 [ 354.929901][T15049] ext4_buffered_write_iter+0x1ee/0x3c0 [ 354.935474][T15049] ext4_file_write_iter+0x387/0xf60 [ 354.940689][T15049] iter_file_splice_write+0x666/0xa60 [ 354.946080][T15049] direct_splice_actor+0x156/0x2a0 [ 354.951223][T15049] splice_direct_to_actor+0x312/0x680 [ 354.956633][T15049] do_splice_direct+0xda/0x150 [ 354.961423][T15049] do_sendfile+0x380/0x650 [ 354.965875][T15049] __x64_sys_sendfile64+0x105/0x150 [ 354.971113][T15049] x64_sys_call+0x2bb4/0x3000 [ 354.975815][T15049] do_syscall_64+0xd2/0x200 [ 354.980343][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.986260][T15049] [ 354.988606][T15049] value changed: 0x00001050 -> 0x00000040 [ 354.994341][T15049] [ 354.996671][T15049] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.002857][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.5.4158 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.014263][T15049] Tainted: [W]=WARN [ 355.018086][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.028153][T15049] ================================================================== [ 355.051085][ T29] audit: type=1400 audit(1764200158.274:439): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[608]" dev="pipefs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 355.161331][T15013] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.181615][T15013] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 355.190826][T15013] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.204303][T15013] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.541615][ T88] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.604067][ T88] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.654386][T15046] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.683878][ T88] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.734178][ T88] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.795223][ T88] bridge_slave_1: left allmulticast mode [ 355.800947][ T88] bridge_slave_1: left promiscuous mode [ 355.806602][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.814937][ T88] bridge_slave_0: left allmulticast mode [ 355.820584][ T88] bridge_slave_0: left promiscuous mode [ 355.826337][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.904409][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.914645][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.924232][ T88] bond0 (unregistering): Released all slaves [ 355.969118][ T88] hsr_slave_0: left promiscuous mode [ 355.974917][ T88] hsr_slave_1: left promiscuous mode [ 355.980622][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.988042][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.996046][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.003479][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.014039][ T88] veth1_macvtap: left promiscuous mode [ 356.019518][ T88] veth0_macvtap: left promiscuous mode [ 356.025075][ T88] veth1_vlan: left promiscuous mode [ 356.030315][ T88] veth0_vlan: left promiscuous mode [ 356.094777][ T88] team0 (unregistering): Port device team_slave_1 removed [ 356.104447][ T88] team0 (unregistering): Port device team_slave_0 removed [ 356.454477][ T88] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.542776][ T88] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592626][ T88] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.652231][ T88] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.717368][ T88] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.744734][ T88] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.803816][ T88] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.874135][ T88] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.927716][ T88] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.973878][ T88] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.024039][ T88] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.093899][ T88] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.164581][ T88] bridge_slave_1: left allmulticast mode [ 357.170247][ T88] bridge_slave_1: left promiscuous mode [ 357.175920][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.183921][ T88] bridge_slave_0: left allmulticast mode [ 357.189558][ T88] bridge_slave_0: left promiscuous mode [ 357.195180][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.203618][ T88] bridge_slave_1: left allmulticast mode [ 357.209269][ T88] bridge_slave_1: left promiscuous mode [ 357.214993][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.222746][ T88] bridge_slave_0: left allmulticast mode [ 357.228386][ T88] bridge_slave_0: left promiscuous mode [ 357.234141][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.242544][ T88] bridge_slave_1: left allmulticast mode [ 357.248184][ T88] bridge_slave_1: left promiscuous mode [ 357.253854][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.262349][ T88] bridge_slave_0: left allmulticast mode [ 357.267996][ T88] bridge_slave_0: left promiscuous mode [ 357.273783][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.612921][ T88] team0: Port device bond0 removed [ 357.619293][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.630410][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.640197][ T88] bond0 (unregistering): Released all slaves [ 357.693949][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.704000][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.713899][ T88] bond0 (unregistering): Released all slaves [ 357.783908][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.793709][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.803201][ T88] bond0 (unregistering): Released all slaves [ 357.835372][ T88] tipc: Left network mode [ 357.844187][ T88] hsr_slave_0: left promiscuous mode [ 357.849812][ T88] hsr_slave_1: left promiscuous mode [ 357.855393][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.862824][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.870234][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.877678][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.886892][ T88] hsr_slave_0: left promiscuous mode [ 357.892555][ T88] hsr_slave_1: left promiscuous mode [ 357.898091][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.905601][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.913153][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.920540][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.929701][ T88] hsr_slave_0: left promiscuous mode [ 357.935370][ T88] hsr_slave_1: left promiscuous mode [ 357.941020][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.948386][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.955991][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.963403][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.978417][ T88] veth1_macvtap: left promiscuous mode [ 357.983950][ T88] veth0_macvtap: left promiscuous mode [ 357.989455][ T88] veth1_vlan: left promiscuous mode [ 357.994726][ T88] veth0_vlan: left promiscuous mode [ 358.000435][ T88] veth1_macvtap: left promiscuous mode [ 358.005953][ T88] veth0_macvtap: left promiscuous mode [ 358.011908][ T88] veth1_vlan: left promiscuous mode [ 358.017126][ T88] veth0_vlan: left promiscuous mode [ 358.023034][ T88] veth1_macvtap: left promiscuous mode [ 358.028542][ T88] veth0_macvtap: left promiscuous mode [ 358.034090][ T88] veth1_vlan: left promiscuous mode [ 358.039318][ T88] veth0_vlan: left promiscuous mode [ 358.174500][ T88] team0 (unregistering): Port device team_slave_1 removed [ 358.183893][ T88] team0 (unregistering): Port device team_slave_0 removed [ 358.236754][ T88] team0 (unregistering): Port device team_slave_1 removed [ 358.246149][ T88] team0 (unregistering): Port device team_slave_0 removed [ 358.300982][ T88] team0 (unregistering): Port device team_slave_1 removed [ 358.310277][ T88] team0 (unregistering): Port device team_slave_0 removed [ 358.341502][ T9] lo speed is unknown, defaulting to 1000 [ 358.347263][ T9] infiniband syz0: ib_query_port failed (-19) [ 358.977625][ T88] IPVS: stop unused estimator thread 0... [ 358.983730][ T88] IPVS: stop unused estimator thread 0... [ 358.989702][ T88] IPVS: stop unused estimator thread 0... [ 359.284806][ T88] bridge_slave_1: left allmulticast mode [ 359.290467][ T88] bridge_slave_1: left promiscuous mode [ 359.296101][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.303754][ T88] bridge_slave_0: left allmulticast mode [ 359.309393][ T88] bridge_slave_0: left promiscuous mode [ 359.315177][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.373677][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.383238][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.392372][ T88] bond0 (unregistering): Released all slaves [ 359.424345][ T88] hsr_slave_0: left promiscuous mode [ 359.430056][ T88] hsr_slave_1: left promiscuous mode [ 359.435717][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.443275][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.474685][ T88] team0 (unregistering): Port device team_slave_1 removed [ 359.485166][ T88] team0 (unregistering): Port device team_slave_0 removed [ 362.193219][ T88] bond0 (unregistering): Released all slaves [ 362.252478][ T88] tipc: Left network mode [ 362.259275][ T88] hsr_slave_0: left promiscuous mode [ 362.264955][ T88] hsr_slave_1: left promiscuous mode [ 362.553453][ T88] IPVS: stop unused estimator thread 0...