last executing test programs: 3m58.265992521s ago: executing program 32 (id=854): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x9, 0x7f}, 0x2c) 3m16.679002128s ago: executing program 3 (id=3335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x3, 0x3, 0x4}]}) 3m16.583209176s ago: executing program 3 (id=3338): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f0000000140)={0x10004, 0x1, 0x401, 0xf, 0x8, 0xb, 0x28a7, 0x0, 0x6}) 3m16.463514195s ago: executing program 3 (id=3340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 3m16.355401814s ago: executing program 3 (id=3342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000006}, 0x18) syz_usbip_server_init(0x3) 3m15.758791311s ago: executing program 3 (id=3358): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 3m15.697607136s ago: executing program 3 (id=3361): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) 3m5.100983648s ago: executing program 33 (id=3239): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@lazytime}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xffff) 3m1.378448664s ago: executing program 34 (id=3361): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) 2m41.014446751s ago: executing program 1 (id=4866): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x14, r0, 0x509, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4008810) 2m40.983404574s ago: executing program 1 (id=4868): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m40.938527117s ago: executing program 1 (id=4871): unshare(0x60480) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 2m40.910628549s ago: executing program 1 (id=4874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setregid(0xffffffffffffffff, 0x0) 2m40.888898121s ago: executing program 1 (id=4875): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x40) 2m40.868772953s ago: executing program 1 (id=4876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) removexattr(0x0, 0x0) 2m34.016705776s ago: executing program 2 (id=5207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x401}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@filename='./file0\x00', 0x0, &(0x7f0000000140)='./file0\x00') 2m33.996983098s ago: executing program 2 (id=5208): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 2m33.97878741s ago: executing program 2 (id=5209): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) sendfile(r0, r1, 0x0, 0x9) 2m33.943892143s ago: executing program 2 (id=5211): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) 2m33.670600594s ago: executing program 2 (id=5216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 2m33.653582736s ago: executing program 2 (id=5217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x64, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 2m24.587209026s ago: executing program 35 (id=4876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) removexattr(0x0, 0x0) 2m17.382654718s ago: executing program 36 (id=5217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x64, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 56.416191488s ago: executing program 8 (id=9214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 56.364188073s ago: executing program 8 (id=9219): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 56.300838458s ago: executing program 8 (id=9225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) 56.27207249s ago: executing program 8 (id=9237): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210) 56.227328704s ago: executing program 8 (id=9232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 56.154829599s ago: executing program 8 (id=9238): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 56.122808972s ago: executing program 37 (id=9238): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 28.237301167s ago: executing program 5 (id=10502): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 28.176174321s ago: executing program 5 (id=10507): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x7}, 0x18) writev(r0, &(0x7f0000002c40)=[{&(0x7f00000019c0)="b7a2", 0x2}], 0x1) 28.156356183s ago: executing program 5 (id=10511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 28.07426421s ago: executing program 5 (id=10518): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 27.996119416s ago: executing program 5 (id=10524): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 27.884167055s ago: executing program 5 (id=10531): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000840)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 27.884033295s ago: executing program 38 (id=10531): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000840)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 1.017901219s ago: executing program 6 (id=11713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0004010}) 911.791117ms ago: executing program 6 (id=11718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x8000) 842.746203ms ago: executing program 6 (id=11723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 815.499075ms ago: executing program 6 (id=11724): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 559.022745ms ago: executing program 6 (id=11730): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f00000000c0)="c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000660f381d94940400000063df", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 517.816448ms ago: executing program 7 (id=11731): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x50) 515.810278ms ago: executing program 6 (id=11742): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10) 486.168241ms ago: executing program 7 (id=11733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x8000) 441.795884ms ago: executing program 0 (id=11736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r0, &(0x7f0000000000)="c0e09acc8049", 0x6, 0x8080c61) fallocate(r0, 0x3, 0x80007, 0x8000c60) 433.266655ms ago: executing program 7 (id=11738): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)) shutdown(r1, 0x0) 359.532931ms ago: executing program 7 (id=11743): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x300, 0x100, 0x1, 0x4000}}) 347.902762ms ago: executing program 7 (id=11744): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) 343.460942ms ago: executing program 0 (id=11745): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 292.365186ms ago: executing program 9 (id=11746): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) 292.165526ms ago: executing program 7 (id=11748): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) msgsnd(r0, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) 292.070786ms ago: executing program 9 (id=11749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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") 256.603799ms ago: executing program 9 (id=11751): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec9b", 0xb}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 174.516776ms ago: executing program 9 (id=11756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 141.403978ms ago: executing program 9 (id=11758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x2ae1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x81, r0, 0x0}]) 91.104912ms ago: executing program 4 (id=11759): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 90.928422ms ago: executing program 0 (id=11760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x198, 0x2, [@TCA_ROUTE4_ACT={0x194, 0x6, [@m_vlan={0x88, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x49, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3b"}, {0xc}, {0xc}}}, @m_bpf={0x108, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0xde, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 90.803342ms ago: executing program 4 (id=11761): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 90.577102ms ago: executing program 4 (id=11762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) 80.478243ms ago: executing program 0 (id=11763): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0xee00, r1) keyctl$session_to_parent(0x12) 73.357293ms ago: executing program 4 (id=11764): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x28) 63.971064ms ago: executing program 0 (id=11765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 56.109495ms ago: executing program 4 (id=11766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8001) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0) 245.27µs ago: executing program 4 (id=11767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 117.5µs ago: executing program 9 (id=11768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 0s ago: executing program 0 (id=11769): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0xfe, {0x8}}, 0xcee02) kernel console output (not intermixed with test programs): ' [ 260.872400][T24642] program syz.9.9391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.056099][T24671] program syz.7.9404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.107814][T24678] netlink: 'syz.6.9418': attribute type 3 has an invalid length. [ 261.143970][T24685] loop5: detected capacity change from 0 to 512 [ 261.199590][T24685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.220699][T24685] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.242460][T24700] loop6: detected capacity change from 0 to 2048 [ 261.262715][T24707] program syz.0.9420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.276274][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9416'. [ 261.290881][T24700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.310555][T18954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.342147][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.353992][T24713] loop7: detected capacity change from 0 to 1024 [ 261.368087][T24713] journal_path: Non-blockdev passed as './file1' [ 261.374510][T24713] EXT4-fs: error: could not find journal device path [ 261.469487][T24738] loop6: detected capacity change from 0 to 512 [ 261.507876][T24738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.531298][T24741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9435'. [ 261.551459][T24738] ext4 filesystem being mounted at /1259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.618749][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.708251][T24760] loop7: detected capacity change from 0 to 164 [ 261.723260][T24760] iso9660: Unknown parameter '' [ 261.870756][T24775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9452'. [ 261.992587][T24795] loop9: detected capacity change from 0 to 2048 [ 262.041254][T24795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.113880][T24806] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 262.130892][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.225576][T24818] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9467'. [ 262.234498][T24820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9468'. [ 262.262407][T24824] program syz.9.9470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.292757][T24826] netlink: 'syz.0.9472': attribute type 4 has an invalid length. [ 262.303221][T24829] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 262.303221][T24829] program syz.5.9473 not setting count and/or reply_len properly [ 262.394948][T24844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.404691][T24844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.518663][T24854] netlink: 60 bytes leftover after parsing attributes in process `syz.9.9484'. [ 262.551995][T24858] loop9: detected capacity change from 0 to 512 [ 262.586610][T24858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.599609][T24858] ext4 filesystem being mounted at /757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.630508][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.753246][T24883] program syz.9.9498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.756099][T24886] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9496'. [ 262.793190][T24888] program syz.7.9499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.811906][T24891] netlink: 'syz.9.9501': attribute type 4 has an invalid length. [ 262.827144][T24894] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 262.827144][T24894] program syz.6.9502 not setting count and/or reply_len properly [ 263.073533][T24919] program syz.0.9513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.113102][T24924] program syz.0.9514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.191364][T24937] netlink: 'syz.7.9516': attribute type 4 has an invalid length. [ 263.250863][T24943] loop7: detected capacity change from 0 to 512 [ 263.270917][T24943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.306733][T24943] ext4 filesystem being mounted at /1274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.366766][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 263.366782][ T29] audit: type=1400 audit(1756136117.882:3502): avc: denied { mount } for pid=24953 comm="syz.6.9526" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 263.371796][T24943] EXT4-fs (loop7): shut down requested (0) [ 263.376243][ T29] audit: type=1326 audit(1756136117.891:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.425228][ T29] audit: type=1326 audit(1756136117.891:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.502286][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.516248][ T29] audit: type=1326 audit(1756136117.909:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.540680][ T29] audit: type=1326 audit(1756136117.909:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.564486][ T29] audit: type=1326 audit(1756136117.909:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.588839][ T29] audit: type=1326 audit(1756136117.909:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.612505][ T29] audit: type=1326 audit(1756136117.937:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.636792][ T29] audit: type=1326 audit(1756136117.937:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.660733][ T29] audit: type=1326 audit(1756136117.937:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24960 comm="syz.0.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 263.744275][T24990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24990 comm=syz.9.9543 [ 263.757064][T24990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24990 comm=syz.9.9543 [ 263.844061][T25001] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.955875][T25025] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25025 comm=syz.7.9557 [ 263.969336][T25025] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25025 comm=syz.7.9557 [ 264.023594][T25034] loop0: detected capacity change from 0 to 512 [ 264.044549][T25034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.059951][T25034] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.082634][T25034] EXT4-fs (loop0): shut down requested (0) [ 264.136134][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.206271][T25063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25063 comm=syz.5.9575 [ 264.219999][T25063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25063 comm=syz.5.9575 [ 264.240443][T25070] loop6: detected capacity change from 0 to 512 [ 264.281987][T25070] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.9582: iget: bad i_size value: 38620345925642 [ 264.301334][T25070] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9582: couldn't read orphan inode 15 (err -117) [ 264.302548][T25078] bond0: entered promiscuous mode [ 264.318604][T25078] bond_slave_0: entered promiscuous mode [ 264.325346][T25070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.325371][T25078] bond_slave_1: entered promiscuous mode [ 264.346374][T25080] loop5: detected capacity change from 0 to 512 [ 264.353299][T25070] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9582: bg 0: block 5: invalid block bitmap [ 264.365868][T25078] bond0: left promiscuous mode [ 264.365892][T25078] bond_slave_0: left promiscuous mode [ 264.366085][T25078] bond_slave_1: left promiscuous mode [ 264.399562][T25070] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 264.412229][T25070] EXT4-fs (loop6): This should not happen!! Data will be lost [ 264.412229][T25070] [ 264.422906][T25070] EXT4-fs (loop6): Total free blocks count 0 [ 264.428930][T25070] EXT4-fs (loop6): Free/Dirty block details [ 264.435097][T25070] EXT4-fs (loop6): free_blocks=0 [ 264.440071][T25070] EXT4-fs (loop6): dirty_blocks=5 [ 264.445139][T25070] EXT4-fs (loop6): Block reservation details [ 264.451179][T25070] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 264.475359][T25080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.498365][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.515008][T25080] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.563425][T25080] EXT4-fs (loop5): shut down requested (0) [ 264.590554][T18954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.621299][T25110] __nla_validate_parse: 6 callbacks suppressed [ 264.621315][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9600'. [ 264.636850][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9600'. [ 264.648673][T25115] program syz.0.9602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.672803][T25110] erspan0: entered promiscuous mode [ 264.678981][T25110] erspan0: left promiscuous mode [ 264.713311][T25124] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9606'. [ 264.726224][T25124] bond0: entered promiscuous mode [ 264.732089][T25124] bond0: left promiscuous mode [ 264.743204][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9607'. [ 264.752447][T25127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9607'. [ 264.794271][T25135] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9610'. [ 264.803389][T25135] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9610'. [ 264.880037][T25147] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9626'. [ 264.895858][T25149] program syz.7.9617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.898594][T25147] bond0: entered promiscuous mode [ 264.920050][T25147] bond0: left promiscuous mode [ 264.954776][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9619'. [ 264.964074][T25153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9619'. [ 264.994770][T25156] erspan0: entered promiscuous mode [ 265.018784][T25156] erspan0: left promiscuous mode [ 265.127686][T25182] program syz.5.9631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.170028][T25181] loop9: detected capacity change from 0 to 512 [ 265.213125][T25181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.237755][T25181] ext4 filesystem being mounted at /790/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.274246][T25181] EXT4-fs (loop9): shut down requested (0) [ 265.299353][T25203] erspan0: entered promiscuous mode [ 265.305461][T25203] gretap0: entered promiscuous mode [ 265.312548][T25203] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 265.323752][T25203] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 265.343305][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.410596][T25211] loop6: detected capacity change from 0 to 512 [ 265.449747][T25211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.477792][T25211] ext4 filesystem being mounted at /1303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.519003][T25211] EXT4-fs (loop6): shut down requested (0) [ 265.557821][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.698111][T25243] loop7: detected capacity change from 0 to 512 [ 265.707521][T25243] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.9658: iget: bad i_size value: 38620345925642 [ 265.726276][T25243] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.9658: couldn't read orphan inode 15 (err -117) [ 265.741570][T25243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.761788][T25243] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.9658: bg 0: block 5: invalid block bitmap [ 265.788989][T25243] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 265.801348][T25243] EXT4-fs (loop7): This should not happen!! Data will be lost [ 265.801348][T25243] [ 265.811180][T25243] EXT4-fs (loop7): Total free blocks count 0 [ 265.817288][T25243] EXT4-fs (loop7): Free/Dirty block details [ 265.823234][T25243] EXT4-fs (loop7): free_blocks=0 [ 265.829013][T25243] EXT4-fs (loop7): dirty_blocks=5 [ 265.834446][T25243] EXT4-fs (loop7): Block reservation details [ 265.841088][T25243] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 265.869318][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.282448][T25310] loop6: detected capacity change from 0 to 2048 [ 266.328554][T25310] loop6: p2 p3 < > p4 < p5 > [ 266.333364][T25310] loop6: partition table partially beyond EOD, truncated [ 266.342737][T25310] loop6: p3 start 4284289 is beyond EOD, truncated [ 266.899734][T25410] loop7: detected capacity change from 0 to 2048 [ 266.956713][T25410] loop7: p2 p3 < > p4 < p5 > [ 266.961571][T25410] loop7: partition table partially beyond EOD, truncated [ 266.970076][T25410] loop7: p3 start 4284289 is beyond EOD, truncated [ 267.001576][T25415] netlink: 'syz.6.9742': attribute type 21 has an invalid length. [ 267.009683][T25415] netlink: 'syz.6.9742': attribute type 1 has an invalid length. [ 267.562992][T25438] loop6: detected capacity change from 0 to 128 [ 267.640351][T25449] netlink: 'syz.0.9745': attribute type 21 has an invalid length. [ 267.651118][T25451] sd 0:0:1:0: device reset [ 267.816985][T25479] netlink: 'syz.6.9762': attribute type 21 has an invalid length. [ 267.902929][T25491] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.973143][T25498] loop0: detected capacity change from 0 to 512 [ 267.987903][T25498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.012971][T25498] EXT4-fs (loop0): 1 truncate cleaned up [ 268.026914][T25498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.107573][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.292292][T25516] tap0: tun_chr_ioctl cmd 1074025675 [ 268.297798][T25516] tap0: persist disabled [ 268.332892][T25518] netlink: 'syz.0.9777': attribute type 21 has an invalid length. [ 268.497847][T25529] netlink: 'syz.9.9782': attribute type 21 has an invalid length. [ 268.694957][T25546] sd 0:0:1:0: device reset [ 268.943009][T25567] loop7: detected capacity change from 0 to 1024 [ 268.966352][T25567] EXT4-fs: Ignoring removed nobh option [ 268.972892][T25567] EXT4-fs: Ignoring removed bh option [ 268.994994][T25567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.028775][T25573] loop6: detected capacity change from 0 to 1024 [ 269.072837][T25573] EXT4-fs: Ignoring removed oldalloc option [ 269.079052][T25573] EXT4-fs: Ignoring removed bh option [ 269.108810][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.147259][T25573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.195551][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 269.195603][ T29] audit: type=1400 audit(1756136123.256:3561): avc: denied { setattr } for pid=25572 comm="syz.6.9801" path="/1345/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.281286][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.333013][T25585] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 269.363678][T25587] loop6: detected capacity change from 0 to 128 [ 269.384473][T25587] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.430165][T25587] ext4 filesystem being mounted at /1346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.494598][T11374] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.537518][ T29] audit: type=1400 audit(1756136123.580:3562): avc: denied { read append } for pid=25595 comm="syz.6.9811" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.561992][ T29] audit: type=1400 audit(1756136123.580:3563): avc: denied { ioctl open } for pid=25595 comm="syz.6.9811" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 269.586617][T25596] random: crng reseeded on system resumption [ 269.600906][ T29] audit: type=1400 audit(1756136123.635:3564): avc: denied { firmware_load } for pid=67 comm="kworker/u8:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 269.626880][ T29] audit: type=1400 audit(1756136123.635:3565): avc: denied { firmware_load } for pid=4466 comm="kworker/u8:48" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 269.715158][ T29] audit: type=1400 audit(1756136123.718:3566): avc: denied { read } for pid=25599 comm="syz.0.9814" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.918846][T25629] random: crng reseeded on system resumption [ 270.120473][T25664] random: crng reseeded on system resumption [ 270.312413][ T29] audit: type=1400 audit(1756136124.291:3567): avc: denied { name_bind } for pid=25689 comm="syz.6.9855" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 270.335505][ T29] audit: type=1400 audit(1756136124.291:3568): avc: denied { node_bind } for pid=25689 comm="syz.6.9855" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 270.391123][ T29] audit: type=1326 audit(1756136124.318:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.0.9850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 270.415323][ T29] audit: type=1326 audit(1756136124.318:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.0.9850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 270.448666][T25697] random: crng reseeded on system resumption [ 270.807636][T25736] loop9: detected capacity change from 0 to 512 [ 270.880067][T25736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.898108][T25736] ext4 filesystem being mounted at /827/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.961153][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.161542][T25781] sctp: [Deprecated]: syz.5.9896 (pid 25781) Use of int in max_burst socket option deprecated. [ 271.161542][T25781] Use struct sctp_assoc_value instead [ 271.329110][T25805] loop5: detected capacity change from 0 to 512 [ 271.367372][T25805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.415505][T25805] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.464566][T18954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.610035][T25848] __nla_validate_parse: 5 callbacks suppressed [ 271.610049][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9921'. [ 271.841279][T25884] tmpfs: Bad value for 'size' [ 271.870443][T25888] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9949'. [ 272.020338][T25915] loop7: detected capacity change from 0 to 512 [ 272.036982][T25915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.053760][T25915] ext4 filesystem being mounted at /1359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.112745][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.215719][T25932] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9955'. [ 272.332972][T25940] loop6: detected capacity change from 0 to 512 [ 272.358536][T25940] journal_path: Non-blockdev passed as './bus' [ 272.377661][T25940] EXT4-fs: error: could not find journal device path [ 272.486773][T25954] loop6: detected capacity change from 0 to 1024 [ 272.536923][T25954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.575923][T25954] ext4 filesystem being mounted at /1379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.606191][T25954] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.9964: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.636106][T25954] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 272.663938][T25954] EXT4-fs (loop6): This should not happen!! Data will be lost [ 272.663938][T25954] [ 272.702288][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.717855][T25965] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9971'. [ 272.756925][T25969] netlink: 'syz.7.9972': attribute type 11 has an invalid length. [ 272.769056][T25969] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9972'. [ 272.880037][T25982] loop6: detected capacity change from 0 to 1024 [ 272.888153][T25982] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.900808][T25982] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.913802][T25982] JBD2: no valid journal superblock found [ 272.919941][T25982] EXT4-fs (loop6): Could not load journal inode [ 273.120546][T26003] team0: Mode changed to "loadbalance" [ 273.123437][T26002] loop0: detected capacity change from 0 to 512 [ 273.133013][T26002] journal_path: Non-blockdev passed as './bus' [ 273.139362][T26002] EXT4-fs: error: could not find journal device path [ 273.164146][T26005] hub 9-0:1.0: USB hub found [ 273.175091][T26005] hub 9-0:1.0: 8 ports detected [ 273.212275][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9991'. [ 273.349119][T26027] loop5: detected capacity change from 0 to 1024 [ 273.359331][T26027] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.370359][T26027] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 273.381893][T26027] JBD2: no valid journal superblock found [ 273.387869][T26027] EXT4-fs (loop5): Could not load journal inode [ 273.411279][T26040] team0: Mode changed to "loadbalance" [ 273.418581][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10007'. [ 273.485805][T26053] netlink: 268 bytes leftover after parsing attributes in process `syz.6.10011'. [ 273.522869][T26059] loop0: detected capacity change from 0 to 1024 [ 273.582243][T26059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 273.597619][T26059] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.620262][T26059] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.10013: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.636409][T26059] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 273.649089][T26059] EXT4-fs (loop0): This should not happen!! Data will be lost [ 273.649089][T26059] [ 273.674176][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.698319][T26082] loop7: detected capacity change from 0 to 1024 [ 273.703425][T26087] team0: No ports can be present during mode change [ 273.714062][T26082] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.725798][T26082] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 273.736732][T26082] JBD2: no valid journal superblock found [ 273.742672][T26082] EXT4-fs (loop7): Could not load journal inode [ 273.768163][T26093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10023'. [ 273.850124][T26103] loop9: detected capacity change from 0 to 512 [ 273.868605][T26103] journal_path: Non-blockdev passed as './bus' [ 273.874856][T26103] EXT4-fs: error: could not find journal device path [ 274.117651][T26154] netlink: 268 bytes leftover after parsing attributes in process `syz.0.10051'. [ 274.209153][T26168] loop0: detected capacity change from 0 to 2048 [ 274.216526][T26168] EXT4-fs: Ignoring removed bh option [ 274.235679][T26168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.302300][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.363143][T26200] hub 9-0:1.0: USB hub found [ 274.371988][T26200] hub 9-0:1.0: 8 ports detected [ 274.544393][T26225] loop0: detected capacity change from 0 to 1024 [ 274.569745][T26225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.604477][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.758997][T26248] hub 9-0:1.0: USB hub found [ 274.764035][T26248] hub 9-0:1.0: 8 ports detected [ 274.840470][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 274.840487][ T29] audit: type=1326 audit(1756137154.478:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 274.871224][ T29] audit: type=1326 audit(1756137154.478:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 274.903104][ T29] audit: type=1326 audit(1756137154.533:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 274.927848][ T29] audit: type=1326 audit(1756137154.533:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 274.951697][ T29] audit: type=1326 audit(1756137154.533:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 275.003084][ T29] audit: type=1326 audit(1756137667.607:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 275.027566][ T29] audit: type=1326 audit(1756137667.607:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 275.051235][ T29] audit: type=1326 audit(1756137667.607:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.5.10099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 275.136895][ T29] audit: type=1400 audit(1756137667.746:3641): avc: denied { create } for pid=26283 comm="syz.0.10122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.166194][T26288] loop5: detected capacity change from 0 to 512 [ 275.168794][T26286] hub 9-0:1.0: USB hub found [ 275.178665][T26286] hub 9-0:1.0: 8 ports detected [ 275.179110][ T29] audit: type=1400 audit(1756137667.783:3642): avc: denied { write } for pid=26283 comm="syz.0.10122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.207069][T26288] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10115: bg 0: block 248: padding at end of block bitmap is not set [ 275.222787][T26288] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.10115: Failed to acquire dquot type 1 [ 275.236259][T26288] EXT4-fs (loop5): 1 truncate cleaned up [ 275.251813][T26288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.269223][T26288] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.297874][T26288] EXT4-fs (loop5): shut down requested (2) [ 275.305172][T26288] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 275.315089][T26288] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 275.315553][T26301] loop6: detected capacity change from 0 to 2048 [ 275.327426][T26288] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 275.334732][T26301] EXT4-fs: Ignoring removed bh option [ 275.356543][T18954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.370072][T26301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.416231][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.432265][T26311] loop9: detected capacity change from 0 to 7 [ 275.440035][T26311] Buffer I/O error on dev loop9, logical block 0, async page read [ 275.449470][T26311] Buffer I/O error on dev loop9, logical block 0, async page read [ 275.460611][T26311] loop9: unable to read partition table [ 275.471556][T26311] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 275.471556][T26311] ) failed (rc=-5) [ 276.061068][T26323] hub 9-0:1.0: USB hub found [ 276.067025][T26323] hub 9-0:1.0: 8 ports detected [ 276.090769][T26332] loop9: detected capacity change from 0 to 164 [ 276.247368][T26355] loop7: detected capacity change from 0 to 1764 [ 276.410611][T26383] loop9: detected capacity change from 0 to 7 [ 276.428496][T26383] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.444663][T26383] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.453150][T26383] loop9: unable to read partition table [ 276.485850][T26383] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 276.485850][T26383] ) failed (rc=-5) [ 276.555380][T26399] loop6: detected capacity change from 0 to 512 [ 276.586236][T26399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10169: bg 0: block 248: padding at end of block bitmap is not set [ 276.607249][T26399] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.10169: Failed to acquire dquot type 1 [ 276.623840][T26412] loop5: detected capacity change from 0 to 1764 [ 276.632910][T26413] loop0: detected capacity change from 0 to 164 [ 276.641665][T26399] EXT4-fs (loop6): 1 truncate cleaned up [ 276.652003][T26399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.669336][T26399] ext4 filesystem being mounted at /1434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.687169][T26399] EXT4-fs (loop6): shut down requested (2) [ 276.698264][T26399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 276.709876][T26399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 276.720461][T26399] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 276.748434][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.844118][T26431] sch_fq: defrate 0 ignored. [ 276.886183][T26433] loop9: detected capacity change from 0 to 7 [ 276.915167][T26433] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.939681][T26433] Buffer I/O error on dev loop9, logical block 0, async page read [ 276.948382][T26433] loop9: unable to read partition table [ 276.966559][T26433] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 276.966559][T26433] ) failed (rc=-5) [ 277.061273][T26446] loop7: detected capacity change from 0 to 512 [ 277.108414][T26446] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10187: bg 0: block 248: padding at end of block bitmap is not set [ 277.145976][T26446] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.10187: Failed to acquire dquot type 1 [ 277.171471][T26446] EXT4-fs (loop7): 1 truncate cleaned up [ 277.213885][T26457] netem: incorrect ge model size [ 277.220406][T26457] netem: change failed [ 277.246865][T26446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.272487][T26446] ext4 filesystem being mounted at /1397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.300899][T26446] EXT4-fs (loop7): shut down requested (2) [ 277.314927][T26446] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 277.340205][T26446] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 277.388971][T26446] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 277.420839][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.454206][T26468] loop0: detected capacity change from 0 to 1764 [ 277.504940][T26475] loop9: detected capacity change from 0 to 7 [ 277.511992][T26475] Buffer I/O error on dev loop9, logical block 0, async page read [ 277.519989][T26475] Buffer I/O error on dev loop9, logical block 0, async page read [ 277.528158][T26475] loop9: unable to read partition table [ 277.534200][T26475] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 277.534200][T26475] ) failed (rc=-5) [ 277.591762][T26489] __nla_validate_parse: 5 callbacks suppressed [ 277.591784][T26489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10204'. [ 277.627036][T26493] loop0: detected capacity change from 0 to 512 [ 277.646291][T26493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10207: bg 0: block 248: padding at end of block bitmap is not set [ 277.663464][T26493] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.10207: Failed to acquire dquot type 1 [ 277.677249][T26493] EXT4-fs (loop0): 1 truncate cleaned up [ 277.683479][T26493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.696962][T26493] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.713383][T26493] EXT4-fs (loop0): shut down requested (2) [ 277.720619][T26493] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 277.729748][T26493] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 277.739009][T26493] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 277.759471][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.879818][T26509] netem: incorrect ge model size [ 277.884857][T26509] netem: change failed [ 278.345378][T26519] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10218'. [ 278.355491][T26519] 0X: renamed from caif0 [ 278.362036][T26519] 0X: entered allmulticast mode [ 278.367296][T26519] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 278.449885][T26531] loop9: detected capacity change from 0 to 512 [ 278.470581][T26531] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10223: bg 0: block 248: padding at end of block bitmap is not set [ 278.486720][T26531] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.10223: Failed to acquire dquot type 1 [ 278.500059][T26531] EXT4-fs (loop9): 1 truncate cleaned up [ 278.506278][T26531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.519976][T26531] ext4 filesystem being mounted at /915/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.534867][T26531] EXT4-fs (loop9): shut down requested (2) [ 278.542942][T26531] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 278.551666][T26542] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10228'. [ 278.551937][T26531] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 278.570121][T26531] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 278.596837][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.747983][T26568] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10240'. [ 278.757124][T26568] 0X: renamed from caif0 [ 278.781593][T26568] 0X: entered allmulticast mode [ 278.786940][T26568] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 279.093922][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10258'. [ 279.520420][T26658] loop6: detected capacity change from 0 to 256 [ 279.592360][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10281'. [ 279.851702][T26687] loop7: detected capacity change from 0 to 1024 [ 279.864419][T26685] loop0: detected capacity change from 0 to 256 [ 279.878549][T26687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.936148][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.018510][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10301'. [ 280.083583][T26727] loop9: detected capacity change from 0 to 1024 [ 280.293654][T26752] loop0: detected capacity change from 0 to 32768 [ 280.305463][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10317'. [ 280.362272][T26767] loop9: detected capacity change from 0 to 256 [ 280.477558][T26776] loop7: detected capacity change from 0 to 256 [ 280.486423][T26779] loop0: detected capacity change from 0 to 1024 [ 280.559961][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10330'. [ 280.627875][T26806] loop7: detected capacity change from 0 to 512 [ 280.634685][T26806] EXT4-fs: Ignoring removed i_version option [ 280.652897][T26806] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.10337: corrupted in-inode xattr: overlapping e_value [ 280.671750][T26806] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.10337: couldn't read orphan inode 15 (err -117) [ 280.688619][T26806] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.10337: Directory hole found for htree leaf block 0 [ 280.691080][T26816] loop0: detected capacity change from 0 to 1024 [ 280.711560][T26816] EXT4-fs: Ignoring removed nobh option [ 280.717798][T26816] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.741007][T26816] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.10343: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 280.764150][T26816] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.10343: couldn't read orphan inode 11 (err -117) [ 280.785675][T26816] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10343: Invalid block bitmap block 0 in block_group 0 [ 280.805585][T26816] __quota_error: 201 callbacks suppressed [ 280.805606][T26816] Quota error (device loop0): write_blk: dquota write failed [ 280.819085][T26816] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 280.829844][T26816] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.10343: Failed to acquire dquot type 0 [ 280.848463][T26827] loop5: detected capacity change from 0 to 512 [ 280.856564][T26827] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 280.869961][T26827] EXT4-fs (loop5): orphan cleanup on readonly fs [ 280.876757][T26827] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.10346: Block bitmap for bg 0 marked uninitialized [ 280.890350][T26827] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 280.900533][T26827] EXT4-fs (loop5): 1 orphan inode deleted [ 280.927855][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10348'. [ 280.967368][T26844] loop0: detected capacity change from 0 to 164 [ 280.975233][ T29] audit: type=1326 audit(1756138185.144:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.000010][ T29] audit: type=1326 audit(1756138185.144:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.024518][T26844] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 281.025059][T26844] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 281.035344][ T29] audit: type=1326 audit(1756138185.144:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.066394][ T29] audit: type=1326 audit(1756138185.144:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.067016][T26844] Symlink component flag not implemented [ 281.090179][ T29] audit: type=1326 audit(1756138185.144:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.090220][ T29] audit: type=1326 audit(1756138185.144:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.090300][ T29] audit: type=1326 audit(1756138185.172:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.090333][ T29] audit: type=1326 audit(1756138185.172:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26845 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3eb5aebe9 code=0x7ffc0000 [ 281.194203][T26844] Symlink component flag not implemented [ 281.201008][T26844] Symlink component flag not implemented (7) [ 281.207182][T26844] Symlink component flag not implemented (116) [ 281.295052][T26860] loop0: detected capacity change from 0 to 1024 [ 281.302096][T26860] EXT4-fs: inline encryption not supported [ 281.308107][T26860] EXT4-fs: Ignoring removed i_version option [ 281.314823][T26860] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.327941][T26860] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.10358: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.342723][T26860] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.10358: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.359679][T26860] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.10358: Failed to acquire dquot type 0 [ 281.371438][T26860] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 281.382896][T26860] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.10358: mark_inode_dirty error [ 281.399719][T26860] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 281.415243][T26860] EXT4-fs (loop0): 1 orphan inode deleted [ 281.434168][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 281.448914][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 281.478559][T26860] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.10358: Invalid inode table block 1 in block_group 0 [ 281.492562][T26860] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 281.502963][T26860] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.10358: mark_inode_dirty error [ 281.505349][T26877] loop5: detected capacity change from 0 to 1024 [ 281.545247][T26877] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 281.573393][T26877] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 281.585756][T26877] EXT4-fs (loop5): This should not happen!! Data will be lost [ 281.585756][T26877] [ 281.587161][T26885] loop7: detected capacity change from 0 to 1024 [ 281.595522][T26877] EXT4-fs (loop5): Total free blocks count 0 [ 281.608953][T26877] EXT4-fs (loop5): Free/Dirty block details [ 281.615048][T26877] EXT4-fs (loop5): free_blocks=20480 [ 281.615489][T26885] EXT4-fs: Ignoring removed nobh option [ 281.620545][T26877] EXT4-fs (loop5): dirty_blocks=16 [ 281.620565][T26877] EXT4-fs (loop5): Block reservation details [ 281.620579][T26877] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 281.651700][T26885] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.666282][T26885] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.10370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 281.691227][T26885] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.10370: couldn't read orphan inode 11 (err -117) [ 281.724070][T26885] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.10370: Invalid block bitmap block 0 in block_group 0 [ 281.742617][T26885] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.10370: Failed to acquire dquot type 0 [ 281.792563][T26900] loop9: detected capacity change from 0 to 512 [ 281.799622][T26900] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 281.821832][T26910] netlink: 'syz.7.10381': attribute type 1 has an invalid length. [ 281.830608][T26900] EXT4-fs (loop9): orphan cleanup on readonly fs [ 281.851882][T26900] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.10378: Block bitmap for bg 0 marked uninitialized [ 281.867092][T26900] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 281.880748][T26900] EXT4-fs (loop9): 1 orphan inode deleted [ 281.940846][T26931] netlink: 'syz.9.10391': attribute type 10 has an invalid length. [ 281.942943][T26930] sctp: [Deprecated]: syz.0.10390 (pid 26930) Use of int in maxseg socket option. [ 281.942943][T26930] Use struct sctp_assoc_value instead [ 281.952779][T26931] team0: Port device geneve1 added [ 281.971023][ T67] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.982987][ T67] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.003479][ T67] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.013827][ T67] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.099478][T26949] loop6: detected capacity change from 0 to 164 [ 282.107988][T26949] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 282.123911][T26949] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 282.135256][T26949] Symlink component flag not implemented [ 282.141742][T26949] Symlink component flag not implemented [ 282.149005][T26949] Symlink component flag not implemented (7) [ 282.155111][T26949] Symlink component flag not implemented (116) [ 282.167680][T26951] loop7: detected capacity change from 0 to 512 [ 282.182583][T26953] netlink: 'syz.0.10399': attribute type 1 has an invalid length. [ 282.198184][T26951] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 282.225279][T26951] EXT4-fs (loop7): orphan cleanup on readonly fs [ 282.238960][T26951] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.10400: Block bitmap for bg 0 marked uninitialized [ 282.265725][T26935] loop9: detected capacity change from 0 to 32768 [ 282.273416][T26951] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 282.283412][T26951] EXT4-fs (loop7): 1 orphan inode deleted [ 282.340105][T26966] 9pnet: Could not find request transport: f [ 282.402069][T26975] loop6: detected capacity change from 0 to 512 [ 282.425868][T26975] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.10410: invalid block [ 282.438061][T26982] loop0: detected capacity change from 0 to 1024 [ 282.438405][T26975] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.10410: invalid indirect mapped block 4294967295 (level 1) [ 282.446170][T26982] EXT4-fs: Ignoring removed oldalloc option [ 282.460302][T26975] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.10410: invalid indirect mapped block 4294967295 (level 1) [ 282.466371][T26982] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 282.479756][T26975] EXT4-fs (loop6): 2 truncates cleaned up [ 282.531737][T26975] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.10410: bg 0: block 5: invalid block bitmap [ 282.595736][T26992] loop9: detected capacity change from 0 to 512 [ 282.604080][T26992] EXT4-fs: Ignoring removed i_version option [ 282.621965][T26992] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.10413: corrupted in-inode xattr: overlapping e_value [ 282.639106][T26992] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.10413: couldn't read orphan inode 15 (err -117) [ 282.664326][T26992] EXT4-fs error (device loop9): ext4_add_entry:2417: inode #2: comm syz.9.10413: Directory hole found for htree leaf block 0 [ 282.723325][T27004] netlink: 'syz.6.10417': attribute type 1 has an invalid length. [ 282.735563][T27006] netlink: 'syz.0.10431': attribute type 10 has an invalid length. [ 282.745945][T27007] loop9: detected capacity change from 0 to 164 [ 282.753244][T27007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 282.771957][T27006] team0: Port device geneve1 added [ 282.780133][T27007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 282.804746][T27007] Symlink component flag not implemented [ 282.810728][T27007] Symlink component flag not implemented [ 282.817415][T27007] Symlink component flag not implemented (7) [ 282.824277][T27007] Symlink component flag not implemented (116) [ 282.845733][T27014] loop0: detected capacity change from 0 to 2048 [ 282.877232][T27016] loop7: detected capacity change from 0 to 1024 [ 282.906267][T27016] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 282.949665][T27016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 282.963148][T27016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 282.963148][T27016] [ 282.973125][T27016] EXT4-fs (loop7): Total free blocks count 0 [ 282.979322][T27016] EXT4-fs (loop7): Free/Dirty block details [ 282.985350][T27016] EXT4-fs (loop7): free_blocks=20480 [ 282.990683][T27016] EXT4-fs (loop7): dirty_blocks=16 [ 282.996576][T27016] EXT4-fs (loop7): Block reservation details [ 283.002579][T27016] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 283.042311][T27030] sctp: [Deprecated]: syz.9.10430 (pid 27030) Use of int in maxseg socket option. [ 283.042311][T27030] Use struct sctp_assoc_value instead [ 283.058857][ T4466] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 283.105396][T27009] loop6: detected capacity change from 0 to 32768 [ 283.112392][ T4466] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 283.126027][ T4466] EXT4-fs (loop0): This should not happen!! Data will be lost [ 283.126027][ T4466] [ 283.128474][T27037] __nla_validate_parse: 7 callbacks suppressed [ 283.128494][T27037] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10444'. [ 283.135818][ T4466] EXT4-fs (loop0): Total free blocks count 0 [ 283.135840][ T4466] EXT4-fs (loop0): Free/Dirty block details [ 283.135855][ T4466] EXT4-fs (loop0): free_blocks=2415919504 [ 283.135930][ T4466] EXT4-fs (loop0): dirty_blocks=160 [ 283.135944][ T4466] EXT4-fs (loop0): Block reservation details [ 283.135956][ T4466] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 283.188671][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10444'. [ 283.270417][T27049] loop5: detected capacity change from 0 to 164 [ 283.277656][T27049] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 283.288495][T27049] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 283.298509][T27049] Symlink component flag not implemented [ 283.304287][T27049] Symlink component flag not implemented [ 283.311643][T27049] Symlink component flag not implemented (7) [ 283.318696][T27049] Symlink component flag not implemented (116) [ 283.365794][T27062] sctp: [Deprecated]: syz.6.10445 (pid 27062) Use of int in maxseg socket option. [ 283.365794][T27062] Use struct sctp_assoc_value instead [ 283.424532][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10450'. [ 283.433674][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10450'. [ 283.572933][T27093] sctp: [Deprecated]: syz.7.10461 (pid 27093) Use of int in maxseg socket option. [ 283.572933][T27093] Use struct sctp_assoc_value instead [ 283.623717][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10465'. [ 283.632833][T27103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10465'. [ 283.665036][T27105] loop6: detected capacity change from 0 to 1024 [ 283.665555][T27107] loop9: detected capacity change from 0 to 2048 [ 283.679883][T27105] EXT4-fs: Ignoring removed oldalloc option [ 283.688302][T27105] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 283.698230][T27110] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 283.784540][ T67] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 283.810740][ T67] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 283.823474][ T67] EXT4-fs (loop9): This should not happen!! Data will be lost [ 283.823474][ T67] [ 283.833364][ T67] EXT4-fs (loop9): Total free blocks count 0 [ 283.840420][ T67] EXT4-fs (loop9): Free/Dirty block details [ 283.842078][T27128] loop7: detected capacity change from 0 to 512 [ 283.846455][ T67] EXT4-fs (loop9): free_blocks=2415919504 [ 283.846474][ T67] EXT4-fs (loop9): dirty_blocks=160 [ 283.846490][ T67] EXT4-fs (loop9): Block reservation details [ 283.855183][T27128] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.10486: invalid block [ 283.858491][ T67] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 283.865174][T27128] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10486: invalid indirect mapped block 4294967295 (level 1) [ 283.898890][T27131] loop6: detected capacity change from 0 to 2048 [ 283.904325][T27128] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10486: invalid indirect mapped block 4294967295 (level 1) [ 283.925410][T27128] EXT4-fs (loop7): 2 truncates cleaned up [ 283.943686][T27128] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.10486: bg 0: block 5: invalid block bitmap [ 284.027497][ T4466] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 284.045725][ T4466] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 284.058189][ T4466] EXT4-fs (loop6): This should not happen!! Data will be lost [ 284.058189][ T4466] [ 284.068004][ T4466] EXT4-fs (loop6): Total free blocks count 0 [ 284.074410][ T4466] EXT4-fs (loop6): Free/Dirty block details [ 284.076800][T27139] sctp: [Deprecated]: syz.5.10476 (pid 27139) Use of int in maxseg socket option. [ 284.076800][T27139] Use struct sctp_assoc_value instead [ 284.081133][ T4466] EXT4-fs (loop6): free_blocks=2415919504 [ 284.100721][ T4466] EXT4-fs (loop6): dirty_blocks=160 [ 284.106090][ T4466] EXT4-fs (loop6): Block reservation details [ 284.113234][ T4466] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 284.167165][T27154] loop5: detected capacity change from 0 to 1024 [ 284.187671][T27154] EXT4-fs: Ignoring removed oldalloc option [ 284.196668][T27159] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10489'. [ 284.203006][T27154] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 284.321484][T27177] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 284.413749][T27200] SELinux: failed to load policy [ 284.477145][T27206] netlink: 'syz.5.10511': attribute type 1 has an invalid length. [ 284.549502][T27221] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 284.558565][T27223] loop5: detected capacity change from 0 to 2048 [ 284.695517][ T4466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.739344][ T4466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.804470][ T4466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.878368][ T4466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 284.893069][T27280] netlink: 'syz.6.10542': attribute type 1 has an invalid length. [ 284.962277][ T4466] bridge0: port 3(batadv0) entered disabled state [ 284.970578][ T4466] bridge_slave_1: left allmulticast mode [ 284.976441][ T4466] bridge_slave_1: left promiscuous mode [ 284.982491][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.991107][ T4466] bridge_slave_0: left allmulticast mode [ 284.996799][ T4466] bridge_slave_0: left promiscuous mode [ 285.002529][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.150171][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.159598][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.169154][ T4466] bond0 (unregistering): Released all slaves [ 285.208752][ T4466] hsr_slave_0: left promiscuous mode [ 285.215241][ T4466] hsr_slave_1: left promiscuous mode [ 285.220913][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.229023][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.260483][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 285.270979][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 285.303786][T27256] chnl_net:caif_netlink_parms(): no params data found [ 285.342255][T27256] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.350141][T27256] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.357609][T27256] bridge_slave_0: entered allmulticast mode [ 285.364262][T27256] bridge_slave_0: entered promiscuous mode [ 285.371031][T27256] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.378655][T27256] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.386001][T27256] bridge_slave_1: entered allmulticast mode [ 285.392545][T27256] bridge_slave_1: entered promiscuous mode [ 285.410983][T27256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.421406][T27256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.442630][T27256] team0: Port device team_slave_0 added [ 285.449329][T27256] team0: Port device team_slave_1 added [ 285.464950][T27256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.471917][T27256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.498704][T27256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.510160][T27256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.517168][T27256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.543894][T27256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.580053][T27256] hsr_slave_0: entered promiscuous mode [ 285.597614][T27256] hsr_slave_1: entered promiscuous mode [ 285.624673][T27297] SELinux: failed to load policy [ 285.709555][T27314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10553'. [ 285.769799][T27317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.778469][T27317] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 285.841464][T27327] SELinux: failed to load policy [ 285.964835][T27256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.973591][T27256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.983579][T27256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.992708][T27256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.029954][T27256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.042642][T27256] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.053054][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.060151][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.071924][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.079126][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.145417][T27256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.249716][T27256] veth0_vlan: entered promiscuous mode [ 286.258031][T27256] veth1_vlan: entered promiscuous mode [ 286.274544][T27256] veth0_macvtap: entered promiscuous mode [ 286.281894][T27256] veth1_macvtap: entered promiscuous mode [ 286.292957][T27256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.304401][T27256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.316141][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.327068][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.335897][ T4449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.347800][ T4449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.390440][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 286.390459][ T29] audit: type=1326 audit(1756138190.140:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.425709][ T29] audit: type=1326 audit(1756138190.177:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.450119][ T29] audit: type=1326 audit(1756138190.177:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.474178][ T29] audit: type=1326 audit(1756138190.177:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.498940][ T29] audit: type=1326 audit(1756138190.177:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.524417][ T29] audit: type=1326 audit(1756138190.269:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.548988][ T29] audit: type=1326 audit(1756138190.269:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.572752][ T29] audit: type=1326 audit(1756138190.269:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.601022][ T29] audit: type=1326 audit(1756138190.288:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27357 comm="syz.6.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 286.761084][ T29] audit: type=1326 audit(1756138190.482:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27391 comm="syz.7.10577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 286.834826][T27404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10584'. [ 286.844150][T27404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10584'. [ 286.998505][T27435] block device autoloading is deprecated and will be removed. [ 287.182301][T27470] IPVS: Error joining to the multicast group [ 287.266907][T27487] can0: slcan on ptm0. [ 287.274629][T27487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.283306][T27487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.324776][T27486] can0 (unregistered): slcan off ptm0. [ 287.360416][T27501] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.529815][T27521] erspan0: entered promiscuous mode [ 287.557180][T27525] 9pnet_fd: p9_fd_create_tcp (27525): problem connecting socket to 127.0.0.1 [ 287.695744][T27546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.709959][T27546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.098303][T27573] loop7: detected capacity change from 0 to 512 [ 288.106461][T27573] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.138068][T27573] EXT4-fs (loop7): failed to initialize system zone (-117) [ 288.145488][T27573] EXT4-fs (loop7): mount failed [ 288.255543][T27585] usb usb4: usbfs: interface 0 claimed by hub while 'syz.7.10667' sets config #0 [ 288.532906][T27632] loop7: detected capacity change from 0 to 1024 [ 288.555401][T27632] ext4 filesystem being mounted at /1518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.571658][T27632] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10690: bg 0: block 393: padding at end of block bitmap is not set [ 288.636993][T27645] loop7: detected capacity change from 0 to 512 [ 288.662034][T27645] EXT4-fs (loop7): 1 truncate cleaned up [ 288.678675][T27645] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.10695: invalid indirect mapped block 234881024 (level 0) [ 288.985556][T27701] 9pnet_fd: Insufficient options for proto=fd [ 289.022941][T27703] loop6: detected capacity change from 0 to 2048 [ 289.099463][T27718] loop6: detected capacity change from 0 to 1024 [ 289.236429][T27732] loop6: detected capacity change from 0 to 8192 [ 289.806427][T27761] 9pnet_fd: Insufficient options for proto=fd [ 289.996787][T27786] 9pnet_fd: Insufficient options for proto=fd [ 290.084430][T27798] loop9: detected capacity change from 0 to 8192 [ 290.110447][T27800] loop4: detected capacity change from 0 to 2048 [ 290.424386][T27840] loop7: detected capacity change from 0 to 2048 [ 290.567034][T27860] loop7: detected capacity change from 0 to 8192 [ 290.993975][T27927] loop0: detected capacity change from 0 to 512 [ 291.008560][T27927] EXT4-fs (loop0): 1 truncate cleaned up [ 291.037883][T27927] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10828: invalid indirect mapped block 234881024 (level 0) [ 291.345425][T27975] loop6: detected capacity change from 0 to 512 [ 291.354800][T27975] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.387303][T27975] EXT4-fs (loop6): failed to initialize system zone (-117) [ 291.402891][T27975] EXT4-fs (loop6): mount failed [ 291.705764][T28036] __nla_validate_parse: 16 callbacks suppressed [ 291.705785][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10889'. [ 291.843594][T28063] loop4: detected capacity change from 0 to 512 [ 291.851820][T28063] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.895582][T28068] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10904'. [ 291.920910][T28063] EXT4-fs (loop4): failed to initialize system zone (-117) [ 291.929010][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 291.929027][ T29] audit: type=1326 audit(1756138195.247:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 291.936884][T28063] EXT4-fs (loop4): mount failed [ 291.959934][ T29] audit: type=1326 audit(1756138195.247:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 291.988756][ T29] audit: type=1326 audit(1756138195.266:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.013341][ T29] audit: type=1326 audit(1756138195.266:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.037052][ T29] audit: type=1326 audit(1756138195.266:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.061737][ T29] audit: type=1326 audit(1756138195.321:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.087434][ T29] audit: type=1326 audit(1756138195.404:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.111857][ T29] audit: type=1326 audit(1756138195.404:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.154200][ T29] audit: type=1326 audit(1756138195.404:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.161942][T28077] erspan0: entered promiscuous mode [ 292.179056][ T29] audit: type=1326 audit(1756138195.404:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28072 comm="syz.7.10895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 292.253065][T28080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10898'. [ 292.307496][T28091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.318741][T28091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.349546][T28097] can0: slcan on ptm0. [ 292.361198][T28097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.371961][T28097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.413415][T28096] can0 (unregistered): slcan off ptm0. [ 292.660396][T28124] 9pnet_fd: p9_fd_create_tcp (28124): problem connecting socket to 127.0.0.1 [ 292.716075][T28134] loop9: detected capacity change from 0 to 512 [ 292.724501][T28134] EXT4-fs (loop9): 1 truncate cleaned up [ 292.731507][T28134] EXT4-fs mount: 50 callbacks suppressed [ 292.731520][T28134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.753747][T28134] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10922: invalid indirect mapped block 234881024 (level 0) [ 292.778814][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.835908][T28147] loop0: detected capacity change from 0 to 1024 [ 292.852633][T28147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.869998][T28147] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.909641][T28147] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10926: bg 0: block 393: padding at end of block bitmap is not set [ 293.018918][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.092895][T28177] loop0: detected capacity change from 0 to 256 [ 293.110359][T28179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.120069][T28177] FAT-fs (loop0): codepage cp861 not found [ 293.127639][T28179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.165381][T28185] loop6: detected capacity change from 0 to 1024 [ 293.178336][T28188] can0: slcan on ptm0. [ 293.184015][T28190] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10950'. [ 293.188705][T28188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.203150][T28185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.213202][T28188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.224165][T28185] ext4 filesystem being mounted at /1570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.239290][T28185] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10947: bg 0: block 393: padding at end of block bitmap is not set [ 293.275662][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.301315][T28187] can0 (unregistered): slcan off ptm0. [ 293.466828][T28227] loop9: detected capacity change from 0 to 1024 [ 293.487640][T28227] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.501447][T28227] ext4 filesystem being mounted at /1053/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.515509][T28227] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10965: bg 0: block 393: padding at end of block bitmap is not set [ 293.543029][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.705438][T28250] IPv6: Can't replace route, no match found [ 294.802807][T28326] loop9: detected capacity change from 0 to 256 [ 294.828992][T28326] FAT-fs (loop9): codepage cp861 not found [ 294.851058][T28334] IPv6: Can't replace route, no match found [ 294.872068][T28339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28339 comm=syz.9.11026 [ 294.923303][T28347] loop4: detected capacity change from 0 to 1024 [ 294.949005][T28347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.974802][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.014987][T28362] loop4: detected capacity change from 0 to 256 [ 295.033085][T28362] FAT-fs (loop4): codepage cp861 not found [ 295.085260][T28371] IPv6: Can't replace route, no match found [ 295.107562][T28373] SELinux: failed to load policy [ 295.306889][T28383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28383 comm=syz.0.11033 [ 295.350150][T28388] loop0: detected capacity change from 0 to 1024 [ 295.383269][T28388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.408746][T24108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.489132][T28410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28410 comm=syz.6.11049 [ 295.826626][T28428] loop6: detected capacity change from 0 to 1024 [ 295.836898][T28428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.879253][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.889275][T28436] IPv6: Can't replace route, no match found [ 296.016093][T28453] IPv6: Can't replace route, no match found [ 296.090430][T28463] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11072'. [ 296.199868][T28474] loop0: detected capacity change from 0 to 512 [ 296.211816][T28476] loop6: detected capacity change from 0 to 1024 [ 296.223961][T28474] FAT-fs (loop0): error, corrupted file size (i_pos 2306, 2048) [ 296.231972][T28474] FAT-fs (loop0): Filesystem has been set read-only [ 296.232109][T28476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.253656][T28476] ext4 filesystem being mounted at /1599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.265087][T28474] FAT-fs (loop0): error, corrupted file size (i_pos 2306, 2048) [ 296.288099][T28476] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.11090: lblock 3 mapped to illegal pblock 3 (length 13) [ 296.290045][T28484] loop4: detected capacity change from 0 to 512 [ 296.310798][T28484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 296.311220][T28476] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 296.321093][T28484] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.11079: corrupted in-inode xattr: overlapping e_value [ 296.332886][T28476] EXT4-fs (loop6): This should not happen!! Data will be lost [ 296.332886][T28476] [ 296.358142][T28484] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.11079: couldn't read orphan inode 15 (err -117) [ 296.371257][T28484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.371535][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.575483][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.647036][T28506] SELinux: failed to load policy [ 296.809691][T28533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11104'. [ 296.818848][T28533] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11104'. [ 296.844825][T28535] macvtap1: entered allmulticast mode [ 296.850277][T28535] veth0_macvtap: entered allmulticast mode [ 296.862306][T28533] vlan4: entered allmulticast mode [ 296.868283][T28533] bridge_slave_0: entered allmulticast mode [ 296.902070][T28546] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11112'. [ 297.056162][T28564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11119'. [ 297.112536][T28570] macvtap1: entered allmulticast mode [ 297.118854][T28570] veth0_macvtap: entered allmulticast mode [ 297.217241][T28578] loop7: detected capacity change from 0 to 512 [ 297.240514][T28578] FAT-fs (loop7): error, corrupted file size (i_pos 2306, 2048) [ 297.248985][T28578] FAT-fs (loop7): Filesystem has been set read-only [ 297.256235][T28578] FAT-fs (loop7): error, corrupted file size (i_pos 2306, 2048) [ 297.319303][T28584] loop7: detected capacity change from 0 to 1024 [ 297.331348][T28584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.343783][T28584] ext4 filesystem being mounted at /1608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.361003][T28584] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.11127: lblock 3 mapped to illegal pblock 3 (length 13) [ 297.376713][T28584] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 297.389771][T28584] EXT4-fs (loop7): This should not happen!! Data will be lost [ 297.389771][T28584] [ 297.411756][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.688082][T28609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11140'. [ 297.697517][T28609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11140'. [ 297.712817][T28609] vlan2: entered allmulticast mode [ 297.755514][T28617] netlink: 'syz.0.11145': attribute type 1 has an invalid length. [ 297.773164][T28615] loop6: detected capacity change from 0 to 512 [ 297.794430][T28615] EXT4-fs: Ignoring removed bh option [ 297.800763][T28615] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 297.814134][T28615] EXT4-fs (loop6): 1 truncate cleaned up [ 297.824121][T28615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.853993][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 297.854076][ T29] audit: type=1400 audit(1756138200.733:4086): avc: denied { create } for pid=28614 comm="syz.6.11144" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 297.886802][ T29] audit: type=1400 audit(1756138200.733:4087): avc: denied { unlink } for pid=28614 comm="syz.6.11144" name=E91F7189591E9233614B dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 297.912057][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.927032][T28632] netlink: 'syz.9.11151': attribute type 21 has an invalid length. [ 297.942015][T28632] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11151'. [ 297.952296][T28632] netlink: 'syz.9.11151': attribute type 1 has an invalid length. [ 297.996679][T28641] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11155'. [ 298.041103][T28643] hub 6-0:1.0: USB hub found [ 298.057359][T28643] hub 6-0:1.0: 8 ports detected [ 298.162958][T28659] loop9: detected capacity change from 0 to 512 [ 298.179736][T28659] EXT4-fs: Ignoring removed bh option [ 298.187580][T28662] netlink: 'syz.4.11166': attribute type 21 has an invalid length. [ 298.197030][T28659] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 298.205370][T28662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11166'. [ 298.215892][T28662] netlink: 'syz.4.11166': attribute type 1 has an invalid length. [ 298.226791][T28659] EXT4-fs (loop9): 1 truncate cleaned up [ 298.233101][T28659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.274526][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.327528][T28675] tun0: tun_chr_ioctl cmd 1074025677 [ 298.332965][T28675] tun0: linktype set to 774 [ 298.409234][ T29] audit: type=1326 audit(1756138201.241:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28688 comm="syz.4.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa632c7ebe9 code=0x7ffc0000 [ 298.433105][ T29] audit: type=1326 audit(1756138201.241:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28688 comm="syz.4.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa632c7ebe9 code=0x7ffc0000 [ 298.458493][ T29] audit: type=1326 audit(1756138201.241:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28688 comm="syz.4.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa632c7ebe9 code=0x7ffc0000 [ 298.482339][ T29] audit: type=1326 audit(1756138201.241:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28688 comm="syz.4.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa632c7ebe9 code=0x7ffc0000 [ 298.506863][ T29] audit: type=1326 audit(1756138201.241:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28688 comm="syz.4.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa632c7ebe9 code=0x7ffc0000 [ 298.532030][T28696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11183'. [ 298.557525][T28692] netlink: 'syz.6.11181': attribute type 21 has an invalid length. [ 298.569319][T28692] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11181'. [ 298.578699][T28692] netlink: 'syz.6.11181': attribute type 1 has an invalid length. [ 298.591465][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.788593][T28739] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11202'. [ 298.843288][T28748] blktrace: Concurrent blktraces are not allowed on sg0 [ 298.895748][T28758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28758 comm=syz.9.11212 [ 299.015144][T28779] loop0: detected capacity change from 0 to 128 [ 299.024394][T28779] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.039206][T28779] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.073140][T24108] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.101755][T28790] C: renamed from team_slave_0 (while UP) [ 299.126408][T28790] netlink: 'syz.4.11223': attribute type 3 has an invalid length. [ 299.134382][T28790] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11223'. [ 299.156971][T28790] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.173594][T28795] loop9: detected capacity change from 0 to 512 [ 299.194765][T28797] loop7: detected capacity change from 0 to 512 [ 299.202045][T28797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.212194][T28797] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.11228: corrupted in-inode xattr: overlapping e_value [ 299.228731][T28797] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.11228: couldn't read orphan inode 15 (err -117) [ 299.229384][T28795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.257770][T28797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.271591][T28795] ext4 filesystem being mounted at /1095/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.314583][ T29] audit: type=1400 audit(1756138202.072:4093): avc: denied { rename } for pid=28794 comm="syz.9.11227" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 299.339347][T28804] hub 6-0:1.0: USB hub found [ 299.345431][T28804] hub 6-0:1.0: 8 ports detected [ 299.390697][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.427648][T28816] loop4: detected capacity change from 0 to 512 [ 299.443767][T28816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.456713][T28816] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.526527][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.578461][T28832] delete_channel: no stack [ 299.589690][ T29] audit: type=1400 audit(1756138202.330:4094): avc: denied { read } for pid=28829 comm="syz.4.11237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 299.622591][T28834] tun0: tun_chr_ioctl cmd 1074025677 [ 299.628177][T28834] tun0: linktype set to 774 [ 299.670339][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.807588][T28844] hub 6-0:1.0: USB hub found [ 299.816669][T28844] hub 6-0:1.0: 8 ports detected [ 299.922376][T28855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11252'. [ 299.956019][T28859] loop6: detected capacity change from 0 to 512 [ 299.971158][T28865] loop9: detected capacity change from 0 to 512 [ 299.980729][T28859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.985469][T28869] delete_channel: no stack [ 299.995820][T28865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.006744][T28859] ext4 filesystem being mounted at /1646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.019920][T28865] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.11255: corrupted in-inode xattr: overlapping e_value [ 300.048501][T28865] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.11255: couldn't read orphan inode 15 (err -117) [ 300.061781][T28865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.090194][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.228626][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.242058][ T29] audit: type=1400 audit(1756138202.940:4095): avc: denied { setopt } for pid=28874 comm="syz.7.11269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 301.065404][T28998] netlink: 'syz.4.11326': attribute type 1 has an invalid length. [ 301.327390][T29022] macvtap2: entered allmulticast mode [ 301.332830][T29022] hsr0: entered allmulticast mode [ 301.337933][T29022] hsr_slave_0: entered allmulticast mode [ 301.343610][T29022] hsr_slave_1: entered allmulticast mode [ 301.446908][T29041] netlink: 'syz.7.11337': attribute type 21 has an invalid length. [ 301.510310][T29047] hub 6-0:1.0: USB hub found [ 301.515245][T29047] hub 6-0:1.0: 8 ports detected [ 302.020294][T29115] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.222335][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.230112][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.237682][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.245125][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.253454][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.261275][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.269015][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.276463][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.284712][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.292185][ T3410] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 302.300433][ T3410] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 302.383883][T29169] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.463957][T29184] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 302.545194][T29196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.575127][T29200] hsr0: entered promiscuous mode [ 302.580407][T29200] macvtap1: entered allmulticast mode [ 302.586139][T29200] hsr0: entered allmulticast mode [ 302.591209][T29200] hsr_slave_0: entered allmulticast mode [ 302.597621][T29200] hsr_slave_1: entered allmulticast mode [ 303.459230][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 303.459249][ T29] audit: type=1400 audit(1756138205.895:4126): avc: denied { getopt } for pid=29236 comm="syz.9.11427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.570569][ T29] audit: type=1326 audit(1756138206.006:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.11439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 303.594792][ T29] audit: type=1326 audit(1756138206.006:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.11439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 303.619775][ T29] audit: type=1326 audit(1756138206.006:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.11439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 303.652713][ T29] audit: type=1326 audit(1756138206.080:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.11439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 303.677607][ T29] audit: type=1326 audit(1756138206.080:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.11439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264f8bebe9 code=0x7ffc0000 [ 303.844248][T29291] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 304.013860][ T29] audit: type=1400 audit(1756138206.421:4132): avc: denied { read } for pid=29316 comm="syz.0.11466" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 304.038676][ T29] audit: type=1400 audit(1756138206.421:4133): avc: denied { open } for pid=29316 comm="syz.0.11466" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 304.268588][ T29] audit: type=1326 audit(1756138206.652:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29342 comm="syz.7.11479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 304.288837][T29345] macsec3: entered promiscuous mode [ 304.293292][ T29] audit: type=1326 audit(1756138206.652:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29342 comm="syz.7.11479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f6b7b4debe9 code=0x7ffc0000 [ 304.298532][T29345] macvlan1: entered promiscuous mode [ 304.517248][T29382] macsec2: entered promiscuous mode [ 304.523461][T29382] macvlan1: entered promiscuous mode [ 304.596145][T29396] macsec1: entered promiscuous mode [ 304.601512][T29396] macvlan1: entered promiscuous mode [ 304.748931][T29427] __nla_validate_parse: 9 callbacks suppressed [ 304.748948][T29427] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11516'. [ 304.758222][T29428] loop9: detected capacity change from 0 to 1024 [ 304.848842][T29428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.898518][T29428] ext4 filesystem being mounted at /1147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.965090][T29428] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.11515: lblock 3 mapped to illegal pblock 3 (length 13) [ 304.983366][T29428] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 304.996073][T29428] EXT4-fs (loop9): This should not happen!! Data will be lost [ 304.996073][T29428] [ 305.073944][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.325609][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11542'. [ 305.335657][T29479] validate_nla: 1 callbacks suppressed [ 305.335676][T29479] netlink: 'syz.9.11542': attribute type 2 has an invalid length. [ 305.406318][T29486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11545'. [ 305.415569][T29486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11545'. [ 305.846271][T29520] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11571'. [ 305.856275][T29520] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11571'. [ 305.922136][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11566'. [ 305.931429][T29530] netlink: 'syz.6.11566': attribute type 2 has an invalid length. [ 306.001899][T29536] loop6: detected capacity change from 0 to 1024 [ 306.022733][ T4466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.036545][T29536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.049816][T29536] ext4 filesystem being mounted at /1705/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.079994][T29536] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.11569: lblock 3 mapped to illegal pblock 3 (length 13) [ 306.103310][ T4466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.115446][T29536] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 306.129065][T29536] EXT4-fs (loop6): This should not happen!! Data will be lost [ 306.129065][T29536] [ 306.168660][ T4466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.217559][ T4466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.236229][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.353716][ T4466] bridge_slave_1: left allmulticast mode [ 306.359479][ T4466] bridge_slave_1: left promiscuous mode [ 306.365227][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.373747][ T4466] bridge_slave_0: left promiscuous mode [ 306.379488][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.441840][ T4466] team0: Port device geneve1 removed [ 306.475871][T29561] loop6: detected capacity change from 0 to 1024 [ 306.483644][T29561] EXT4-fs: Ignoring removed bh option [ 306.489592][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.490367][T29561] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.511010][T29561] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 306.511999][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.525398][T29561] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.11577: lblock 2 mapped to illegal pblock 2 (length 1) [ 306.542430][T29561] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.11577: lblock 0 mapped to illegal pblock 48 (length 1) [ 306.543661][ T4466] bond0 (unregistering): Released all slaves [ 306.558830][T29561] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.11577: Failed to acquire dquot type 0 [ 306.574293][T29561] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 306.585605][T29561] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11577: mark_inode_dirty error [ 306.597817][T29561] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 306.608168][T29561] EXT4-fs (loop6): 1 orphan inode deleted [ 306.610882][T29543] chnl_net:caif_netlink_parms(): no params data found [ 306.616563][T29561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.634641][ T67] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 306.659285][ T67] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 306.672219][ T4466] hsr_slave_0: left promiscuous mode [ 306.678539][ T4466] hsr_slave_1: left promiscuous mode [ 306.678900][T29565] loop4: detected capacity change from 0 to 512 [ 306.684575][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.691492][T29565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.699001][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.711465][T29561] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 306.718618][T29565] EXT4-fs (loop4): 1 truncate cleaned up [ 306.729874][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.730304][T29565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.737473][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.773025][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.773681][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.792891][ T4466] macvlan1: left promiscuous mode [ 306.803855][ T4466] veth1_macvtap: left promiscuous mode [ 306.809557][ T4466] veth0_macvtap: left promiscuous mode [ 306.815826][ T4466] veth1_vlan: left promiscuous mode [ 306.821405][ T4466] veth0_vlan: left promiscuous mode [ 306.917511][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 306.929610][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 306.998520][T29589] loop4: detected capacity change from 0 to 1024 [ 307.019723][T29589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.035295][T29589] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.046986][T29543] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.054234][T29543] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.062799][T29543] bridge_slave_0: entered allmulticast mode [ 307.070563][T29543] bridge_slave_0: entered promiscuous mode [ 307.078962][T29543] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.082183][T29589] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.11586: lblock 3 mapped to illegal pblock 3 (length 13) [ 307.086145][T29543] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.086324][T29543] bridge_slave_1: entered allmulticast mode [ 307.087086][T29543] bridge_slave_1: entered promiscuous mode [ 307.128201][T29589] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 307.141354][T29589] EXT4-fs (loop4): This should not happen!! Data will be lost [ 307.141354][T29589] [ 307.164938][T29543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.177388][T29543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.229257][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.229958][T29543] team0: Port device team_slave_0 added [ 307.246555][T29543] team0: Port device team_slave_1 added [ 307.278623][T29543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.285680][T29543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.312436][T29543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.325309][T29543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.332303][T29543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.359231][T29543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.387273][T29543] hsr_slave_0: entered promiscuous mode [ 307.401562][T29543] hsr_slave_1: entered promiscuous mode [ 307.410312][T29543] debugfs: 'hsr0' already exists in 'hsr' [ 307.416149][T29543] Cannot create hsr debugfs directory [ 307.713502][T29543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.741050][T29543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.768985][T29543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.783821][T29543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.862390][T29543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.884388][T29543] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.918520][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.925666][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.959802][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.966952][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.993673][T29543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.066727][T29543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.160738][T29646] loop6: detected capacity change from 0 to 512 [ 308.198705][T29543] veth0_vlan: entered promiscuous mode [ 308.215717][T29543] veth1_vlan: entered promiscuous mode [ 308.217961][T29646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.230357][T29543] veth0_macvtap: entered promiscuous mode [ 308.243145][T29543] veth1_macvtap: entered promiscuous mode [ 308.254780][T29543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.266988][T29543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.282743][ T4477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.288169][T29646] ext4 filesystem being mounted at /1715/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.308436][ T4477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.329355][ T4477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.349434][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.373460][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.443964][T29660] loop0: detected capacity change from 0 to 1024 [ 308.495713][T29660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.514679][T29660] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.577826][T29660] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.11605: lblock 3 mapped to illegal pblock 3 (length 13) [ 308.594042][T29660] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 308.606731][T29660] EXT4-fs (loop0): This should not happen!! Data will be lost [ 308.606731][T29660] [ 308.670682][T29543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.748466][T29686] loop9: detected capacity change from 0 to 512 [ 308.759026][T29686] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.770270][T29686] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 308.782404][T29686] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 308.801700][T29686] EXT4-fs (loop9): orphan cleanup on readonly fs [ 308.810177][T29686] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.11619: Invalid block bitmap block 0 in block_group 0 [ 308.825715][T29686] EXT4-fs (loop9): Remounting filesystem read-only [ 308.834145][T29686] EXT4-fs (loop9): 1 orphan inode deleted [ 308.842100][T29686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.872078][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.670220][T29708] loop7: detected capacity change from 0 to 1024 [ 309.697397][T29708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.719146][T29708] ext4 filesystem being mounted at /1709/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.740726][T29708] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.11630: lblock 3 mapped to illegal pblock 3 (length 13) [ 309.758167][T29708] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 309.771353][T29708] EXT4-fs (loop7): This should not happen!! Data will be lost [ 309.771353][T29708] [ 309.835535][T11650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.110498][T29754] loop9: detected capacity change from 0 to 1024 [ 310.125034][T29756] netlink: 188 bytes leftover after parsing attributes in process `syz.6.11651'. [ 310.136320][T29754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.152213][T29754] ext4 filesystem being mounted at /1174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.172731][T29754] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.11649: lblock 3 mapped to illegal pblock 3 (length 13) [ 310.188548][T29754] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 310.201002][T29754] EXT4-fs (loop9): This should not happen!! Data will be lost [ 310.201002][T29754] [ 310.237159][T16321] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.494441][T29779] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11662'. [ 310.546439][T29789] loop6: detected capacity change from 0 to 1024 [ 310.574645][T29789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.589850][T29789] ext4 filesystem being mounted at /1735/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.609877][T29789] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.11667: lblock 3 mapped to illegal pblock 3 (length 13) [ 310.624742][T29789] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 310.638122][T29789] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.638122][T29789] [ 310.685862][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.763364][T29804] delete_channel: no stack [ 310.769419][T29804] delete_channel: no stack [ 310.807068][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11675'. [ 310.845826][T29816] loop4: detected capacity change from 0 to 512 [ 310.853425][T29816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.870646][T29816] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #17: comm syz.4.11678: corrupted in-inode xattr: invalid ea_ino [ 310.885202][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 310.885218][ T29] audit: type=1400 audit(1756138212.757:4143): avc: denied { ioctl } for pid=29819 comm="syz.7.11681" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 310.908230][T29816] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.11678: couldn't read orphan inode 17 (err -117) [ 310.931944][T29816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.944669][ T29] audit: type=1326 audit(1756138212.812:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.9.11679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861542ebe9 code=0x7ffc0000 [ 310.969356][ T29] audit: type=1326 audit(1756138212.812:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.9.11679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861542ebe9 code=0x7ffc0000 [ 310.993198][ T29] audit: type=1326 audit(1756138212.812:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.9.11679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f861542ebe9 code=0x7ffc0000 [ 311.017676][ T29] audit: type=1326 audit(1756138212.812:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.9.11679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861542ebe9 code=0x7ffc0000 [ 311.041419][ T29] audit: type=1326 audit(1756138212.812:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.9.11679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861542ebe9 code=0x7ffc0000 [ 311.093144][T27256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.137811][T29835] loop6: detected capacity change from 0 to 1024 [ 311.169658][T29835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.198606][T11374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.250912][T29851] loop0: detected capacity change from 0 to 1024 [ 311.260152][T29851] EXT4-fs: Ignoring removed bh option [ 311.276140][T29851] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 311.289022][T29851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 311.299595][T29851] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.11692: lblock 2 mapped to illegal pblock 2 (length 1) [ 311.313955][T29851] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 311.322335][T29851] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.11692: lblock 0 mapped to illegal pblock 48 (length 1) [ 311.352807][T29851] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 311.361696][T29851] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.11692: Failed to acquire dquot type 0 [ 311.374902][T29851] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 311.391074][T29851] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.11692: mark_inode_dirty error [ 311.403054][T29851] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 311.414417][T29851] EXT4-fs (loop0): 1 orphan inode deleted [ 311.421327][T29851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.434667][ T4477] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 311.451942][ T4477] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 311.460705][ T4477] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:59: Failed to release dquot type 0 [ 311.480013][T29851] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 311.497975][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11707'. [ 311.524242][ T29] audit: type=1326 audit(1756138213.348:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.6.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394d13ebe9 code=0x7ffc0000 [ 311.549514][T29543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.605269][T29891] loop0: detected capacity change from 0 to 512 [ 311.613070][T29891] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.620228][T29891] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 311.632215][T29891] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 311.640590][T29891] EXT4-fs (loop0): orphan cleanup on readonly fs [ 311.655548][T29891] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11714: Invalid block bitmap block 0 in block_group 0 [ 311.675484][T29891] EXT4-fs (loop0): Remounting filesystem read-only [ 311.682754][T29891] EXT4-fs (loop0): 1 orphan inode deleted [ 311.708782][T29899] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11717'. [ 311.766735][T29906] loop7: detected capacity change from 0 to 1024 [ 311.784853][T29906] EXT4-fs: Ignoring removed bh option [ 311.791961][T29906] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 311.804866][T29906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 311.814279][T29906] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.11721: lblock 2 mapped to illegal pblock 2 (length 1) [ 311.829493][T29906] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.11721: lblock 0 mapped to illegal pblock 48 (length 1) [ 311.844098][T29906] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.11721: Failed to acquire dquot type 0 [ 311.855876][T29906] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 311.866215][T29906] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.11721: mark_inode_dirty error [ 311.878164][T29906] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 311.888504][T29906] EXT4-fs (loop7): 1 orphan inode deleted [ 311.902032][ T4449] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 311.917313][ T4449] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:34: Failed to release dquot type 0 [ 311.929428][T29906] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 312.061735][T29926] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11729'. [ 312.109398][T29932] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11732'. [ 312.190964][T29945] loop0: detected capacity change from 0 to 512 [ 312.200236][T29948] loop4: detected capacity change from 0 to 512 [ 312.207145][T29950] netlink: 'syz.9.11740': attribute type 1 has an invalid length. [ 312.215813][T29948] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.216768][T29945] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.240341][T29945] EXT4-fs (loop0): 1 truncate cleaned up [ 312.270339][T29955] loop7: detected capacity change from 0 to 256 [ 312.323179][T29965] loop9: detected capacity change from 0 to 164 Connection to 10.128.0.237 closed by remote host. [ 312.915271][ T4477] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.988072][ T4477] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.042770][ T4477] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.118951][ T4477] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.197074][ T4477] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.248266][ T4477] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.292290][ T4477] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.335106][ T4477] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.392745][ T4477] bridge0: port 1(batadv0) entered disabled state [ 313.423815][ T4477] team0: Port device geneve1 removed [ 313.541390][ T4477] bond0 (unregistering): Released all slaves [ 313.559690][ T4477] erspan0 (unregistering): left promiscuous mode [ 313.568290][ T4477] gretap0 (unregistering): left promiscuous mode [ 313.637018][ T4477] bond0 (unregistering): Released all slaves [ 313.645548][ T4477] bond1 (unregistering): Released all slaves [ 313.680932][ T4477] hsr_slave_0: left promiscuous mode [ 313.686887][ T4477] hsr_slave_1: left promiscuous mode [ 313.693151][ T4477] macvlan1: left promiscuous mode [ 313.698276][ T4477] hsr0: left allmulticast mode [ 313.703243][ T4477] veth0_macvtap: left allmulticast mode [ 313.855443][ T3444] ================================================================== [ 313.863674][ T3444] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 313.870987][ T3444] [ 313.873315][ T3444] read-write to 0xffff888100749d88 of 8 bytes by task 4477 on cpu 0: [ 313.881522][ T3444] __xa_set_mark+0xd2/0x1a0 [ 313.886135][ T3444] ref_tracker_dir_exit+0x5e/0x360 [ 313.891254][ T3444] free_netdev+0x325/0x4a0 [ 313.895854][ T3444] netdev_run_todo+0x711/0x810 [ 313.900640][ T3444] rtnl_unlock+0xe/0x20 [ 313.904858][ T3444] default_device_exit_batch+0x511/0x560 [ 313.910778][ T3444] ops_undo_list+0x2c0/0x410 [ 313.915402][ T3444] cleanup_net+0x2de/0x4d0 [ 313.919932][ T3444] process_scheduled_works+0x4cb/0x9d0 [ 313.925502][ T3444] worker_thread+0x582/0x770 [ 313.930125][ T3444] kthread+0x489/0x510 [ 313.934202][ T3444] ret_from_fork+0xda/0x150 [ 313.938801][ T3444] ret_from_fork_asm+0x1a/0x30 [ 313.943573][ T3444] [ 313.946075][ T3444] read to 0xffff888100749d88 of 8 bytes by task 3444 on cpu 1: [ 313.953800][ T3444] xas_find_marked+0x218/0x620 [ 313.958585][ T3444] xa_find_after+0xc6/0x1e0 [ 313.963105][ T3444] debugfs_reap_work+0x18c/0x1d0 [ 313.968145][ T3444] process_scheduled_works+0x4cb/0x9d0 [ 313.973644][ T3444] worker_thread+0x582/0x770 [ 313.978474][ T3444] kthread+0x489/0x510 [ 313.982647][ T3444] ret_from_fork+0xda/0x150 [ 313.987171][ T3444] ret_from_fork_asm+0x1a/0x30 [ 313.991953][ T3444] [ 313.994421][ T3444] value changed: 0x0000000002000000 -> 0x0000008002000800 [ 314.001618][ T3444] [ 314.003948][ T3444] Reported by Kernel Concurrency Sanitizer on: [ 314.010114][ T3444] CPU: 1 UID: 0 PID: 3444 Comm: kworker/1:4 Tainted: G W 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 314.024536][ T3444] Tainted: [W]=WARN [ 314.028369][ T3444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.038498][ T3444] Workqueue: events debugfs_reap_work [ 314.043972][ T3444] ================================================================== [ 314.473553][ T4477] IPVS: stop unused estimator thread 0... [ 314.561761][ T4477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.614355][ T4477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.690444][ T4477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.755362][ T4477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.833843][ T4477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.863053][ T4477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.906522][ T4477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.972262][ T4477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.070948][ T4477] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.121263][ T4477] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.176125][ T4477] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.229710][ T4477] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 315.296887][ T4477] bridge_slave_1: left allmulticast mode [ 315.302681][ T4477] bridge_slave_1: left promiscuous mode [ 315.309038][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.316821][ T4477] bridge_slave_0: left allmulticast mode [ 315.322504][ T4477] bridge_slave_0: left promiscuous mode [ 315.328313][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.336775][ T4477] bridge_slave_1: left allmulticast mode [ 315.343115][ T4477] bridge_slave_1: left promiscuous mode [ 315.348920][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.356805][ T4477] bridge_slave_0: left allmulticast mode [ 315.362593][ T4477] bridge_slave_0: left promiscuous mode [ 315.368333][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.377258][ T4477] batadv0: left allmulticast mode [ 315.382425][ T4477] batadv0: left promiscuous mode [ 315.387513][ T4477] bridge0: port 3(batadv0) entered disabled state [ 315.394644][ T4477] bridge_slave_1: left allmulticast mode [ 315.400399][ T4477] bridge_slave_1: left promiscuous mode [ 315.406872][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.414680][ T4477] bridge_slave_0: left allmulticast mode [ 315.420556][ T4477] bridge_slave_0: left promiscuous mode [ 315.426250][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.546052][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.556545][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.566458][ T4477] bond0 (unregistering): Released all slaves [ 315.632199][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.642264][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.652504][ T4477] bond0 (unregistering): Released all slaves [ 315.728981][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.738309][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.747275][ T4477] bond0 (unregistering): Released all slaves [ 315.755851][ T4477] bond1 (unregistering): Released all slaves [ 315.823073][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.830518][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.838327][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.845727][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.854716][ T4477] hsr_slave_0: left promiscuous mode [ 315.860454][ T4477] hsr_slave_1: left promiscuous mode [ 315.866147][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.873846][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.881532][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.888995][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.899302][ T4477] hsr_slave_0: left promiscuous mode [ 315.904967][ T4477] hsr_slave_1: left promiscuous mode [ 315.910485][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.918086][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.930892][ T4477] hsr0: left allmulticast mode [ 315.935800][ T4477] veth1_macvtap: left promiscuous mode [ 315.941278][ T4477] veth0_macvtap: left promiscuous mode [ 315.946816][ T4477] veth1_vlan: left promiscuous mode [ 315.952051][ T4477] veth0_vlan: left promiscuous mode [ 315.957968][ T4477] veth1_macvtap: left promiscuous mode [ 315.963450][ T4477] veth0_macvtap: left promiscuous mode [ 315.969287][ T4477] veth1_vlan: left promiscuous mode [ 315.974702][ T4477] veth0_vlan: left promiscuous mode [ 315.980541][ T4477] macvlan1: left promiscuous mode [ 315.985741][ T4477] veth0_macvtap: left allmulticast mode [ 316.085643][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 316.095705][ T4477] team0 (unregistering): Port device C removed [ 316.147497][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 316.157028][ T4477] team0 (unregistering): Port device team_slave_0 removed