last executing test programs: 12.08910036s ago: executing program 4 (id=1912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x64, 0x1}, 0x1c}}, 0x0) 12.088304859s ago: executing program 4 (id=1913): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11.96399465s ago: executing program 4 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318da"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10.923388837s ago: executing program 4 (id=1919): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000300)=""/246, 0xf6, 0x0) lseek(r4, 0x47, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1b0a000, 0x1000, 0x20000, 0x1}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 9.770448473s ago: executing program 4 (id=1925): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={r4, r5/1000+60000}, 0x10) r6 = getpid() setresuid(0x0, 0x0, 0xee01) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000001000000000000000000c70e76bb4df7c5fdf1f48d65e1687ce250a0680d8cb2751a1704849ee37eed75e9cab49c9d9c247917d02edbe3fb2c87e1ef49a50ea15b5adc7e70d6548a12eac9a145a631cca57938ad7f2c0630ff800c0113a2289b0d", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.806537704s ago: executing program 4 (id=1928): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.656280897s ago: executing program 3 (id=1942): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000006c40)=ANY=[@ANYBLOB="40170400000001760ecb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.712757986s ago: executing program 3 (id=1947): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 3.802280532s ago: executing program 3 (id=1950): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831", 0x1ce) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendfile(r0, r1, 0x0, 0xe065) 3.483865699s ago: executing program 3 (id=1954): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) execve(0x0, 0x0, 0x0) 3.47058398s ago: executing program 0 (id=1955): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000500000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 3.162597646s ago: executing program 3 (id=1958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000004340)='./bus\x00', 0x80048a, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x7, 0x2ba, &(0x7f0000004380)="$eJzs3T9ra2UYAPDnpPmnDskgDiJ4QIc7XW7v6mCq9MLFTEoGXfTiTUGaILRQ8A+mnVxdHP0EguDW1Q/g4jcQXAU3OxSOnJNzmqZN00ZMq97fb+nTc97nfZ+3edvSwnny0Svj3adp7Bx9+Wu020nUetGLkyS6UYvKYczpfRMAwH/ZSZbFH9nUKnlJRLTXVxYAsEYr//7/ce0lAQBr9t77H7yz1e9vv5um7Xg0/vpgkP9ln3+c3t/aiU9iFMN4EJ04jcjOTONHWZZN6mmuG6+PJweDPHP84c/l/Fu/RxT5m9GJbnFpPv9xf3sznTqXP8nreL5cv5fnP6x34sUF6z/ubz9ckB+DZtx7raw/4jDuRyd++Tg+jVE8LYqY5X+1maZvZ9/++UXxH408P5kcDFrFuJls47ZfGwAAAAAAAAAAAAAAAAAAAAAA/r/ul71zWlH078kvlf13Nk7zTxqRVrrz/Xmm+Uk10YX+QJMsvqv66zxIX2pl5cBZfj1erkf9bnYNAAAAAAAAAAAAAAAAAAAA/y77n32++2Q0Gu4tC248uOoGUD3Wf+3MVwS94d5xdeXVWD64NVurVoajYV7IwqzYqMYkEUvLyDfxt4pfPXiuqHnBre9/WHXC9vVjGovX+ieD6sDsPkkWfw1bZ69Ouzokx+fHNOOGazWnwZuXbmUrHb/mwludG6Qn8/O8UASTJVmRLCvsjd8iGhHVmU8u7qJ51cEeDRtFcO/qb732Suf58s+KRLcOAAAAAAAAAAAAAAAAAABYq8sP+Z9ztDS1lrXWVhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3KrZ+/+vEEzK5OmVn95aMrgZe/t3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeAX8FAAD//9OuWkY=") socket(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x8, "ddf0f85e"}, @global=@item_4={0x3, 0x1, 0xa, '\f\x00'}, @global=@item_4, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @global=@item_4={0x3, 0x1, 0x2, "63a7bef9"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x8, "4156ee12"}, @local]}}, 0x0}, 0x0) 2.581836034s ago: executing program 0 (id=1960): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 2.346314884s ago: executing program 2 (id=1961): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) 2.254186032s ago: executing program 2 (id=1962): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2.253427402s ago: executing program 2 (id=1963): openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.775208682s ago: executing program 1 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ptrace$getregs(0xe, r1, 0x6, &(0x7f00000006c0)=""/190) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getgroups(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) futimesat(0xffffffffffffffff, &(0x7f0000000800)='./bus\x00', &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x14001, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@user_xattr}, {@noquota}, {@noblock_validity}, {@data_err_ignore}, {@nojournal_checksum}, {@nojournal_checksum}, {@init_itable}], [], 0x3d}, 0x64, 0x51c, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) 1.573987899s ago: executing program 0 (id=1967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086"], 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x3e) 1.461985718s ago: executing program 0 (id=1968): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) execve(0x0, 0x0, 0x0) 1.360359217s ago: executing program 2 (id=1969): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 1.244681716s ago: executing program 0 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000014fc00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 918.725793ms ago: executing program 1 (id=1971): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) 906.344555ms ago: executing program 1 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r2, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 886.655786ms ago: executing program 1 (id=1973): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) 780.197635ms ago: executing program 1 (id=1974): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 729.340689ms ago: executing program 1 (id=1975): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffffff0100950000000000009500000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 618.416479ms ago: executing program 2 (id=1976): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1ce) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendfile(r0, r1, 0x0, 0xe065) 557.142824ms ago: executing program 2 (id=1977): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000300)='./control\x00', 0x146) inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r8, r7, 0x0, 0xc) 397.178167ms ago: executing program 0 (id=1978): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 0s ago: executing program 3 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086"], 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x3e) kernel console output (not intermixed with test programs): T9126] loop1: detected capacity change from 0 to 128 [ 286.928549][ T9125] loop3: detected capacity change from 0 to 128 [ 286.964506][ T9126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.983686][ T9125] FAT-fs (loop3): Directory bread(block 160) failed [ 286.998329][ T9125] FAT-fs (loop3): Directory bread(block 161) failed [ 287.010283][ T9125] FAT-fs (loop3): Directory bread(block 162) failed [ 287.017235][ T9125] FAT-fs (loop3): Directory bread(block 163) failed [ 287.023919][ T9125] FAT-fs (loop3): Directory bread(block 164) failed [ 287.031184][ T9125] FAT-fs (loop3): Directory bread(block 165) failed [ 287.037867][ T9125] FAT-fs (loop3): Directory bread(block 166) failed [ 287.044630][ T9125] FAT-fs (loop3): Directory bread(block 167) failed [ 287.051560][ T9126] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.277856][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.287193][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.324800][ T9135] loop3: detected capacity change from 0 to 256 [ 287.426173][ T9135] FAT-fs (loop3): Directory bread(block 64) failed [ 287.433373][ T9135] FAT-fs (loop3): Directory bread(block 65) failed [ 287.462271][ T9135] FAT-fs (loop3): Directory bread(block 66) failed [ 287.596136][ T9141] loop2: detected capacity change from 0 to 512 [ 287.629167][ T9135] FAT-fs (loop3): Directory bread(block 67) failed [ 287.698390][ T9135] FAT-fs (loop3): Directory bread(block 68) failed [ 287.704338][ T9141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.704993][ T9135] FAT-fs (loop3): Directory bread(block 69) failed [ 287.717699][ T9141] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.737613][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.746611][ T9135] FAT-fs (loop3): Directory bread(block 70) failed [ 287.753191][ T9135] FAT-fs (loop3): Directory bread(block 71) failed [ 287.753258][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.759785][ T9135] FAT-fs (loop3): Directory bread(block 72) failed [ 287.774023][ T9135] FAT-fs (loop3): Directory bread(block 73) failed [ 288.066696][ T5575] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.083916][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.093681][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.443883][ T8821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.698398][ T9162] loop2: detected capacity change from 0 to 1024 [ 288.729324][ T9162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.736796][ T9162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.750647][ T9162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.792091][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 289.058578][ T9160] loop4: detected capacity change from 0 to 1024 [ 289.083986][ T9160] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 289.114493][ T9160] JBD2: no valid journal superblock found [ 289.120321][ T9160] EXT4-fs (loop4): Could not load journal inode [ 289.290176][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.305460][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.456520][ T9183] loop4: detected capacity change from 0 to 128 [ 289.485457][ T9183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.703640][ T9183] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.795714][ T8821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.481401][ T9196] loop0: detected capacity change from 0 to 512 [ 290.582686][ T9196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.596360][ T9196] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.612053][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.630107][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.694925][ T9226] loop3: detected capacity change from 0 to 512 [ 291.809140][ T9228] ./file0: Can't open blockdev [ 292.135079][ T9226] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 292.150270][ T29] audit: type=1400 audit(1729419414.176:556): avc: denied { mounton } for pid=9223 comm="syz.1.1335" path="/189/file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 292.154799][ T9226] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 292.182408][ T9226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 292.190320][ T9226] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1333: Invalid block bitmap block 0 in block_group 0 [ 292.284912][ T9226] EXT4-fs (loop3): Remounting filesystem read-only [ 292.291761][ T9226] Quota error (device loop3): write_blk: dquota write failed [ 292.299203][ T9226] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 292.309138][ T9226] EXT4-fs (loop3): 1 orphan inode deleted [ 292.490697][ T9226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.503351][ T9226] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 292.510572][ T9226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.591376][ T8117] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.603084][ T9232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.646932][ T9226] syz.3.1333 (9226) used greatest stack depth: 9816 bytes left [ 293.650397][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.699746][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.708769][ T9259] loop3: detected capacity change from 0 to 512 [ 293.723191][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.924543][ T9259] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.131658][ T9263] pim6reg1: entered promiscuous mode [ 294.137132][ T9263] pim6reg1: entered allmulticast mode [ 294.475226][ T9274] loop2: detected capacity change from 0 to 512 [ 294.492544][ T9274] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 294.521107][ T9273] loop4: detected capacity change from 0 to 128 [ 294.570496][ T9274] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 294.579330][ T9274] EXT4-fs (loop2): orphan cleanup on readonly fs [ 294.586660][ T9274] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1349: Invalid block bitmap block 0 in block_group 0 [ 294.612602][ T9274] EXT4-fs (loop2): Remounting filesystem read-only [ 294.619463][ T9274] Quota error (device loop2): write_blk: dquota write failed [ 294.626895][ T9274] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 294.636877][ T9274] EXT4-fs (loop2): 1 orphan inode deleted [ 294.704799][ T9280] loop1: detected capacity change from 0 to 512 [ 294.738147][ T9276] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 294.748561][ T9276] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 294.802277][ T9280] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 294.862648][ T9284] loop0: detected capacity change from 0 to 128 [ 294.880021][ T9273] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.892593][ T9274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.904977][ T9274] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 294.911898][ T9274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.932483][ T9284] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 294.977153][ T9273] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.059849][ T9288] loop0: detected capacity change from 0 to 128 [ 295.084562][ T9288] FAT-fs (loop0): Directory bread(block 160) failed [ 295.099786][ T9288] FAT-fs (loop0): Directory bread(block 161) failed [ 295.161340][ T9289] syz.1.1351[9289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.161483][ T9289] syz.1.1351[9289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.172977][ T9289] syz.1.1351[9289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.257178][ T9288] FAT-fs (loop0): Directory bread(block 162) failed [ 295.339911][ T9288] FAT-fs (loop0): Directory bread(block 163) failed [ 295.434087][ T9288] FAT-fs (loop0): Directory bread(block 164) failed [ 295.506779][ T9288] FAT-fs (loop0): Directory bread(block 165) failed [ 295.513673][ T9288] FAT-fs (loop0): Directory bread(block 166) failed [ 295.556480][ T9288] FAT-fs (loop0): Directory bread(block 167) failed [ 295.593941][ T9293] loop2: detected capacity change from 0 to 512 [ 295.752130][ T9293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.764865][ T9293] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.777580][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.789036][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.987070][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 296.023013][ T8472] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 296.032845][ T8117] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.209625][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 296.392399][ T9313] loop3: detected capacity change from 0 to 1024 [ 296.400976][ T9313] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 296.411584][ T9313] JBD2: no valid journal superblock found [ 296.417407][ T9313] EXT4-fs (loop3): Could not load journal inode [ 296.590688][ T8821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.739268][ T9323] pim6reg1: entered promiscuous mode [ 296.744644][ T9323] pim6reg1: entered allmulticast mode [ 296.944296][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.977165][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.221188][ T9338] loop4: detected capacity change from 0 to 128 [ 297.250864][ T9338] FAT-fs (loop4): Directory bread(block 160) failed [ 297.279932][ T9338] FAT-fs (loop4): Directory bread(block 161) failed [ 297.302847][ T9338] FAT-fs (loop4): Directory bread(block 162) failed [ 297.327469][ T9341] loop0: detected capacity change from 0 to 128 [ 297.335497][ T9338] FAT-fs (loop4): Directory bread(block 163) failed [ 297.357583][ T9338] FAT-fs (loop4): Directory bread(block 164) failed [ 297.379226][ T9338] FAT-fs (loop4): Directory bread(block 165) failed [ 297.401001][ T9341] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.419357][ T9338] FAT-fs (loop4): Directory bread(block 166) failed [ 297.426096][ T9338] FAT-fs (loop4): Directory bread(block 167) failed [ 297.438780][ T9341] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.812512][ T9348] loop4: detected capacity change from 0 to 512 [ 298.665062][ T9348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.698236][ T9348] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.977659][ T9359] loop3: detected capacity change from 0 to 512 [ 299.031614][ T9359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.073466][ T9359] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.108650][ T9356] loop1: detected capacity change from 0 to 1024 [ 299.125898][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.143961][ T9356] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 299.164810][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.185669][ T9356] JBD2: no valid journal superblock found [ 299.191932][ T9356] EXT4-fs (loop1): Could not load journal inode [ 299.283779][ T8117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.354927][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.402444][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.545156][ T29] audit: type=1400 audit(1729419421.906:557): avc: denied { read } for pid=9366 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.732485][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.794969][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.842691][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 300.024349][ T7864] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.646890][ T9383] loop2: detected capacity change from 0 to 128 [ 300.654175][ T9383] FAT-fs (loop2): Directory bread(block 160) failed [ 300.661230][ T9383] FAT-fs (loop2): Directory bread(block 161) failed [ 300.668012][ T9383] FAT-fs (loop2): Directory bread(block 162) failed [ 300.674721][ T9383] FAT-fs (loop2): Directory bread(block 163) failed [ 300.681507][ T9383] FAT-fs (loop2): Directory bread(block 164) failed [ 300.688221][ T9383] FAT-fs (loop2): Directory bread(block 165) failed [ 300.694928][ T9383] FAT-fs (loop2): Directory bread(block 166) failed [ 300.701670][ T9383] FAT-fs (loop2): Directory bread(block 167) failed [ 300.848078][ T9387] loop2: detected capacity change from 0 to 1024 [ 300.855014][ T9387] EXT4-fs: Ignoring removed i_version option [ 300.862969][ T9387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.895955][ T9387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.062336][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.164673][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.194684][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.751083][ T8821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.907108][ T9404] loop2: detected capacity change from 0 to 128 [ 302.014724][ T9408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.095340][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 302.451615][ T9421] loop4: detected capacity change from 0 to 512 [ 302.468350][ T9421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.488990][ T9421] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.508534][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.519959][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.895255][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.903948][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.043021][ T8117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.183144][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.206755][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.870043][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.881341][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.947375][ T9458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.998918][ T9460] syzkaller0: entered promiscuous mode [ 304.004432][ T9460] syzkaller0: entered allmulticast mode [ 304.541411][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.551649][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.755153][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.773234][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.159581][ T9491] syzkaller0: entered promiscuous mode [ 305.165098][ T9491] syzkaller0: entered allmulticast mode [ 306.251035][ T9501] loop2: detected capacity change from 0 to 128 [ 306.454890][ T9507] 9pnet_fd: Insufficient options for proto=fd [ 306.656840][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.706785][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.772017][ T9516] loop0: detected capacity change from 0 to 1024 [ 306.782941][ T9516] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 306.795854][ T9516] JBD2: no valid journal superblock found [ 306.801643][ T9516] EXT4-fs (loop0): Could not load journal inode [ 306.975406][ T9525] syzkaller0: entered promiscuous mode [ 306.981002][ T9525] syzkaller0: entered allmulticast mode [ 307.495114][ T9538] loop2: detected capacity change from 0 to 128 [ 307.656038][ T9544] loop2: detected capacity change from 0 to 512 [ 307.662895][ T9544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 307.675758][ T9544] EXT4-fs (loop2): 1 truncate cleaned up [ 307.681915][ T9544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.837328][ T9552] loop0: detected capacity change from 0 to 512 [ 307.942105][ T9552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.954828][ T9552] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.020425][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.030107][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.084682][ T9559] loop3: detected capacity change from 0 to 1024 [ 308.143389][ T9559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.273073][ T9559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.838495][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.991125][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.625473][ T9579] syzkaller0: entered promiscuous mode [ 309.631079][ T9579] syzkaller0: entered allmulticast mode [ 309.746086][ T9589] loop4: detected capacity change from 0 to 128 [ 309.871741][ T9594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.920767][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.935911][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 309.969492][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.002290][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.009600][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.019694][ T9581] bridge_slave_0: entered allmulticast mode [ 310.026361][ T9581] bridge_slave_0: entered promiscuous mode [ 310.033370][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 310.045964][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.053154][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.063254][ T9581] bridge_slave_1: entered allmulticast mode [ 310.070632][ T9581] bridge_slave_1: entered promiscuous mode [ 310.084044][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.112611][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.125500][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.151869][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.165787][ T9581] team0: Port device team_slave_0 added [ 310.173086][ T9581] team0: Port device team_slave_1 added [ 310.193769][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.200815][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.226794][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.240661][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.247678][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.273673][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.304089][ T9581] hsr_slave_0: entered promiscuous mode [ 310.310962][ T9581] hsr_slave_1: entered promiscuous mode [ 310.317202][ T9581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.324828][ T9581] Cannot create hsr debugfs directory [ 310.504310][ T11] bridge_slave_1: left allmulticast mode [ 310.510192][ T11] bridge_slave_1: left promiscuous mode [ 310.515936][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.529972][ T11] bridge_slave_0: left allmulticast mode [ 310.535694][ T11] bridge_slave_0: left promiscuous mode [ 310.541469][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.821142][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.835244][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.848168][ T11] bond0 (unregistering): Released all slaves [ 310.938274][ T11] hsr_slave_0: left promiscuous mode [ 310.944335][ T11] hsr_slave_1: left promiscuous mode [ 310.955592][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.963825][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.971364][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.984419][ T11] veth1_macvtap: left promiscuous mode [ 310.989970][ T11] veth0_macvtap: left promiscuous mode [ 310.995590][ T11] veth1_vlan: left promiscuous mode [ 311.242948][ T9639] loop0: detected capacity change from 0 to 512 [ 311.253011][ T9639] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 311.286059][ T9639] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 311.294272][ T9639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 311.302335][ T9639] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1453: Invalid block bitmap block 0 in block_group 0 [ 311.316993][ T9639] EXT4-fs (loop0): Remounting filesystem read-only [ 311.323640][ T9639] Quota error (device loop0): write_blk: dquota write failed [ 311.331136][ T9639] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 311.341028][ T9639] EXT4-fs (loop0): 1 orphan inode deleted [ 311.638604][ T11] team0 (unregistering): Port device team_slave_1 removed [ 311.679673][ T11] team0 (unregistering): Port device team_slave_0 removed [ 311.703401][ T9639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.715848][ T9639] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 311.722773][ T9639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.800933][ T9644] syzkaller0: entered promiscuous mode [ 311.806546][ T9644] syzkaller0: entered allmulticast mode [ 311.927334][ T9639] syz.0.1453 (9639) used greatest stack depth: 9720 bytes left [ 311.955429][ T9658] loop0: detected capacity change from 0 to 128 [ 312.250659][ T11] bridge_slave_1: left allmulticast mode [ 312.256374][ T11] bridge_slave_1: left promiscuous mode [ 312.262128][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.292554][ T9685] loop4: detected capacity change from 0 to 512 [ 312.318333][ T11] bridge_slave_0: left allmulticast mode [ 312.324024][ T11] bridge_slave_0: left promiscuous mode [ 312.329810][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.340707][ T9685] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.569245][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.596380][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.772092][ T11] bond0 (unregistering): Released all slaves [ 312.782827][ T9692] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 312.793379][ T9692] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.942388][ T11] hsr_slave_0: left promiscuous mode [ 312.970380][ T11] hsr_slave_1: left promiscuous mode [ 313.005526][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.013248][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.045870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.053378][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.076642][ T11] veth1_macvtap: left promiscuous mode [ 313.082257][ T11] veth0_macvtap: left promiscuous mode [ 313.087828][ T11] veth1_vlan: left promiscuous mode [ 313.172080][ T8117] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 313.281351][ T9700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.399505][ T11] team0 (unregistering): Port device team_slave_1 removed [ 313.415898][ T11] team0 (unregistering): Port device team_slave_0 removed [ 313.846683][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'. [ 313.875056][ T9581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.888561][ T9581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.899739][ T9581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.909794][ T9712] loop4: detected capacity change from 0 to 128 [ 313.912095][ T9581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.924525][ T9712] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 313.964127][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 313.992382][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.013098][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.037499][ T9722] syzkaller0: entered promiscuous mode [ 314.043103][ T9722] syzkaller0: entered allmulticast mode [ 314.054924][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.062069][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.104368][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.111631][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.257156][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.501192][ T9581] veth0_vlan: entered promiscuous mode [ 314.537247][ T9581] veth1_vlan: entered promiscuous mode [ 314.544963][ T9782] 9pnet_fd: Insufficient options for proto=fd [ 314.583737][ T9581] veth0_macvtap: entered promiscuous mode [ 314.592144][ T9581] veth1_macvtap: entered promiscuous mode [ 314.604178][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.614787][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.624659][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.635213][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.645079][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.655564][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.665495][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.675976][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.687752][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.697100][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.707643][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.717519][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.727965][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.737814][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.748326][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.758226][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.768756][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.778596][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.789073][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.799050][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.809554][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.823159][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.835723][ T9581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.837147][ T9787] loop0: detected capacity change from 0 to 512 [ 314.844553][ T9581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.859485][ T9581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.868230][ T9581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.887604][ T9787] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.077815][ T9792] loop1: detected capacity change from 0 to 128 [ 315.141914][ T9792] FAT-fs (loop1): Directory bread(block 160) failed [ 315.160534][ T9792] FAT-fs (loop1): Directory bread(block 161) failed [ 315.167409][ T9792] FAT-fs (loop1): Directory bread(block 162) failed [ 315.195711][ T9792] FAT-fs (loop1): Directory bread(block 163) failed [ 315.225782][ T9792] FAT-fs (loop1): Directory bread(block 164) failed [ 315.259770][ T9793] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 315.270150][ T9793] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.332794][ T9792] FAT-fs (loop1): Directory bread(block 165) failed [ 315.382122][ T9792] FAT-fs (loop1): Directory bread(block 166) failed [ 315.436309][ T9792] FAT-fs (loop1): Directory bread(block 167) failed [ 315.789334][ T7864] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 315.797464][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 315.859173][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.870057][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.838645][ T9816] loop3: detected capacity change from 0 to 128 [ 316.939595][ T9816] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 316.988809][ T152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 317.052609][ T9818] syzkaller0: entered promiscuous mode [ 317.058192][ T9818] syzkaller0: entered allmulticast mode [ 317.158004][ T9820] loop3: detected capacity change from 0 to 1024 [ 317.164763][ T9820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.178123][ T9820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.204532][ T9820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.472449][ T9826] loop1: detected capacity change from 0 to 1024 [ 317.489916][ T9826] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 317.502001][ T9826] JBD2: no valid journal superblock found [ 317.507784][ T9826] EXT4-fs (loop1): Could not load journal inode [ 317.940278][ T8821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.047711][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.240497][ T9834] chnl_net:caif_netlink_parms(): no params data found [ 318.294417][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.301552][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.311506][ T9834] bridge_slave_0: entered allmulticast mode [ 318.319127][ T9834] bridge_slave_0: entered promiscuous mode [ 318.336604][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.343735][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.362099][ T9834] bridge_slave_1: entered allmulticast mode [ 318.373631][ T9834] bridge_slave_1: entered promiscuous mode [ 318.426770][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.461921][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.495317][ T9834] team0: Port device team_slave_0 added [ 318.518839][ T9834] team0: Port device team_slave_1 added [ 318.574422][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.581647][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.607735][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.642474][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.649534][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.675535][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.744114][ T9834] hsr_slave_0: entered promiscuous mode [ 318.758202][ T9834] hsr_slave_1: entered promiscuous mode [ 318.979326][ T9834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.061265][ T9834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.130635][ T9834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.180776][ T9834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.277384][ T9834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.304874][ T9834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.324677][ T9834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.355392][ T9834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.371119][ T29] audit: type=1400 audit(1729419441.736:558): avc: denied { read } for pid=9861 comm="syz.0.1486" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 319.398736][ T29] audit: type=1400 audit(1729419441.766:559): avc: denied { open } for pid=9861 comm="syz.0.1486" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 319.428029][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.441548][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.456733][ T29] audit: type=1400 audit(1729419441.766:560): avc: denied { ioctl } for pid=9861 comm="syz.0.1486" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 319.498991][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.506078][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.529302][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.536453][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.632558][ T9873] syzkaller0: entered promiscuous mode [ 319.638180][ T9873] syzkaller0: entered allmulticast mode [ 319.667903][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.756106][ T9834] veth0_vlan: entered promiscuous mode [ 319.765074][ T9834] veth1_vlan: entered promiscuous mode [ 319.778555][ T9834] veth0_macvtap: entered promiscuous mode [ 319.786151][ T9834] veth1_macvtap: entered promiscuous mode [ 319.796663][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.807262][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.817180][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.827902][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.837854][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.848302][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.858184][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.868758][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.878625][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.889184][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.900641][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.917339][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.927975][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.937840][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.948378][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.958238][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.968696][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.978543][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.989005][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.998931][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.008720][ T9890] loop1: detected capacity change from 0 to 512 [ 320.009367][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.025522][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.026011][ T9890] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 320.036052][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.036071][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.036122][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.054872][ T9890] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 320.057990][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.066298][ T9890] EXT4-fs (loop1): orphan cleanup on readonly fs [ 320.083262][ T9834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.084456][ T9890] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1491: Invalid block bitmap block 0 in block_group 0 [ 320.091283][ T9834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.091318][ T9834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.108297][ T9890] EXT4-fs (loop1): Remounting filesystem read-only [ 320.119745][ T9834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.128536][ T9890] Quota error (device loop1): write_blk: dquota write failed [ 320.160168][ T9890] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 320.170156][ T9890] EXT4-fs (loop1): 1 orphan inode deleted [ 320.180063][ T9890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.192618][ T9890] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 320.199555][ T9890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.242366][ T9896] loop2: detected capacity change from 0 to 512 [ 320.253147][ T9896] EXT4-fs: Ignoring removed nobh option [ 320.258893][ T9896] EXT4-fs: Ignoring removed nobh option [ 320.286352][ T9896] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 320.295455][ T9896] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1482: invalid indirect mapped block 2683928664 (level 1) [ 320.314928][ T9896] EXT4-fs (loop2): 1 truncate cleaned up [ 320.321654][ T9896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.662695][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 321.169104][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.538814][ T9927] loop3: detected capacity change from 0 to 128 [ 321.564386][ T9927] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 321.612458][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 321.722017][ T9934] loop3: detected capacity change from 0 to 1024 [ 321.756837][ T9934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.786507][ T9934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 321.799431][ T9934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.060380][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 322.692359][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.860813][ T9950] 9pnet_fd: Insufficient options for proto=fd [ 322.998872][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.010121][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.044253][ T9957] veth0_vlan: entered allmulticast mode [ 324.246682][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 324.594786][ T9981] loop3: detected capacity change from 0 to 1024 [ 324.646695][ T9981] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 324.715466][ T9981] JBD2: no valid journal superblock found [ 324.721296][ T9981] EXT4-fs (loop3): Could not load journal inode [ 326.274176][T10008] loop1: detected capacity change from 0 to 512 [ 326.299169][T10008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.313487][T10008] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.330971][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.352786][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.712643][T10000] chnl_net:caif_netlink_parms(): no params data found [ 326.803859][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.811010][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.820406][T10000] bridge_slave_0: entered allmulticast mode [ 326.827265][T10000] bridge_slave_0: entered promiscuous mode [ 326.834675][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.841813][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.853282][T10000] bridge_slave_1: entered allmulticast mode [ 326.859943][T10000] bridge_slave_1: entered promiscuous mode [ 326.888888][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.901372][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.921927][T10000] team0: Port device team_slave_0 added [ 326.928717][T10000] team0: Port device team_slave_1 added [ 326.982299][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.209875][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.216932][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.242877][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.477180][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.484196][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.510249][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.558632][T10037] loop1: detected capacity change from 0 to 128 [ 327.584551][T10000] hsr_slave_0: entered promiscuous mode [ 327.603695][T10000] hsr_slave_1: entered promiscuous mode [ 327.652187][T10000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.682600][T10000] Cannot create hsr debugfs directory [ 328.164350][T10000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.240439][T10000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.328902][T10000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.383731][T10000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.512587][T10000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.661898][T10055] syzkaller0: entered promiscuous mode [ 328.667473][T10055] syzkaller0: entered allmulticast mode [ 328.744697][T10000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.752382][T10059] loop3: detected capacity change from 0 to 1024 [ 328.764747][T10000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.780951][T10059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 328.800721][T10059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.992138][T10000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.131926][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.157235][T10000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.166150][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.172873][T10000] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.185280][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.192463][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.211950][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.219115][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.305151][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.489850][T10089] syz.1.1540[10089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.489924][T10089] syz.1.1540[10089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.501906][T10089] syz.1.1540[10089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.522564][T10000] veth0_vlan: entered promiscuous mode [ 329.576389][T10000] veth1_vlan: entered promiscuous mode [ 329.618372][T10000] veth0_macvtap: entered promiscuous mode [ 329.626832][T10000] veth1_macvtap: entered promiscuous mode [ 329.638490][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.649088][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.658978][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.669430][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.679277][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.689852][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.699731][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.710344][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.720215][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.730680][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.740579][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.751105][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.762650][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.778411][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.793615][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.804288][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.814156][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.824614][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.834478][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.844910][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.854757][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.865274][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.875119][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.885589][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.895444][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.905907][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.915910][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.926560][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.936487][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.946923][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.091982][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.103547][T10000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.112348][T10000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.121100][T10000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.129881][T10000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.316786][T10099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.381946][T10099] batadv_slave_0: entered promiscuous mode [ 330.446226][T10107] 9pnet_fd: Insufficient options for proto=fd [ 332.248849][T10138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10138 comm=syz.2.1554 [ 332.504501][T10150] loop4: detected capacity change from 0 to 512 [ 332.523228][T10150] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1558: corrupted in-inode xattr: invalid ea_ino [ 332.566599][T10150] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1558: couldn't read orphan inode 15 (err -117) [ 332.583203][T10150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.597917][T10155] x_tables: ip_tables: osf match: only valid for protocol 6 [ 332.802048][T10157] hub 6-0:1.0: USB hub found [ 332.806888][T10157] hub 6-0:1.0: 8 ports detected [ 332.947937][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.136899][T10159] batadv_slave_0: entered promiscuous mode [ 333.227928][T10166] loop1: detected capacity change from 0 to 128 [ 333.281114][T10169] 9pnet_fd: Insufficient options for proto=fd [ 333.458142][T10000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.210169][T10191] loop1: detected capacity change from 0 to 512 [ 334.262637][T10191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.314374][T10191] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.355900][T10197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10197 comm=syz.0.1571 [ 334.393687][ T29] audit: type=1107 audit(1729419456.746:561): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 334.839312][T10204] loop4: detected capacity change from 0 to 128 [ 335.055408][T10209] syzkaller0: entered promiscuous mode [ 335.060971][T10209] syzkaller0: entered allmulticast mode [ 335.182094][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 335.193491][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.335788][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1578'. [ 335.425411][T10226] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1579'. [ 335.582804][T10233] loop4: detected capacity change from 0 to 1024 [ 335.590092][T10233] EXT4-fs: Ignoring removed i_version option [ 335.608989][T10233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.636876][T10233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.410256][T10237] loop3: detected capacity change from 0 to 128 [ 336.486740][T10000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.677754][T10241] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10241 comm=syz.0.1587 [ 337.108155][ T29] audit: type=1107 audit(1729419459.476:562): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 337.153288][T10256] syzkaller0: entered promiscuous mode [ 337.158843][T10256] syzkaller0: entered allmulticast mode [ 337.273373][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 337.357727][T10261] loop1: detected capacity change from 0 to 512 [ 337.466688][T10261] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.059425][T10269] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 338.069795][T10269] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.316057][ T9581] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 338.360944][T10280] loop2: detected capacity change from 0 to 512 [ 338.781564][T10280] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 338.802485][T10280] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 338.810736][T10280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.820404][T10280] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1595: Invalid block bitmap block 0 in block_group 0 [ 338.834230][T10280] EXT4-fs (loop2): Remounting filesystem read-only [ 338.840974][T10280] Quota error (device loop2): write_blk: dquota write failed [ 338.848381][T10280] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 338.858311][T10280] EXT4-fs (loop2): 1 orphan inode deleted [ 339.079911][T10280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.092424][T10280] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 339.099352][T10280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.304521][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 339.558299][ T29] audit: type=1107 audit(1729419461.926:563): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 339.596485][T10309] loop2: detected capacity change from 0 to 256 [ 339.620314][T10309] FAT-fs (loop2): codepage cp775 not found [ 340.519486][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.533321][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.196943][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 341.237384][T10338] loop1: detected capacity change from 0 to 512 [ 341.254898][T10338] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1619: corrupted in-inode xattr: invalid ea_ino [ 341.269756][T10338] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1619: couldn't read orphan inode 15 (err -117) [ 341.283852][T10338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.399830][T10338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.407415][T10338] batadv_slave_0: entered promiscuous mode [ 341.460214][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.703584][ T29] audit: type=1107 audit(1729419464.066:564): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 342.850292][T10369] loop2: detected capacity change from 0 to 1024 [ 342.860229][T10369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.870751][T10369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.888493][T10369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.174619][T10377] loop3: detected capacity change from 0 to 128 [ 343.183545][T10377] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 343.344570][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.376667][ T36] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 343.447811][T10381] loop3: detected capacity change from 0 to 512 [ 343.578952][T10381] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1632: corrupted in-inode xattr: invalid ea_ino [ 343.615091][T10381] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1632: couldn't read orphan inode 15 (err -117) [ 343.678821][T10381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.887894][T10381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.898581][T10381] batadv_slave_0: entered promiscuous mode [ 343.932788][T10392] loop2: detected capacity change from 0 to 128 [ 344.054551][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.184787][T10403] loop3: detected capacity change from 0 to 512 [ 344.213341][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 344.222745][T10403] EXT4-fs: Ignoring removed nobh option [ 344.228441][T10403] EXT4-fs: Ignoring removed nobh option [ 344.307361][T10403] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 344.340032][T10403] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1639: invalid indirect mapped block 2683928664 (level 1) [ 344.484552][T10403] EXT4-fs (loop3): 1 truncate cleaned up [ 344.504018][T10403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.682836][ T29] audit: type=1107 audit(1729419467.046:565): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 344.987414][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.031688][T10415] loop2: detected capacity change from 0 to 512 [ 345.083965][T10415] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.203252][T10421] loop3: detected capacity change from 0 to 128 [ 345.261474][T10421] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 345.287517][T10422] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 345.297955][T10422] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.318923][ T152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 346.089327][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 346.111160][ T9834] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 346.771462][ T2122] bridge_slave_1: left allmulticast mode [ 346.777263][ T2122] bridge_slave_1: left promiscuous mode [ 346.783026][ T2122] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.936596][ T2122] bridge_slave_0: left allmulticast mode [ 346.942283][ T2122] bridge_slave_0: left promiscuous mode [ 346.947981][ T2122] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.176896][ T29] audit: type=1107 audit(1729419469.536:566): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 347.216723][ T2122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.291365][ T2122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.318705][ T2122] bond0 (unregistering): Released all slaves [ 347.515872][T10471] syzkaller0: entered promiscuous mode [ 347.521518][T10471] syzkaller0: entered allmulticast mode [ 347.549638][T10473] loop1: detected capacity change from 0 to 128 [ 347.597768][ T2122] hsr_slave_0: left promiscuous mode [ 347.705203][ T2122] hsr_slave_1: left promiscuous mode [ 347.710967][ T2122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.720523][ T2122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.728417][ T2122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.738179][ T2122] veth1_macvtap: left promiscuous mode [ 347.743738][ T2122] veth0_macvtap: left promiscuous mode [ 347.749323][ T2122] veth1_vlan: left promiscuous mode [ 347.785548][T10478] loop3: detected capacity change from 0 to 1024 [ 347.801106][T10478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.825391][T10478] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 347.851776][T10478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.924077][ T2122] team0 (unregistering): Port device team_slave_1 removed [ 347.945987][ T2122] team0 (unregistering): Port device team_slave_0 removed [ 348.097621][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 348.797892][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.848621][T10495] loop3: detected capacity change from 0 to 512 [ 348.881636][T10495] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1667: corrupted in-inode xattr: invalid ea_ino [ 348.912185][T10495] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1667: couldn't read orphan inode 15 (err -117) [ 348.937097][T10495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.048691][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.780541][T10540] syz.0.1681[10540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.780979][T10540] syz.0.1681[10540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.017486][T10540] syz.0.1681[10540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.085999][T10542] loop1: detected capacity change from 0 to 512 [ 351.230239][T10542] EXT4-fs: Ignoring removed nobh option [ 351.235853][T10542] EXT4-fs: Ignoring removed nobh option [ 351.378665][T10542] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 351.396804][T10542] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1682: invalid indirect mapped block 2683928664 (level 1) [ 351.438618][T10542] EXT4-fs (loop1): 1 truncate cleaned up [ 351.482800][T10542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.915722][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.261007][T10551] syzkaller0: entered promiscuous mode [ 352.266609][T10551] syzkaller0: entered allmulticast mode [ 353.062220][T10562] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10562 comm=syz.0.1686 [ 353.627980][T10578] loop1: detected capacity change from 0 to 1024 [ 353.634835][T10578] EXT4-fs: Ignoring removed i_version option [ 353.645947][T10578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 353.899718][T10578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.015782][T10583] loop3: detected capacity change from 0 to 128 [ 354.289028][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.351372][T10589] loop3: detected capacity change from 0 to 512 [ 354.365423][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 354.431496][T10589] EXT4-fs: Ignoring removed nobh option [ 354.437153][T10589] EXT4-fs: Ignoring removed nobh option [ 354.486547][T10589] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 354.487840][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 354.505352][T10589] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1694: invalid indirect mapped block 2683928664 (level 1) [ 354.897614][T10589] EXT4-fs (loop3): 1 truncate cleaned up [ 354.944342][T10605] x_tables: ip_tables: osf match: only valid for protocol 6 [ 354.960560][T10589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.278702][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.127197][T10617] syzkaller0: entered promiscuous mode [ 356.132719][T10617] syzkaller0: entered allmulticast mode [ 356.412918][T10624] loop1: detected capacity change from 0 to 512 [ 356.448805][T10624] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1704: corrupted in-inode xattr: invalid ea_ino [ 356.478868][T10624] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1704: couldn't read orphan inode 15 (err -117) [ 356.529972][T10624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.855265][ T29] audit: type=1107 audit(1729419479.216:567): pid=10620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 357.522877][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 357.626792][T10649] loop3: detected capacity change from 0 to 1024 [ 357.633525][T10649] EXT4-fs: test_dummy_encryption option not supported [ 357.678530][T10653] serio: Serial port ptm0 [ 357.770230][T10657] loop2: detected capacity change from 0 to 512 [ 357.778505][T10657] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 357.798423][T10657] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 357.806750][T10657] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.814485][T10657] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1712: Invalid block bitmap block 0 in block_group 0 [ 357.831990][T10657] EXT4-fs (loop2): Remounting filesystem read-only [ 357.838877][T10657] Quota error (device loop2): write_blk: dquota write failed [ 357.846324][T10657] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 357.856274][T10657] EXT4-fs (loop2): 1 orphan inode deleted [ 357.899503][T10657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.912072][T10657] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 357.919137][T10657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.071559][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.087759][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.377647][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 358.537530][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.769220][T10670] 9pnet: Could not find request transport: fd0x0000000000000004 [ 359.132479][ T29] audit: type=1107 audit(1729419481.496:568): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 359.339399][T10685] syzkaller0: entered promiscuous mode [ 359.345001][T10685] syzkaller0: entered allmulticast mode [ 359.597988][T10696] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10696 comm=syz.2.1726 [ 359.867425][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 360.060511][T10706] loop1: detected capacity change from 0 to 512 [ 360.073793][T10706] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 360.173365][T10706] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 360.181725][T10706] EXT4-fs (loop1): orphan cleanup on readonly fs [ 360.190419][T10706] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1729: Invalid block bitmap block 0 in block_group 0 [ 360.210636][T10706] EXT4-fs (loop1): Remounting filesystem read-only [ 360.217565][T10706] Quota error (device loop1): write_blk: dquota write failed [ 360.225001][T10706] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 360.234951][T10706] EXT4-fs (loop1): 1 orphan inode deleted [ 360.500475][T10706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.513009][T10706] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 360.520141][T10706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.749208][T10711] x_tables: ip_tables: osf match: only valid for protocol 6 [ 360.821474][T10715] loop1: detected capacity change from 0 to 1024 [ 360.888349][T10717] loop3: detected capacity change from 0 to 1024 [ 360.895138][T10717] EXT4-fs: Ignoring removed i_version option [ 360.926947][T10715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 360.937304][T10717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 361.053239][T10717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.073605][T10715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.637741][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.882321][T10733] syzkaller0: entered promiscuous mode [ 361.887917][T10733] syzkaller0: entered allmulticast mode [ 361.980313][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.057666][ T36] bridge_slave_1: left allmulticast mode [ 362.063436][ T36] bridge_slave_1: left promiscuous mode [ 362.069196][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.130028][ T36] bridge_slave_0: left allmulticast mode [ 362.135887][ T36] bridge_slave_0: left promiscuous mode [ 362.141548][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.155641][ T36] bridge_slave_1: left allmulticast mode [ 362.161397][ T36] bridge_slave_1: left promiscuous mode [ 362.167067][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.174954][ T36] bridge_slave_0: left allmulticast mode [ 362.180820][ T36] bridge_slave_0: left promiscuous mode [ 362.186547][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.261348][ T29] audit: type=1107 audit(1729419484.626:569): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 362.379005][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.389696][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.400094][ T36] bond0 (unregistering): Released all slaves [ 362.412989][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.425321][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.438617][ T36] bond0 (unregistering): Released all slaves [ 362.504220][T10745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10745 comm=syz.2.1740 [ 362.508248][ T36] hsr_slave_0: left promiscuous mode [ 362.523148][ T36] hsr_slave_1: left promiscuous mode [ 362.528906][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.536369][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.538471][T10747] loop1: detected capacity change from 0 to 512 [ 362.550739][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.558333][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.560419][T10747] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1741: corrupted in-inode xattr: invalid ea_ino [ 362.579581][T10747] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1741: couldn't read orphan inode 15 (err -117) [ 362.592967][ T36] hsr_slave_0: left promiscuous mode [ 362.598798][T10747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.611946][ T36] hsr_slave_1: left promiscuous mode [ 362.617889][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.646818][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.654312][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.683346][ T36] veth1_macvtap: left promiscuous mode [ 362.688911][ T36] veth0_macvtap: left promiscuous mode [ 362.694492][ T36] veth1_vlan: left promiscuous mode [ 362.721271][ T36] veth1_macvtap: left promiscuous mode [ 362.726904][ T36] veth0_macvtap: left promiscuous mode [ 362.732439][ T36] veth1_vlan: left promiscuous mode [ 362.737799][ T36] veth0_vlan: left promiscuous mode [ 363.081902][ T36] team0 (unregistering): Port device team_slave_1 removed [ 363.200170][T10761] loop3: detected capacity change from 0 to 512 [ 363.209255][ T36] team0 (unregistering): Port device team_slave_0 removed [ 363.250848][T10761] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 363.286508][T10761] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 363.294880][T10761] EXT4-fs (loop3): orphan cleanup on readonly fs [ 363.303728][T10761] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1743: Invalid block bitmap block 0 in block_group 0 [ 363.319897][T10761] EXT4-fs (loop3): Remounting filesystem read-only [ 363.326734][T10761] Quota error (device loop3): write_blk: dquota write failed [ 363.334143][T10761] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 363.344056][T10761] EXT4-fs (loop3): 1 orphan inode deleted [ 363.354563][T10761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.367044][T10761] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 363.374188][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.524818][ T36] team0 (unregistering): Port device team_slave_1 removed [ 363.594768][ T36] team0 (unregistering): Port device team_slave_0 removed [ 363.821822][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.849682][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 363.881363][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 363.949608][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 365.196380][T10789] syz.1.1754 (10789) used greatest stack depth: 9120 bytes left [ 365.256960][T10800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10800 comm=syz.1.1757 [ 365.599525][T10812] loop2: detected capacity change from 0 to 1024 [ 365.606162][T10812] EXT4-fs: Ignoring removed i_version option [ 365.612659][T10812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 365.623362][T10812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.385576][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.459530][T10831] loop2: detected capacity change from 0 to 1024 [ 366.550160][T10831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 366.571610][T10831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.750385][T10835] 9pnet_fd: Insufficient options for proto=fd [ 366.848512][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.880847][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.120682][ T29] audit: type=1107 audit(1729419489.486:570): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 367.328459][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.384085][T10852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10852 comm=syz.2.1776 [ 367.816022][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 367.897359][T10861] loop3: detected capacity change from 0 to 1024 [ 367.904082][T10861] EXT4-fs: Ignoring removed i_version option [ 367.910596][T10861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.928527][T10861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.177226][T10866] chnl_net:caif_netlink_parms(): no params data found [ 368.224123][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.231386][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.239049][T10866] bridge_slave_0: entered allmulticast mode [ 368.239773][T10866] bridge_slave_0: entered promiscuous mode [ 368.241176][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.258784][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.266292][T10866] bridge_slave_1: entered allmulticast mode [ 368.298553][T10866] bridge_slave_1: entered promiscuous mode [ 368.332014][T10866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.354413][T10866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.390010][T10866] team0: Port device team_slave_0 added [ 368.399911][T10866] team0: Port device team_slave_1 added [ 368.420384][T10866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.427402][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.453358][T10866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.465346][T10866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.472360][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.498560][T10866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.530486][T10866] hsr_slave_0: entered promiscuous mode [ 368.536873][T10866] hsr_slave_1: entered promiscuous mode [ 368.542921][T10866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.550766][T10866] Cannot create hsr debugfs directory [ 368.656263][T10866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.682425][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.710033][T10866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.799683][T10866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.840026][T10866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.898998][T10866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.909222][T10866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.918258][T10866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.927805][T10866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.964633][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.971782][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.979138][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.986189][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.054949][T10866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.069799][ T2122] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.077509][T10893] loop3: detected capacity change from 0 to 1024 [ 369.084907][ T2122] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.096092][T10893] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.122523][T10893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.144873][T10866] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.157629][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.164731][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.192071][T10866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.202524][T10866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.254518][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.261669][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.415058][T10866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.769887][T10866] veth0_vlan: entered promiscuous mode [ 369.781348][T10866] veth1_vlan: entered promiscuous mode [ 369.803183][T10866] veth0_macvtap: entered promiscuous mode [ 369.810394][ T29] audit: type=1107 audit(1729419492.176:571): pid=10903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 369.824629][T10866] veth1_macvtap: entered promiscuous mode [ 369.837423][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.848096][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.858039][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.868500][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.879521][T10866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.888215][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.898703][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.908570][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.919040][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.928888][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.939350][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.949188][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.959857][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.969722][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.980184][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.990029][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.000480][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.044009][T10866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.062205][T10866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.071132][T10866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.079969][T10866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.088825][T10866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.138127][ T8472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.186243][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 370.205318][T10930] loop4: detected capacity change from 0 to 512 [ 370.206724][T10923] syzkaller0: entered promiscuous mode [ 370.217230][T10923] syzkaller0: entered allmulticast mode [ 370.238751][T10933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10933 comm=syz.3.1793 [ 370.270415][T10930] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.341870][T10939] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 371.364976][T10941] loop1: detected capacity change from 0 to 1024 [ 371.400844][T10941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.407776][T10941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 371.528700][T10866] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 371.569433][T10941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.605349][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.009622][T10959] loop3: detected capacity change from 0 to 512 [ 372.040614][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.054769][T10959] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 372.373887][T10959] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 372.382136][T10959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 372.391024][T10959] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1797: Invalid block bitmap block 0 in block_group 0 [ 372.443767][T10959] EXT4-fs (loop3): Remounting filesystem read-only [ 372.450522][T10959] Quota error (device loop3): write_blk: dquota write failed [ 372.458011][T10959] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 372.468144][T10959] EXT4-fs (loop3): 1 orphan inode deleted [ 372.561392][T10959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.574061][T10959] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 372.581314][T10959] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.627565][ T9581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.539078][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 373.568252][T10977] macsec1: entered promiscuous mode [ 373.573588][T10977] vlan1: entered promiscuous mode [ 373.587427][T10977] vlan1: left promiscuous mode [ 374.488107][T10989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10989 comm=syz.3.1807 [ 374.594612][T10993] loop2: detected capacity change from 0 to 4096 [ 374.732300][T10993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.790904][T10993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.851259][T10993] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.1809: corrupted inode contents [ 374.876282][T10999] syzkaller0: entered promiscuous mode [ 374.881931][T10999] syzkaller0: entered allmulticast mode [ 374.897004][T10993] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #15: comm syz.2.1809: mark_inode_dirty error [ 374.909309][T10993] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.1809: corrupted inode contents [ 374.952060][T10993] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.1809: mark_inode_dirty error [ 374.963726][T10993] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.1809: corrupted inode contents [ 374.996913][T10993] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.1809: mark_inode_dirty error [ 375.009028][T10993] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.1809: corrupted inode contents [ 375.048819][T10993] EXT4-fs error (device loop2): ext4_truncate:4208: inode #15: comm syz.2.1809: mark_inode_dirty error [ 375.068312][T10993] EXT4-fs error (device loop2) in ext4_setattr:5523: Corrupt filesystem [ 375.092697][T11004] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.1809: corrupted inode contents [ 375.139091][ T29] audit: type=1400 audit(1729419497.496:572): avc: denied { rename } for pid=10991 comm="syz.2.1809" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 375.198117][ T9834] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 375.245162][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.300404][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 376.477161][T11032] loop0: detected capacity change from 0 to 128 [ 377.079597][T11040] syzkaller0: entered promiscuous mode [ 377.085202][T11040] syzkaller0: entered allmulticast mode [ 377.594589][T11047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11047 comm=syz.2.1825 [ 377.632663][T11049] loop0: detected capacity change from 0 to 512 [ 377.690932][T11049] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1824: corrupted in-inode xattr: invalid ea_ino [ 377.748948][T11049] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1824: couldn't read orphan inode 15 (err -117) [ 377.977282][T11049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.252429][ T29] audit: type=1107 audit(1729419500.616:573): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 378.272104][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.351652][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.421038][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.490474][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.575264][ T36] bridge_slave_1: left allmulticast mode [ 378.581049][ T36] bridge_slave_1: left promiscuous mode [ 378.586885][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.605051][ T36] bridge_slave_0: left allmulticast mode [ 378.610784][ T36] bridge_slave_0: left promiscuous mode [ 378.616524][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.830213][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.850743][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.869632][ T36] bond0 (unregistering): Released all slaves [ 378.921150][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.923513][T11085] loop4: detected capacity change from 0 to 1024 [ 378.948582][T11085] EXT4-fs: Ignoring removed orlov option [ 378.954414][T11085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.963875][ T36] hsr_slave_0: left promiscuous mode [ 378.971000][ T36] hsr_slave_1: left promiscuous mode [ 378.980617][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.989749][T11089] loop0: detected capacity change from 0 to 512 [ 379.007098][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.014562][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.023460][T11089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.027854][T11085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.055940][ T36] veth1_macvtap: left promiscuous mode [ 379.058768][T11089] EXT4-fs (loop0): 1 truncate cleaned up [ 379.061502][ T36] veth0_macvtap: left promiscuous mode [ 379.072741][ T36] veth1_vlan: left promiscuous mode [ 379.073727][T11089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.078052][ T36] veth0_vlan: left promiscuous mode [ 379.167855][T10866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.235136][T11100] loop4: detected capacity change from 0 to 1024 [ 379.274754][T11100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.328789][T11100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.645593][ T36] team0 (unregistering): Port device team_slave_1 removed [ 379.663908][ T36] team0 (unregistering): Port device team_slave_0 removed [ 379.755627][T11097] syzkaller0: entered promiscuous mode [ 379.761219][T11097] syzkaller0: entered allmulticast mode [ 379.773988][T11067] chnl_net:caif_netlink_parms(): no params data found [ 379.857263][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.314555][T11131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11131 comm=syz.3.1842 [ 380.342502][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.349622][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.356884][T11067] bridge_slave_0: entered allmulticast mode [ 380.363477][T11067] bridge_slave_0: entered promiscuous mode [ 380.370547][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.377746][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.386193][T11067] bridge_slave_1: entered allmulticast mode [ 380.392859][T11067] bridge_slave_1: entered promiscuous mode [ 380.425711][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.437013][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.465943][T11067] team0: Port device team_slave_0 added [ 380.474301][T11067] team0: Port device team_slave_1 added [ 380.498435][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.505519][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.531522][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.553058][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.560204][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.586276][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.639460][T10866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.679920][T11067] hsr_slave_0: entered promiscuous mode [ 380.686124][T11067] hsr_slave_1: entered promiscuous mode [ 380.692198][T11067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.708533][T11067] Cannot create hsr debugfs directory [ 381.090157][T11067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.112201][T11067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.135616][T11067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.185271][T11067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.295385][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.328450][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.354291][ T2302] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.361581][ T2302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.395007][ T2302] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.402181][ T2302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.443453][T11067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.724949][ T29] audit: type=1107 audit(1729419504.066:574): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 381.927158][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.071987][T11217] syzkaller0: entered promiscuous mode [ 382.077644][T11217] syzkaller0: entered allmulticast mode [ 382.134973][T11067] veth0_vlan: entered promiscuous mode [ 382.155250][T11067] veth1_vlan: entered promiscuous mode [ 382.214875][T11067] veth0_macvtap: entered promiscuous mode [ 382.244449][T11238] loop4: detected capacity change from 0 to 128 [ 382.246437][T11067] veth1_macvtap: entered promiscuous mode [ 382.284156][T11238] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 382.324871][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.335414][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.345288][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.355782][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.365688][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.376190][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.400312][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.433859][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.444405][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.454277][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.464831][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.474701][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.485197][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.495076][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.505580][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.515428][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.525942][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.536035][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.546620][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.584810][ T2302] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 382.596164][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.614097][T11067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.622977][T11067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.631784][T11067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.640560][T11067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.843242][T11253] loop4: detected capacity change from 0 to 128 [ 383.009511][T11263] loop1: detected capacity change from 0 to 512 [ 383.038611][T11263] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.429595][T11276] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 383.439979][T11276] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 383.571509][T11274] syzkaller0: entered promiscuous mode [ 383.577156][T11274] syzkaller0: entered allmulticast mode [ 383.885076][T11067] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 383.961739][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.977236][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.006454][ T29] audit: type=1107 audit(1729419506.366:575): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 384.010986][T11302] loop1: detected capacity change from 0 to 128 [ 384.062632][T11302] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 384.114770][T11305] loop2: detected capacity change from 0 to 512 [ 384.121782][T11305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 384.141988][T11305] EXT4-fs (loop2): 1 truncate cleaned up [ 384.149793][T11305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.150125][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 384.913261][T11331] loop0: detected capacity change from 0 to 512 [ 384.913385][T11330] loop4: detected capacity change from 0 to 512 [ 384.929065][T11330] EXT4-fs: test_dummy_encryption option not supported [ 384.936386][T11331] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.988497][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.309450][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.488821][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.647644][T11336] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 386.724593][ T7864] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 386.933752][T11356] loop4: detected capacity change from 0 to 512 [ 386.989798][T11356] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1881: corrupted in-inode xattr: invalid ea_ino [ 387.005230][T11356] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1881: couldn't read orphan inode 15 (err -117) [ 387.045255][T11356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.221134][T11360] x_tables: ip_tables: osf match: only valid for protocol 6 [ 387.363977][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.376580][T11362] batadv_slave_0: entered promiscuous mode [ 387.809329][ T29] audit: type=1400 audit(1729419510.176:576): avc: denied { ioctl } for pid=11366 comm="syz.2.1883" path="socket:[31824]" dev="sockfs" ino=31824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.859026][T10866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.955595][T11373] loop0: detected capacity change from 0 to 128 [ 389.058360][T11396] loop2: detected capacity change from 0 to 1024 [ 389.065012][T11396] EXT4-fs: Ignoring removed i_version option [ 389.118370][T11396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.151212][T11396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.534992][T11409] x_tables: ip_tables: osf match: only valid for protocol 6 [ 389.809647][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.905622][T11415] loop2: detected capacity change from 0 to 1024 [ 389.913182][T11415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.921283][T11415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.936137][T11415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.771118][T11435] loop0: detected capacity change from 0 to 128 [ 390.796007][T11435] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 390.908420][ T6625] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 390.940312][ T9834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.071220][T11446] loop0: detected capacity change from 0 to 1024 [ 391.088087][T11446] EXT4-fs: Ignoring removed i_version option [ 391.152030][T11446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.234564][T11446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.838134][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.860298][T11463] loop0: detected capacity change from 0 to 512 [ 391.878608][T11463] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.207372][T11466] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 392.217788][T11466] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.352961][T11469] loop4: detected capacity change from 0 to 512 [ 392.508536][T11469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 392.521274][T11469] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.050617][ T7864] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 393.376959][T10866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 393.443131][T11490] loop0: detected capacity change from 0 to 1024 [ 393.458920][T11490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.504700][T11490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 393.564295][T11490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.437687][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.469341][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.681312][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.761937][T11520] loop0: detected capacity change from 0 to 512 [ 394.796026][T11503] chnl_net:caif_netlink_parms(): no params data found [ 394.830705][T11520] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1930: corrupted in-inode xattr: invalid ea_ino [ 394.906503][T11520] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1930: couldn't read orphan inode 15 (err -117) [ 394.946954][T11520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.972465][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.979748][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.992034][T11503] bridge_slave_0: entered allmulticast mode [ 395.000888][T11503] bridge_slave_0: entered promiscuous mode [ 395.008460][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.015572][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.024964][T11503] bridge_slave_1: entered allmulticast mode [ 395.031760][T11503] bridge_slave_1: entered promiscuous mode [ 395.081304][T11503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.101086][T11503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.148878][T11503] team0: Port device team_slave_0 added [ 395.163426][T11503] team0: Port device team_slave_1 added [ 395.192480][T11503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.199505][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.225646][T11503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.300895][T11503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.307907][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.333933][T11503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.512928][T11503] hsr_slave_0: entered promiscuous mode [ 395.530052][T11503] hsr_slave_1: entered promiscuous mode [ 395.543055][T11503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.560255][T11503] Cannot create hsr debugfs directory [ 395.677221][T11503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.720358][T11503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.780306][ T29] audit: type=1400 audit(1729419518.146:577): avc: denied { lock } for pid=11541 comm="syz.2.1934" path="socket:[32093]" dev="sockfs" ino=32093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 395.808350][T11503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.901772][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.934687][T11503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.003601][T11503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.014763][T11503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.024441][T11503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.033681][T11503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.076110][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.089081][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.100716][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.107825][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.121723][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.128919][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.199705][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.283193][T11503] veth0_vlan: entered promiscuous mode [ 396.293700][T11503] veth1_vlan: entered promiscuous mode [ 396.313997][T11503] veth0_macvtap: entered promiscuous mode [ 396.314823][T11560] loop1: detected capacity change from 0 to 128 [ 396.322727][T11503] veth1_macvtap: entered promiscuous mode [ 396.334468][T11560] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 396.338601][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.354126][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.364067][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.374526][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.384403][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.394925][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.404934][ T152] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 396.405931][T11503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.425707][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.436203][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.446165][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.456637][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.467267][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.478160][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.488157][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.498717][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.508563][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.519053][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.528980][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.539475][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.549421][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.559895][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.574230][T11503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.582971][T11503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.591862][T11503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.600603][T11503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.609380][T11503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.563289][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.573708][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.740071][T11581] syzkaller0: entered promiscuous mode [ 397.745650][T11581] syzkaller0: entered allmulticast mode [ 397.798425][ T2302] bridge_slave_1: left allmulticast mode [ 397.804150][ T2302] bridge_slave_1: left promiscuous mode [ 397.809834][ T2302] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.820375][ T2302] bridge_slave_0: left allmulticast mode [ 397.826074][ T2302] bridge_slave_0: left promiscuous mode [ 397.832083][ T2302] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.395348][T11591] loop1: detected capacity change from 0 to 1024 [ 398.432405][T11591] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.505035][T11591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.554387][ T2302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.647433][ T2302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.662952][ T2302] bond0 (unregistering): Released all slaves [ 398.686954][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 398.732420][ T2302] hsr_slave_0: left promiscuous mode [ 398.743325][ T2302] hsr_slave_1: left promiscuous mode [ 398.752505][ T2302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.760021][ T2302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.770225][ T2302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.777902][ T2302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.798011][ T29] audit: type=1107 audit(1729419521.166:578): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 398.813502][ T2302] veth1_macvtap: left promiscuous mode [ 398.819117][ T2302] veth0_macvtap: left promiscuous mode [ 398.824625][ T2302] veth1_vlan: left promiscuous mode [ 399.042980][ T2302] team0 (unregistering): Port device team_slave_1 removed [ 399.067956][ T2302] team0 (unregistering): Port device team_slave_0 removed [ 399.261398][T11067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.344128][T11608] loop3: detected capacity change from 0 to 128 [ 399.381384][T11608] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 399.397292][T11611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.634015][ T152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 399.680934][T11618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11618 comm=syz.0.1955 [ 399.969367][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.986002][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.000165][T11627] loop3: detected capacity change from 0 to 256 [ 400.016176][T11627] FAT-fs (loop3): codepage cp950 not found [ 400.361158][T11634] loop1: detected capacity change from 0 to 1024 [ 400.369139][T11634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 400.409380][T11634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.836822][ T29] audit: type=1107 audit(1729419523.206:579): pid=11636 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 401.240046][T11067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.263302][T11649] loop1: detected capacity change from 0 to 128 [ 401.275453][T11649] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 401.304283][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 401.331916][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 401.420865][T11654] loop1: detected capacity change from 0 to 512 [ 401.428866][T11654] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 401.439565][T11654] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 401.447602][T11654] EXT4-fs (loop1): orphan cleanup on readonly fs [ 401.454768][T11654] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1966: Invalid block bitmap block 0 in block_group 0 [ 401.468750][T11654] EXT4-fs (loop1): Remounting filesystem read-only [ 401.475360][T11654] Quota error (device loop1): write_blk: dquota write failed [ 401.482877][T11654] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 401.492830][T11654] EXT4-fs (loop1): 1 orphan inode deleted [ 401.499633][T11654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.512380][T11654] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 401.519224][T11654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.591430][T11657] syzkaller0: entered promiscuous mode [ 401.597054][T11657] syzkaller0: entered allmulticast mode [ 401.775861][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.785345][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.409905][T11676] loop1: detected capacity change from 0 to 1024 [ 402.418676][T11676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.429117][T11676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.524353][T11679] loop2: detected capacity change from 0 to 128 [ 402.540033][T11679] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 402.569208][ T2302] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 403.185388][T11688] syzkaller0: entered promiscuous mode [ 403.191027][T11688] syzkaller0: entered allmulticast mode [ 403.228393][T11680] ================================================================== [ 403.236568][T11680] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 403.244334][T11680] [ 403.246673][T11680] write to 0xffff88810664a6a4 of 4 bytes by task 11676 on cpu 1: [ 403.254416][T11680] xas_set_mark+0x131/0x150 [ 403.256475][ T29] audit: type=1107 audit(1729419525.606:580): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 403.258934][T11680] tag_pages_for_writeback+0xa5/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.258967][T11680] ext4_do_writepages+0x694/0x2130 [ 403.282680][T11680] ext4_writepages+0x159/0x2e0 [ 403.287500][T11680] do_writepages+0x1d8/0x480 [ 403.292123][T11680] filemap_fdatawrite_wbc+0xdb/0x100 [ 403.297485][T11680] file_write_and_wait_range+0xc4/0x250 [ 403.303073][T11680] generic_buffers_fsync_noflush+0x46/0x120 [ 403.309008][T11680] ext4_sync_file+0x1ff/0x6c0 [ 403.313729][T11680] vfs_fsync_range+0x116/0x130 [ 403.318521][T11680] ext4_buffered_write_iter+0x326/0x370 [ 403.324099][T11680] ext4_file_write_iter+0x293/0xe10 [ 403.329335][T11680] iter_file_splice_write+0x5f1/0x980 [ 403.334748][T11680] direct_splice_actor+0x160/0x2c0 [ 403.339897][T11680] splice_direct_to_actor+0x302/0x670 [ 403.345306][T11680] do_splice_direct+0xd7/0x150 [ 403.346530][ T29] audit: type=1400 audit(1729419525.686:581): avc: denied { write } for pid=3257 comm="syz-executor" path="pipe:[1561]" dev="pipefs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 403.350086][T11680] do_sendfile+0x39b/0x970 [ 403.377526][T11680] __x64_sys_sendfile64+0x110/0x150 [ 403.382775][T11680] x64_sys_call+0xed5/0x2d60 [ 403.387402][T11680] do_syscall_64+0xc9/0x1c0 [ 403.391923][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.397851][T11680] [ 403.400183][T11680] read to 0xffff88810664a6a4 of 4 bytes by task 11680 on cpu 0: [ 403.407837][T11680] filemap_fdatawrite_wbc+0x5c/0x100 [ 403.413155][T11680] file_write_and_wait_range+0xc4/0x250 [ 403.418750][T11680] generic_buffers_fsync_noflush+0x46/0x120 [ 403.424677][T11680] ext4_sync_file+0x1ff/0x6c0 [ 403.429407][T11680] vfs_fsync_range+0x116/0x130 [ 403.434214][T11680] ext4_buffered_write_iter+0x326/0x370 [ 403.439803][T11680] ext4_file_write_iter+0x293/0xe10 [ 403.445040][T11680] iter_file_splice_write+0x5f1/0x980 [ 403.450441][T11680] direct_splice_actor+0x160/0x2c0 [ 403.455594][T11680] splice_direct_to_actor+0x302/0x670 [ 403.460994][T11680] do_splice_direct+0xd7/0x150 [ 403.465787][T11680] do_sendfile+0x39b/0x970 [ 403.470234][T11680] __x64_sys_sendfile64+0x110/0x150 [ 403.475460][T11680] x64_sys_call+0xed5/0x2d60 [ 403.480079][T11680] do_syscall_64+0xc9/0x1c0 [ 403.484605][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.490512][T11680] [ 403.492829][T11680] value changed: 0x02000021 -> 0x04000021 [ 403.498549][T11680] [ 403.500871][T11680] Reported by Kernel Concurrency Sanitizer on: [ 403.507026][T11680] CPU: 0 UID: 0 PID: 11680 Comm: syz.1.1975 Not tainted 6.12.0-rc3-syzkaller-00403-gf9e4825524aa #0 [ 403.517794][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.527847][T11680] ================================================================== [ 403.855041][ T6625] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.965116][ T6625] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.019670][ T6625] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.059518][ T6625] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.135760][ T6625] bridge_slave_1: left allmulticast mode [ 404.141476][ T6625] bridge_slave_1: left promiscuous mode [ 404.147312][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.155128][ T6625] bridge_slave_0: left allmulticast mode [ 404.160846][ T6625] bridge_slave_0: left promiscuous mode [ 404.166591][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.238156][T11680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.279371][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.289581][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.299954][ T6625] bond0 (unregistering): Released all slaves [ 404.341278][ T6625] hsr_slave_0: left promiscuous mode [ 404.347062][ T6625] hsr_slave_1: left promiscuous mode [ 404.352781][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.360273][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.368188][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.375610][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.385887][ T6625] veth1_macvtap: left promiscuous mode [ 404.391498][ T6625] veth0_macvtap: left promiscuous mode [ 404.397082][ T6625] veth1_vlan: left promiscuous mode [ 404.402397][ T6625] veth0_vlan: left promiscuous mode [ 404.490138][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 404.500974][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 404.854812][ T6625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.900367][ T6625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.940177][ T6625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.989634][ T6625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.052626][ T6625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.100305][ T6625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.149881][ T6625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.199663][ T6625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.287531][ T6625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.329768][ T6625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.379828][ T6625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.411973][ T6625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.515095][ T6625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.562810][ T6625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.600163][ T6625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.650559][ T6625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.710316][ T6625] bridge_slave_1: left allmulticast mode [ 405.716011][ T6625] bridge_slave_1: left promiscuous mode [ 405.721774][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.731380][ T6625] bridge_slave_0: left allmulticast mode [ 405.737209][ T6625] bridge_slave_0: left promiscuous mode [ 405.742888][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.751327][ T6625] bridge_slave_1: left allmulticast mode [ 405.757065][ T6625] bridge_slave_1: left promiscuous mode [ 405.762775][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.770786][ T6625] bridge_slave_0: left allmulticast mode [ 405.776482][ T6625] bridge_slave_0: left promiscuous mode [ 405.782203][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.790409][ T6625] bridge_slave_1: left allmulticast mode [ 405.796044][ T6625] bridge_slave_1: left promiscuous mode [ 405.801753][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.809490][ T6625] bridge_slave_0: left allmulticast mode [ 405.815136][ T6625] bridge_slave_0: left promiscuous mode [ 405.820793][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.828889][ T6625] bridge_slave_1: left allmulticast mode [ 405.834528][ T6625] bridge_slave_1: left promiscuous mode [ 405.840265][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.848077][ T6625] bridge_slave_0: left allmulticast mode [ 405.853714][ T6625] bridge_slave_0: left promiscuous mode [ 405.859442][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.248984][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.259600][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.270063][ T6625] bond0 (unregistering): Released all slaves [ 406.278762][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.288942][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.299207][ T6625] bond0 (unregistering): Released all slaves [ 406.309108][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.319242][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.329676][ T6625] bond0 (unregistering): Released all slaves [ 406.339251][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.349742][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.360073][ T6625] bond0 (unregistering): Released all slaves [ 406.436112][ T6625] hsr_slave_0: left promiscuous mode [ 406.442020][ T6625] hsr_slave_1: left promiscuous mode [ 406.448084][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.455516][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.464923][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.472436][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.482530][ T6625] hsr_slave_0: left promiscuous mode [ 406.488266][ T6625] hsr_slave_1: left promiscuous mode [ 406.493924][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.501526][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.508993][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.518257][ T6625] hsr_slave_0: left promiscuous mode [ 406.523918][ T6625] hsr_slave_1: left promiscuous mode [ 406.529645][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.537543][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.544938][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.554608][ T6625] hsr_slave_0: left promiscuous mode [ 406.560328][ T6625] hsr_slave_1: left promiscuous mode [ 406.565996][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.573525][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.581155][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.588615][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.601730][ T6625] veth1_macvtap: left promiscuous mode [ 406.607301][ T6625] veth0_macvtap: left promiscuous mode [ 406.612813][ T6625] veth1_vlan: left promiscuous mode [ 406.618063][ T6625] veth0_vlan: left promiscuous mode [ 406.623839][ T6625] veth1_macvtap: left promiscuous mode [ 406.629470][ T6625] veth0_macvtap: left promiscuous mode [ 406.634967][ T6625] veth1_vlan: left promiscuous mode [ 406.640264][ T6625] veth0_vlan: left promiscuous mode [ 406.645997][ T6625] veth1_macvtap: left promiscuous mode [ 406.651513][ T6625] veth0_macvtap: left promiscuous mode [ 406.657134][ T6625] veth1_vlan: left promiscuous mode [ 406.662384][ T6625] veth0_vlan: left promiscuous mode [ 406.668451][ T6625] veth1_macvtap: left promiscuous mode [ 406.673933][ T6625] veth0_macvtap: left promiscuous mode [ 406.679555][ T6625] veth1_vlan: left promiscuous mode [ 406.876263][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 406.886640][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 406.949677][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 406.960132][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 407.022806][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 407.032621][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 407.095483][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 407.106124][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 407.148463][ T29] audit: type=1400 audit(1729419529.516:582): avc: denied { sys_chroot } for pid=11862 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 407.170563][ T29] audit: type=1400 audit(1729419529.516:583): avc: denied { setgid } for pid=11862 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 407.191496][ T29] audit: type=1400 audit(1729419529.516:584): avc: denied { setuid } for pid=11862 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 407.212429][ T29] audit: type=1400 audit(1729419529.516:585): avc: denied { setrlimit } for pid=11862 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1