last executing test programs: 3m49.095223757s ago: executing program 32 (id=939): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x7fffffff, 0x7, 0x400, {0x4, 0x0, 0x9b1, 0x63c8, 0x800}, {0x5, 0x2, 0x8, 0x7fff, 0xff, 0x8000}, 0x400, 0x16ff, 0x7}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m10.500193509s ago: executing program 33 (id=1981): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x4481, 0x3380, 0x1, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x3, 0x8000000000, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x14, 0x63, 0x0, 0x0) 2m57.10895699s ago: executing program 34 (id=2767): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000304000000000000000200030003"], 0x58) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 2m33.401760671s ago: executing program 1 (id=3534): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) 2m33.358093084s ago: executing program 1 (id=3537): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfa, 0x0, 0x7ffc0002}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 2m33.290466808s ago: executing program 1 (id=3540): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/104, 0x68}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m33.188653154s ago: executing program 1 (id=3541): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00602000000590000a2bc5603ca00000f7f89000000200000000101ff000000030909000000000000005e00000000000000", 0x48}], 0x1) 2m33.162526775s ago: executing program 1 (id=3543): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 2m33.0957326s ago: executing program 1 (id=3545): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sync() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 2m18.073205167s ago: executing program 35 (id=3545): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sync() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 2m6.047358279s ago: executing program 2 (id=4294): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000200011000300686173683a6e65742c6e65740000000005000400010000000900020073797a30000000000500050002000000050001000600000014000780080006400000010008000840"], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m5.935989065s ago: executing program 2 (id=4295): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x21ccb88599b775, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2m5.763235455s ago: executing program 2 (id=4300): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040), 0x4) 2m5.69194159s ago: executing program 2 (id=4304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003800ffcf000000000000000003"], 0x18}}, 0x0) 2m5.637476753s ago: executing program 2 (id=4305): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) 2m5.365849629s ago: executing program 2 (id=4313): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m50.327701308s ago: executing program 36 (id=4313): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1m26.308653018s ago: executing program 5 (id=5372): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x860, 0x10000, 0x0, 0x5, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420e, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m25.569599941s ago: executing program 5 (id=5398): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m25.284488298s ago: executing program 5 (id=5410): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 1m25.24389325s ago: executing program 5 (id=5412): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) 1m25.130301877s ago: executing program 5 (id=5418): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m25.102523139s ago: executing program 5 (id=5420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0xc}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040) 1m9.999940762s ago: executing program 37 (id=5420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0xc}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040) 33.392241016s ago: executing program 8 (id=7087): r0 = msgget$private(0x0, 0x7ac) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) 32.497163999s ago: executing program 8 (id=7113): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "db3000"}, 0x10}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) 32.415007543s ago: executing program 8 (id=7120): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x7, @empty, 'macvlan1\x00'}}, 0x1e) r1 = dup(r0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5ea}}, 0x8001) 32.332946968s ago: executing program 8 (id=7123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 31.735902824s ago: executing program 8 (id=7137): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x60000008}) 30.703188275s ago: executing program 8 (id=7158): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0xff, 0x7c}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 30.62047941s ago: executing program 38 (id=7158): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0xff, 0x7c}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 13.292433944s ago: executing program 9 (id=7752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 13.062549938s ago: executing program 9 (id=7765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 13.017777861s ago: executing program 0 (id=7766): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f6884030006000000000002004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e01010000000000000000020013"], 0x70}, 0x1, 0x7}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 12.802907843s ago: executing program 9 (id=7768): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@report={0x4c, 0x20, 0x1, 0x6, 0x25dfdbfe, {0x33, {@in=@loopback, @in=@private=0xa010101, 0x4e21, 0xfff, 0x4e24, 0x6, 0xa, 0x20, 0x20, 0x3c}}}, 0x4c}}, 0x0) 12.68245859s ago: executing program 9 (id=7774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x30000c6, &(0x7f00000134c0), 0x1, 0x561, &(0x7f0000001c40)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x101080, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 12.616556734s ago: executing program 9 (id=7778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 12.551230918s ago: executing program 0 (id=7782): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback, 0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) 12.442051134s ago: executing program 0 (id=7788): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 12.372536649s ago: executing program 0 (id=7792): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x42600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 12.316590111s ago: executing program 0 (id=7795): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12.240638536s ago: executing program 9 (id=7797): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 12.206931058s ago: executing program 39 (id=7797): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 12.1840871s ago: executing program 0 (id=7799): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1.947773355s ago: executing program 7 (id=8020): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240), 0x4) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x40000}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) 1.838365161s ago: executing program 7 (id=8023): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 1.213284468s ago: executing program 6 (id=8033): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) write(r0, 0x0, 0x0) 1.124621563s ago: executing program 7 (id=8035): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x0) 1.070798026s ago: executing program 6 (id=8039): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x44, r2, 0x917, 0x200, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x44}}, 0x4010) 1.032940279s ago: executing program 6 (id=8041): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x200088e, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@init_itable}, {@lazytime}, {@nodelalloc}, {@nogrpid}]}, 0x3, 0x45e, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2a4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d7) 884.041048ms ago: executing program 6 (id=8043): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 831.456961ms ago: executing program 6 (id=8045): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 666.35709ms ago: executing program 3 (id=8047): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) 637.990552ms ago: executing program 6 (id=8048): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 608.928714ms ago: executing program 3 (id=8049): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) 401.139566ms ago: executing program 4 (id=8054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x19, &(0x7f0000000000)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@llc={0xff, 0x4e, "e8"}}}}}}, 0x0) 378.787157ms ago: executing program 4 (id=8055): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x38}, 0x40) 370.157478ms ago: executing program 3 (id=8056): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 334.86919ms ago: executing program 3 (id=8057): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x63fb, 0x810, 0xfffffffb, 0x1008168}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) fgetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='sy'], &(0x7f0000000340)=""/198, 0xc6) 250.788875ms ago: executing program 7 (id=8058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 236.348306ms ago: executing program 3 (id=8059): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 203.168858ms ago: executing program 7 (id=8060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 168.43048ms ago: executing program 4 (id=8061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 158.965151ms ago: executing program 7 (id=8062): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) exit(0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 69.370646ms ago: executing program 4 (id=8063): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/230, 0xe6}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/46, 0x2e}}], 0x2, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 0s ago: executing program 4 (id=8064): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000009c0)={0x6, 0x5, 0x0, 0x43c}) kernel console output (not intermixed with test programs): /syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 245.777780][ T29] audit: type=1326 audit(2000000450.184:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 245.820270][T18545] loop6: detected capacity change from 0 to 2048 [ 245.869697][ T3312] Alternate GPT is invalid, using primary GPT. [ 245.876232][ T3312] loop6: p2 p3 p7 [ 245.946937][T18545] Alternate GPT is invalid, using primary GPT. [ 245.953375][T18545] loop6: p2 p3 p7 [ 246.018109][ T29] audit: type=1326 audit(2000000450.244:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.029644][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 246.043218][ T29] audit: type=1326 audit(2000000450.244:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.075221][ T29] audit: type=1326 audit(2000000450.244:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.078602][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 246.101201][ T29] audit: type=1326 audit(2000000450.254:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.113362][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 246.133933][ T29] audit: type=1326 audit(2000000450.254:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.167023][ T29] audit: type=1326 audit(2000000450.254:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.190615][ T29] audit: type=1326 audit(2000000450.254:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18543 comm="syz.8.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b112acb9 code=0x7ffc0000 [ 246.261098][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 246.272503][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 246.329347][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 246.515675][T18602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.539402][T18602] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6044: iget: bad extended attribute block 262144 [ 246.597576][T18602] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6044: couldn't read orphan inode 15 (err -117) [ 246.647207][T18602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.771857][ T29] audit: type=1400 audit(2000000451.214:1473): avc: denied { unmount } for pid=17941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 246.793730][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.927132][T18625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.963498][T18632] syz.8.6051 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 247.000289][T18625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.112244][T18625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.183742][T18654] hub 6-0:1.0: USB hub found [ 247.189153][T18654] hub 6-0:1.0: 8 ports detected [ 247.220507][T18625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.322273][T18671] set_capacity_and_notify: 2 callbacks suppressed [ 247.322294][T18671] loop8: detected capacity change from 0 to 256 [ 247.343819][ T2591] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.348024][T18671] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.394123][ T71] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.406542][T18671] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.429543][ T71] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.469376][ T71] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.521887][T18680] netlink: 'syz.4.6067': attribute type 13 has an invalid length. [ 247.562378][T18682] loop7: detected capacity change from 0 to 128 [ 247.633758][T18680] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.641253][T18680] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.711763][T18680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.723439][T18680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.769869][T18684] netlink: 'syz.8.6068': attribute type 1 has an invalid length. [ 247.833503][T18684] netlink: 'syz.8.6068': attribute type 2 has an invalid length. [ 247.901982][ T383] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.913218][ T383] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.931192][ T383] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.952961][ T383] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.196357][T18713] loop7: detected capacity change from 0 to 2048 [ 248.229718][ T3312] Alternate GPT is invalid, using primary GPT. [ 248.232174][T18717] loop8: detected capacity change from 0 to 512 [ 248.236215][ T3312] loop7: p2 p3 p7 [ 248.263860][T18713] Alternate GPT is invalid, using primary GPT. [ 248.269831][T18717] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 248.272201][T18713] loop7: p2 p3 p7 [ 248.281082][T18717] EXT4-fs (loop8): orphan cleanup on readonly fs [ 248.295879][T18717] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.6082: corrupted inode contents [ 248.324556][T18717] EXT4-fs (loop8): Remounting filesystem read-only [ 248.338057][T18717] EXT4-fs (loop8): 1 truncate cleaned up [ 248.343894][ T71] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.355261][ T71] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.400503][ T71] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 248.424063][T18717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.474426][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 248.475236][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 248.497267][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 248.509692][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.529024][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 248.639798][T18747] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6094'. [ 248.722569][T18756] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6098'. [ 248.781386][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6102'. [ 248.794898][T18765] vlan2: entered allmulticast mode [ 248.856511][T18773] netlink: 1143 bytes leftover after parsing attributes in process `syz.8.6105'. [ 248.904012][T18780] sock: sock_set_timeout: `syz.7.6109' (pid 18780) tries to set negative timeout [ 249.043221][T18797] loop7: detected capacity change from 0 to 512 [ 249.055598][T18797] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 249.096260][T18797] EXT4-fs (loop7): orphan cleanup on readonly fs [ 249.128109][T18797] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.6116: Block bitmap for bg 0 marked uninitialized [ 249.141782][T18797] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 249.154705][T18797] EXT4-fs (loop7): 1 orphan inode deleted [ 249.166212][T18797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 249.219562][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.855281][T18883] loop7: detected capacity change from 0 to 512 [ 249.863863][T18883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.899409][T18883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.925879][T18883] ext4 filesystem being mounted at /666/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.957794][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.010463][T18892] netlink: 'syz.7.6154': attribute type 2 has an invalid length. [ 250.327490][T18912] loop7: detected capacity change from 0 to 1024 [ 250.349053][T18912] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.400329][T18912] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.6163: lblock 3 mapped to illegal pblock 3 (length 3) [ 250.431350][T18912] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 250.443843][T18912] EXT4-fs (loop7): This should not happen!! Data will be lost [ 250.443843][T18912] [ 250.487086][T18917] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6163: bg 0: block 112: padding at end of block bitmap is not set [ 250.524499][T18853] loop8: detected capacity change from 0 to 2048 [ 250.547137][ T1575] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 5) [ 250.570804][ T1575] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 250.583357][ T1575] EXT4-fs (loop7): This should not happen!! Data will be lost [ 250.583357][ T1575] [ 250.704677][T18927] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.738524][T18927] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.757983][T18933] loop4: detected capacity change from 0 to 512 [ 250.768415][T18933] EXT4-fs: inline encryption not supported [ 250.774296][T18933] EXT4-fs: inline encryption not supported [ 250.788657][T18927] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.797053][T18933] EXT4-fs: Ignoring removed oldalloc option [ 250.807259][T18933] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 250.815565][T18933] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6171: invalid indirect mapped block 2683928664 (level 1) [ 250.830821][T18933] EXT4-fs (loop4): 1 truncate cleaned up [ 250.841404][T18933] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6171: Invalid block bitmap block 3 in block_group 0 [ 250.855473][T18933] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 250.866311][T18927] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.880007][T18933] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6171: invalid indirect mapped block 4294967295 (level 0) [ 250.895292][T18933] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6171: invalid indirect mapped block 65536 (level 1) [ 250.978792][ T1575] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.007226][ T1575] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.051578][ T1575] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.074109][ T1575] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.308749][T18983] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 251.408732][T18971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.435526][T18971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.545352][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6198'. [ 251.584068][T18996] loop8: detected capacity change from 0 to 128 [ 251.598618][T18996] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 251.606294][T18996] FAT-fs (loop8): Filesystem has been set read-only [ 251.617090][T18996] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 251.881658][T19020] ext4: Invalid gid '0x00000000ffffffff' [ 251.937781][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6213'. [ 252.176979][T19054] netlink: 'syz.8.6226': attribute type 1 has an invalid length. [ 252.519433][T19070] 9p: Bad value for 'rfdno' [ 252.661658][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 252.661677][ T29] audit: type=1400 audit(2000000457.104:1476): avc: denied { relabelfrom } for pid=19078 comm="syz.6.6238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 252.688878][ T29] audit: type=1400 audit(2000000457.104:1477): avc: denied { relabelto } for pid=19078 comm="syz.6.6238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 252.766550][ T29] audit: type=1400 audit(2000000457.204:1478): avc: denied { connect } for pid=19094 comm="syz.7.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.791497][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6245'. [ 252.800842][T19099] tipc: Enabling of bearer rejected, failed to enable media [ 252.844143][ T29] audit: type=1400 audit(2000000457.284:1479): avc: denied { read } for pid=19094 comm="syz.7.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.867245][T19107] set_capacity_and_notify: 1 callbacks suppressed [ 252.867260][T19107] loop6: detected capacity change from 0 to 512 [ 252.893776][ T29] audit: type=1400 audit(2000000457.334:1480): avc: denied { write } for pid=19094 comm="syz.7.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.946801][T19107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.975550][T19107] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6249: bad orphan inode 11 [ 252.998673][T19116] loop4: detected capacity change from 0 to 512 [ 253.008356][T19116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 253.027420][T19107] ext4_test_bit(bit=10, block=4) = 1 [ 253.032780][T19107] is_bad_inode(inode)=0 [ 253.037052][T19107] NEXT_ORPHAN(inode)=2080374784 [ 253.041971][T19107] max_ino=32 [ 253.045186][T19107] i_nlink=0 [ 253.049568][T19107] EXT4-fs (loop6): 1 truncate cleaned up [ 253.055702][T19107] EXT4-fs mount: 4 callbacks suppressed [ 253.055720][T19107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.076551][T19116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6252: bg 0: block 384: padding at end of block bitmap is not set [ 253.092777][T19116] EXT4-fs (loop4): Remounting filesystem read-only [ 253.099741][T19116] EXT4-fs (loop4): 1 truncate cleaned up [ 253.112813][T19116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.130612][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.175792][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.270310][T19135] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6258'. [ 253.515359][T19167] tipc: Started in network mode [ 253.520401][T19167] tipc: Node identity ac1414aa, cluster identity 4711 [ 253.555468][T19167] tipc: Enabled bearer , priority 10 [ 253.719801][T19188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6277'. [ 253.740163][T19188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6277'. [ 253.764762][T19192] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6279'. [ 253.790369][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6282'. [ 253.797628][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6279'. [ 253.799658][T19195] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6282'. [ 253.809082][T19198] loop4: detected capacity change from 0 to 128 [ 253.813433][T19198] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.847167][T19198] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.897742][ T362] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.980915][T19212] hugetlbfs: syz.7.6289 (19212): Using mlock ulimits for SHM_HUGETLB is obsolete [ 254.074908][T19223] loop7: detected capacity change from 0 to 512 [ 254.083336][ T29] audit: type=1326 audit(2000000458.524:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.9.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 254.147745][ T29] audit: type=1326 audit(2000000458.554:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.9.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 254.171845][ T29] audit: type=1326 audit(2000000458.554:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.9.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 254.195835][ T29] audit: type=1326 audit(2000000458.554:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.9.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 254.219625][ T29] audit: type=1326 audit(2000000458.554:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.9.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 254.257191][T19231] loop7: detected capacity change from 0 to 256 [ 254.265274][T19231] FAT-fs (loop7): bogus number of FAT sectors [ 254.271531][T19231] FAT-fs (loop7): Can't find a valid FAT filesystem [ 254.360484][T19238] loop6: detected capacity change from 0 to 512 [ 254.394636][T19238] EXT4-fs: Ignoring removed nobh option [ 254.418668][T19238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.476728][T19238] ext4 filesystem being mounted at /847/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.563637][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.678084][ T3493] tipc: Node number set to 2886997162 [ 254.760792][T19271] loop7: detected capacity change from 0 to 128 [ 254.836025][ T2591] bio_check_eod: 94 callbacks suppressed [ 254.836067][ T2591] kworker/u8:11: attempt to access beyond end of device [ 254.836067][ T2591] loop7: rw=1, sector=138, nr_sectors = 112 limit=128 [ 254.886800][T19273] loop8: detected capacity change from 0 to 1024 [ 254.902208][T19273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.992944][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.101610][T19287] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.111534][T19287] vhci_hcd vhci_hcd.2: invalid port number 96 [ 255.117733][T19287] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 255.206005][T19302] loop7: detected capacity change from 0 to 164 [ 255.272209][T19310] loop8: detected capacity change from 0 to 128 [ 255.284240][T19309] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 255.287753][T19310] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.317754][T19310] ext4 filesystem being mounted at /571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.374300][T19315] program syz.4.6335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.415271][T13147] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.426446][T19319] program syz.4.6337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.609127][T19339] EXT4-fs: inline encryption not supported [ 255.646817][T19339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.669676][T19343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 255.703559][T19339] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 255.736603][T19339] EXT4-fs (loop6): Remounting filesystem read-only [ 255.820024][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.863012][T19352] EXT4-fs: Ignoring removed orlov option [ 255.869516][T19352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.910179][T19352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.960794][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.325930][T19404] batadv_slave_1: entered promiscuous mode [ 256.337334][T19401] batadv_slave_1: left promiscuous mode [ 256.406056][T19413] tap0: tun_chr_ioctl cmd 2147767520 [ 256.431710][T19418] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.454284][T19418] ext4 filesystem being mounted at /717/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.571463][T10249] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.624036][T19438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.665417][T19445] team0: No ports can be present during mode change [ 256.695107][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.747129][T19454] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 256.779181][T19455] __nla_validate_parse: 7 callbacks suppressed [ 256.779199][T19455] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6399'. [ 256.794735][T19455] unsupported nla_type 24929 [ 257.312541][T19511] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 257.391368][T19515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.418638][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.612595][T19542] FAT-fs (loop8): unable to read block(8254390272) for building NFS inode [ 257.921201][T19572] set_capacity_and_notify: 11 callbacks suppressed [ 257.921217][T19572] loop8: detected capacity change from 0 to 512 [ 257.953523][T19574] loop6: detected capacity change from 0 to 512 [ 257.983781][T19574] EXT4-fs: Ignoring removed orlov option [ 257.989536][T19574] EXT4-fs: Ignoring removed i_version option [ 257.995678][T19574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.025607][T19574] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 258.033756][T19574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 258.048162][T19572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.060879][T19572] ext4 filesystem being mounted at /606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.089769][T19574] EXT4-fs (loop6): orphan cleanup on readonly fs [ 258.096232][T19574] __quota_error: 31 callbacks suppressed [ 258.096246][T19574] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 258.111443][T19574] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 258.126838][T19574] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 258.133963][T19574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6446: bg 0: block 40: padding at end of block bitmap is not set [ 258.153206][T19574] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 258.163349][T19574] EXT4-fs (loop6): 1 truncate cleaned up [ 258.174676][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.184118][T19574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.201909][T19574] EXT4-fs (loop6): shut down requested (1) [ 258.209180][T19574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 258.236671][T19574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=16 [ 258.248789][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6450'. [ 258.258537][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6450'. [ 258.272993][ T29] audit: type=1400 audit(2000000462.714:1517): avc: denied { read } for pid=19573 comm="syz.6.6446" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 258.296499][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.454396][T19616] loop7: detected capacity change from 0 to 512 [ 258.507116][T19616] EXT4-fs: Ignoring removed oldalloc option [ 258.541838][T19616] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 258.601935][ T29] audit: type=1326 audit(2000000463.044:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19613 comm="syz.7.6459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0930a0acb9 code=0x0 [ 259.466963][T19704] loop7: detected capacity change from 0 to 512 [ 259.490226][T19704] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.510819][ T29] audit: type=1326 audit(2000000463.954:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.544354][ T29] audit: type=1326 audit(2000000463.954:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.568156][ T29] audit: type=1326 audit(2000000463.954:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.591864][ T29] audit: type=1326 audit(2000000463.954:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.615708][ T29] audit: type=1326 audit(2000000463.954:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.639468][ T29] audit: type=1326 audit(2000000463.954:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.663332][ T29] audit: type=1326 audit(2000000463.954:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19707 comm="syz.9.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674f8eacb9 code=0x7ffc0000 [ 259.780118][T19725] netlink: 'syz.9.6500': attribute type 6 has an invalid length. [ 259.982148][T19752] loop6: detected capacity change from 0 to 512 [ 260.011582][T19754] geneve2: entered promiscuous mode [ 260.016977][T19754] geneve2: entered allmulticast mode [ 260.037279][T19752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.056721][T19752] ext4 filesystem being mounted at /872/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.071637][T19752] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6512: corrupted xattr block 33: invalid header [ 260.097963][T19752] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.113996][T19752] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6512: corrupted xattr block 33: invalid header [ 260.130320][T19765] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6512: corrupted xattr block 33: invalid header [ 260.166116][T19752] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.175384][T19752] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6512: corrupted xattr block 33: invalid header [ 260.199858][T19765] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.210162][T19765] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6512: corrupted xattr block 33: invalid header [ 260.224455][T19752] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.248890][T19765] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.284711][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.299481][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6524'. [ 260.308773][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6524'. [ 260.452933][T19804] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 260.496005][T19811] loop6: detected capacity change from 0 to 164 [ 260.508073][T19808] bond1: entered promiscuous mode [ 260.513830][T19808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.523386][T19808] team0: Port device bond1 added [ 260.535177][T19811] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 260.600562][T19824] program syz.6.6544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.611950][T19818] loop7: detected capacity change from 0 to 1024 [ 260.643491][T19818] EXT4-fs: inline encryption not supported [ 260.659669][T19828] loop4: detected capacity change from 0 to 7 [ 260.666468][T19818] ext4: Bad value for 'mb_optimize_scan' [ 260.713481][ T11] blk_print_req_error: 6 callbacks suppressed [ 260.713500][ T11] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.730185][ T11] buffer_io_error: 6 callbacks suppressed [ 260.730208][ T11] Buffer I/O error on dev loop4, logical block 0, async page read [ 260.744278][T19828] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.753924][T19828] Buffer I/O error on dev loop4, logical block 0, async page read [ 260.762572][T19828] loop4: unable to read partition table [ 260.770552][T19828] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 260.903707][T19851] loop6: detected capacity change from 0 to 1024 [ 260.929669][T19851] EXT4-fs: Ignoring removed nobh option [ 260.935316][T19851] EXT4-fs: inline encryption not supported [ 261.003742][T19851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.036721][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.094502][T19878] loop4: detected capacity change from 0 to 512 [ 261.106963][T19878] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 261.217520][T19887] Invalid logical block size (4) [ 261.340719][ T3311] Alternate GPT is invalid, using primary GPT. [ 261.348004][ T3311] loop6: p2 p3 p7 [ 261.378419][T19899] Alternate GPT is invalid, using primary GPT. [ 261.384769][T19899] loop6: p2 p3 p7 [ 261.504360][T19925] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6590'. [ 261.538060][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 261.547326][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 261.558818][ T4473] udevd[4473]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 261.758207][T19951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.774460][T19954] delete_channel: no stack [ 261.825444][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.852452][T19960] netlink: 'syz.6.6608': attribute type 1 has an invalid length. [ 262.012358][T19979] sctp: [Deprecated]: syz.9.6615 (pid 19979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.012358][T19979] Use struct sctp_sack_info instead [ 262.032062][T19981] batadv_slave_1: entered promiscuous mode [ 262.038325][T19980] batadv_slave_1: left promiscuous mode [ 262.417215][T20018] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6633'. [ 262.603611][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6643'. [ 262.642455][T20042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 262.651426][T20042] System zones: 1-12 [ 262.655896][T20042] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.6644: corrupted in-inode xattr: e_value size too large [ 262.670973][T20042] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6644: couldn't read orphan inode 15 (err -117) [ 262.683792][T20042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.712504][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.731873][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6647'. [ 262.818085][T20058] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 262.832375][T20058] System zones: 0-7 [ 262.837238][T20058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.855773][T20061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6652'. [ 262.877123][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.477656][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6676'. [ 263.488924][T20111] set_capacity_and_notify: 5 callbacks suppressed [ 263.488943][T20111] loop4: detected capacity change from 0 to 1764 [ 263.508447][T20111] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 263.608889][T20122] loop6: detected capacity change from 0 to 1024 [ 263.641460][T20122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.713478][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.954682][T20149] program syz.7.6691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.182150][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6704'. [ 264.375268][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 264.375283][ T29] audit: type=1400 audit(264.356:1577): avc: denied { create } for pid=20197 comm="syz.6.6714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 264.533666][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6718'. [ 264.831645][T20226] sch_tbf: burst 19868 is lower than device lo mtu (65550) ! [ 265.226753][ T29] audit: type=1326 audit(265.216:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.270341][ T29] audit: type=1326 audit(265.216:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.293444][ T29] audit: type=1326 audit(265.216:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.316387][ T29] audit: type=1326 audit(265.246:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.339268][ T29] audit: type=1326 audit(265.246:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.362221][ T29] audit: type=1326 audit(265.246:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.385254][ T29] audit: type=1326 audit(265.246:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.408230][ T29] audit: type=1326 audit(265.246:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.431373][ T29] audit: type=1326 audit(265.246:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20236 comm="syz.7.6730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 265.646893][T20248] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6732'. [ 265.691690][T20250] program syz.6.6735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.924236][T20264] loop6: detected capacity change from 0 to 128 [ 265.937007][T20264] EXT4-fs: Ignoring removed nobh option [ 265.952879][T20264] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.007161][ T9151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.085180][T20279] loop6: detected capacity change from 0 to 128 [ 266.135332][T20279] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.538458][ T9151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.655291][T20296] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6751'. [ 266.671862][T20299] loop7: detected capacity change from 0 to 1024 [ 266.680743][T20298] macvtap0: entered promiscuous mode [ 266.681543][T20299] EXT4-fs: Ignoring removed orlov option [ 266.695187][T20298] macvtap0: left promiscuous mode [ 266.713086][T20303] loop6: detected capacity change from 0 to 128 [ 266.717933][T20299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.738720][T20303] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.769113][ T9151] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.841974][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.872757][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 266.988238][T20331] xt_hashlimit: size too large, truncated to 1048576 [ 266.995035][T20331] xt_hashlimit: max too large, truncated to 1048576 [ 267.517272][T20394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=20394 comm=syz.7.6794 [ 267.577514][T20394] netlink: 'syz.7.6794': attribute type 29 has an invalid length. [ 267.749678][T20429] __nla_validate_parse: 3 callbacks suppressed [ 267.749746][T20429] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6805'. [ 267.765084][T20429] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.838248][T20439] loop8: detected capacity change from 0 to 1024 [ 267.869996][T20439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.884064][T20445] program syz.7.6813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.899870][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6814'. [ 267.910488][ T3427] Process accounting resumed [ 267.923392][T20439] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.968082][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.995513][T20459] loop6: detected capacity change from 0 to 512 [ 268.020652][T20461] netlink: 'syz.8.6818': attribute type 8 has an invalid length. [ 268.035442][T20459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.078438][T20459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.123347][T20471] loop7: detected capacity change from 0 to 128 [ 268.155821][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 268.278879][T20476] loop8: detected capacity change from 0 to 8192 [ 268.505348][T20503] 9p: Bad value for 'rfdno' [ 268.896119][T20512] loop8: detected capacity change from 0 to 512 [ 268.930916][T20512] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.6842: bad orphan inode 11862016 [ 268.942909][T20512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.985489][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 268.996978][T20516] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6843'. [ 269.005966][T20516] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6843'. [ 269.154775][T20527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.236348][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6849'. [ 269.415423][T20544] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6856'. [ 269.545660][T20552] program syz.7.6857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.628200][T20558] netlink: 'syz.9.6862': attribute type 6 has an invalid length. [ 269.731323][T20567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20567 comm=syz.7.6866 [ 270.243247][T20597] veth1_macvtap: left promiscuous mode [ 270.248952][T20597] macsec0: entered promiscuous mode [ 270.258141][T20597] veth1_macvtap: entered promiscuous mode [ 270.264056][T20597] macsec0: left promiscuous mode [ 270.516070][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6891'. [ 270.663893][T20643] loop4: detected capacity change from 0 to 512 [ 270.675083][T20643] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.691645][T20643] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.6900: Directory hole found for htree leaf block 0 [ 270.705191][T20643] EXT4-fs (loop4): Remounting filesystem read-only [ 270.732725][T17941] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 270.803483][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 270.803500][ T29] audit: type=1400 audit(270.786:1617): avc: denied { read } for pid=20651 comm="syz.4.6903" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 271.340915][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6921'. [ 271.505011][T20704] loop4: detected capacity change from 0 to 256 [ 271.524409][T20706] loop7: detected capacity change from 0 to 512 [ 271.557276][T20712] loop6: detected capacity change from 0 to 128 [ 271.567683][T20704] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.621161][T20704] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.629992][T20704] FAT-fs (loop4): Filesystem has been set read-only [ 271.650047][T20706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.668802][T20706] Invalid ELF header magic: != ELF [ 271.678650][ T29] audit: type=1400 audit(271.656:1618): avc: denied { module_load } for pid=20705 comm="syz.7.6928" path="/797/bus/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 271.749629][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.773830][T20722] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 271.780473][T20722] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.788145][T20722] vhci_hcd vhci_hcd.0: Device attached [ 271.797783][T20724] vhci_hcd: cannot find the pending unlink 12 [ 271.814878][T20724] vhci_hcd: connection closed [ 271.815195][ T1575] vhci_hcd vhci_hcd.6: stop threads [ 271.825422][ T1575] vhci_hcd vhci_hcd.6: release socket [ 271.832006][ T1575] vhci_hcd vhci_hcd.6: disconnect device [ 271.840412][T20729] netlink: 'syz.4.6938': attribute type 4 has an invalid length. [ 272.060402][T20759] netlink: 'syz.4.6952': attribute type 12 has an invalid length. [ 272.156291][T20771] loop4: detected capacity change from 0 to 512 [ 272.166764][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.192731][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.205390][T20771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.317788][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.332105][T20786] program syz.6.6966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.426971][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6970'. [ 272.455618][T20798] loop6: detected capacity change from 0 to 1024 [ 272.464662][T20798] ext4: Unknown parameter 'dont_hash' [ 272.726456][T20826] loop6: detected capacity change from 0 to 512 [ 272.767283][T20826] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.826768][T20826] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.6984: Directory hole found for htree leaf block 0 [ 272.897671][ T9151] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 272.949635][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6988'. [ 273.006792][ T29] audit: type=1326 audit(272.986:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.029889][ T29] audit: type=1326 audit(272.986:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.052955][ T29] audit: type=1326 audit(272.986:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.076069][ T29] audit: type=1326 audit(272.986:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.099105][ T29] audit: type=1326 audit(272.986:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.122093][ T29] audit: type=1326 audit(272.986:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.145148][ T29] audit: type=1326 audit(272.986:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.168301][ T29] audit: type=1326 audit(272.986:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20839 comm="syz.7.6990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 273.345146][T20865] loop6: detected capacity change from 0 to 128 [ 273.362948][T20869] program syz.8.7004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.444656][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7008'. [ 273.470331][ T3427] kernel write not supported for file /snd/seq (pid: 3427 comm: kworker/1:5) [ 273.605747][T20890] loop6: detected capacity change from 0 to 8192 [ 273.618919][T20890] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.837301][T20907] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 273.868337][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7023'. [ 273.936134][T20918] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 273.957147][T20920] netlink: 'syz.7.7026': attribute type 1 has an invalid length. [ 273.964960][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7026'. [ 274.069599][T20938] netlink: 'syz.9.7036': attribute type 1 has an invalid length. [ 274.069618][T20936] loop7: detected capacity change from 0 to 512 [ 274.072082][T20936] EXT4-fs: Ignoring removed nobh option [ 274.077740][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7036'. [ 274.110627][T20936] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 274.127645][T20936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 274.136051][T20936] System zones: 1-12 [ 274.148376][T20936] EXT4-fs (loop7): 1 truncate cleaned up [ 274.172052][T20936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.197766][T20944] geneve0: entered promiscuous mode [ 274.205213][T20944] macvtap1: entered promiscuous mode [ 274.229091][T20944] geneve0: left promiscuous mode [ 274.278747][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.395642][T20976] loop4: detected capacity change from 0 to 512 [ 274.404895][T20976] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 274.416022][T20976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 274.425312][T20976] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.7054: corrupted in-inode xattr: e_value size too large [ 274.441411][T20976] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7054: couldn't read orphan inode 15 (err -117) [ 274.455694][T20976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.485083][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.504242][T20984] netlink: 8696 bytes leftover after parsing attributes in process `syz.9.7058'. [ 274.513919][T20984] netlink: zone id is out of range [ 274.519166][T20984] netlink: zone id is out of range [ 274.524699][T20984] netlink: del zone limit has 8 unknown bytes [ 274.578366][T20988] loop8: detected capacity change from 0 to 512 [ 274.587367][T20988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.693898][T13147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.805143][T21012] loop8: detected capacity change from 0 to 128 [ 274.881636][T21016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21016 comm=syz.8.7071 [ 274.980656][T21022] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7074'. [ 275.256286][T21037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.585497][T21059] loop7: detected capacity change from 0 to 1024 [ 275.593861][T21059] EXT4-fs: Ignoring removed bh option [ 275.599348][T21059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.764553][T21076] GUP no longer grows the stack in syz.9.7099 (21076): 200000004000-200000005000 (200000001000) [ 275.775178][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.9.7099 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.775214][T21076] Tainted: [W]=WARN [ 275.775224][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.775246][T21076] Call Trace: [ 275.775332][T21076] [ 275.775341][T21076] __dump_stack+0x1d/0x30 [ 275.775369][T21076] dump_stack_lvl+0x95/0xd0 [ 275.775399][T21076] dump_stack+0x15/0x1b [ 275.775424][T21076] __get_user_pages+0x195b/0x1ea0 [ 275.775507][T21076] ? __rcu_read_unlock+0x4e/0x70 [ 275.775559][T21076] ? css_rstat_updated+0xbb/0x280 [ 275.775672][T21076] __gup_longterm_locked+0x8d7/0xe30 [ 275.775710][T21076] ? __rcu_read_unlock+0x33/0x70 [ 275.775731][T21076] ? try_get_folio+0x369/0x3b0 [ 275.775779][T21076] ? try_grab_folio_fast+0xdc/0x370 [ 275.775880][T21076] gup_fast_fallback+0x1f3/0x13c0 [ 275.775985][T21076] get_user_pages_fast+0x5f/0x90 [ 275.776043][T21076] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 275.776074][T21076] ? __rcu_read_unlock+0x4e/0x70 [ 275.776175][T21076] iov_iter_get_pages2+0x5e/0xa0 [ 275.776206][T21076] __se_sys_vmsplice+0x538/0xf90 [ 275.776246][T21076] __x64_sys_vmsplice+0x55/0x70 [ 275.776272][T21076] x64_sys_call+0x2344/0x3000 [ 275.776336][T21076] do_syscall_64+0xc0/0x2a0 [ 275.776366][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.776389][T21076] RIP: 0033:0x7f674f8eacb9 [ 275.776464][T21076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.776562][T21076] RSP: 002b:00007f674e347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 275.776589][T21076] RAX: ffffffffffffffda RBX: 00007f674fb65fa0 RCX: 00007f674f8eacb9 [ 275.776604][T21076] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 275.776617][T21076] RBP: 00007f674f958bf7 R08: 0000000000000000 R09: 0000000000000000 [ 275.776674][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.776690][T21076] R13: 00007f674fb66038 R14: 00007f674fb65fa0 R15: 00007ffcd3204718 [ 275.776727][T21076] [ 276.241612][T21097] loop6: detected capacity change from 0 to 512 [ 276.389895][T21120] loop4: detected capacity change from 0 to 512 [ 276.440675][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 276.440696][ T29] audit: type=1400 audit(276.426:2153): avc: denied { append } for pid=21125 comm="syz.6.7121" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 276.542071][T21134] loop8: detected capacity change from 0 to 512 [ 276.562329][T21134] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.571206][T21134] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.591327][T21134] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7123: Allocating blocks 41-42 which overlap fs metadata [ 276.606212][T21134] Quota error (device loop8): write_blk: dquota write failed [ 276.613721][T21134] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 276.660902][T21134] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7123: Allocating blocks 41-42 which overlap fs metadata [ 276.678957][T21134] Quota error (device loop8): write_blk: dquota write failed [ 276.690370][T21134] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 276.704710][T21134] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.7123: Failed to acquire dquot type 1 [ 276.718484][T21134] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 276.736160][T21134] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7123: corrupted inode contents [ 276.749280][T21134] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.7123: mark_inode_dirty error [ 276.767758][T21134] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7123: corrupted inode contents [ 276.789748][T21134] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.7123: mark_inode_dirty error [ 276.802876][T21134] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7123: corrupted inode contents [ 276.838007][T21157] loop6: detected capacity change from 0 to 512 [ 276.841968][T21134] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 276.845238][T21157] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 276.870557][T21134] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7123: corrupted inode contents [ 276.881474][T21157] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7133'. [ 276.893519][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7133'. [ 276.914702][T21159] loop4: detected capacity change from 0 to 256 [ 276.923682][T21134] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.7123: mark_inode_dirty error [ 276.946469][T21159] FAT-fs (loop4): Directory bread(block 1285) failed [ 276.953563][T21159] FAT-fs (loop4): Directory bread(block 1286) failed [ 276.962108][T21134] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 276.993882][T21159] FAT-fs (loop4): Directory bread(block 1287) failed [ 277.001176][T21134] EXT4-fs (loop8): 1 truncate cleaned up [ 277.001257][T21159] FAT-fs (loop4): Directory bread(block 1288) failed [ 277.041100][T21159] FAT-fs (loop4): Directory bread(block 1285) failed [ 277.056167][T21159] FAT-fs (loop4): Directory bread(block 1286) failed [ 277.068909][T21159] FAT-fs (loop4): Directory bread(block 1287) failed [ 277.076857][T13147] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 277.076890][T21159] FAT-fs (loop4): Directory bread(block 1288) failed [ 277.103087][T21159] FAT-fs (loop4): Directory bread(block 1285) failed [ 277.111006][T13147] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 277.133621][T21159] FAT-fs (loop4): Directory bread(block 1286) failed [ 277.141828][ T29] audit: type=1326 audit(277.126:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21164 comm="syz.6.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407771acb9 code=0x7ffc0000 [ 277.186646][ T29] audit: type=1326 audit(277.156:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21164 comm="syz.6.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407771acb9 code=0x7ffc0000 [ 277.209671][ T29] audit: type=1326 audit(277.156:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21164 comm="syz.6.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f407771acb9 code=0x7ffc0000 [ 277.232960][ T29] audit: type=1326 audit(277.156:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21164 comm="syz.6.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407771acb9 code=0x7ffc0000 [ 277.256149][ T29] audit: type=1326 audit(277.156:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21164 comm="syz.6.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407771acb9 code=0x7ffc0000 [ 277.477843][ T2591] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.505716][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.515395][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.527161][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.536835][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.551081][T21196] loop6: unable to read partition table [ 277.564000][ T2591] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.574955][T21196] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 277.588194][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.597856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.607459][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.617235][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.625111][T21199] loop6: unable to read partition table [ 277.635328][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.644955][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.653840][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.663472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.671899][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.681557][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.690147][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.699774][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.708832][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 277.718459][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.731768][ T2591] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.788478][ T2591] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.814957][T21205] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7154'. [ 277.959987][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7155'. [ 277.978935][T21209] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7155'. [ 277.992296][ T2591] bridge_slave_1: left allmulticast mode [ 277.998106][ T2591] bridge_slave_1: left promiscuous mode [ 278.004070][ T2591] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.049179][ T2591] bridge_slave_0: left allmulticast mode [ 278.054961][ T2591] bridge_slave_0: left promiscuous mode [ 278.061445][ T2591] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.314188][ T2591] dvmrp6 (unregistering): left allmulticast mode [ 278.352762][ T2591] bridge0 (unregistering): left promiscuous mode [ 278.431931][ T2591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.450819][T21258] program syz.6.7172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.474877][ T2591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.498492][ T2591] bond0 (unregistering): Released all slaves [ 278.509271][T21262] netlink: 15 bytes leftover after parsing attributes in process `syz.9.7174'. [ 278.510935][T21260] EXT4-fs: inline encryption not supported [ 278.584365][ T2591] hsr_slave_0: left promiscuous mode [ 278.597235][ T2591] hsr_slave_1: left promiscuous mode [ 278.628785][ T2591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.636323][ T2591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.655179][ T2591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.662779][ T2591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.671421][T21279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7178'. [ 278.695412][ T2591] veth1_macvtap: left promiscuous mode [ 278.706700][ T2591] veth0_macvtap: left promiscuous mode [ 278.712646][ T2591] veth1_vlan: left promiscuous mode [ 278.727700][ T2591] veth0_vlan: left promiscuous mode [ 278.931990][ T2591] team0 (unregistering): Port device team_slave_1 removed [ 278.941646][T21298] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.950931][T21298] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 278.962332][ T2591] team0 (unregistering): Port device team_slave_0 removed [ 278.978178][T21298] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 279.010407][T21298] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 279.031775][T21298] System zones: 0-2, 18-18, 34-35 [ 279.047300][T21298] EXT4-fs (loop4): shut down requested (1) [ 279.053435][T21298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 279.071221][T21298] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 279.321321][T21235] chnl_net:caif_netlink_parms(): no params data found [ 279.437977][T21235] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.445122][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.492902][T21358] program syz.4.7203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.497070][T21235] bridge_slave_0: entered allmulticast mode [ 279.529983][T21235] bridge_slave_0: entered promiscuous mode [ 279.548117][T21235] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.555300][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.575258][T21235] bridge_slave_1: entered allmulticast mode [ 279.582032][T21235] bridge_slave_1: entered promiscuous mode [ 279.638354][T21372] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 279.648132][T21372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.665544][T21235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.710259][T21235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.751340][T21388] set_capacity_and_notify: 4 callbacks suppressed [ 279.751360][T21388] loop7: detected capacity change from 0 to 128 [ 279.801991][T21235] team0: Port device team_slave_0 added [ 279.847010][T21235] team0: Port device team_slave_1 added [ 279.894405][T21235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.902106][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.928744][T21235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.962070][T21235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.969116][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.996165][T21235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.053391][T21235] hsr_slave_0: entered promiscuous mode [ 280.079380][T21413] loop7: detected capacity change from 0 to 128 [ 280.092464][T21235] hsr_slave_1: entered promiscuous mode [ 280.110530][T21235] debugfs: 'hsr0' already exists in 'hsr' [ 280.116304][T21235] Cannot create hsr debugfs directory [ 280.312308][T21433] macvtap0: entered promiscuous mode [ 280.323669][T21433] macvtap0: left promiscuous mode [ 280.631481][T21235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.645487][T21235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.661794][T21235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.671356][T21235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.782899][T21235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.802600][T21235] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.832492][T21496] loop7: detected capacity change from 0 to 128 [ 280.854376][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.861540][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.880212][T21496] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.913983][T21496] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.914754][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.930369][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.964779][ T52] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.017337][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7249'. [ 281.026663][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7249'. [ 281.133529][T21235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.148685][T21531] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7252'. [ 281.189640][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7252'. [ 281.288967][T21235] veth0_vlan: entered promiscuous mode [ 281.311705][T21235] veth1_vlan: entered promiscuous mode [ 281.351624][T21235] veth0_macvtap: entered promiscuous mode [ 281.422793][T21235] veth1_macvtap: entered promiscuous mode [ 281.436351][T21561] loop6: detected capacity change from 0 to 1024 [ 281.457779][T21561] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 281.477968][T21561] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.7257: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.496899][T21235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.506915][T21561] __quota_error: 7 callbacks suppressed [ 281.506933][T21561] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 281.537410][T21235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.562664][T21561] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.7257: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.580157][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.598561][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.608817][T21561] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 281.618542][T21561] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7257: Failed to acquire dquot type 0 [ 281.652708][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.662017][T21561] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 281.662001][ T383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.671691][T21561] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.7257: mark_inode_dirty error [ 281.705615][T21561] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 281.723228][T21578] netlink: 277 bytes leftover after parsing attributes in process `syz.9.7261'. [ 281.733194][T21561] EXT4-fs (loop6): 1 orphan inode deleted [ 281.747565][T12400] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.773161][T12400] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 281.781847][T12400] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 281.837769][ T9151] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 281.856528][ T9151] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 281.870522][ T9151] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 281.995289][T21614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7273'. [ 282.024646][T21611] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.031797][T21611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.039287][T21611] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.046509][T21611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.047093][T21614] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 282.110544][T21611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.163720][T21621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.206852][ T2970] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.346017][T21656] program syz.6.7285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.536853][ T1575] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.596840][ T2970] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.254598][T21770] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 283.290560][T21770] bond1 (unregistering): Released all slaves [ 283.368805][T21778] loop6: detected capacity change from 0 to 8192 [ 283.387223][T21778] syz.6.7311: attempt to access beyond end of device [ 283.387223][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.401356][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.414406][T21778] syz.6.7311: attempt to access beyond end of device [ 283.414406][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.428475][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.451840][T21778] syz.6.7311: attempt to access beyond end of device [ 283.451840][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.466140][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.486905][T21778] syz.6.7311: attempt to access beyond end of device [ 283.486905][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.500964][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.534495][T21778] syz.6.7311: attempt to access beyond end of device [ 283.534495][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.549009][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.576975][T21778] syz.6.7311: attempt to access beyond end of device [ 283.576975][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.579710][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7318'. [ 283.591087][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.599801][T21778] syz.6.7311: attempt to access beyond end of device [ 283.599801][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.612823][ T362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.623207][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.632985][ T362] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.679684][T21778] syz.6.7311: attempt to access beyond end of device [ 283.679684][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.693841][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.713347][T21801] bridge0: port 3(vlan3) entered blocking state [ 283.719581][T21778] syz.6.7311: attempt to access beyond end of device [ 283.719581][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.719664][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.719714][T21778] syz.6.7311: attempt to access beyond end of device [ 283.719714][T21778] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 283.719757][T21778] Buffer I/O error on dev loop6, logical block 57847, async page read [ 283.765631][T21801] bridge0: port 3(vlan3) entered disabled state [ 283.796768][T21801] vlan3: entered allmulticast mode [ 283.802185][T21801] bridge0: entered allmulticast mode [ 283.838255][T21801] vlan3: left allmulticast mode [ 283.843271][T21801] bridge0: left allmulticast mode [ 284.422607][T21846] loop6: detected capacity change from 0 to 128 [ 284.467121][ T3493] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.752305][T21872] block device autoloading is deprecated and will be removed. [ 284.839364][T21881] loop6: detected capacity change from 0 to 2048 [ 284.852432][T21881] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.882766][T21881] EXT4-fs mount: 18 callbacks suppressed [ 284.882785][T21881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.951851][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.117554][ T36] hid_parser_main: 2 callbacks suppressed [ 285.117626][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 285.139279][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.227472][T21911] fido_id[21911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.458740][T21937] loop4: detected capacity change from 0 to 512 [ 285.522355][T21937] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 285.538462][T21937] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.606853][T21937] EXT4-fs (loop4): mount failed [ 285.679861][ T29] audit: type=1326 audit(285.666:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21952 comm="syz.6.7376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f407771acb9 code=0x0 [ 285.790838][T21960] tipc: Enabling of bearer rejected, failed to enable media [ 285.886799][T21965] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.7381'. [ 286.875901][ T29] audit: type=1400 audit(286.856:2167): avc: denied { lock } for pid=22034 comm="syz.6.7415" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=64492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 287.000483][ T29] audit: type=1400 audit(286.986:2168): avc: denied { shutdown } for pid=22046 comm="syz.6.7419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.077045][T22036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.107218][T22036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.158282][T22064] loop6: detected capacity change from 0 to 1024 [ 287.180069][T22064] EXT4-fs: Ignoring removed orlov option [ 287.201235][T22064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.255814][T22064] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7427: bg 0: block 481: padding at end of block bitmap is not set [ 287.283526][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.553903][ T29] audit: type=1400 audit(287.536:2169): avc: denied { append } for pid=22090 comm="syz.0.7438" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 287.588102][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.688424][ T29] audit: type=1400 audit(287.676:2170): avc: denied { connect } for pid=22113 comm="syz.0.7448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 287.786952][ T29] audit: type=1326 audit(287.776:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.812799][T22124] loop6: detected capacity change from 0 to 512 [ 287.821839][ T29] audit: type=1326 audit(287.796:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.845176][ T29] audit: type=1326 audit(287.796:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.868253][ T29] audit: type=1326 audit(287.796:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.891473][ T29] audit: type=1326 audit(287.796:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.914674][ T29] audit: type=1326 audit(287.796:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f63cacb9 code=0x7ffc0000 [ 287.945820][T22130] loop7: detected capacity change from 0 to 1024 [ 287.957682][T22124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.981876][T22130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 287.997787][T22124] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7453: corrupted xattr block 6: invalid header [ 288.024274][T22124] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.047923][T22124] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7453: corrupted xattr block 6: invalid header [ 288.058570][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 288.070783][T22124] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.108245][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.109050][T22137] loop7: detected capacity change from 0 to 256 [ 288.144184][T22135] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7455'. [ 288.153834][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.161513][T22137] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.178260][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.204404][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.221591][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.243013][T22137] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 288.251154][T22137] FAT-fs (loop7): Filesystem has been set read-only [ 288.258031][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.278145][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.317864][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.327073][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.356796][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.373468][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.380720][T22154] loop7: detected capacity change from 0 to 512 [ 288.395414][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.414269][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.431559][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.441821][T22154] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7464: invalid indirect mapped block 4294967295 (level 1) [ 288.445548][ T9151] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 288.461041][T22154] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7464: invalid indirect mapped block 4294967295 (level 1) [ 288.484424][T22154] EXT4-fs (loop7): 2 truncates cleaned up [ 288.491157][T22154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.497257][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.522191][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.531781][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.542236][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.553269][ T3426] IPVS: starting estimator thread 0... [ 288.560234][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.570885][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.581699][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.591289][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.600589][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.611841][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.622838][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 288.632816][ T9151] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 288.644036][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.654379][T22163] IPVS: using max 1920 ests per chain, 96000 per kthread [ 288.662251][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.673243][ T9151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 288.687225][ T9151] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 288.698630][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.827201][ T383] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.840381][ T383] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.848791][ T383] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.857382][ T383] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.943204][T22199] loop7: detected capacity change from 0 to 512 [ 288.951301][T22199] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.972331][T22199] EXT4-fs (loop7): 1 truncate cleaned up [ 288.978543][T22199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.008886][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.045263][T22207] loop6: detected capacity change from 0 to 1024 [ 289.063674][T22207] EXT4-fs: Ignoring removed nobh option [ 289.078483][T22207] EXT4-fs: Ignoring removed nobh option [ 289.084114][T22207] EXT4-fs: inline encryption not supported [ 289.098627][T22207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.121894][T22207] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.7488: Allocating blocks 401-513 which overlap fs metadata [ 289.138335][T22214] ref_ctr_offset mismatch. inode: 0x181 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 289.139288][T22207] EXT4-fs (loop6): pa ffff888107a33cb0: logic 0, phys. 113, len 25 [ 289.157651][T22207] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 9 [ 289.168516][T22207] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 289.289309][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.320666][T22231] loop7: detected capacity change from 0 to 1024 [ 289.349454][T22231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.477220][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.529091][T22253] EXT4-fs: Ignoring removed nobh option [ 289.554590][T22253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.572336][ T3426] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 289.581573][ T3426] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 289.590170][T22253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 289.603051][ T3426] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 289.616967][ T3426] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 289.630221][T22253] System zones: 1-12 [ 289.640722][T22253] EXT4-fs (loop4): 1 truncate cleaned up [ 289.647600][T22259] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.664254][T22253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.680206][T22259] vhci_hcd vhci_hcd.2: invalid port number 96 [ 289.686383][T22259] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 289.702570][T22261] fido_id[22261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.754206][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.963755][T22291] tap0: tun_chr_ioctl cmd 1074025677 [ 289.974055][T22291] tap0: linktype set to 805 [ 290.028280][T22296] set_capacity_and_notify: 1 callbacks suppressed [ 290.028296][T22296] loop4: detected capacity change from 0 to 512 [ 290.046469][T22296] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.7527: casefold flag without casefold feature [ 290.061194][T22298] loop7: detected capacity change from 0 to 512 [ 290.069793][T22296] EXT4-fs (loop4): get root inode failed [ 290.075550][T22296] EXT4-fs (loop4): mount failed [ 290.082308][T22298] EXT4-fs: Ignoring removed orlov option [ 290.115163][T22298] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 290.142173][T22298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 290.171640][T22298] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.7529: corrupted in-inode xattr: e_value size too large [ 290.213900][T22298] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7529: couldn't read orphan inode 15 (err -117) [ 290.226918][T22298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.261569][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.292171][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7538'. [ 290.301508][T22321] loop4: detected capacity change from 0 to 128 [ 290.328686][T22323] 9pnet_fd: p9_fd_create_unix (22323): problem connecting socket: ./file0: -111 [ 290.475611][T22339] loop4: detected capacity change from 0 to 1024 [ 290.484833][T22339] EXT4-fs: Ignoring removed bh option [ 290.524531][T22339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.567264][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7550'. [ 290.612052][T22339] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 290.652053][T22358] loop7: detected capacity change from 0 to 1764 [ 290.669033][T22362] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7556'. [ 290.690021][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.735107][T22368] netlink: 'syz.0.7559': attribute type 12 has an invalid length. [ 290.743035][T22368] netlink: 'syz.0.7559': attribute type 29 has an invalid length. [ 290.752346][T22368] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7559'. [ 290.909539][T22390] program syz.6.7570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.988311][T22401] netlink: 'syz.6.7575': attribute type 9 has an invalid length. [ 291.049333][T22408] netlink: 766 bytes leftover after parsing attributes in process `syz.6.7579'. [ 291.202742][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7589'. [ 291.260804][T22437] loop4: detected capacity change from 0 to 512 [ 291.278388][T22437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.315229][T22437] EXT4-fs (loop4): 1 truncate cleaned up [ 291.339230][T22437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.419362][T17941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.530026][T22464] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 291.604322][T22473] loop7: detected capacity change from 0 to 512 [ 291.622945][T22473] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 291.634586][T22474] wireguard0: entered promiscuous mode [ 291.640171][T22474] wireguard0: entered allmulticast mode [ 291.651392][T22477] loop4: detected capacity change from 0 to 512 [ 291.657888][T22473] EXT4-fs (loop7): 1 truncate cleaned up [ 291.665258][T22480] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7610'. [ 291.675029][T22473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.723429][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.278754][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7631'. [ 292.435430][T22556] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7639'. [ 292.458935][T22562] loop6: detected capacity change from 0 to 256 [ 292.575009][T22575] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7648'. [ 293.234545][T22639] loop7: detected capacity change from 0 to 128 [ 293.262170][T22639] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 293.295306][T22639] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 293.304289][T22639] FAT-fs (loop7): Filesystem has been set read-only [ 293.340457][T22635] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.476964][T22639] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 293.837921][T22666] pim6reg: tun_chr_ioctl cmd 1074025680 [ 294.572673][T22733] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 294.616537][T22738] netlink: 'syz.6.7719': attribute type 4 has an invalid length. [ 295.024605][T22797] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.099007][T22797] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.169295][T22797] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.211953][T22797] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.264799][ T362] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.283302][ T362] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.335021][ T362] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.363893][ T362] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.506720][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.542795][T22848] __nla_validate_parse: 8 callbacks suppressed [ 295.542888][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7752'. [ 295.573599][T22848] bridge_slave_1: left allmulticast mode [ 295.579514][T22848] bridge_slave_1: left promiscuous mode [ 295.585329][T22848] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.594917][T22848] bridge_slave_0: left allmulticast mode [ 295.600888][T22848] bridge_slave_0: left promiscuous mode [ 295.606657][T22848] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.628512][T22853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7755'. [ 295.749396][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 295.749492][ T29] audit: type=1326 audit(295.736:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.788351][T22873] binfmt_misc: register: failed to install interpreter file ./file0 [ 295.798783][ T29] audit: type=1326 audit(295.736:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.822236][ T29] audit: type=1326 audit(295.736:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.846013][ T29] audit: type=1326 audit(295.736:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.869112][ T29] audit: type=1326 audit(295.736:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.892385][ T29] audit: type=1326 audit(295.736:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.915353][ T29] audit: type=1326 audit(295.736:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.938824][ T29] audit: type=1326 audit(295.736:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.961895][ T29] audit: type=1326 audit(295.736:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 295.985029][ T29] audit: type=1326 audit(295.736:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.7.7763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 296.065266][T22887] set_capacity_and_notify: 1 callbacks suppressed [ 296.065287][T22887] loop4: detected capacity change from 0 to 128 [ 296.222349][T22911] loop7: detected capacity change from 0 to 512 [ 296.262416][T22911] EXT4-fs: Ignoring removed bh option [ 296.288674][T22918] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7782'. [ 296.300241][T22911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.337217][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.507824][T22948] loop6: detected capacity change from 0 to 512 [ 296.533337][ T1575] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.547313][T22948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.588824][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.609676][ T1575] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.625831][T22948] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 296.659002][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.698680][T22948] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 296.718098][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.735157][ T1575] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.750796][T22948] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 296.765131][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.781550][T22948] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 296.791155][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.804732][T22948] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 296.815910][T22948] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.7796: corrupted xattr block 6: invalid header [ 296.839760][ T1575] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.864169][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.170507][ T1575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.185255][ T1575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.205981][ T1575] bond0 (unregistering): Released all slaves [ 297.230130][ T1575] bond1 (unregistering): Released all slaves [ 297.300413][ T1575] tipc: Left network mode [ 297.318541][ T1575] IPVS: stopping backup sync thread 16406 ... [ 297.337057][ T1575] hsr_slave_0: left promiscuous mode [ 297.343617][ T1575] hsr_slave_1: left promiscuous mode [ 297.368269][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7806'. [ 297.388581][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.396168][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.421387][ T1575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.429026][ T1575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.455671][ T1575] veth1_macvtap: left promiscuous mode [ 297.465968][ T1575] veth0_macvtap: left promiscuous mode [ 297.479230][ T1575] veth1_vlan: left promiscuous mode [ 297.495864][ T1575] veth0_vlan: left promiscuous mode [ 297.696653][T23005] loop7: detected capacity change from 0 to 512 [ 297.720467][T23005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.838766][ T1575] team0 (unregistering): Port device team_slave_1 removed [ 297.856467][ T1575] team0 (unregistering): Port device team_slave_0 removed [ 297.902588][T22996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.009826][T23016] vlan2: entered allmulticast mode [ 298.011788][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.081391][ T1575] IPVS: stop unused estimator thread 0... [ 298.091509][T22958] chnl_net:caif_netlink_parms(): no params data found [ 298.212241][T22958] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.219469][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.246705][T22958] bridge_slave_0: entered allmulticast mode [ 298.264102][T23023] loop7: detected capacity change from 0 to 8192 [ 298.277208][T22958] bridge_slave_0: entered promiscuous mode [ 298.285043][T22958] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.292335][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.300405][T22958] bridge_slave_1: entered allmulticast mode [ 298.311267][T22958] bridge_slave_1: entered promiscuous mode [ 298.331047][T23023] bio_check_eod: 7928 callbacks suppressed [ 298.331066][T23023] syz.7.7813: attempt to access beyond end of device [ 298.331066][T23023] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 298.331336][T22958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.361550][T23023] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 298.369518][T23023] FAT-fs (loop7): Filesystem has been set read-only [ 298.378052][T22958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.401050][T22958] team0: Port device team_slave_0 added [ 298.407812][T22958] team0: Port device team_slave_1 added [ 298.431420][T22958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.438692][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.465081][T22958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.544120][T22958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.551217][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.577274][T22958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.674849][T22958] hsr_slave_0: entered promiscuous mode [ 298.695665][T22958] hsr_slave_1: entered promiscuous mode [ 298.708242][T22958] debugfs: 'hsr0' already exists in 'hsr' [ 298.714224][T22958] Cannot create hsr debugfs directory [ 299.119288][T22958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.147602][T22958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.175902][T22958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.189499][T22958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.236436][T22958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.260513][T22958] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.273232][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.280478][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.321493][T22707] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.328841][T22707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.446263][T22958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.555512][T22958] veth0_vlan: entered promiscuous mode [ 299.573804][T22958] veth1_vlan: entered promiscuous mode [ 299.603651][T22958] veth0_macvtap: entered promiscuous mode [ 299.633872][T22958] veth1_macvtap: entered promiscuous mode [ 299.664570][T22958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.694930][T22958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.711873][T12400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.738082][T12400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.765158][T12400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.782544][T12400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.939636][T23134] loop3: detected capacity change from 0 to 8192 [ 300.010582][T23153] macvlan2: entered promiscuous mode [ 300.037444][T23155] macvlan1: entered promiscuous mode [ 300.053814][T23155] macvlan1: left promiscuous mode [ 300.083408][T23153] macvlan3: entered promiscuous mode [ 300.200013][T23177] random: crng reseeded on system resumption [ 300.290924][T23192] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7839'. [ 300.399966][T23203] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7841'. [ 300.456117][T23209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7842'. [ 300.465221][T23209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7842'. [ 300.524888][T23218] netlink: 'syz.4.7845': attribute type 3 has an invalid length. [ 300.532869][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7845'. [ 300.585002][T23224] batadv_slave_1: entered promiscuous mode [ 300.607907][T23223] batadv_slave_1: left promiscuous mode [ 300.685376][T23237] netlink: 'syz.4.7851': attribute type 3 has an invalid length. [ 300.693361][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 300.713237][T23240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7852'. [ 300.921431][T23246] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.939865][T23246] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.966237][T23266] loop3: detected capacity change from 0 to 256 [ 301.003875][T23265] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.014210][T23265] FAT-fs (loop3): Filesystem has been set read-only [ 301.035114][T23265] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.044186][T23265] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.067672][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.113251][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.127647][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.145187][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.165119][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.175695][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.184894][T23266] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 301.250011][T23292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 301.867150][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 301.867171][ T29] audit: type=1326 audit(301.856:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 301.900679][ T29] audit: type=1326 audit(301.856:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 301.923853][ T29] audit: type=1326 audit(301.886:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 301.947431][ T29] audit: type=1326 audit(301.886:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 301.970883][ T29] audit: type=1326 audit(301.886:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f09309cb58e code=0x7ffc0000 [ 301.994277][ T29] audit: type=1326 audit(301.886:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0930a0aa22 code=0x7ffc0000 [ 302.017475][ T29] audit: type=1326 audit(301.886:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0930a0aae7 code=0x7ffc0000 [ 302.040440][ T29] audit: type=1326 audit(301.886:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0930a0aae7 code=0x7ffc0000 [ 302.063437][ T29] audit: type=1326 audit(301.886:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0930a0aab7 code=0x7ffc0000 [ 302.086396][ T29] audit: type=1326 audit(301.886:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23374 comm="syz.7.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 302.620568][T23436] netlink: 'syz.4.7900': attribute type 3 has an invalid length. [ 302.628442][T23436] netlink: 'syz.4.7900': attribute type 4 has an invalid length. [ 302.636197][T23436] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.7900'. [ 302.839889][T23442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7902'. [ 302.850221][T23442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7902'. [ 302.860771][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7902'. [ 303.000964][T23451] loop3: detected capacity change from 0 to 2048 [ 303.020420][T23451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.046182][T22958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.073802][T23456] loop3: detected capacity change from 0 to 512 [ 303.082177][T23456] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 303.102713][T23456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 303.121680][T23456] System zones: 1-12 [ 303.126337][T23456] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.7907: corrupted in-inode xattr: e_value size too large [ 303.142732][T23456] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7907: couldn't read orphan inode 15 (err -117) [ 303.156102][T23456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.195184][T22958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.355697][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7920'. [ 303.401402][T23488] netlink: 'syz.7.7922': attribute type 1 has an invalid length. [ 303.474826][T23498] loop7: detected capacity change from 0 to 512 [ 303.482485][T23498] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 303.496364][T23498] EXT4-fs (loop7): 1 truncate cleaned up [ 303.502708][T23498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.534330][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.601275][T23504] loop4: detected capacity change from 0 to 256 [ 303.813943][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7935'. [ 303.958850][T23534] sctp: [Deprecated]: syz.4.7941 (pid 23534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.958850][T23534] Use struct sctp_sack_info instead [ 304.202489][T23549] loop4: detected capacity change from 0 to 128 [ 304.439415][T23565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7954'. [ 304.772990][T23591] loop7: detected capacity change from 0 to 512 [ 304.802207][T23591] EXT4-fs (loop7): 1 orphan inode deleted [ 304.825884][T23591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.941825][T10249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.086743][T23609] loop3: detected capacity change from 0 to 128 [ 305.219467][T23621] loop3: detected capacity change from 0 to 1024 [ 305.239312][T23621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 305.273907][T23621] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.7979: lblock 3 mapped to illegal pblock 3 (length 3) [ 305.288419][T23621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 305.300815][T23621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 305.300815][T23621] [ 305.325021][ T362] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:5: lblock 7 mapped to illegal pblock 7 (length 9) [ 305.340244][ T362] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 305.352618][ T362] EXT4-fs (loop3): This should not happen!! Data will be lost [ 305.352618][ T362] [ 305.364172][T22958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.552432][T23637] netlink: 'syz.4.7986': attribute type 6 has an invalid length. [ 306.025598][T23661] loop6: detected capacity change from 0 to 512 [ 306.034624][T23661] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7997: invalid indirect mapped block 256 (level 2) [ 306.050238][T23661] EXT4-fs (loop6): 2 truncates cleaned up [ 306.056880][T23661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.082883][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.674583][ T4489] kernel write not supported for file /vcs (pid: 4489 comm: kworker/0:8) [ 306.686194][T23699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23699 comm=syz.4.8013 [ 306.769140][T23701] SELinux: failed to load policy [ 306.791985][T23707] loop3: detected capacity change from 0 to 256 [ 306.882063][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 306.882082][ T29] audit: type=1326 audit(306.866:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.7.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 306.923437][ T29] audit: type=1326 audit(306.866:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.7.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 306.948065][ T29] audit: type=1326 audit(306.906:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.7.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 306.971348][ T29] audit: type=1326 audit(306.906:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.7.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 306.995839][ T29] audit: type=1326 audit(306.906:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23712 comm="syz.7.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0930a0acb9 code=0x7ffc0000 [ 307.095219][ T29] audit: type=1326 audit(307.076:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.4.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6eacb9 code=0x7ffc0000 [ 307.119892][ T29] audit: type=1326 audit(307.076:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.4.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6eacb9 code=0x7ffc0000 [ 307.143106][ T29] audit: type=1326 audit(307.076:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.4.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb62e6eacb9 code=0x7ffc0000 [ 307.167626][ T29] audit: type=1326 audit(307.076:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.4.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6eacb9 code=0x7ffc0000 [ 307.190742][ T29] audit: type=1326 audit(307.076:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.4.8025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6eacb9 code=0x7ffc0000 [ 307.613345][T23745] SELinux: failed to load policy [ 307.804082][T23765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 307.821070][T23767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8040'. [ 307.830161][T23767] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8040'. [ 307.839223][T23767] netlink: 'syz.3.8040': attribute type 6 has an invalid length. [ 307.847141][T23767] netlink: 'syz.3.8040': attribute type 5 has an invalid length. [ 307.854975][T23767] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8040'. [ 307.864752][T23765] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8041: corrupted in-inode xattr: invalid ea_ino [ 307.885107][T23765] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8041: couldn't read orphan inode 15 (err -117) [ 307.897710][T23765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.926529][ T9151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.615993][T23813] set_capacity_and_notify: 1 callbacks suppressed [ 308.616015][T23813] loop3: detected capacity change from 0 to 2048 [ 308.652440][T23813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.825440][T23827] loop4: detected capacity change from 0 to 512 [ 308.982818][T23813] ================================================================== [ 308.990961][T23813] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 308.998784][T23813] [ 309.001110][T23813] write to 0xffffea00057ab7d8 of 8 bytes by task 23734 on cpu 0: [ 309.008851][T23813] __filemap_remove_folio+0x201/0x300 [ 309.014263][T23813] filemap_remove_folio+0x6d/0x1d0 [ 309.019398][T23813] truncate_inode_folio+0x42/0x50 [ 309.024431][T23813] shmem_undo_range+0x28a/0xb10 [ 309.029289][T23813] shmem_evict_inode+0x12e/0x510 [ 309.034244][T23813] evict+0x2af/0x510 [ 309.038163][T23813] iput+0x4b9/0x650 [ 309.041975][T23813] dentry_unlink_inode+0x24f/0x260 [ 309.047099][T23813] __dentry_kill+0x18d/0x4b0 [ 309.051703][T23813] finish_dput+0x2b/0x200 [ 309.056041][T23813] dput+0x52/0x60 [ 309.059677][T23813] __fput+0x444/0x650 [ 309.063702][T23813] ____fput+0x1c/0x30 [ 309.067699][T23813] task_work_run+0x130/0x1a0 [ 309.072305][T23813] do_exit+0x466/0x1590 [ 309.076468][T23813] do_group_exit+0xfe/0x140 [ 309.081000][T23813] get_signal+0xe4f/0xf60 [ 309.085424][T23813] arch_do_signal_or_restart+0x96/0x450 [ 309.090994][T23813] irqentry_exit+0xf7/0x510 [ 309.095538][T23813] asm_exc_page_fault+0x26/0x30 [ 309.100393][T23813] [ 309.102767][T23813] read to 0xffffea00057ab7d8 of 8 bytes by task 23813 on cpu 1: [ 309.110394][T23813] folio_mapping+0xa1/0xe0 [ 309.115006][T23813] move_folios_to_lru+0x128/0x6d0 [ 309.120135][T23813] evict_folios+0x31e6/0x35b0 [ 309.124843][T23813] try_to_shrink_lruvec+0x5f6/0x960 [ 309.130150][T23813] shrink_lruvec+0x24e/0x1bc0 [ 309.134860][T23813] shrink_node+0x68e/0x2000 [ 309.139384][T23813] do_try_to_free_pages+0x404/0xcc0 [ 309.144602][T23813] try_to_free_mem_cgroup_pages+0x222/0x470 [ 309.150953][T23813] try_charge_memcg+0x37e/0xa10 [ 309.155823][T23813] obj_cgroup_charge_pages+0xa6/0x150 [ 309.161208][T23813] __memcg_kmem_charge_page+0x9e/0x170 [ 309.166685][T23813] __alloc_frozen_pages_noprof+0x18a/0x350 [ 309.172688][T23813] alloc_pages_mpol+0x1f6/0x260 [ 309.177660][T23813] alloc_pages_noprof+0x8f/0x130 [ 309.182631][T23813] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 309.188544][T23813] __kvmalloc_node_noprof+0x471/0x680 [ 309.193924][T23813] ip_set_alloc+0x24/0x30 [ 309.198264][T23813] hash_netiface_create+0x282/0x740 [ 309.203582][T23813] ip_set_create+0x3cf/0x970 [ 309.208186][T23813] nfnetlink_rcv_msg+0x509/0x5d0 [ 309.213130][T23813] netlink_rcv_skb+0x123/0x220 [ 309.217925][T23813] nfnetlink_rcv+0x167/0x1720 [ 309.222609][T23813] netlink_unicast+0x5c0/0x690 [ 309.227376][T23813] netlink_sendmsg+0x5c8/0x6f0 [ 309.232147][T23813] __sock_sendmsg+0x145/0x170 [ 309.236838][T23813] ____sys_sendmsg+0x31e/0x4a0 [ 309.241609][T23813] ___sys_sendmsg+0x195/0x1e0 [ 309.246299][T23813] __x64_sys_sendmsg+0xd4/0x160 [ 309.251155][T23813] x64_sys_call+0x17ba/0x3000 [ 309.255872][T23813] do_syscall_64+0xc0/0x2a0 [ 309.260389][T23813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.266375][T23813] [ 309.268696][T23813] value changed: 0xffff88813a969c18 -> 0x0000000000000000 [ 309.275799][T23813] [ 309.278125][T23813] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.284276][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.3.8059 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 309.295676][T23813] Tainted: [W]=WARN [ 309.299474][T23813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.309536][T23813] ================================================================== [ 309.351862][T23827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.768338][T23826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.962431][T23813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.974793][T23813] syz.3.8059 (23813) used greatest stack depth: 5936 bytes left [ 310.005204][ T71] bridge_slave_1: left allmulticast mode [ 310.011107][ T71] bridge_slave_1: left promiscuous mode [ 310.017109][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.046929][ T71] bridge_slave_0: left promiscuous mode [ 310.052665][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.119073][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.129821][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.139485][ T71] bond0 (unregistering): Released all slaves [ 310.147542][ T71] bond1 (unregistering): Released all slaves [ 310.199381][ T71] tipc: Disabling bearer [ 310.204659][ T71] tipc: Left network mode [ 310.212943][ T71] hsr_slave_0: left promiscuous mode [ 310.220923][ T71] hsr_slave_1: left promiscuous mode [ 310.228565][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.236452][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.281017][ T71] team0 (unregistering): Port device team_slave_1 removed [ 310.291256][ T71] team0 (unregistering): Port device team_slave_0 removed [ 310.550188][ T71] IPVS: stop unused estimator thread 0... [ 310.600634][ T71] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.611216][ T71] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.658392][ T71] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.668342][ T71] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.708465][ T71] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.718518][ T71] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.788498][ T71] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.798392][ T71] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.884449][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.931959][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.980223][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.040655][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.122080][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.169994][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.219729][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.270209][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.352604][ T71] bridge_slave_1: left promiscuous mode [ 311.358453][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.368975][ T71] bridge_slave_0: left promiscuous mode [ 311.375025][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.507563][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.601145][ T71] bridge_slave_1: left allmulticast mode [ 311.607668][ T71] bridge_slave_1: left promiscuous mode [ 311.613338][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.621541][ T71] bridge_slave_0: left allmulticast mode [ 311.627255][ T71] bridge_slave_0: left promiscuous mode [ 311.632999][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.642322][ T71] bridge_slave_1: left allmulticast mode [ 311.648159][ T71] bridge_slave_1: left promiscuous mode [ 311.653900][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.661939][ T71] bridge_slave_0: left allmulticast mode [ 311.668507][ T71] bridge_slave_0: left promiscuous mode [ 311.674247][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.850907][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.861168][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.871058][ T71] bond0 (unregistering): Released all slaves [ 311.883317][ T71] team0: Port device bond1 removed [ 311.889607][ T71] bond1 (unregistering): Released all slaves [ 311.969211][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.979455][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.989323][ T71] bond0 (unregistering): Released all slaves [ 312.059047][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.068983][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.078538][ T71] bond0 (unregistering): Released all slaves [ 312.122232][ T71] tipc: Disabling bearer [ 312.127602][ T71] tipc: Left network mode [ 312.137549][ T71] hsr_slave_0: left promiscuous mode [ 312.143282][ T71] hsr_slave_1: left promiscuous mode [ 312.150958][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.158613][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.166502][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.174118][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.184757][ T71] hsr_slave_0: left promiscuous mode [ 312.191460][ T71] hsr_slave_1: left promiscuous mode [ 312.197417][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.204832][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.213880][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.221354][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.231371][ T71] hsr_slave_0: left promiscuous mode [ 312.237241][ T71] hsr_slave_1: left promiscuous mode [ 312.243203][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.250666][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.259503][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.266974][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.283890][ T71] veth0_virt_wifi: left promiscuous mode [ 312.289662][ T71] veth1_macvtap: left promiscuous mode [ 312.295311][ T71] veth0_macvtap: left promiscuous mode [ 312.301284][ T71] veth1_vlan: left promiscuous mode [ 312.306731][ T71] veth0_vlan: left promiscuous mode [ 312.312507][ T71] veth1_macvtap: left promiscuous mode [ 312.320132][ T71] veth0_macvtap: left promiscuous mode [ 312.325706][ T71] veth1_vlan: left promiscuous mode [ 312.331409][ T71] veth0_vlan: left promiscuous mode [ 312.337274][ T71] veth1_macvtap: left promiscuous mode [ 312.342903][ T71] veth0_macvtap: left promiscuous mode [ 312.348961][ T71] veth1_vlan: left promiscuous mode [ 312.354187][ T71] veth0_vlan: left promiscuous mode [ 312.477583][ T71] pimreg3 (unregistering): left allmulticast mode [ 312.511759][ T71] team0 (unregistering): Port device team_slave_1 removed [ 312.521884][ T71] team0 (unregistering): Port device team_slave_0 removed [ 312.581244][ T71] team0 (unregistering): Port device team_slave_1 removed [ 312.592562][ T71] team0 (unregistering): Port device team_slave_0 removed [ 312.651821][ T71] team0 (unregistering): Port device team_slave_1 removed [ 312.662060][ T71] team0 (unregistering): Port device team_slave_0 removed [ 313.234533][ T71] IPVS: stop unused estimator thread 0... [ 313.241375][ T71] IPVS: stop unused estimator thread 0...