last executing test programs: 2m53.100791326s ago: executing program 32 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.011664415s ago: executing program 2 (id=412): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x100, 0x0) 2m43.181289628s ago: executing program 2 (id=434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m43.147703301s ago: executing program 2 (id=438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x8000000}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000008c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c73006f72746e616d653d77696e6e742c646973636172642c757466383d302c757466383d312c696f636861727365743d757400382c757466383d312c73686f72746e616d653d6d697865642c737973d9696d6d757461626c652c6e6fcddc1f918c1c7a1350ce47"], 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x5d7f, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x7ffffffe}], 0x1, 0x45833af92e4b39ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 2m42.951176639s ago: executing program 2 (id=445): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x100, 0x0) 2m42.576149082s ago: executing program 33 (id=455): io_uring_setup(0x3205, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x2}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 2m42.082628126s ago: executing program 2 (id=459): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m42.007295443s ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 2m27.028833524s ago: executing program 34 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 2m24.187254816s ago: executing program 5 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000800), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2m24.14799073s ago: executing program 5 (id=831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2m24.112357812s ago: executing program 5 (id=832): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@fwd={0x1}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x61, 0x5f, 0x30]}}, 0x0, 0x3d}, 0x20) 2m24.026248791s ago: executing program 5 (id=833): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x80) fallocate(r2, 0x8, 0x4000, 0x4000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, 0x0, 0x0) 2m24.02572781s ago: executing program 6 (id=834): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m23.595436879s ago: executing program 6 (id=835): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m23.592908009s ago: executing program 5 (id=837): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc0}, 0x40055) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m23.463619331s ago: executing program 6 (id=839): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) syz_read_part_table(0x106f, &(0x7f0000000000)="$eJzsz6FNBkEQBeDZHf7cnTuLujbogJBgkSgEhCY4EkqgCiQWj8DRAooScEs2d7QAiO8Tm53Je2KCPzXVMSLLyUM+RsZdxDz09dqfw56pZ0vEy9t5fLV2qOXyOiN/+sfz61L2f3uPo9Mceq98ti1Sbq/G6IGpD+vHTb3P56hbIS+efvlcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiXvgMAAP//6XISlw==") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000000), &(0x7f00000014c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe6a) r6 = socket$igmp(0x2, 0x3, 0x2) getrlimit(0xb, &(0x7f0000001540)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)=@generic={&(0x7f0000001480)='./file0\x00', 0x0, 0x8}, 0x18) 2m23.067649436s ago: executing program 5 (id=843): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 2m22.958449505s ago: executing program 35 (id=843): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 2m22.482729248s ago: executing program 6 (id=846): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x80) fallocate(r2, 0x8, 0x4000, 0x4000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, 0x0, 0x0) 2m22.059515075s ago: executing program 6 (id=854): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) write$sndseq(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000440)="$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") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0) 2m21.663627161s ago: executing program 6 (id=858): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendto$inet6(r1, &(0x7f00000018c0)='K', 0x1, 0x840, 0x0, 0x0) 2m21.654203201s ago: executing program 36 (id=858): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendto$inet6(r1, &(0x7f00000018c0)='K', 0x1, 0x840, 0x0, 0x0) 2m21.359625767s ago: executing program 4 (id=863): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) 2m21.342022549s ago: executing program 1 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 2m21.32848368s ago: executing program 4 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 2m21.306267032s ago: executing program 1 (id=866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x0, @dev, 0x0, "b8cc715bc63139c7"}]}}}}}}}}, 0x0) 2m21.232846829s ago: executing program 1 (id=868): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x14, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) 2m21.175523544s ago: executing program 4 (id=869): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m21.145567267s ago: executing program 4 (id=871): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x80) fallocate(r2, 0x8, 0x4000, 0x4000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340), 0x0) 2m20.843428283s ago: executing program 4 (id=873): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m20.380021804s ago: executing program 4 (id=879): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m20.364220146s ago: executing program 37 (id=879): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m20.349398367s ago: executing program 1 (id=881): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x80) fallocate(r2, 0x8, 0x4000, 0x4000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340), 0x0) 2m20.010847227s ago: executing program 1 (id=885): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$team(&(0x7f0000000180), r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141003) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000100)={{0x0, 0x49}, 'port0\x00', 0x2c, 0x35, 0xb00, 0x9, 0x80000001, 0x62, 0x16, 0x0, 0x0, 0x40}) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0xfffffffe) 2m19.715936333s ago: executing program 1 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x0, @dev, 0x0, "b8cc715bc63139c7"}]}}}}}}}}, 0x0) 2m19.693903786s ago: executing program 38 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x0, @dev, 0x0, "b8cc715bc63139c7"}]}}}}}}}}, 0x0) 9.051397395s ago: executing program 0 (id=4076): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xb1}}) 8.973505363s ago: executing program 0 (id=4080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x80, 0x925e}}, @TCA_U32_LINK={0x8, 0x3, 0xa}]}}]}, 0x4c}}, 0x20040054) 8.810255987s ago: executing program 8 (id=4087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 8.809840317s ago: executing program 8 (id=4089): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3801}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 8.719338735s ago: executing program 0 (id=4090): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x10}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8.643230552s ago: executing program 0 (id=4092): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xb1}}) 8.602851115s ago: executing program 0 (id=4094): r0 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8.602421206s ago: executing program 0 (id=4095): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x4, 0xff, 0x0, 0x3, 0x6, 0xfffffff5, 0x3, 0x4]) 8.242621017s ago: executing program 8 (id=4101): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.242433258s ago: executing program 8 (id=4102): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x10}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.949082264s ago: executing program 8 (id=4106): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) fallocate(r0, 0x6c, 0x5, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 3.801750742s ago: executing program 9 (id=4130): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) listen(r0, 0x6) 3.776749984s ago: executing program 9 (id=4131): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0xd, 0x10000) r1 = open(&(0x7f0000000080)='./file1\x00', 0x60842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x2, 0x4) 3.756648106s ago: executing program 9 (id=4132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000580)=""/250, 0x40f00}, 0x94) 3.71351711s ago: executing program 9 (id=4133): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000680)={'batadv_slave_0\x00', @ifru_names='gre0\x00'}) 3.627646028s ago: executing program 9 (id=4134): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={0x0, 0x0, 0x42, 0x0, 0x1, 0xfffffffc}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'team0\x00'}) 3.432434325s ago: executing program 9 (id=4137): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0xfb, 0x0, 0x2, 0x55b, 0xe, 0x7fff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x1, 0x0) 3.15032095s ago: executing program 3 (id=4138): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 3.070644367s ago: executing program 7 (id=4139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x540) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 3.028001771s ago: executing program 7 (id=4140): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3801}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 2.909449601s ago: executing program 3 (id=4141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6c", 0x316}, {0x0}], 0x3, &(0x7f0000002480)}}], 0x1, 0x60000800) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 2.466140921s ago: executing program 3 (id=4142): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) 2.460010691s ago: executing program 7 (id=4143): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x10}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.411958586s ago: executing program 3 (id=4144): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0xd, 0x10000) r1 = open(&(0x7f0000000080)='./file1\x00', 0x60842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x2, 0x4) 2.411523585s ago: executing program 3 (id=4145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) getitimer(0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80082000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40c0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 743.405894ms ago: executing program 3 (id=4146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xbfffffff, 0x38, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback, 0x8000000}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0xa4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="8d", 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 738.711714ms ago: executing program 8 (id=4147): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 116.34316ms ago: executing program 7 (id=4148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c0) 115.9332ms ago: executing program 7 (id=4149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 0s ago: executing program 7 (id=4150): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): e type 4 has an invalid length. [ 142.724132][T11423] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 142.790689][T11427] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2600'. [ 142.828395][ T29] audit: type=1400 audit(1767513650.193:697): avc: denied { setopt } for pid=11437 comm="syz.8.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.866370][ T29] audit: type=1400 audit(1767513650.233:698): avc: denied { accept } for pid=11442 comm="syz.8.2607" lport=36757 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.889469][ T29] audit: type=1400 audit(1767513650.233:699): avc: denied { write } for pid=11442 comm="syz.8.2607" lport=36757 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.913175][ T29] audit: type=1400 audit(1767513650.233:700): avc: denied { setopt } for pid=11442 comm="syz.8.2607" lport=36757 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.950505][T11441] loop0: detected capacity change from 0 to 128 [ 142.962711][T11441] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.975242][T11441] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.976674][T11453] netlink: 'syz.3.2611': attribute type 4 has an invalid length. [ 143.005220][ T29] audit: type=1400 audit(1767513650.373:701): avc: denied { setattr } for pid=11440 comm="syz.0.2606" path="/283/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.057064][ T29] audit: type=1400 audit(1767513650.413:702): avc: denied { shutdown } for pid=11454 comm="syz.8.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.076893][ T29] audit: type=1400 audit(1767513650.413:703): avc: denied { read } for pid=11454 comm="syz.8.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.097513][ T6245] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.146725][T11465] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2617'. [ 143.320841][T11503] loop7: detected capacity change from 0 to 256 [ 143.343510][T11503] FAT-fs (loop7): IO charset cp864 not found [ 143.428249][T11515] loop0: detected capacity change from 0 to 512 [ 143.459165][T11515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.677741][T11526] loop9: detected capacity change from 0 to 164 [ 143.758182][T11526] rock: directory entry would overflow storage [ 143.764404][T11526] rock: sig=0x66, size=4, remaining=3 [ 143.789341][ T10] kernel read not supported for file /891/coredump_filter (pid: 10 comm: kworker/0:1) [ 143.888851][T11537] sctp: [Deprecated]: syz.8.2644 (pid 11537) Use of int in max_burst socket option deprecated. [ 143.888851][T11537] Use struct sctp_assoc_value instead [ 143.912529][T11526] rock: directory entry would overflow storage [ 143.918803][T11526] rock: sig=0x66, size=4, remaining=3 [ 143.961093][T11541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2645'. [ 144.238528][T11515] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.247503][T11515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2624: bg 0: block 248: padding at end of block bitmap is not set [ 144.312239][T11549] loop3: detected capacity change from 0 to 4096 [ 144.334767][T11557] loop9: detected capacity change from 0 to 256 [ 144.341327][T11515] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2624: Failed to acquire dquot type 1 [ 144.356847][T11515] EXT4-fs (loop0): 1 truncate cleaned up [ 144.366707][T11515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.790927][T11557] FAT-fs (loop9): codepage cp775 not found [ 144.802844][T11549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.899020][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.274947][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 145.274960][ T29] audit: type=1400 audit(1767513652.644:708): avc: denied { connect } for pid=11565 comm="syz.9.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.305621][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.328867][T11572] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.483527][T11577] loop8: detected capacity change from 0 to 1024 [ 145.552750][T11577] EXT4-fs: Ignoring removed oldalloc option [ 145.615883][T11577] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 145.648168][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 145.663000][T11577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.743939][ T29] audit: type=1400 audit(1767513653.114:709): avc: denied { ioctl } for pid=11576 comm="syz.8.2659" path="/362/file1/file1" dev="loop8" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.817303][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.931889][ T29] audit: type=1400 audit(1767513653.295:710): avc: denied { connect } for pid=11606 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.975186][T11614] tipc: Enabling of bearer rejected, failed to enable media [ 145.993939][T11614] syzkaller0: entered promiscuous mode [ 145.999461][T11614] syzkaller0: entered allmulticast mode [ 146.086302][T11626] loop9: detected capacity change from 0 to 512 [ 146.107703][T11626] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.2680: invalid block [ 146.156178][T11626] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2680: invalid indirect mapped block 4294967295 (level 1) [ 146.172718][T11626] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2680: invalid indirect mapped block 4294967295 (level 1) [ 146.199655][T11626] EXT4-fs (loop9): 2 truncates cleaned up [ 146.206298][T11626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.244664][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.272794][T11638] netlink: 'syz.9.2685': attribute type 4 has an invalid length. [ 146.504723][T11660] loop9: detected capacity change from 0 to 2048 [ 146.515254][T11660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.531616][T11660] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 9: comm syz.9.2695: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=65556, size=56 fake=0 [ 146.551206][T11660] EXT4-fs (loop9): Remounting filesystem read-only [ 146.560385][ T29] audit: type=1400 audit(1767513653.925:711): avc: denied { create } for pid=11658 comm="syz.9.2695" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 146.604212][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.642368][T11666] loop9: detected capacity change from 0 to 128 [ 146.662818][T11666] syz.9.2697: attempt to access beyond end of device [ 146.662818][T11666] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 146.682571][ T29] audit: type=1400 audit(1767513654.055:712): avc: denied { create } for pid=11669 comm="syz.7.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.720179][T11666] syz.9.2697: attempt to access beyond end of device [ 146.720179][T11666] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 146.741838][ T29] audit: type=1400 audit(1767513654.055:713): avc: denied { getopt } for pid=11669 comm="syz.7.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.762127][T11666] syz.9.2697: attempt to access beyond end of device [ 146.762127][T11666] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 146.793668][T11678] netlink: 'syz.3.2701': attribute type 3 has an invalid length. [ 146.844641][T11679] syz.9.2697: attempt to access beyond end of device [ 146.844641][T11679] loop9: rw=2049, sector=313, nr_sectors = 80 limit=128 [ 146.859849][T11666] syz.9.2697: attempt to access beyond end of device [ 146.859849][T11666] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 146.872716][T11679] syz.9.2697: attempt to access beyond end of device [ 146.872716][T11679] loop9: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 146.879688][T11666] syz.9.2697: attempt to access beyond end of device [ 146.879688][T11666] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 146.915411][T11679] syz.9.2697: attempt to access beyond end of device [ 146.915411][T11679] loop9: rw=2049, sector=417, nr_sectors = 8 limit=128 [ 146.921862][T11666] syz.9.2697: attempt to access beyond end of device [ 146.921862][T11666] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 146.953162][T11679] syz.9.2697: attempt to access beyond end of device [ 146.953162][T11679] loop9: rw=2049, sector=433, nr_sectors = 8 limit=128 [ 147.051773][ T29] audit: type=1400 audit(1767513654.415:714): avc: denied { connect } for pid=11688 comm="syz.0.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.101398][ T29] audit: type=1400 audit(1767513654.475:715): avc: denied { write } for pid=11688 comm="syz.0.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.114429][T11666] Buffer I/O error on dev loop9, logical block 313, async page read [ 147.129897][T11666] Buffer I/O error on dev loop9, logical block 314, async page read [ 147.180470][T11666] Buffer I/O error on dev loop9, logical block 315, async page read [ 147.190225][T11666] Buffer I/O error on dev loop9, logical block 316, async page read [ 147.198236][T11666] Buffer I/O error on dev loop9, logical block 317, async page read [ 147.207044][T11692] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 147.215485][T11666] Buffer I/O error on dev loop9, logical block 318, async page read [ 147.218586][T11692] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 147.226708][T11666] Buffer I/O error on dev loop9, logical block 319, async page read [ 147.236620][T11692] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2708: Corrupt directory, running e2fsck is recommended [ 147.258594][T11692] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 147.267147][T11692] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2708: corrupted in-inode xattr: e_name out of bounds [ 147.281670][T11692] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2708: couldn't read orphan inode 15 (err -117) [ 147.283601][ T29] audit: type=1400 audit(1767513654.635:716): avc: denied { accept } for pid=11695 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.294385][T11692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.332098][T11666] Buffer I/O error on dev loop9, logical block 320, async page read [ 147.357493][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.361246][T11666] Buffer I/O error on dev loop9, logical block 313, async page read [ 147.375047][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 147.376015][T11666] Buffer I/O error on dev loop9, logical block 314, async page read [ 147.474042][T11710] rock: directory entry would overflow storage [ 147.480298][T11710] rock: sig=0x4654, size=5, remaining=4 [ 147.700964][T11724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.716035][T11724] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 9: comm syz.7.2723: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=65556, size=56 fake=0 [ 147.735948][T11724] EXT4-fs (loop7): Remounting filesystem read-only [ 147.741473][T11727] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.754006][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.766088][T11727] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 147.774556][T11727] EXT4-fs (loop8): orphan cleanup on readonly fs [ 147.781485][T11727] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.2724: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.795025][T11727] EXT4-fs (loop8): 1 orphan inode deleted [ 147.801680][T11727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.843986][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.855884][T11737] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2728'. [ 147.910369][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 147.919491][T11742] syzkaller0: entered promiscuous mode [ 147.925008][T11742] syzkaller0: entered allmulticast mode [ 148.568625][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 149.236759][T11805] syzkaller0: entered promiscuous mode [ 149.242366][T11805] syzkaller0: entered allmulticast mode [ 149.926798][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2770'. [ 149.983214][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 150.563085][T11872] syzkaller0: entered promiscuous mode [ 150.568696][T11872] syzkaller0: entered allmulticast mode [ 150.733644][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2792'. [ 150.795239][T11890] syzkaller0: entered promiscuous mode [ 150.800785][T11890] syzkaller0: entered allmulticast mode [ 151.071506][T11899] syzkaller0: entered promiscuous mode [ 151.077057][T11899] syzkaller0: entered allmulticast mode [ 151.277506][T11910] set_capacity_and_notify: 4 callbacks suppressed [ 151.277529][T11910] loop3: detected capacity change from 0 to 1024 [ 151.295921][T11910] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.339360][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2804'. [ 151.354317][T11910] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.364116][T11910] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.377691][T11910] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.2803: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.391663][T11910] EXT4-fs (loop3): 1 orphan inode deleted [ 151.392333][ T29] audit: type=1400 audit(1767513658.757:717): avc: denied { getopt } for pid=11915 comm="syz.7.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.399385][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.471085][T11919] bridge0: port 3(netdevsim3) entered blocking state [ 151.477831][T11919] bridge0: port 3(netdevsim3) entered disabled state [ 151.484876][T11919] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 151.493997][T11919] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 151.592849][T11918] loop9: detected capacity change from 0 to 512 [ 151.652057][T11918] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2806: invalid indirect mapped block 4294967295 (level 1) [ 151.702797][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.712355][T11918] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2806: invalid indirect mapped block 4294967295 (level 1) [ 151.728628][T11918] EXT4-fs (loop9): 2 truncates cleaned up [ 151.736017][T11918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.777140][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.811305][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.831611][T11931] netlink: 'syz.3.2810': attribute type 4 has an invalid length. [ 151.835654][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.901876][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.917703][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.919551][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.926301][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.257276][T11952] loop0: detected capacity change from 0 to 256 [ 152.267393][T11952] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.343059][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 152.502890][T11982] syzkaller0: entered promiscuous mode [ 152.508816][T11982] syzkaller0: entered allmulticast mode [ 152.650625][T11991] loop9: detected capacity change from 0 to 4096 [ 152.650921][T11997] loop7: detected capacity change from 0 to 764 [ 152.665546][T11991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.682864][T11997] rock: directory entry would overflow storage [ 152.689179][T11997] rock: sig=0x4654, size=5, remaining=4 [ 152.722902][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.815601][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 152.825483][ T29] audit: type=1400 audit(1767513660.178:718): avc: denied { ioctl } for pid=12013 comm="syz.9.2847" path="socket:[34524]" dev="sockfs" ino=34524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.850281][ T29] audit: type=1400 audit(1767513660.178:719): avc: denied { read } for pid=12014 comm="syz.8.2848" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 152.873643][ T29] audit: type=1400 audit(1767513660.178:720): avc: denied { open } for pid=12014 comm="syz.8.2848" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 152.972895][T12024] netlink: 'syz.7.2852': attribute type 4 has an invalid length. [ 153.013732][T12026] syzkaller0: entered promiscuous mode [ 153.019309][T12026] syzkaller0: entered allmulticast mode [ 153.051255][T12029] loop3: detected capacity change from 0 to 4096 [ 153.087352][T12036] loop7: detected capacity change from 0 to 512 [ 153.096315][T12029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.096584][T12036] EXT4-fs: Ignoring removed nobh option [ 153.138305][T12036] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 153.149917][T12036] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 153.160114][T12036] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2857: Corrupt directory, running e2fsck is recommended [ 153.185414][T12036] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 153.207717][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.213191][T12036] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2857: corrupted in-inode xattr: invalid ea_ino [ 153.239630][T12036] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2857: couldn't read orphan inode 15 (err -117) [ 153.262279][T12036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.295149][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.360584][ T29] audit: type=1400 audit(1767513660.728:721): avc: denied { write } for pid=12053 comm="syz.7.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.420746][T12062] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 153.458339][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 153.480489][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2870'. [ 153.490876][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2868'. [ 153.508824][T12072] binfmt_misc: register: failed to install interpreter file ./file0 [ 153.590156][T12078] syzkaller0: entered promiscuous mode [ 153.595741][T12078] syzkaller0: entered allmulticast mode [ 153.652807][T12082] netlink: 209860 bytes leftover after parsing attributes in process `syz.9.2876'. [ 153.969478][T12095] tipc: Started in network mode [ 153.974436][T12095] tipc: Node identity 12835dcbfc1d, cluster identity 4711 [ 153.981732][T12095] tipc: Enabled bearer , priority 0 [ 153.999373][T12095] syzkaller0: entered promiscuous mode [ 154.004908][T12095] syzkaller0: entered allmulticast mode [ 154.022736][T12095] tipc: Resetting bearer [ 154.031164][T12094] tipc: Resetting bearer [ 154.056417][T12094] tipc: Disabling bearer [ 154.108611][ T29] audit: type=1400 audit(1767513661.469:722): avc: denied { listen } for pid=12051 comm="syz.3.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.128128][ T29] audit: type=1400 audit(1767513661.469:723): avc: denied { connect } for pid=12051 comm="syz.3.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.274812][ T29] audit: type=1400 audit(1767513661.639:724): avc: denied { read } for pid=12112 comm="syz.0.2890" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.297943][ T29] audit: type=1400 audit(1767513661.639:725): avc: denied { open } for pid=12112 comm="syz.0.2890" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.376727][T12121] syzkaller0: entered promiscuous mode [ 154.382438][T12121] syzkaller0: entered allmulticast mode [ 154.412791][T12118] loop8: detected capacity change from 0 to 1024 [ 154.447329][T12118] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.480641][T12118] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 154.553631][T12118] EXT4-fs (loop8): orphan cleanup on readonly fs [ 154.577956][T12135] netlink: 'syz.7.2899': attribute type 4 has an invalid length. [ 154.605333][T12118] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.2892: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.630542][T12118] EXT4-fs (loop8): 1 orphan inode deleted [ 154.647791][ T29] audit: type=1326 audit(1767513662.009:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9b47f749 code=0x7ffc0000 [ 154.671999][T12118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.748038][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.750653][T12150] process 'syz.0.2904' launched './mnt' with NULL argv: empty string added [ 154.765742][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.785232][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.015457][T12168] loop7: detected capacity change from 0 to 1024 [ 155.037803][T12168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.076302][T12173] loop0: detected capacity change from 0 to 2048 [ 155.238801][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.270056][T12173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.416166][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.488341][T12184] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2917: invalid indirect mapped block 4294967295 (level 1) [ 155.514793][T12184] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2917: invalid indirect mapped block 4294967295 (level 1) [ 155.536551][T12184] EXT4-fs (loop7): 2 truncates cleaned up [ 155.542690][T12184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.603177][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.721828][T12213] __nla_validate_parse: 1 callbacks suppressed [ 155.721842][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 155.788416][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 155.814430][T12225] tipc: Enabled bearer , priority 0 [ 155.828562][T12225] syzkaller0: entered promiscuous mode [ 155.834071][T12225] syzkaller0: entered allmulticast mode [ 155.848610][T12225] tipc: Resetting bearer [ 155.880947][T12216] tipc: Resetting bearer [ 155.895600][T12224] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2933: invalid indirect mapped block 4294967295 (level 1) [ 155.915739][T12224] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2933: invalid indirect mapped block 4294967295 (level 1) [ 155.936372][T12216] tipc: Disabling bearer [ 155.976386][T12224] EXT4-fs (loop8): 2 truncates cleaned up [ 155.982930][T12224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.137847][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.237822][T12235] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 156.288645][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2942'. [ 156.357219][T12245] syzkaller0: entered promiscuous mode [ 156.362811][T12245] syzkaller0: entered allmulticast mode [ 156.371930][T12250] set_capacity_and_notify: 3 callbacks suppressed [ 156.371946][T12250] loop9: detected capacity change from 0 to 256 [ 156.405799][T12253] loop3: detected capacity change from 0 to 1024 [ 156.423450][T12250] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.434609][T12253] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.485827][T12253] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 156.496113][T12253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.502917][T12253] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.2946: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.516643][T12253] EXT4-fs (loop3): 1 orphan inode deleted [ 156.522878][T12253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.548656][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.620172][T12265] loop0: detected capacity change from 0 to 512 [ 156.646464][T12269] tipc: Enabled bearer , priority 0 [ 156.653434][T12269] syzkaller0: entered promiscuous mode [ 156.658957][T12269] syzkaller0: entered allmulticast mode [ 156.667988][T12269] tipc: Resetting bearer [ 156.674521][T12268] tipc: Resetting bearer [ 156.687168][T12265] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2951: invalid indirect mapped block 4294967295 (level 1) [ 156.702422][T12268] tipc: Disabling bearer [ 156.713222][T12265] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2951: invalid indirect mapped block 4294967295 (level 1) [ 156.727631][T12265] EXT4-fs (loop0): 2 truncates cleaned up [ 156.734050][T12265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.756967][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.773967][T12275] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2955'. [ 156.783122][T12275] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 156.982595][T12300] loop0: detected capacity change from 0 to 512 [ 157.015602][T12300] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2966: invalid indirect mapped block 4294967295 (level 1) [ 157.034645][T12300] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2966: invalid indirect mapped block 4294967295 (level 1) [ 157.123566][T12309] syzkaller0: entered promiscuous mode [ 157.129182][T12309] syzkaller0: entered allmulticast mode [ 157.166411][T12300] EXT4-fs (loop0): 2 truncates cleaned up [ 157.172410][T12300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.663832][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.975499][T12334] netlink: 'syz.0.2975': attribute type 4 has an invalid length. [ 158.102804][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 158.131293][T12354] syzkaller0: entered promiscuous mode [ 158.137220][T12354] syzkaller0: entered allmulticast mode [ 158.148208][T12356] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2985'. [ 158.321638][T12373] IPVS: persistence engine module ip_vs_pe_s not found [ 158.376393][T12387] loop0: detected capacity change from 0 to 1024 [ 158.395933][T12387] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.411401][T12387] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 158.420517][T12387] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.427052][T12387] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.2999: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.440616][T12387] EXT4-fs (loop0): 1 orphan inode deleted [ 158.446875][T12387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.519815][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.545025][T12396] syzkaller0: entered promiscuous mode [ 158.550508][T12396] syzkaller0: entered allmulticast mode [ 158.699412][T12404] tipc: Enabled bearer , priority 0 [ 158.725522][T12404] syzkaller0: entered promiscuous mode [ 158.731034][T12404] syzkaller0: entered allmulticast mode [ 158.762973][T12404] tipc: Resetting bearer [ 158.822483][T12403] tipc: Resetting bearer [ 158.851020][T12403] tipc: Disabling bearer [ 158.948479][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 158.948495][ T29] audit: type=1400 audit(1767513666.321:737): avc: denied { write } for pid=12409 comm="syz.0.3003" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 159.140429][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3015'. [ 159.192031][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3015'. [ 159.217323][T12437] tipc: Enabled bearer , priority 0 [ 159.363612][T12437] syzkaller0: entered promiscuous mode [ 159.369196][T12437] syzkaller0: entered allmulticast mode [ 159.558292][T12437] tipc: Resetting bearer [ 160.056389][T12436] tipc: Resetting bearer [ 160.074940][T12436] tipc: Disabling bearer [ 160.102368][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 160.152621][T12453] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3026'. [ 160.232843][T12462] tipc: Enabled bearer , priority 0 [ 160.264891][T12462] tipc: Resetting bearer [ 160.276025][T12461] tipc: Disabling bearer [ 160.360602][T12480] loop8: detected capacity change from 0 to 2048 [ 160.386914][ T29] audit: type=1326 audit(1767513667.752:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.3037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9b47f749 code=0x0 [ 160.415760][T12480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.482971][ T29] audit: type=1400 audit(1767513667.812:739): avc: denied { mount } for pid=12490 comm="syz.7.3038" name="/" dev="ramfs" ino=37060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 160.509445][T12480] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 9: comm syz.8.3035: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=65556, size=56 fake=0 [ 160.530743][T12493] tipc: Enabled bearer , priority 0 [ 160.540411][T12493] syzkaller0: entered promiscuous mode [ 160.546004][T12493] syzkaller0: entered allmulticast mode [ 160.551415][T12480] EXT4-fs (loop8): Remounting filesystem read-only [ 160.581032][T12493] tipc: Resetting bearer [ 160.603036][T12492] tipc: Resetting bearer [ 160.609433][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.624548][T12492] tipc: Disabling bearer [ 160.836232][T12525] loop8: detected capacity change from 0 to 1024 [ 160.847460][T12525] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.860047][T12525] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 160.874761][T12525] EXT4-fs (loop8): orphan cleanup on readonly fs [ 160.881283][T12525] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.3052: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.895451][T12525] EXT4-fs (loop8): 1 orphan inode deleted [ 160.901547][T12525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.926221][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.202653][T12531] loop8: detected capacity change from 0 to 764 [ 161.211943][T12531] rock: directory entry would overflow storage [ 161.218135][T12531] rock: sig=0x4654, size=5, remaining=4 [ 161.617316][ T29] audit: type=1326 audit(1767513668.992:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.8.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8facb2f749 code=0x0 [ 161.619649][T12565] loop9: detected capacity change from 0 to 764 [ 161.669721][T12567] __nla_validate_parse: 4 callbacks suppressed [ 161.669738][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3068'. [ 161.759769][T12565] rock: directory entry would overflow storage [ 161.765981][T12565] rock: sig=0x4654, size=5, remaining=4 [ 162.138767][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3076'. [ 162.182387][T12594] loop3: detected capacity change from 0 to 512 [ 162.189358][T12594] journal_path: Non-blockdev passed as './file0' [ 162.195866][T12594] EXT4-fs: error: could not find journal device path [ 162.395186][T12601] loop7: detected capacity change from 0 to 764 [ 162.402087][T12601] rock: directory entry would overflow storage [ 162.408279][T12601] rock: sig=0x4654, size=5, remaining=4 [ 162.431723][T12603] loop7: detected capacity change from 0 to 512 [ 162.440047][T12603] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3082: invalid block [ 162.453083][T12603] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3082: invalid indirect mapped block 4294967295 (level 1) [ 162.467442][T12603] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3082: invalid indirect mapped block 4294967295 (level 1) [ 162.482265][T12603] EXT4-fs (loop7): 2 truncates cleaned up [ 162.488450][T12603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.511032][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.609100][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3087'. [ 162.658163][T12619] tipc: Enabled bearer , priority 0 [ 162.665545][T12619] syzkaller0: entered promiscuous mode [ 162.671032][T12619] syzkaller0: entered allmulticast mode [ 162.685877][T12619] tipc: Resetting bearer [ 162.694339][T12618] tipc: Resetting bearer [ 162.704001][T12618] tipc: Disabling bearer [ 162.750753][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 162.788513][ T29] audit: type=1326 audit(1767513670.163:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12629 comm="syz.0.3094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65250af749 code=0x0 [ 162.946071][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3098'. [ 163.049789][T12651] tipc: Enabled bearer , priority 0 [ 163.058551][T12651] syzkaller0: entered promiscuous mode [ 163.064205][T12651] syzkaller0: entered allmulticast mode [ 163.077828][T12651] tipc: Resetting bearer [ 163.084327][T12650] tipc: Resetting bearer [ 163.094183][T12650] tipc: Disabling bearer [ 163.097664][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3105'. [ 163.140039][T12659] syzkaller0: entered promiscuous mode [ 163.145618][T12659] syzkaller0: entered allmulticast mode [ 163.182981][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3110'. [ 163.349713][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3117'. [ 163.377391][T12683] loop7: detected capacity change from 0 to 764 [ 163.386165][T12683] rock: directory entry would overflow storage [ 163.392490][T12683] rock: sig=0x4654, size=5, remaining=4 [ 163.584784][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3121'. [ 163.694560][T12697] syzkaller0: entered promiscuous mode [ 163.700077][T12697] syzkaller0: entered allmulticast mode [ 163.945103][T12716] loop7: detected capacity change from 0 to 2048 [ 163.957732][T12716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.974915][T12716] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 9: comm syz.7.3132: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=65556, size=56 fake=0 [ 163.994400][T12716] EXT4-fs (loop7): Remounting filesystem read-only [ 164.003790][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 164.024870][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.069894][T12726] loop7: detected capacity change from 0 to 512 [ 164.079495][T12726] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3134: invalid indirect mapped block 4294967295 (level 1) [ 164.103984][T12726] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3134: invalid indirect mapped block 4294967295 (level 1) [ 164.156938][T12726] EXT4-fs (loop7): 2 truncates cleaned up [ 164.163426][T12726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.243949][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.255063][T12742] loop0: detected capacity change from 0 to 2048 [ 164.275129][T12742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.290138][T12742] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 9: comm syz.0.3144: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=65556, size=56 fake=0 [ 164.352884][T12742] EXT4-fs (loop0): Remounting filesystem read-only [ 164.362009][T12755] loop9: detected capacity change from 0 to 764 [ 164.385585][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.414261][T12755] rock: directory entry would overflow storage [ 164.420580][T12755] rock: sig=0x4654, size=5, remaining=4 [ 164.495233][T12770] loop9: detected capacity change from 0 to 512 [ 164.509853][T12770] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3156: invalid indirect mapped block 4294967295 (level 1) [ 164.525375][T12770] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3156: invalid indirect mapped block 4294967295 (level 1) [ 164.539955][T12770] EXT4-fs (loop9): 2 truncates cleaned up [ 164.546273][T12770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.617501][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.797226][T12793] rock: directory entry would overflow storage [ 164.803519][T12793] rock: sig=0x4654, size=5, remaining=4 [ 164.810037][T12791] syzkaller0: entered promiscuous mode [ 164.815617][T12791] syzkaller0: entered allmulticast mode [ 164.919782][ T29] audit: type=1400 audit(1767513672.294:742): avc: denied { map } for pid=12798 comm="syz.3.3169" path="socket:[36853]" dev="sockfs" ino=36853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 165.097263][T12822] rock: directory entry would overflow storage [ 165.103569][T12822] rock: sig=0x4654, size=5, remaining=4 [ 166.079205][T12858] rock: directory entry would overflow storage [ 166.085458][T12858] rock: sig=0x4654, size=5, remaining=4 [ 166.212522][T12866] FAT-fs (loop3): codepage cp850 not found [ 166.332767][T12882] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.432744][T12882] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 166.460312][T12882] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.477062][T12882] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3202: Freeing blocks not in datazone - block = 0, count = 4096 [ 166.493802][T12882] EXT4-fs (loop3): 1 orphan inode deleted [ 166.500358][T12882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.633159][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.815228][T12906] tipc: Enabled bearer , priority 0 [ 166.861907][T12906] syzkaller0: entered promiscuous mode [ 166.867446][T12906] syzkaller0: entered allmulticast mode [ 166.956351][T12906] sch_tbf: peakrate 1025 is lower than or equals to rate 14583 ! [ 166.979956][T12917] set_capacity_and_notify: 5 callbacks suppressed [ 166.980051][T12917] loop0: detected capacity change from 0 to 764 [ 166.993042][T12906] tipc: Resetting bearer [ 166.999921][T12905] tipc: Resetting bearer [ 167.010620][T12905] tipc: Disabling bearer [ 167.040506][T12917] rock: directory entry would overflow storage [ 167.046683][T12917] rock: sig=0x4654, size=5, remaining=4 [ 167.166332][T12935] __nla_validate_parse: 3 callbacks suppressed [ 167.166374][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'. [ 167.237274][T12938] loop9: detected capacity change from 0 to 512 [ 167.263092][T12938] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3228: invalid indirect mapped block 4294967295 (level 1) [ 167.297892][T12938] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3228: invalid indirect mapped block 4294967295 (level 1) [ 167.327796][T12938] EXT4-fs (loop9): 2 truncates cleaned up [ 167.335829][T12938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.396899][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.519786][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3239'. [ 167.569327][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.577322][T12969] batadv_slave_0: entered promiscuous mode [ 167.605030][T12973] loop0: detected capacity change from 0 to 1024 [ 167.637988][T12973] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.671038][T12973] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 167.679203][T12973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.688590][T12973] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3244: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.702498][T12973] EXT4-fs (loop0): 1 orphan inode deleted [ 168.039185][T12987] tipc: Enabled bearer , priority 0 [ 168.098100][T12991] syzkaller0: entered promiscuous mode [ 168.103641][T12991] syzkaller0: entered allmulticast mode [ 168.224632][T12987] tipc: Resetting bearer [ 168.296092][T12986] tipc: Resetting bearer [ 168.323845][T12986] tipc: Disabling bearer [ 168.330487][T12997] loop7: detected capacity change from 0 to 1024 [ 168.343839][T12997] EXT4-fs: Ignoring removed orlov option [ 168.406085][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.409895][ T29] audit: type=1400 audit(1767513675.786:743): avc: denied { create } for pid=13006 comm="syz.8.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.415942][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.847643][T13020] loop3: detected capacity change from 0 to 512 [ 168.943790][T13020] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3262: invalid block [ 168.992715][T13020] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3262: invalid indirect mapped block 4294967295 (level 1) [ 169.071092][T13020] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3262: invalid indirect mapped block 4294967295 (level 1) [ 169.110964][T13035] loop9: detected capacity change from 0 to 1024 [ 169.138845][T13028] syzkaller0: entered promiscuous mode [ 169.144411][T13028] syzkaller0: entered allmulticast mode [ 169.150826][T13035] EXT4-fs: Ignoring removed orlov option [ 169.156882][T13020] EXT4-fs (loop3): 2 truncates cleaned up [ 169.561251][T13066] loop3: detected capacity change from 0 to 1024 [ 169.569566][T13066] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.580730][T13066] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 169.588427][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.588780][T13066] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.598392][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.606339][T13066] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3280: Freeing blocks not in datazone - block = 0, count = 4096 [ 169.624589][T13066] EXT4-fs (loop3): 1 orphan inode deleted [ 169.664064][T13073] loop0: detected capacity change from 0 to 512 [ 169.678639][T13073] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3283: invalid indirect mapped block 4294967295 (level 1) [ 169.686616][T13074] syzkaller0: entered promiscuous mode [ 169.698164][T13074] syzkaller0: entered allmulticast mode [ 169.701213][T13073] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3283: invalid indirect mapped block 4294967295 (level 1) [ 169.719734][T13073] EXT4-fs (loop0): 2 truncates cleaned up [ 169.777417][ T29] audit: type=1400 audit(1767513677.146:744): avc: denied { ioctl } for pid=13080 comm="syz.0.3287" path="socket:[39112]" dev="sockfs" ino=39112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.911779][T13102] loop0: detected capacity change from 0 to 512 [ 169.925669][T13102] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3296: invalid indirect mapped block 4294967295 (level 1) [ 169.940332][T13102] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3296: invalid indirect mapped block 4294967295 (level 1) [ 169.954633][T13102] EXT4-fs (loop0): 2 truncates cleaned up [ 170.027029][T13112] syzkaller0: entered promiscuous mode [ 170.032677][T13112] syzkaller0: entered allmulticast mode [ 170.133772][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'. [ 170.196011][T13131] tipc: Enabled bearer , priority 0 [ 170.242861][T13131] syzkaller0: entered promiscuous mode [ 170.248368][T13131] syzkaller0: entered allmulticast mode [ 170.683205][ T29] audit: type=1400 audit(1767513677.687:745): avc: denied { getopt } for pid=13123 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.729663][T13131] tipc: Resetting bearer [ 170.768483][T13129] tipc: Resetting bearer [ 170.797899][T13129] tipc: Disabling bearer [ 170.939044][T13152] syzkaller0: entered promiscuous mode [ 170.944612][T13152] syzkaller0: entered allmulticast mode [ 171.095854][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 171.188252][T13169] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3322'. [ 171.316535][T13180] loop0: detected capacity change from 0 to 512 [ 171.325213][T13180] EXT4-fs: Ignoring removed nobh option [ 171.338012][T13180] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3327: iget: bad i_size value: 38620345925642 [ 171.351482][T13180] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3327: couldn't read orphan inode 15 (err -117) [ 171.481975][ T29] audit: type=1400 audit(1767513678.857:746): avc: denied { read } for pid=13191 comm="syz.0.3333" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.505021][ T29] audit: type=1400 audit(1767513678.857:747): avc: denied { open } for pid=13191 comm="syz.0.3333" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.735419][T13191] delete_channel: no stack [ 171.738160][ T29] audit: type=1400 audit(1767513679.107:748): avc: denied { watch watch_reads } for pid=13213 comm="syz.7.3342" path="/proc/1178" dev="proc" ino=39255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 171.777848][ C1] hrtimer: interrupt took 46402 ns [ 171.791185][T13222] syzkaller0: entered promiscuous mode [ 171.796670][T13222] syzkaller0: entered allmulticast mode [ 171.902916][ T29] audit: type=1400 audit(1767513679.278:749): avc: denied { setattr } for pid=13231 comm="syz.3.3349" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.967654][T13238] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.989145][T13238] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.997342][T13238] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.004140][T13238] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3352: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.018080][T13238] EXT4-fs (loop0): 1 orphan inode deleted [ 172.054024][ T29] audit: type=1400 audit(1767513679.428:750): avc: denied { ioctl } for pid=13246 comm="syz.0.3355" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.253630][T13259] syzkaller0: entered promiscuous mode [ 172.259166][T13259] syzkaller0: entered allmulticast mode [ 172.526852][T13284] set_capacity_and_notify: 2 callbacks suppressed [ 172.526862][T13284] loop0: detected capacity change from 0 to 1024 [ 172.540852][T13284] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.567394][T13284] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 172.575622][T13284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.588040][T13288] netlink: 'syz.7.3374': attribute type 1 has an invalid length. [ 172.588635][T13284] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3372: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.595801][T13288] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3374'. [ 172.618427][T13284] EXT4-fs (loop0): 1 orphan inode deleted [ 172.692459][T13300] loop8: detected capacity change from 0 to 512 [ 172.715482][T13300] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 172.723597][T13300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.733328][T13300] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.744328][T13300] EXT4-fs (loop8): orphan cleanup on readonly fs [ 172.751987][T13308] loop0: detected capacity change from 0 to 1024 [ 172.752317][T13300] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 172.766622][T13308] EXT4-fs: Ignoring removed orlov option [ 172.770636][T13300] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.787896][T13300] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 172.795060][T13300] EXT4-fs (loop8): 1 truncate cleaned up [ 172.818954][T13300] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 172.826880][T13300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.873139][T13323] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3388'. [ 172.882223][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3388'. [ 172.882517][T13321] loop7: detected capacity change from 0 to 1024 [ 172.901369][T13321] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.923297][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.938916][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.939729][T13321] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 172.951731][T13325] tipc: Enabled bearer , priority 0 [ 172.972533][T13324] tipc: Disabling bearer [ 172.972697][T13321] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.984787][T13321] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3386: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.998610][T13321] EXT4-fs (loop7): 1 orphan inode deleted [ 173.004997][T13321] EXT4-fs mount: 26 callbacks suppressed [ 173.005011][T13321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.027584][T13334] syzkaller0: entered promiscuous mode [ 173.033224][T13334] syzkaller0: entered allmulticast mode [ 173.042183][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.096958][T13338] loop0: detected capacity change from 0 to 1024 [ 173.118161][T13338] EXT4-fs: Ignoring removed orlov option [ 173.141048][T13338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.165479][T13344] tipc: Enabled bearer , priority 0 [ 173.182793][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.187252][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.192323][T13344] syzkaller0: entered promiscuous mode [ 173.205647][T13344] syzkaller0: entered allmulticast mode [ 173.215479][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.234270][T13344] tipc: Resetting bearer [ 173.249562][T13343] tipc: Resetting bearer [ 173.263231][T13343] tipc: Disabling bearer [ 173.491378][T13381] syzkaller0: entered promiscuous mode [ 173.496877][T13381] syzkaller0: entered allmulticast mode [ 173.528937][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'. [ 173.620504][T13397] tipc: Enabled bearer , priority 0 [ 173.633383][T13397] syzkaller0: entered promiscuous mode [ 173.639005][T13397] syzkaller0: entered allmulticast mode [ 173.654175][T13403] loop3: detected capacity change from 0 to 1024 [ 173.663565][T13403] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.674339][T13403] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 173.685174][T13403] EXT4-fs (loop3): orphan cleanup on readonly fs [ 173.691732][T13403] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3421: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.700071][T13397] tipc: Resetting bearer [ 173.711125][T13403] EXT4-fs (loop3): 1 orphan inode deleted [ 173.718114][T13396] tipc: Resetting bearer [ 173.719097][T13403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.725123][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3422'. [ 173.749087][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.760537][T13396] tipc: Disabling bearer [ 173.799432][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3424'. [ 174.002101][ T29] audit: type=1400 audit(1767513681.379:751): avc: denied { wake_alarm } for pid=13423 comm="syz.8.3430" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.077879][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3429'. [ 174.333120][T13434] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3432'. [ 174.548954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d886c00: rx timeout, send abort [ 174.557186][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811d886600: rx timeout, send abort [ 174.565410][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d886c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.579706][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d886600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.622016][T13438] loop9: detected capacity change from 0 to 1024 [ 174.648162][T13438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.669803][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.935657][T13465] loop0: detected capacity change from 0 to 512 [ 174.987434][T13465] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3442: invalid block [ 175.010677][T13465] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3442: invalid indirect mapped block 4294967295 (level 1) [ 175.025061][T13465] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3442: invalid indirect mapped block 4294967295 (level 1) [ 175.039811][T13465] EXT4-fs (loop0): 2 truncates cleaned up [ 175.046017][T13465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.097155][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.517156][T13487] loop9: detected capacity change from 0 to 4096 [ 175.557070][T13487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.563609][ T29] audit: type=1400 audit(1767513682.929:752): avc: denied { mount } for pid=13451 comm="syz.7.3440" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 175.636468][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.676709][T13497] tipc: Enabled bearer , priority 0 [ 175.706136][T13495] tipc: Disabling bearer [ 175.830176][T13515] syzkaller0: entered promiscuous mode [ 175.835695][T13515] syzkaller0: entered allmulticast mode [ 175.844623][T13520] tipc: Enabled bearer , priority 0 [ 175.856128][T13520] syzkaller0: entered promiscuous mode [ 175.861671][T13520] syzkaller0: entered allmulticast mode [ 175.883064][T13520] tipc: Resetting bearer [ 175.914271][ T29] audit: type=1326 audit(1767513683.290:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.0.3470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65250af749 code=0x0 [ 175.954080][T13518] tipc: Resetting bearer [ 175.965679][T13518] tipc: Disabling bearer [ 176.463980][T13546] tipc: Enabled bearer , priority 0 [ 176.477227][T13545] tipc: Disabling bearer [ 176.543217][T13556] tipc: Enabled bearer , priority 0 [ 176.552476][T13556] syzkaller0: entered promiscuous mode [ 176.558061][T13556] syzkaller0: entered allmulticast mode [ 176.576802][T13556] tipc: Resetting bearer [ 176.584475][T13554] tipc: Resetting bearer [ 176.598775][T13554] tipc: Disabling bearer [ 176.648386][T13569] loop7: detected capacity change from 0 to 1024 [ 176.656386][T13569] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.713513][T13569] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 176.750836][T13569] EXT4-fs (loop7): orphan cleanup on readonly fs [ 176.762931][T13569] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3489: Freeing blocks not in datazone - block = 0, count = 4096 [ 176.776862][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3490'. [ 176.796994][T13569] EXT4-fs (loop7): 1 orphan inode deleted [ 176.803030][T13569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.833769][T13582] tipc: Enabled bearer , priority 0 [ 176.841606][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.852218][T13581] tipc: Disabling bearer [ 176.931378][T13587] EXT4-fs: Ignoring removed nobh option [ 176.944469][T13587] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3496: iget: bad i_size value: 38620345925642 [ 176.980328][T13587] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3496: couldn't read orphan inode 15 (err -117) [ 176.998139][T13587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.047861][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.197462][T13607] syzkaller0: entered promiscuous mode [ 177.203064][T13607] syzkaller0: entered allmulticast mode [ 177.311591][ T29] audit: type=1326 audit(1767513684.690:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13602 comm="syz.8.3503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8facb2f749 code=0x0 [ 177.449627][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3509'. [ 177.671714][T13622] set_capacity_and_notify: 1 callbacks suppressed [ 177.671729][T13622] loop0: detected capacity change from 0 to 512 [ 177.717797][T13622] EXT4-fs: Ignoring removed nobh option [ 177.737584][T13624] syz_tun: entered allmulticast mode [ 177.777645][T13622] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3511: iget: bad i_size value: 38620345925642 [ 177.829123][T13622] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3511: couldn't read orphan inode 15 (err -117) [ 177.887187][T13622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.920298][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.959956][T13637] syzkaller0: entered promiscuous mode [ 177.965575][T13637] syzkaller0: entered allmulticast mode [ 178.080702][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3522'. [ 178.110880][T13652] loop0: detected capacity change from 0 to 512 [ 178.118388][T13652] EXT4-fs: Ignoring removed nobh option [ 178.141020][T13652] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3526: iget: bad i_size value: 38620345925642 [ 178.163261][T13657] loop3: detected capacity change from 0 to 1024 [ 178.164096][T13652] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3526: couldn't read orphan inode 15 (err -117) [ 178.198631][T13657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.203135][T13652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.274375][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.297468][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.356168][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3533'. [ 178.386162][ T29] audit: type=1326 audit(1767513685.771:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13665 comm="syz.7.3531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e06b0f749 code=0x0 [ 178.416063][T13677] syzkaller0: entered promiscuous mode [ 178.421613][T13677] syzkaller0: entered allmulticast mode [ 178.591242][T13692] dvmrp6: entered allmulticast mode [ 178.776299][T13697] netlink: 'syz.8.3544': attribute type 5 has an invalid length. [ 178.965332][T13712] loop8: detected capacity change from 0 to 512 [ 178.985004][T13712] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 178.992930][T13712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 179.000997][T13712] System zones: 0-1, 15-15, 18-18, 34-34 [ 179.007103][T13712] EXT4-fs (loop8): orphan cleanup on readonly fs [ 179.013485][T13712] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 179.023095][T13712] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 179.037635][T13712] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 179.044600][T13712] EXT4-fs (loop8): 1 truncate cleaned up [ 179.050500][T13712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.065941][T13712] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 179.073846][T13712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 179.090881][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.305258][ T29] audit: type=1400 audit(1767513686.661:756): avc: denied { kexec_image_load } for pid=13721 comm="syz.8.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 179.400334][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3555'. [ 179.447276][T13740] loop8: detected capacity change from 0 to 1024 [ 179.461907][T13741] loop0: detected capacity change from 0 to 1024 [ 179.468680][T13740] EXT4-fs: Ignoring removed orlov option [ 179.500289][T13740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.500459][T13741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.538272][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.576251][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.682916][T13769] loop3: detected capacity change from 0 to 512 [ 179.697580][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3571'. [ 179.718917][T13769] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 179.726976][T13769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 179.744187][T13769] System zones: 0-1, 15-15, 18-18, 34-34 [ 179.756169][T13769] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.764585][T13769] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 179.774018][T13769] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 179.788664][T13769] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 179.836694][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3577'. [ 179.852085][T13769] EXT4-fs (loop3): 1 truncate cleaned up [ 179.858691][T13769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.939634][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.072151][T13806] loop9: detected capacity change from 0 to 512 [ 180.136366][T13806] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3586: invalid indirect mapped block 4294967295 (level 1) [ 180.175732][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.231493][T13806] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3586: invalid indirect mapped block 4294967295 (level 1) [ 180.255836][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.301136][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 180.311087][T13806] EXT4-fs (loop9): 2 truncates cleaned up [ 180.318222][T13806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.342666][T13810] netlink: 'syz.0.3582': attribute type 16 has an invalid length. [ 180.350596][T13810] netlink: 'syz.0.3582': attribute type 17 has an invalid length. [ 180.372021][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.485454][T13810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.504351][T13810] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.523210][T13810] batman_adv: batadv0: Interface activated: dummy0 [ 180.529856][T13810] batadv0: mtu less than device minimum [ 180.535952][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.546888][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.557669][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.568752][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.579799][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.590752][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.591747][T13833] loop3: detected capacity change from 0 to 512 [ 180.601599][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.618490][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.629493][T13810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.658869][T13833] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 180.666914][T13833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 180.675500][T13833] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.681487][T13833] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.688288][T13833] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 180.697732][T13833] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 180.712364][T13833] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 180.719498][T13833] EXT4-fs (loop3): 1 truncate cleaned up [ 180.725950][T13833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.752973][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.776533][T13838] loop8: detected capacity change from 0 to 1024 [ 180.785448][T13838] EXT4-fs: Ignoring removed orlov option [ 180.804963][T13838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.841943][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.898045][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3601'. [ 180.913913][T13854] EXT4-fs: Ignoring removed nobh option [ 180.927830][T13854] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3602: iget: bad i_size value: 38620345925642 [ 180.940750][T13854] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3602: couldn't read orphan inode 15 (err -117) [ 180.954112][T13854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.993314][T13861] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.004084][T13861] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 181.004381][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.012270][T13861] EXT4-fs (loop8): orphan cleanup on readonly fs [ 181.027926][T13861] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.3605: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.041660][T13861] EXT4-fs (loop8): 1 orphan inode deleted [ 181.048006][T13861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.074550][T13864] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 181.082594][T13864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 181.090971][T13864] System zones: 0-1, 15-15, 18-18, 34-34 [ 181.091066][ T5943] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.105813][T13864] [ 181.108276][T13864] EXT4-fs (loop3): orphan cleanup on readonly fs [ 181.114701][T13864] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 181.124084][T13864] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 181.126333][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.138651][T13864] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 181.154218][T13864] EXT4-fs (loop3): 1 truncate cleaned up [ 181.154618][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.160930][T13864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.211229][ T6207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.248734][ T6207] syz_tun (unregistering): left allmulticast mode [ 181.256719][ T29] audit: type=1400 audit(1767513688.642:757): avc: denied { accept } for pid=13869 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.345672][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.421486][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.460390][T13897] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.483202][T13897] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 181.491449][T13897] EXT4-fs (loop7): orphan cleanup on readonly fs [ 181.492577][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3618'. [ 181.498210][T13897] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.3617: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.520424][T13897] EXT4-fs (loop7): 1 orphan inode deleted [ 181.526555][T13897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.527069][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.558130][ T5658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.569074][T13873] chnl_net:caif_netlink_parms(): no params data found [ 181.611309][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.638380][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.645551][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.653461][T13873] bridge_slave_0: entered allmulticast mode [ 181.659908][T13873] bridge_slave_0: entered promiscuous mode [ 181.666818][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.673896][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.681056][T13873] bridge_slave_1: entered allmulticast mode [ 181.687845][T13873] bridge_slave_1: entered promiscuous mode [ 181.710539][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.721214][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.769283][T13873] team0: Port device team_slave_0 added [ 181.781286][T13873] team0: Port device team_slave_1 added [ 181.879526][ T29] audit: type=1326 audit(1767513689.263:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13936 comm="syz.8.3629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8facb2f749 code=0x0 [ 181.910328][ T53] bond2 (unregistering): (slave gretap1): Releasing active interface [ 181.924336][ T53] dvmrp6 (unregistering): left allmulticast mode [ 182.050673][T13948] EXT4-fs: Ignoring removed orlov option [ 182.064639][T13948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.086378][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.107382][T13952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.119882][T13952] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.142041][ T6245] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.189069][ T53] bond0 (unregistering): Released all slaves [ 182.198924][ T53] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 182.213168][ T53] bond1 (unregistering): Released all slaves [ 182.221816][ T53] bond2 (unregistering): Released all slaves [ 182.237232][T13961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.253761][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.260728][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.286697][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.298778][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.305781][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.331678][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.343790][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.363711][ T53] tipc: Disabling bearer [ 182.364220][T13965] EXT4-fs: Ignoring removed nobh option [ 182.368987][ T53] tipc: Left network mode [ 182.380863][T13965] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3636: iget: bad i_size value: 38620345925642 [ 182.393900][T13965] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3636: couldn't read orphan inode 15 (err -117) [ 182.407257][T13965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.439014][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.458080][T13873] hsr_slave_0: entered promiscuous mode [ 182.481598][T13873] hsr_slave_1: entered promiscuous mode [ 182.502350][T13873] debugfs: 'hsr0' already exists in 'hsr' [ 182.508128][T13873] Cannot create hsr debugfs directory [ 182.514588][ T53] hsr_slave_0: left promiscuous mode [ 182.520361][ T53] hsr_slave_1: left promiscuous mode [ 182.536798][ T53] veth1_vlan: left promiscuous mode [ 182.542130][ T53] veth0_vlan: left promiscuous mode [ 182.690925][T13987] syzkaller1: entered allmulticast mode [ 182.768525][T14004] syzkaller0: entered promiscuous mode [ 182.774065][T14004] syzkaller0: entered allmulticast mode [ 182.873264][T14019] set_capacity_and_notify: 9 callbacks suppressed [ 182.873278][T14019] loop0: detected capacity change from 0 to 512 [ 182.905444][ T53] IPVS: stop unused estimator thread 0... [ 182.913350][T14019] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3652: invalid indirect mapped block 4294967295 (level 1) [ 182.934871][T14019] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3652: invalid indirect mapped block 4294967295 (level 1) [ 182.949807][T14019] EXT4-fs (loop0): 2 truncates cleaned up [ 182.956698][T14019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.991178][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.054296][ T29] audit: type=1326 audit(1767513690.443:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.0.3657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65250af749 code=0x0 [ 183.116100][T13873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.125886][T13873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.135929][T13873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.145589][T13873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.189503][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.203831][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.214522][ T874] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.221660][ T874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.235370][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.242539][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.265449][T13873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.275929][T13873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.343778][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.434124][T13873] veth0_vlan: entered promiscuous mode [ 183.448513][T13873] veth1_vlan: entered promiscuous mode [ 183.473740][T13873] veth0_macvtap: entered promiscuous mode [ 183.481649][T13873] veth1_macvtap: entered promiscuous mode [ 183.494606][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.505467][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.533752][ T6093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.543172][ T6093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.569604][ T6093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.598830][ T6093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.656214][T14122] tipc: Started in network mode [ 183.661098][T14122] tipc: Node identity b62063ecf4c7, cluster identity 4711 [ 183.668288][T14122] tipc: Enabled bearer , priority 0 [ 183.675921][T14122] syzkaller0: entered promiscuous mode [ 183.681398][T14122] syzkaller0: entered allmulticast mode [ 183.689507][T14122] tipc: Resetting bearer [ 183.696571][T14121] tipc: Resetting bearer [ 183.703119][T14121] tipc: Disabling bearer [ 183.760556][T14124] loop3: detected capacity change from 0 to 512 [ 183.769640][T14124] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3666: invalid indirect mapped block 4294967295 (level 1) [ 183.784815][T14124] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3666: invalid indirect mapped block 4294967295 (level 1) [ 183.799358][T14124] EXT4-fs (loop3): 2 truncates cleaned up [ 183.805526][T14124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.826301][T13873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.849993][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.864981][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.920283][T14129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3668'. [ 183.932436][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3668'. [ 183.971548][T14135] loop0: detected capacity change from 0 to 512 [ 183.979430][T14135] EXT4-fs: Ignoring removed nobh option [ 183.992556][T14140] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3673'. [ 184.005645][T14135] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3671: iget: bad i_size value: 38620345925642 [ 184.018572][T14135] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3671: couldn't read orphan inode 15 (err -117) [ 184.031408][T14135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.046272][T14135] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3671: bg 0: block 5: invalid block bitmap [ 184.069216][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.094957][ T29] audit: type=1400 audit(1767513691.474:760): avc: denied { mounton } for pid=14146 comm="syz.8.3677" path="/syzcgroup/net/syz8/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 184.154206][ T29] audit: type=1326 audit(1767513691.544:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.8.3679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8facb2f749 code=0x0 [ 184.295159][T14163] loop0: detected capacity change from 0 to 1024 [ 184.303298][T14163] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.314366][T14163] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 184.322657][T14163] EXT4-fs (loop0): orphan cleanup on readonly fs [ 184.329170][T14163] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3683: Freeing blocks not in datazone - block = 0, count = 4096 [ 184.342858][T14163] EXT4-fs (loop0): 1 orphan inode deleted [ 184.349165][T14163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.376471][ T6245] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.407941][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3684'. [ 184.454130][T14170] netlink: 'syz.0.3686': attribute type 5 has an invalid length. [ 185.082958][T14201] loop9: detected capacity change from 0 to 512 [ 185.151589][T14201] EXT4-fs: Ignoring removed nobh option [ 185.298327][T14201] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3700: iget: bad i_size value: 38620345925642 [ 185.560064][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 185.593923][T14201] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3700: couldn't read orphan inode 15 (err -117) [ 185.702269][T14201] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.792962][T14201] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3700: bg 0: block 5: invalid block bitmap [ 185.806366][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3709'. [ 185.907243][T10147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.019508][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.028047][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.065093][ T29] audit: type=1400 audit(1767513693.455:762): avc: denied { mounton } for pid=14251 comm="syz.0.3718" path="/523/file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 186.089716][T14256] 9p: Bad value for 'wfdno' [ 186.136255][T14260] loop3: detected capacity change from 0 to 1024 [ 186.150129][T14262] loop7: detected capacity change from 0 to 1024 [ 186.159196][T14260] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.172810][T14264] loop0: detected capacity change from 0 to 1024 [ 186.180521][T14264] EXT4-fs: Ignoring removed orlov option [ 186.227376][T14260] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.244813][T14262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.262957][T14264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.279453][T14260] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.290925][T14260] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3721: Freeing blocks not in datazone - block = 0, count = 4096 [ 186.330934][T14260] EXT4-fs (loop3): 1 orphan inode deleted [ 186.550138][ T3502] IPVS: starting estimator thread 0... [ 186.641155][T14294] IPVS: using max 2592 ests per chain, 129600 per kthread [ 186.642791][T14299] syzkaller0: entered promiscuous mode [ 186.653872][T14299] syzkaller0: entered allmulticast mode [ 186.678103][T14301] netlink: 'syz.9.3733': attribute type 5 has an invalid length. [ 186.792740][T14271] chnl_net:caif_netlink_parms(): no params data found [ 186.807697][T14309] loop8: detected capacity change from 0 to 512 [ 186.842908][T14309] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 186.872419][ T29] audit: type=1400 audit(1767513694.255:763): avc: denied { mounton } for pid=14306 comm="syz.0.3735" path="/proc/1196/task" dev="proc" ino=42391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 186.915417][T14271] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.922650][T14271] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.975536][T14271] bridge_slave_0: entered allmulticast mode [ 187.004085][T14271] bridge_slave_0: entered promiscuous mode [ 187.038148][T14320] syzkaller0: entered promiscuous mode [ 187.043879][T14320] syzkaller0: entered allmulticast mode [ 187.052593][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.059769][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.068774][T14271] bridge_slave_1: entered allmulticast mode [ 187.075652][T14271] bridge_slave_1: entered promiscuous mode [ 187.225578][T14271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.235819][T14271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.268371][T14271] team0: Port device team_slave_0 added [ 187.275597][T14271] team0: Port device team_slave_1 added [ 187.292483][T14271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.299450][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.325528][T14271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.337752][T14271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.344734][T14271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.370709][T14271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.413243][T14271] hsr_slave_0: entered promiscuous mode [ 187.419637][T14271] hsr_slave_1: entered promiscuous mode [ 187.425772][T14271] debugfs: 'hsr0' already exists in 'hsr' [ 187.431554][T14271] Cannot create hsr debugfs directory [ 187.471585][T14335] tipc: Enabled bearer , priority 0 [ 187.481000][T14335] syzkaller0: entered promiscuous mode [ 187.486532][T14335] syzkaller0: entered allmulticast mode [ 187.506298][T14335] tipc: Resetting bearer [ 187.517940][T14334] tipc: Resetting bearer [ 187.526528][T14334] tipc: Disabling bearer [ 187.566612][T14271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.577267][T14271] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.650801][T14271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.661300][T14271] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.745283][T14271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.755680][T14271] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.853325][T14271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.863644][T14271] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.109898][T14271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.144899][T14271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.200993][T14271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.262091][T14271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.370842][T14271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.384422][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3750'. [ 188.399913][T14271] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.423322][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.430468][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.454050][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.461146][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.478374][T14271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.488798][T14271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.515904][T14367] loop9: detected capacity change from 0 to 512 [ 188.523129][T14367] EXT4-fs: Ignoring removed nobh option [ 188.530292][T14367] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3752: iget: bad i_size value: 38620345925642 [ 188.543205][T14367] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3752: couldn't read orphan inode 15 (err -117) [ 188.668159][T14376] loop9: detected capacity change from 0 to 1024 [ 188.678418][T14376] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.726272][T14376] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 188.728696][T14271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.744943][T14385] loop3: detected capacity change from 0 to 512 [ 188.752247][T14385] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.769642][T14376] EXT4-fs (loop9): orphan cleanup on readonly fs [ 188.776140][T14376] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.3754: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.828265][T14376] EXT4-fs (loop9): 1 orphan inode deleted [ 188.861665][T14385] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 189.335872][T14413] loop9: detected capacity change from 0 to 1024 [ 189.424103][T14271] veth0_vlan: entered promiscuous mode [ 189.433161][T14271] veth1_vlan: entered promiscuous mode [ 189.451834][T14271] veth0_macvtap: entered promiscuous mode [ 189.460113][T14271] veth1_macvtap: entered promiscuous mode [ 189.487883][T14271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.497128][T14271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.518885][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.534084][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.552790][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.701523][T14432] loop8: detected capacity change from 0 to 512 [ 189.783236][T14432] EXT4-fs: Ignoring removed nobh option [ 189.882759][T14432] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3772: iget: bad i_size value: 38620345925642 [ 189.927395][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.939576][T14432] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3772: couldn't read orphan inode 15 (err -117) [ 190.018389][T14447] 9p: Bad value for 'rfdno' [ 190.030311][T14449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3777'. [ 190.129594][T14463] loop9: detected capacity change from 0 to 128 [ 190.154277][T14463] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.277068][T14476] loop0: detected capacity change from 0 to 512 [ 190.292115][T14472] 9p: Bad value for 'rfdno' [ 190.301501][T14476] EXT4-fs: Ignoring removed nobh option [ 190.308525][T14476] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3790: iget: bad i_size value: 38620345925642 [ 190.321660][T14476] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3790: couldn't read orphan inode 15 (err -117) [ 190.339619][T14476] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3790: bg 0: block 5: invalid block bitmap [ 190.589802][T14505] loop3: detected capacity change from 0 to 1024 [ 190.634222][T14505] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.706526][T14508] loop0: detected capacity change from 0 to 512 [ 190.713723][T14505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 190.746235][T14508] EXT4-fs: Ignoring removed nobh option [ 190.788707][T14508] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3803: iget: bad i_size value: 38620345925642 [ 190.803678][T14505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 190.811498][T14505] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3802: Freeing blocks not in datazone - block = 0, count = 4096 [ 190.825475][T14508] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3803: couldn't read orphan inode 15 (err -117) [ 190.838771][T14505] EXT4-fs (loop3): 1 orphan inode deleted [ 190.859499][T14508] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3803: bg 0: block 5: invalid block bitmap [ 190.934635][T14514] loop0: detected capacity change from 0 to 512 [ 190.953349][T14514] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 191.020035][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'. [ 191.078073][T14535] EXT4-fs: Ignoring removed orlov option [ 191.137578][T14542] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.158996][T14540] net_ratelimit: 11 callbacks suppressed [ 191.159005][T14540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.172264][T14542] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 191.195203][T14542] EXT4-fs (loop9): orphan cleanup on readonly fs [ 191.201877][T14542] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.3815: Freeing blocks not in datazone - block = 0, count = 4096 [ 191.215713][T14542] EXT4-fs (loop9): 1 orphan inode deleted [ 191.328679][T14559] syzkaller0: entered promiscuous mode [ 191.334192][T14559] syzkaller0: entered allmulticast mode [ 191.445158][T14577] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3832'. [ 191.454436][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.461547][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.494866][T14579] ext4 filesystem being mounted at /585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.681527][ T29] audit: type=1400 audit(1767513699.067:764): avc: denied { read write } for pid=14597 comm="syz.8.3842" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 191.706167][ T29] audit: type=1400 audit(1767513699.067:765): avc: denied { open } for pid=14597 comm="syz.8.3842" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 191.806661][T14611] 9p: Bad value for 'rfdno' [ 191.831375][T14613] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 192.212407][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.247130][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.290079][T14641] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 192.310852][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3855'. [ 192.603688][T14658] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.955513][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3873'. [ 192.982243][ T29] audit: type=1400 audit(1767513700.368:766): avc: denied { write } for pid=14664 comm="syz.0.3870" path="socket:[44675]" dev="sockfs" ino=44675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 193.024887][T14678] syzkaller0: entered promiscuous mode [ 193.030557][T14678] syzkaller0: entered allmulticast mode [ 193.430958][T14700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.441993][T14700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.085262][T14709] set_capacity_and_notify: 6 callbacks suppressed [ 194.085279][T14709] loop9: detected capacity change from 0 to 32768 [ 194.136487][T14722] syzkaller0: entered promiscuous mode [ 194.142049][T14722] syzkaller0: entered allmulticast mode [ 194.193019][T14726] loop3: detected capacity change from 0 to 256 [ 194.275178][T14726] FAT-fs (loop3): Directory bread(block 64) failed [ 194.282273][T14726] FAT-fs (loop3): Directory bread(block 65) failed [ 194.289353][T14726] FAT-fs (loop3): Directory bread(block 66) failed [ 194.295969][T14726] FAT-fs (loop3): Directory bread(block 67) failed [ 194.312437][T14726] FAT-fs (loop3): Directory bread(block 68) failed [ 194.319206][T14726] FAT-fs (loop3): Directory bread(block 69) failed [ 194.325789][T14726] FAT-fs (loop3): Directory bread(block 70) failed [ 194.332357][T14726] FAT-fs (loop3): Directory bread(block 71) failed [ 194.378368][T14726] FAT-fs (loop3): Directory bread(block 72) failed [ 194.407141][T14726] FAT-fs (loop3): Directory bread(block 73) failed [ 194.445216][T14726] bio_check_eod: 6856 callbacks suppressed [ 194.445234][T14726] syz.3.3892: attempt to access beyond end of device [ 194.445234][T14726] loop3: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 194.480273][T14744] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.874822][T14736] chnl_net:caif_netlink_parms(): no params data found [ 195.259442][T14790] loop3: detected capacity change from 0 to 1024 [ 195.313226][T14790] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.393820][T14790] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 195.410163][T14790] EXT4-fs (loop3): orphan cleanup on readonly fs [ 195.419975][T14790] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.3912: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.503522][T14790] EXT4-fs (loop3): 1 orphan inode deleted [ 195.568184][T14736] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.575368][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.591270][T14798] loop9: detected capacity change from 0 to 512 [ 195.594442][T14736] bridge_slave_0: entered allmulticast mode [ 195.611800][T14736] bridge_slave_0: entered promiscuous mode [ 195.619009][T14798] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 195.619219][T14736] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.635136][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.650094][T14736] bridge_slave_1: entered allmulticast mode [ 195.656773][T14736] bridge_slave_1: entered promiscuous mode [ 195.691099][T14736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.702625][T14736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.730916][T14736] team0: Port device team_slave_0 added [ 195.752611][T14736] team0: Port device team_slave_1 added [ 195.791422][T14736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.798438][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.824337][T14736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.842404][T14736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.849462][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.875465][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.998562][T14736] hsr_slave_0: entered promiscuous mode [ 196.004784][T14736] hsr_slave_1: entered promiscuous mode [ 196.011254][T14736] debugfs: 'hsr0' already exists in 'hsr' [ 196.017031][T14736] Cannot create hsr debugfs directory [ 196.159652][T14830] loop0: detected capacity change from 0 to 512 [ 196.222124][T14830] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 196.439223][T14736] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.512738][T14736] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.555652][T14870] loop7: detected capacity change from 0 to 512 [ 196.563321][T14870] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 196.587490][T14736] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.650283][ T29] audit: type=1400 audit(1767513704.040:767): avc: denied { unmount } for pid=13873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.707682][T14736] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.724051][T14891] loop9: detected capacity change from 0 to 1024 [ 196.753361][T14891] EXT4-fs: Ignoring removed orlov option [ 196.759125][T14891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.833968][T14903] syzkaller0: entered promiscuous mode [ 196.839534][T14903] syzkaller0: entered allmulticast mode [ 196.863757][T14891] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 196.876133][T14891] EXT4-fs (loop9): This should not happen!! Data will be lost [ 196.876133][T14891] [ 196.881218][T14736] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 196.885784][T14891] EXT4-fs (loop9): Total free blocks count 0 [ 196.885799][T14891] EXT4-fs (loop9): Free/Dirty block details [ 196.904455][T14891] EXT4-fs (loop9): free_blocks=0 [ 196.909441][T14891] EXT4-fs (loop9): dirty_blocks=0 [ 196.914490][T14891] EXT4-fs (loop9): Block reservation details [ 196.920650][T14891] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 196.931436][T14736] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 196.941819][T14736] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 196.956636][T14736] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 197.017751][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.033107][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.067992][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.075208][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.096409][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.103511][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.134505][T14736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.144987][T14736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.494729][T14736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.643860][T14736] veth0_vlan: entered promiscuous mode [ 197.659044][T14736] veth1_vlan: entered promiscuous mode [ 197.683799][T14736] veth0_macvtap: entered promiscuous mode [ 197.692508][T14736] veth1_macvtap: entered promiscuous mode [ 197.708602][T14736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.724064][T14736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.739826][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.748886][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.758958][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.770468][ T6101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.779516][T14959] syzkaller0: entered promiscuous mode [ 197.785023][T14959] syzkaller0: entered allmulticast mode [ 197.964629][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.977804][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.239789][T14993] syzkaller0: entered promiscuous mode [ 198.245394][T14993] syzkaller0: entered allmulticast mode [ 198.509773][T15001] loop7: detected capacity change from 0 to 512 [ 198.521939][T15001] EXT4-fs: dax option not supported [ 198.937207][T15021] syzkaller0: entered promiscuous mode [ 198.942809][T15021] syzkaller0: entered allmulticast mode [ 199.786511][T15045] loop3: detected capacity change from 0 to 1024 [ 199.808221][T15045] EXT4-fs: Ignoring removed orlov option [ 199.814004][T15045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.653775][ T29] audit: type=1400 audit(1767513708.052:768): avc: denied { ioctl } for pid=15068 comm="" path="socket:[46454]" dev="sockfs" ino=46454 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.831048][T15081] loop7: detected capacity change from 0 to 1024 [ 200.839018][T15081] EXT4-fs: Ignoring removed orlov option [ 200.844818][T15081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.807752][T15119] loop7: detected capacity change from 0 to 1024 [ 201.824558][T15119] EXT4-fs: Ignoring removed orlov option [ 201.830376][T15119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.870829][ T29] audit: type=1400 audit(1767513709.263:769): avc: denied { bind } for pid=15127 comm="syz.8.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.926705][T15130] loop8: detected capacity change from 0 to 128 [ 201.950066][T15130] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.252034][ T29] audit: type=1400 audit(1767513709.593:770): avc: denied { add_name } for pid=15127 comm="syz.8.4036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.568657][T15161] loop3: detected capacity change from 0 to 1024 [ 202.575528][T15161] EXT4-fs: Ignoring removed orlov option [ 202.581222][T15161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.597841][T15161] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 202.610249][T15161] EXT4-fs (loop3): This should not happen!! Data will be lost [ 202.610249][T15161] [ 202.620008][T15161] EXT4-fs (loop3): Total free blocks count 0 [ 202.626044][T15161] EXT4-fs (loop3): Free/Dirty block details [ 202.632011][T15161] EXT4-fs (loop3): free_blocks=0 [ 202.636990][T15161] EXT4-fs (loop3): dirty_blocks=0 [ 202.642011][T15161] EXT4-fs (loop3): Block reservation details [ 202.648057][T15161] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 202.866980][T15173] loop8: detected capacity change from 0 to 256 [ 202.873731][T15176] syzkaller0: entered promiscuous mode [ 202.879222][T15176] syzkaller0: entered allmulticast mode [ 203.066791][T15173] FAT-fs (loop8): codepage cp932 not found [ 203.359168][T15197] loop0: detected capacity change from 0 to 256 [ 203.465324][T15197] FAT-fs (loop0): Directory bread(block 64) failed [ 203.519647][T15197] FAT-fs (loop0): Directory bread(block 65) failed [ 203.526274][T15197] FAT-fs (loop0): Directory bread(block 66) failed [ 203.532830][T15197] FAT-fs (loop0): Directory bread(block 67) failed [ 203.539522][T15197] FAT-fs (loop0): Directory bread(block 68) failed [ 203.552264][T15197] FAT-fs (loop0): Directory bread(block 69) failed [ 203.563269][T15197] FAT-fs (loop0): Directory bread(block 70) failed [ 203.581207][T15200] netlink: 'syz.9.4062': attribute type 12 has an invalid length. [ 203.589610][T15197] FAT-fs (loop0): Directory bread(block 71) failed [ 203.603403][T15197] FAT-fs (loop0): Directory bread(block 72) failed [ 203.617045][T15197] FAT-fs (loop0): Directory bread(block 73) failed [ 204.126870][T15255] loop7: detected capacity change from 0 to 256 [ 204.147779][T15255] FAT-fs (loop7): Directory bread(block 64) failed [ 204.161835][T15255] FAT-fs (loop7): Directory bread(block 65) failed [ 204.174553][T15255] FAT-fs (loop7): Directory bread(block 66) failed [ 204.189674][T15255] FAT-fs (loop7): Directory bread(block 67) failed [ 204.197034][T15255] FAT-fs (loop7): Directory bread(block 68) failed [ 204.209490][T15259] syzkaller0: entered promiscuous mode [ 204.215052][T15259] syzkaller0: entered allmulticast mode [ 204.215058][T15255] FAT-fs (loop7): Directory bread(block 69) failed [ 204.227409][T15255] FAT-fs (loop7): Directory bread(block 70) failed [ 204.234538][T15255] FAT-fs (loop7): Directory bread(block 71) failed [ 204.241143][T15255] FAT-fs (loop7): Directory bread(block 72) failed [ 204.247977][T15255] FAT-fs (loop7): Directory bread(block 73) failed [ 204.350946][ T29] audit: type=1400 audit(1767513711.744:771): avc: denied { ioctl } for pid=15268 comm="syz.0.4095" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 204.562850][T15274] chnl_net:caif_netlink_parms(): no params data found [ 204.586173][T15290] loop7: detected capacity change from 0 to 1024 [ 204.594455][T15290] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.605599][T15290] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 204.614036][T15290] EXT4-fs (loop7): orphan cleanup on readonly fs [ 204.620628][T15290] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.4100: Freeing blocks not in datazone - block = 0, count = 4096 [ 204.634545][T15290] EXT4-fs (loop7): 1 orphan inode deleted [ 204.641174][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.648370][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.655748][T15290] EXT4-fs mount: 40 callbacks suppressed [ 204.655760][T15290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.675346][T15274] bridge_slave_0: entered allmulticast mode [ 204.682390][T15274] bridge_slave_0: entered promiscuous mode [ 204.689381][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.696704][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.704319][T15274] bridge_slave_1: entered allmulticast mode [ 204.713791][T14271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.714399][T15274] bridge_slave_1: entered promiscuous mode [ 204.754422][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.765228][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.774600][T15298] syzkaller0: entered promiscuous mode [ 204.780141][T15298] syzkaller0: entered allmulticast mode [ 204.791179][T15302] loop7: detected capacity change from 0 to 256 [ 204.813427][T15302] FAT-fs (loop7): Directory bread(block 64) failed [ 204.820163][T15302] FAT-fs (loop7): Directory bread(block 65) failed [ 204.826935][T15302] FAT-fs (loop7): Directory bread(block 66) failed [ 204.835134][T15274] team0: Port device team_slave_0 added [ 204.835685][T15302] FAT-fs (loop7): Directory bread(block 67) failed [ 204.842344][T15274] team0: Port device team_slave_1 added [ 204.848876][T15302] FAT-fs (loop7): Directory bread(block 68) failed [ 204.860006][T15302] FAT-fs (loop7): Directory bread(block 69) failed [ 204.866737][T15302] FAT-fs (loop7): Directory bread(block 70) failed [ 204.873447][T15302] FAT-fs (loop7): Directory bread(block 71) failed [ 204.880081][T15302] FAT-fs (loop7): Directory bread(block 72) failed [ 204.881012][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.886764][T15302] FAT-fs (loop7): Directory bread(block 73) failed [ 204.893627][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.893717][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.953332][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.960441][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.986515][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.024560][T15274] hsr_slave_0: entered promiscuous mode [ 205.031812][T15274] hsr_slave_1: entered promiscuous mode [ 205.037883][T15274] debugfs: 'hsr0' already exists in 'hsr' [ 205.043678][T15274] Cannot create hsr debugfs directory [ 207.087655][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4117'. [ 207.273886][T15335] syzkaller0: entered promiscuous mode [ 207.279451][T15335] syzkaller0: entered allmulticast mode [ 207.530503][ T6093] netdevsim netdevsim0 netdevsim3 (unregistering): left allmulticast mode [ 207.548050][ T6093] netdevsim netdevsim0 netdevsim3 (unregistering): left promiscuous mode [ 207.556720][ T6093] bridge0: port 3(netdevsim3) entered disabled state [ 209.243439][ T29] audit: type=1400 audit(1767513716.636:772): avc: denied { ioctl } for pid=15378 comm="syz.9.4133" path="socket:[47931]" dev="sockfs" ino=47931 ioctlcmd=0x8911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.811335][T15394] loop3: detected capacity change from 0 to 256 [ 209.865371][T15394] FAT-fs (loop3): Directory bread(block 64) failed [ 209.890337][T15394] FAT-fs (loop3): Directory bread(block 65) failed [ 209.908906][T15394] FAT-fs (loop3): Directory bread(block 66) failed [ 209.931340][T15394] FAT-fs (loop3): Directory bread(block 67) failed [ 209.945789][T15394] FAT-fs (loop3): Directory bread(block 68) failed [ 209.959677][T15394] FAT-fs (loop3): Directory bread(block 69) failed [ 209.973248][T15394] FAT-fs (loop3): Directory bread(block 70) failed [ 209.992042][T15394] FAT-fs (loop3): Directory bread(block 71) failed [ 210.007146][T15394] FAT-fs (loop3): Directory bread(block 72) failed [ 210.014216][T15394] FAT-fs (loop3): Directory bread(block 73) failed [ 210.139881][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 210.186187][ T6093] bridge_slave_1: left allmulticast mode [ 210.191931][ T6093] bridge_slave_1: left promiscuous mode [ 210.197569][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.210766][ T6093] bridge_slave_0: left allmulticast mode [ 210.216518][ T6093] bridge_slave_0: left promiscuous mode [ 210.222285][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.139422][T15319] Set syz1 is full, maxelem 65536 reached [ 212.660198][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.672373][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.682249][ T6093] bond0 (unregistering): Released all slaves [ 212.740372][ T6093] tipc: Disabling bearer [ 212.745638][ T6093] tipc: Left network mode [ 212.753326][ T6093] hsr_slave_0: left promiscuous mode [ 212.764474][ T6093] hsr_slave_1: left promiscuous mode [ 212.776640][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.796902][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.806115][ T6093] batman_adv: batadv0: Interface deactivated: dummy0 [ 212.812869][ T6093] batman_adv: batadv0: Removing interface: dummy0 [ 212.845168][T15458] loop7: detected capacity change from 0 to 1024 [ 212.855136][T15458] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.870542][T15458] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 212.878715][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 212.878720][T15458] EXT4-fs (loop7): orphan cleanup on readonly fs [ 212.878845][T15458] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.4149: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.905802][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 212.905801][T15458] EXT4-fs (loop7): 1 orphan inode deleted [ 212.905924][ T6093] ================================================================== [ 212.905949][ T6093] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 212.905982][ T6093] [ 212.905989][ T6093] write to 0xffffffff88ec2fbc of 13 bytes by task 15458 on cpu 1: [ 212.906005][ T6093] vsnprintf+0x2ce/0x860 [ 212.906024][ T6093] pointer+0x821/0xcb0 [ 212.906043][ T6093] vsnprintf+0x491/0x860 [ 212.906060][ T6093] vscnprintf+0x41/0x90 [ 212.906077][ T6093] printk_sprint+0x30/0x2d0 [ 212.906103][ T6093] vprintk_store+0x568/0x830 [ 212.906126][ T6093] vprintk_emit+0x15a/0x5c0 [ 212.906150][ T6093] vprintk_default+0x26/0x30 [ 212.906178][ T6093] vprintk+0x1d/0x30 [ 212.906200][ T6093] _printk+0x79/0xa0 [ 212.906218][ T6093] __ext4_msg+0x18f/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.906234][ T6093] ext4_orphan_cleanup+0x8e2/0xa00 [ 212.906254][ T6093] ext4_fill_super+0x3411/0x37a0 [ 212.906280][ T6093] get_tree_bdev_flags+0x291/0x300 [ 212.906301][ T6093] get_tree_bdev+0x1f/0x30 [ 212.906298][T15458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.906319][ T6093] ext4_get_tree+0x1c/0x30 [ 212.906337][ T6093] vfs_get_tree+0x57/0x1d0 [ 212.906353][ T6093] do_new_mount+0x24d/0x6a0 [ 212.906370][ T6093] path_mount+0x4ab/0xb80 [ 212.906385][ T6093] __se_sys_mount+0x28c/0x2e0 [ 212.906403][ T6093] __x64_sys_mount+0x67/0x80 [ 212.906420][ T6093] x64_sys_call+0x2cca/0x3000 [ 212.906441][ T6093] do_syscall_64+0xca/0x2b0 [ 212.906466][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.906484][ T6093] [ 212.906490][ T6093] read to 0xffffffff88ec2fc0 of 8 bytes by task 6093 on cpu 0: [ 212.906507][ T6093] data_push_tail+0x100/0x470 [ 212.906532][ T6093] data_alloc+0x11b/0x390 [ 212.906553][ T6093] prb_reserve+0x8d7/0xad0 [ 212.906573][ T6093] vprintk_store+0x53c/0x830 [ 212.906595][ T6093] vprintk_emit+0x15a/0x5c0 [ 212.906619][ T6093] vprintk_default+0x26/0x30 [ 212.906644][ T6093] vprintk+0x1d/0x30 [ 212.906663][ T6093] _printk+0x79/0xa0 [ 212.906680][ T6093] __netdev_printk+0x310/0x370 [ 212.906706][ T6093] netdev_info+0x9b/0xd0 [ 212.906732][ T6093] team_port_del+0x667/0x6f0 [ 212.906757][ T6093] team_device_event+0x13c/0x380 [ 212.906783][ T6093] raw_notifier_call_chain+0x6f/0x1b0 [ 212.906812][ T6093] unregister_netdevice_many_notify+0xea0/0x16d0 [ 212.906842][ T6093] default_device_exit_batch+0x5cb/0x620 [ 212.906864][ T6093] ops_undo_list+0x2c0/0x410 [ 212.906884][ T6093] cleanup_net+0x2f4/0x520 [ 212.906904][ T6093] process_scheduled_works+0x4ce/0x9d0 [ 212.906927][ T6093] worker_thread+0x582/0x770 [ 212.906950][ T6093] kthread+0x489/0x510 [ 212.906975][ T6093] ret_from_fork+0x149/0x290 [ 212.906999][ T6093] ret_from_fork_asm+0x1a/0x30 [ 212.907022][ T6093] [ 212.907027][ T6093] value changed: 0x00000000ffffe893 -> 0x2065646f6e69206e [ 212.907039][ T6093] [ 212.907044][ T6093] Reported by Kernel Concurrency Sanitizer on: [ 212.907073][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.907100][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.907115][ T6093] Workqueue: netns cleanup_net [ 212.907138][ T6093] ================================================================== [ 213.051517][ T29] audit: type=1400 audit(1767513720.428:773): avc: denied { recv } for pid=15435 comm="syz.8.4147" saddr=10.128.0.163 src=32832 daddr=10.128.0.228 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.183398][T14271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.630407][ T6093] IPVS: stop unused estimator thread 0... [ 213.712113][ T6093] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.759487][ T6093] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.818922][ T6093] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.869065][ T6093] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.947322][ T6093] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.989426][ T6093] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.039622][ T6093] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.091053][ T6093] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.163920][ T6093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.199556][ T6093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.260987][ T6093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.300143][ T6093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.367427][ T6093] bridge_slave_1: left allmulticast mode [ 214.373108][ T6093] bridge_slave_1: left promiscuous mode [ 214.378845][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.386353][ T6093] bridge_slave_0: left allmulticast mode [ 214.392053][ T6093] bridge_slave_0: left promiscuous mode [ 214.397728][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.405845][ T6093] bridge_slave_1: left allmulticast mode [ 214.411542][ T6093] bridge_slave_1: left promiscuous mode [ 214.417271][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.425094][ T6093] bridge_slave_0: left allmulticast mode [ 214.430789][ T6093] bridge_slave_0: left promiscuous mode [ 214.436597][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.444783][ T6093] bridge_slave_1: left allmulticast mode [ 214.450459][ T6093] bridge_slave_1: left promiscuous mode [ 214.456040][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.463986][ T6093] bridge_slave_0: left allmulticast mode [ 214.469655][ T6093] bridge_slave_0: left promiscuous mode [ 214.475276][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.483630][ T6093] bridge_slave_1: left allmulticast mode [ 214.489355][ T6093] bridge_slave_1: left promiscuous mode [ 214.495493][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.503307][ T6093] bridge_slave_0: left allmulticast mode [ 214.508985][ T6093] bridge_slave_0: left promiscuous mode [ 214.514640][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.658630][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.668381][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.677848][ T6093] bond0 (unregistering): Released all slaves [ 214.718910][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.728762][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.738350][ T6093] bond0 (unregistering): Released all slaves [ 214.828687][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.838455][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.848182][ T6093] bond0 (unregistering): Released all slaves [ 214.909001][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.918549][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.928160][ T6093] bond0 (unregistering): Released all slaves [ 215.048340][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.058284][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.067932][ T6093] bond0 (unregistering): Released all slaves [ 215.103741][ T6093] tipc: Left network mode [ 215.108699][ T6093] tipc: Disabling bearer [ 215.113981][ T6093] tipc: Left network mode [ 215.128748][ T6093] hsr_slave_0: left promiscuous mode [ 215.134633][ T6093] hsr_slave_1: left promiscuous mode [ 215.140661][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.149305][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.159735][ T6093] hsr_slave_0: left promiscuous mode [ 215.165527][ T6093] hsr_slave_1: left promiscuous mode [ 215.171544][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.179002][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.186896][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.194291][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.204712][ T6093] hsr_slave_0: left promiscuous mode [ 215.210466][ T6093] hsr_slave_1: left promiscuous mode [ 215.216246][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.223688][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.231766][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.239285][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.248640][ T6093] hsr_slave_0: left promiscuous mode [ 215.254258][ T6093] hsr_slave_1: left promiscuous mode [ 215.259876][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.267386][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.274879][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.282296][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.291270][ T6093] hsr_slave_0: left promiscuous mode [ 215.296840][ T6093] hsr_slave_1: left promiscuous mode [ 215.302445][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.309939][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.317642][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.324993][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.342356][ T6093] veth1_macvtap: left promiscuous mode [ 215.347853][ T6093] veth0_macvtap: left promiscuous mode [ 215.353343][ T6093] veth1_vlan: left promiscuous mode [ 215.358623][ T6093] veth0_vlan: left promiscuous mode [ 215.364209][ T6093] veth1_macvtap: left promiscuous mode [ 215.369778][ T6093] veth0_macvtap: left promiscuous mode [ 215.375248][ T6093] veth1_vlan: left promiscuous mode [ 215.380794][ T6093] veth0_vlan: left promiscuous mode [ 215.386937][ T6093] veth1_macvtap: left promiscuous mode [ 215.392402][ T6093] veth0_macvtap: left promiscuous mode [ 215.397980][ T6093] veth1_vlan: left promiscuous mode [ 215.403207][ T6093] veth0_vlan: left promiscuous mode [ 215.408951][ T6093] veth1_macvtap: left promiscuous mode [ 215.414520][ T6093] veth0_macvtap: left promiscuous mode [ 215.420034][ T6093] veth1_vlan: left promiscuous mode [ 215.425296][ T6093] veth0_vlan: left promiscuous mode [ 215.565776][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 215.574999][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 215.623849][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 215.634022][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 215.684875][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 215.694064][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 215.743206][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 215.752636][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 215.800711][ T6093] team0 (unregistering): Port device team_slave_1 removed [ 215.811007][ T6093] team0 (unregistering): Port device team_slave_0 removed [ 216.864534][ T6093] IPVS: stop unused estimator thread 0... [ 216.870723][ T6093] IPVS: stop unused estimator thread 0...