last executing test programs: 5.419003143s ago: executing program 0 (id=869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x8, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) shutdown(r0, 0x1) 5.319889225s ago: executing program 0 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdc01, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 5.316220365s ago: executing program 0 (id=872): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) close_range(r0, 0xffffffffffffffff, 0x0) 4.847623665s ago: executing program 3 (id=881): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000000d0000850000000d0000004e00000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.462127303s ago: executing program 3 (id=886): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 4.353372746s ago: executing program 0 (id=887): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pselect6(0x0, 0x0, &(0x7f0000000800)={0xd638, 0x9, 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x3, 0x4}, &(0x7f0000000840)={0x6, 0x24000000000, 0x80, 0xb, 0x6, 0x7ff, 0x5, 0x4}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000940)=0x110108) 4.340905586s ago: executing program 3 (id=888): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c04c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1003, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffb, @loopback, 0x7f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009100000000000000100000000000000000011d892a5aaf701000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) listen(r1, 0x5) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e63, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x100000b}, 0x1c) listen(r4, 0xb) writev(0xffffffffffffffff, &(0x7f0000001dc0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e630001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@isdn={0x22, 0x3, 0x0, 0x93, 0x1}, 0x80, 0x0}, 0x4004880) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0x10001, 0x4) gettid() keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0xfffffffffffffffc) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004) 4.065424152s ago: executing program 3 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x0) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000db00"/109], 0x160}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.205247341s ago: executing program 0 (id=896): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = mq_open(0x0, 0x8c0, 0x0, 0x0) mq_notify(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1, 0x7, 0x3ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x553, &(0x7f0000000cc0)="$eJzs3V9vW2cZAPDnOHabtinJgAuYtDHYUDtB7WZhW8TFNiQkriYhxn0JiRtFdeIqdrYmmmj6FRASSFzBNRIfAAlV4oZLBJoE1yANgRB0IMEF7KBjHyepe5x4nROnzu8nnZ73fc+f53lTn+PzT8cBnFnPRcQbEfFhmqYvRsRs3l7Kh9jtDtl8Hzx4dzkbkkjTt/6eRJK39daV5ONL+WLTEfGtb0R8N3k0bmt759ZSo1HfzOu19vrtWmt759ra+tJqfbW+sbAw/8riq4svL14fST8vR8RrX/9zlslrv/zyO3+68der38sqM/n0g/34iMqHTex2vXJ+um+BzccMdhpl/an0KheGW+beMeYDAMBg2TH+JyPiCxHxYszG1OGHs7lh5gEAAABOi/T1mfhvEpEWOzegHQAAAHiClDrPwCalav4swEyUStVq9xneT8fFUqPZan/pZnNrY6X7rOxcVEo31xr16/mzwnNRSbL6fKe8X3+pr74QEU9FxA9mL3Tq1eVmY2XcFz8AAADgjLjUd/7/r9nu+T8AAAAwYebGnQAAAABw7Jz/AwAAwORz/g8AAAAT7ZtvvpkNae/3r1fe3t661Xz72kq9dau6vrVcXW5u3q6uNpurnXf2rR+1vkazefsrsbF1p9aut9q11vbOjfXm1kb7xlpMn0iHAAAAgEc89bn7f0giYverFzpD5ty4kwJORHmvlOTjgq3/j1Pd8fsPtaZpevdYcwOO19QQ87x/vrjdcQI82cr9DXvb+lC3617/3agTAk5MZdwJAGOXHDF94NHAb/Lx50ebDwAAMHpXPtt3/7/cva5/+H2BcrZE6cSSBI6FjRjOrr7v+XR2XIkAJ65z/3/YB3kcLMBEqQz1BCAwyT72/f8jpelHSggAABi5mc6QlKr55b2ZKJWq1YjLnZ8FqCQ31xr16xHxiYj4/WzlfFaf7yyZHHnOAAAAAAAAAAAAAAAAAAAAAAAAAAB0pWkSKQAAADDRIkp/SX7VfZf/ldkXZvqvD5xL/tP5SeBzEfHOj9/64Z2ldntzPmv/x157+0d5+0vjuIIBAAAA9Oudp3fG/x53NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMmg8evLvcG4aY/cKo4v7taxExVxS/HNOd8XRUIuLiP5MoH1guiYipEcTfvRcRnymKn2Rp7YUsij+KP8IR8WMu/ysUxb80gvhwlt3P9j9vFG1/pXiuMy7e/soRD9Uf1+D9X+zt/6YGbP+Xh4zx9Hs/rw2Mfy/i6fLD8ct98ZMB8Z8fMv53vr2zM2ha+pOIK73vn84e72CE/VKtvX671treuba2vrRaX61vLCzMv7L46uLLi9drN9ca9fzfwhjff+YXHx7W/4uF339Jns3g/r9QsL6i76T/vXfnwad6ld1H4199viD+r3/aGd0tiF/K43wxL2fTr/TKu93yQc/+7LfPHtb/lf3+Vw72/6j//6uDVtrvkQ3lmWE/OgDAMWht79xaajTqmxNbyM7ST0EaCqepcD4i6putu72WyuN9SNI0vZttRd2WNE3TrFYw8/2IGGaFSYy4p6XifPYLA/cA494zAQAAo7Z/0D/uTAAAAAAAAAAAAAAAAAAAAODsOonXrfXH3H8FcjKKV2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzE/wMAAP//d/PTwA==") unshare(0x22020400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74726149970fa9abfe9d0e7715026cb63e8a4e2c7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000240)=""/38, &(0x7f0000000280)=0x26) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x7c}]}) ioctl$NS_GET_PARENT(r7, 0x8004b707, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) 1.166013995s ago: executing program 4 (id=911): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.144961405s ago: executing program 4 (id=912): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 1.117774086s ago: executing program 4 (id=913): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r0, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000040)=@tcp}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x3d, 0x24, 0x64, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, {0x4e23, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfe, 0x100, @val=0x80}}}}}}}, 0x0) 1.083303587s ago: executing program 4 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.029327198s ago: executing program 2 (id=915): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4f21, 0x6, @loopback, 0x10001}, {0xa, 0x4e24, 0x1, @remote, 0x4}, r0, 0x37d}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r0, 0x0, 0x2, 0x4}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)="69686568af5c5d4ec28275618783479f960000bf7a263202dabaae6166b90a5c7b6e188afbe21b3051c8f2710f174f0ba0937afc29be91c8a5781f3994ef0141bc44c288ad6873de0ba8b727f612db1e202ff620eb955f9202b5250c8e583b275bc3397a1d5eedbb33e95fdcd0c9f71865ca03366598fc43d1ec3dc6761fa5346121482e200a3620d9833c170e3bdb8cbda27746d15c1c8b4902b6c631c8a293aa4f73f75150f7bdd01adc16587d8d7f084ad94f48a127c065f2", 0xba}, 0x68) 1.029161918s ago: executing program 2 (id=916): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 980.663729ms ago: executing program 4 (id=917): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/99, 0x63) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c444) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 976.019369ms ago: executing program 2 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 949.688879ms ago: executing program 0 (id=919): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 865.331001ms ago: executing program 2 (id=920): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) close_range(r0, 0xffffffffffffffff, 0x0) 865.200872ms ago: executing program 2 (id=921): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pselect6(0x0, 0x0, &(0x7f0000000800)={0xd638, 0x9, 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x3, 0x4}, &(0x7f0000000840)={0x6, 0x24000000000, 0x80, 0xb, 0x6, 0x7ff, 0x5, 0x4}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000940)=0x110108) 684.232065ms ago: executing program 3 (id=922): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 294.883464ms ago: executing program 1 (id=925): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 249.547345ms ago: executing program 1 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x2, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x104}}, 0x0) 249.127505ms ago: executing program 1 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 184.567286ms ago: executing program 1 (id=928): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4f21, 0x6, @loopback, 0x10001}, {0xa, 0x4e24, 0x1, @remote, 0x4}, r0, 0x37d}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r0, 0x0, 0x2, 0x4}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)="69686568af5c5d4ec28275618783479f960000bf7a263202dabaae6166b90a5c7b6e188afbe21b3051c8f2710f174f0ba0937afc29be91c8a5781f3994ef0141bc44c288ad6873de0ba8b727f612db1e202ff620eb955f9202b5250c8e583b275bc3397a1d5eedbb33e95fdcd0c9f71865ca03366598fc43d1ec3dc6761fa5346121482e200a3620d9833c170e3bdb8cbda27746d15c1c8b4902b6c631c8a293aa4f73f75150f7bdd01adc16587d8d7f084ad94f48a127c065f2", 0xba}, 0x68) 127.903668ms ago: executing program 1 (id=929): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 127.588648ms ago: executing program 1 (id=930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 21.215039ms ago: executing program 4 (id=931): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = mq_open(0x0, 0x8c0, 0x0, 0x0) mq_notify(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1, 0x7, 0x3ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x553, &(0x7f0000000cc0)="$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") unshare(0x22020400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74726149970fa9abfe9d0e7715026cb63e8a4e2c7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000240)=""/38, &(0x7f0000000280)=0x26) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x7c}]}) ioctl$NS_GET_PARENT(r7, 0x8004b707, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 2 (id=932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.327904][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.636075][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.643224][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.650416][ T3294] bridge_slave_0: entered allmulticast mode [ 32.657018][ T3294] bridge_slave_0: entered promiscuous mode [ 32.682145][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.689327][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.696431][ T3294] bridge_slave_1: entered allmulticast mode [ 32.702893][ T3294] bridge_slave_1: entered promiscuous mode [ 32.755562][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.762656][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.769830][ T3300] bridge_slave_0: entered allmulticast mode [ 32.776302][ T3300] bridge_slave_0: entered promiscuous mode [ 32.784105][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.803892][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.811010][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.818212][ T3300] bridge_slave_1: entered allmulticast mode [ 32.824450][ T3300] bridge_slave_1: entered promiscuous mode [ 32.831497][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.849820][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.856985][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.864075][ T3301] bridge_slave_0: entered allmulticast mode [ 32.870615][ T3301] bridge_slave_0: entered promiscuous mode [ 32.890563][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.897793][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.904863][ T3299] bridge_slave_0: entered allmulticast mode [ 32.911212][ T3299] bridge_slave_0: entered promiscuous mode [ 32.917647][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.924704][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.931976][ T3301] bridge_slave_1: entered allmulticast mode [ 32.938566][ T3301] bridge_slave_1: entered promiscuous mode [ 32.953714][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.961088][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.968277][ T3295] bridge_slave_0: entered allmulticast mode [ 32.974771][ T3295] bridge_slave_0: entered promiscuous mode [ 32.981140][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.988276][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.995422][ T3299] bridge_slave_1: entered allmulticast mode [ 33.001883][ T3299] bridge_slave_1: entered promiscuous mode [ 33.013350][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.023731][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.033635][ T3294] team0: Port device team_slave_0 added [ 33.040207][ T3294] team0: Port device team_slave_1 added [ 33.045855][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.053016][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.060135][ T3295] bridge_slave_1: entered allmulticast mode [ 33.066738][ T3295] bridge_slave_1: entered promiscuous mode [ 33.100714][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.123632][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.133696][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.147775][ T3300] team0: Port device team_slave_0 added [ 33.153707][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.160691][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.186662][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.198641][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.208846][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.223168][ T3300] team0: Port device team_slave_1 added [ 33.233838][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.240845][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.266808][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.278370][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.292484][ T3301] team0: Port device team_slave_0 added [ 33.314146][ T3301] team0: Port device team_slave_1 added [ 33.320200][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.327219][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.353161][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.364724][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.371726][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.397641][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.413611][ T3299] team0: Port device team_slave_0 added [ 33.431261][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.438344][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.464296][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.475688][ T3295] team0: Port device team_slave_0 added [ 33.482091][ T3299] team0: Port device team_slave_1 added [ 33.499740][ T3294] hsr_slave_0: entered promiscuous mode [ 33.505795][ T3294] hsr_slave_1: entered promiscuous mode [ 33.512024][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.519009][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.544952][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.556450][ T3295] team0: Port device team_slave_1 added [ 33.602011][ T3300] hsr_slave_0: entered promiscuous mode [ 33.608120][ T3300] hsr_slave_1: entered promiscuous mode [ 33.614058][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.619864][ T3300] Cannot create hsr debugfs directory [ 33.629886][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.637229][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.663223][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.675057][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.682073][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.708078][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.723459][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.730563][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.756561][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.783170][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.790157][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.816125][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.849472][ T3301] hsr_slave_0: entered promiscuous mode [ 33.855631][ T3301] hsr_slave_1: entered promiscuous mode [ 33.861466][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.867234][ T3301] Cannot create hsr debugfs directory [ 33.874988][ T3299] hsr_slave_0: entered promiscuous mode [ 33.880947][ T3299] hsr_slave_1: entered promiscuous mode [ 33.886806][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.892588][ T3299] Cannot create hsr debugfs directory [ 33.969831][ T3295] hsr_slave_0: entered promiscuous mode [ 33.975919][ T3295] hsr_slave_1: entered promiscuous mode [ 33.981661][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 33.987412][ T3295] Cannot create hsr debugfs directory [ 34.124265][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.132734][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.140255][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.148789][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.156430][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.164724][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.174985][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.183648][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.205475][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.214336][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.222187][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.230761][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.239334][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.247941][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.255795][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.264450][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.297057][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.306157][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.314149][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.322997][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.330896][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.339485][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.347264][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.355704][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.402292][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.410978][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.418975][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.427764][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.442132][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.450950][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.458667][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.467598][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.499317][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.507613][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.516493][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.524338][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.533125][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.540883][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.549516][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.557910][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.566601][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.576482][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.600865][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.618349][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.625446][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.633866][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.649178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.656246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.664952][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.672083][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.683333][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.690408][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.730694][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.743075][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.773400][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.787256][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.794318][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.806902][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.813982][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.825596][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.837061][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.853365][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.868357][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.883945][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.891033][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.902177][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.909409][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.918479][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.925767][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.939150][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.946400][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.128370][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.146695][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.233681][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.251350][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.274794][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.321681][ T3294] veth0_vlan: entered promiscuous mode [ 35.344498][ T3294] veth1_vlan: entered promiscuous mode [ 35.385865][ T3294] veth0_macvtap: entered promiscuous mode [ 35.408719][ T3294] veth1_macvtap: entered promiscuous mode [ 35.445650][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.463490][ T3295] veth0_vlan: entered promiscuous mode [ 35.471587][ T3301] veth0_vlan: entered promiscuous mode [ 35.483880][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.503554][ T3295] veth1_vlan: entered promiscuous mode [ 35.511298][ T3301] veth1_vlan: entered promiscuous mode [ 35.517490][ T3299] veth0_vlan: entered promiscuous mode [ 35.524621][ T327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.533469][ T327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.543408][ T3300] veth0_vlan: entered promiscuous mode [ 35.550898][ T3299] veth1_vlan: entered promiscuous mode [ 35.558156][ T327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.567843][ T327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.579941][ T3300] veth1_vlan: entered promiscuous mode [ 35.594838][ T3295] veth0_macvtap: entered promiscuous mode [ 35.603018][ T3295] veth1_macvtap: entered promiscuous mode [ 35.625001][ T3301] veth0_macvtap: entered promiscuous mode [ 35.643519][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.651388][ T3300] veth0_macvtap: entered promiscuous mode [ 35.658601][ T3301] veth1_macvtap: entered promiscuous mode [ 35.673901][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.681334][ T3300] veth1_macvtap: entered promiscuous mode [ 35.691014][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.698047][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.716473][ T3299] veth0_macvtap: entered promiscuous mode [ 35.726329][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.739619][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.752243][ T327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.770395][ T327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.779433][ T327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.802106][ T327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811390][ T327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.829203][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.836950][ T3299] veth1_macvtap: entered promiscuous mode [ 35.843441][ T327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.853304][ T327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.879217][ T327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.891861][ T3501] loop0: detected capacity change from 0 to 128 [ 35.903575][ T327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.912711][ T327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.933344][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.935342][ T3501] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.956053][ T327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.969181][ T3501] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.980203][ T327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.995130][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.011296][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 36.011312][ T28] audit: type=1400 audit(1784324954.393:167): avc: denied { mount } for pid=3500 comm="syz.0.1" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.065410][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.071340][ T28] audit: type=1400 audit(1784324954.453:168): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.104185][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.115097][ T28] audit: type=1400 audit(1784324954.453:169): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.139523][ T28] audit: type=1400 audit(1784324954.453:170): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.166719][ T28] audit: type=1400 audit(1784324954.473:171): avc: denied { create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.185941][ T28] audit: type=1400 audit(1784324954.483:172): avc: denied { ioctl } for pid=3504 comm="syz.3.4" path="socket:[3877]" dev="sockfs" ino=3877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.250640][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.259671][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.275187][ T28] audit: type=1400 audit(1784324954.653:173): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.420567][ T28] audit: type=1400 audit(1784324954.803:174): avc: denied { map_create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.458263][ T3517] syzkaller0: entered promiscuous mode [ 36.467988][ T3520] loop1: detected capacity change from 0 to 512 [ 36.481592][ T3517] syzkaller0: entered allmulticast mode [ 36.490548][ T327] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.514447][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.541129][ T28] audit: type=1400 audit(1784324954.803:175): avc: denied { bind } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.603521][ T3520] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.661012][ T28] audit: type=1400 audit(1784324954.803:176): avc: denied { write } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.723443][ T3520] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2: Failed to acquire dquot type 0 [ 36.779277][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.865258][ T3537] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 38.086977][ T3554] loop0: detected capacity change from 0 to 128 [ 38.096604][ T3554] ======================================================= [ 38.096604][ T3554] WARNING: The mand mount option has been deprecated and [ 38.096604][ T3554] and is ignored by this kernel. Remove the mand [ 38.096604][ T3554] option from the mount to silence this warning. [ 38.096604][ T3554] ======================================================= [ 38.183060][ T3555] netlink: 277 bytes leftover after parsing attributes in process `syz.2.12'. [ 38.276495][ T3559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 38.283037][ T3559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.330332][ T3559] vhci_hcd vhci_hcd.0: Device attached [ 38.358703][ T3562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.387906][ T3562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.434574][ T3560] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 38.453332][ T68] vhci_hcd vhci_hcd.4: stop threads [ 38.467320][ T68] vhci_hcd vhci_hcd.4: release socket [ 38.485920][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 38.505384][ T3396] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 38.904900][ T3568] loop1: detected capacity change from 0 to 2048 [ 38.950876][ T3568] loop1: p3 < > p4 < > [ 38.955118][ T3568] loop1: partition table partially beyond EOD, truncated [ 38.962337][ T3568] loop1: p3 start 4284289 is beyond EOD, truncated [ 40.236712][ T3595] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.316045][ T3596] loop4: detected capacity change from 0 to 256 [ 40.344171][ T3596] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.648899][ T3586] loop0: detected capacity change from 0 to 512 [ 40.744935][ T3586] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.766415][ T3586] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.773522][ T3586] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 40.782358][ T3586] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 40.796139][ T3586] EXT4-fs (loop0): 1 truncate cleaned up [ 40.808503][ T3586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.895254][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.024230][ T3611] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use) [ 41.115689][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 41.115702][ T28] audit: type=1400 audit(1784324959.493:233): avc: denied { ioctl } for pid=3608 comm="syz.2.29" path="socket:[4082]" dev="sockfs" ino=4082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.148013][ T3611] program syz.0.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.201264][ T28] audit: type=1400 audit(1784324959.493:234): avc: denied { read write } for pid=3610 comm="syz.0.28" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.225399][ T28] audit: type=1400 audit(1784324959.493:235): avc: denied { open } for pid=3610 comm="syz.0.28" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.482737][ T3623] Zero length message leads to an empty skb [ 41.534778][ T3626] netlink: 'syz.0.34': attribute type 21 has an invalid length. [ 41.601762][ T3626] netlink: 128 bytes leftover after parsing attributes in process `syz.0.34'. [ 41.698290][ T3626] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 41.780267][ T28] audit: type=1400 audit(1784324959.713:236): avc: denied { create } for pid=3625 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.802150][ T28] audit: type=1400 audit(1784324959.753:237): avc: denied { getopt } for pid=3614 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.825154][ T3626] netlink: 3 bytes leftover after parsing attributes in process `syz.0.34'. [ 41.834438][ T28] audit: type=1400 audit(1784324960.153:238): avc: denied { read } for pid=3630 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.882360][ T3635] netlink: 80 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.923534][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.943713][ T3638] loop0: detected capacity change from 0 to 1024 [ 41.951526][ T3638] journal_path: Non-blockdev passed as './file0' [ 41.965789][ T3638] EXT4-fs: error: could not find journal device path [ 42.155860][ T3645] loop3: detected capacity change from 0 to 1024 [ 42.178561][ T3645] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.183162][ T28] audit: type=1400 audit(1784324960.563:239): avc: denied { write } for pid=3646 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.222380][ T3642] netlink: 'syz.0.37': attribute type 361 has an invalid length. [ 42.237490][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.251630][ T3647] syz.1.40 (3647) used greatest stack depth: 9712 bytes left [ 42.259267][ T28] audit: type=1400 audit(1784324960.563:240): avc: denied { name_connect } for pid=3646 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.278977][ T3642] netlink: 'syz.0.37': attribute type 8 has an invalid length. [ 42.280417][ T28] audit: type=1400 audit(1784324960.603:241): avc: denied { ioctl } for pid=3637 comm="syz.0.37" path="socket:[5085]" dev="sockfs" ino=5085 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.311199][ T28] audit: type=1400 audit(1784324960.613:242): avc: denied { shutdown } for pid=3646 comm="syz.1.40" laddr=fe80::11 lport=52811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.508296][ T3644] loop2: detected capacity change from 0 to 512 [ 42.563447][ T3644] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.39: Failed to acquire dquot type 1 [ 42.593745][ T3644] loop2: lost filesystem error report for type 5 error -117 [ 42.595308][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 42.609130][ C1] EXT4-fs (loop2): last error at time 1784324960: ext4_acquire_dquot:7041 [ 42.638460][ T3644] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.39: Failed to acquire dquot type 1 [ 42.649820][ T3644] loop2: lost filesystem error report for type 5 error -117 [ 42.677239][ T3644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.39: bg 0: block 248: padding at end of block bitmap is not set [ 42.722619][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.753720][ T3644] loop2: lost filesystem error report for type 5 error -117 [ 42.754241][ T3644] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 42.773917][ T3644] loop2: lost filesystem error report for type 5 error -117 [ 42.781828][ T3644] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.39: Failed to acquire dquot type 1 [ 42.800932][ T3644] loop2: lost filesystem error report for type 5 error -117 [ 42.801597][ T3644] EXT4-fs (loop2): 1 orphan inode deleted [ 42.839487][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.855243][ T3644] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.934859][ T3679] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.39: deleted inode referenced: 12 [ 42.949016][ T3677] team0: Port device vlan2 added [ 42.956691][ T3675] No such timeout policy "syz1" [ 43.003581][ T3682] loop0: detected capacity change from 0 to 256 [ 43.006200][ T3644] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.39: deleted inode referenced: 12 [ 43.042830][ T3684] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 43.077804][ T3682] FAT-fs (loop0): codepage cp874 not found [ 43.182560][ T3689] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 43.189226][ T3689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 43.198938][ T3689] vhci_hcd vhci_hcd.0: Device attached [ 43.209327][ T3689] vhci_hcd vhci_hcd.0: port 0 already used [ 43.219326][ T3689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 43.595990][ T3696] vhci_hcd: connection closed [ 43.596207][ T3425] vhci_hcd vhci_hcd.4: stop threads [ 43.597916][ T3708] loop0: detected capacity change from 0 to 128 [ 43.600966][ T3425] vhci_hcd vhci_hcd.4: release socket [ 43.601029][ T3425] vhci_hcd vhci_hcd.4: disconnect device [ 43.729618][ T3714] x_tables: ip_tables: osf match: only valid for protocol 6 [ 44.010916][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.054559][ T3718] loop1: detected capacity change from 0 to 1024 [ 44.079431][ T3718] EXT4-fs: Ignoring removed orlov option [ 44.128554][ T3718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.287395][ T3740] loop2: detected capacity change from 0 to 4096 [ 45.295178][ T3740] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.316220][ T3740] EXT4-fs: test_dummy_encryption option not supported [ 45.582715][ T3740] loop2: detected capacity change from 0 to 512 [ 45.589376][ T3740] EXT4-fs: Ignoring removed bh option [ 45.705136][ T3740] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.711764][ T3740] EXT4-fs: Ignoring removed bh option [ 45.738563][ T3740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.751433][ T3740] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.762463][ T3740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.943258][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.005942][ T3752] loop0: detected capacity change from 0 to 1024 [ 46.012965][ T3752] EXT4-fs: Ignoring removed i_version option [ 46.019681][ T3752] EXT4-fs: Ignoring removed bh option [ 46.027419][ T3752] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.058954][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.175644][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 46.175679][ T28] audit: type=1400 audit(1784324964.553:281): avc: denied { setopt } for pid=3753 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.334428][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.392145][ T28] audit: type=1400 audit(1784324964.603:282): avc: denied { ioctl } for pid=3751 comm="syz.0.70" path="/16/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.464231][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 46.481611][ T28] audit: type=1400 audit(1784324964.843:283): avc: denied { connect } for pid=3760 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.819889][ T28] audit: type=1400 audit(1784324965.203:284): avc: denied { name_bind } for pid=3764 comm="syz.2.74" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.845388][ T3765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.040630][ T3765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.060460][ T3767] loop0: detected capacity change from 0 to 164 [ 47.204842][ T3767] iso9660: Bad value for 'sbsector' [ 47.255389][ T3767] 9p: Bad value for 'rfdno' [ 47.589641][ T3770] atomic_op ffff88811c6fc128 conn xmit_atomic 0000000000000000 [ 47.597940][ T28] audit: type=1400 audit(1784324965.943:285): avc: denied { bind } for pid=3768 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.617252][ T28] audit: type=1400 audit(1784324965.973:286): avc: denied { setopt } for pid=3768 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.644741][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71'. [ 47.664659][ T28] audit: type=1400 audit(1784324965.973:287): avc: denied { write } for pid=3768 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.752482][ T28] audit: type=1326 audit(1784324966.133:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.0.76" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92c4bde99 code=0x0 [ 47.998371][ T28] audit: type=1400 audit(1784324966.383:289): avc: denied { bind } for pid=3778 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.044420][ T28] audit: type=1400 audit(1784324966.383:290): avc: denied { name_bind } for pid=3778 comm="syz.1.79" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 48.212098][ T3763] loop4: detected capacity change from 0 to 8192 [ 48.358259][ T3763] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.274937][ T3816] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 49.312995][ T3821] bpf: Bad value for 'uid' [ 50.353939][ T3816] bond1 (unregistering): Released all slaves [ 51.743812][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 51.743830][ T28] audit: type=1400 audit(1784390505.835:299): avc: denied { create } for pid=3833 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.919680][ T3838] xt_hashlimit: size too large, truncated to 1048576 [ 51.984374][ T28] audit: type=1400 audit(1784390505.835:300): avc: denied { write } for pid=3833 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.011331][ T3844] loop4: detected capacity change from 0 to 512 [ 52.251377][ T3842] loop3: detected capacity change from 0 to 512 [ 52.264459][ T28] audit: type=1400 audit(1784390505.865:301): avc: denied { getopt } for pid=3833 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.362268][ T3842] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 52.594130][ T28] audit: type=1400 audit(1784390506.315:302): avc: denied { bind } for pid=3841 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.662802][ T3844] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 52.692213][ T3842] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 52.751835][ T3842] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.91: Failed to acquire dquot type 1 [ 52.820676][ T3842] loop3: lost filesystem error report for type 5 error -117 [ 52.825541][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.839927][ C1] EXT4-fs (loop3): last error at time 1784390507: ext4_acquire_dquot:7041 [ 52.883121][ T3844] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 52.957661][ T3842] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 53.072801][ T3842] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 53.107267][ T3844] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.89: Corrupt directory, running e2fsck is recommended [ 53.121958][ T3860] loop1: detected capacity change from 0 to 764 [ 53.135062][ T3842] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.91: Failed to acquire dquot type 1 [ 53.160472][ T28] audit: type=1400 audit(1784390507.415:303): avc: denied { mount } for pid=3859 comm="syz.1.95" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 53.208349][ T3842] loop3: lost filesystem error report for type 5 error -117 [ 53.239460][ T3842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.91: bg 0: block 248: padding at end of block bitmap is not set [ 53.264104][ T3842] loop3: lost filesystem error report for type 5 error -117 [ 53.292853][ T3844] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 53.310033][ T3842] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 53.319100][ T3842] loop3: lost filesystem error report for type 5 error -117 [ 53.320297][ T3842] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 53.340197][ T3842] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.91: Failed to acquire dquot type 1 [ 53.354007][ T3844] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.89: corrupted in-inode xattr: invalid ea_ino [ 53.416791][ T3842] loop3: lost filesystem error report for type 5 error -117 [ 53.427184][ T3842] EXT4-fs (loop3): 1 orphan inode deleted [ 53.458842][ T3844] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.465315][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 53.480913][ C1] EXT4-fs (loop4): initial error at time 1784390507: ext4_iget_extra_inode:5180: inode 15 [ 53.490880][ C1] EXT4-fs (loop4): last error at time 1784390507: ext4_iget_extra_inode:5180: inode 15 [ 53.504154][ T3844] EXT4-fs (loop4): Remounting filesystem read-only [ 53.559011][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.574822][ T3842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.623144][ T3842] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.898251][ T3842] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.91: deleted inode referenced: 12 [ 54.002448][ T3876] netlink: 'syz.1.101': attribute type 13 has an invalid length. [ 54.013857][ T3842] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.91: deleted inode referenced: 12 [ 54.329879][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.768474][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.800134][ T3890] syzkaller0: entered promiscuous mode [ 54.806084][ T3890] syzkaller0: entered allmulticast mode [ 54.866711][ T3903] tipc: Started in network mode [ 54.872235][ T3907] loop1: detected capacity change from 0 to 512 [ 54.874598][ T3903] tipc: Node identity 2007ff, cluster identity 4711 [ 54.888155][ T3903] tipc: Node number set to 2099199 [ 54.900905][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.918250][ T3907] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.940387][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.079592][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.086939][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.161893][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.172240][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.285188][ T68] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.308362][ T68] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.332294][ T68] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.366682][ T68] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.695628][ T3961] loop4: detected capacity change from 0 to 128 [ 55.727543][ T3961] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.759603][ T3961] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.801622][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.359707][ T3979] loop3: detected capacity change from 0 to 1024 [ 56.373521][ T3979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.392422][ T3979] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.131: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 56.633549][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.706157][ T3985] syzkaller0: entered promiscuous mode [ 56.714069][ T3990] loop3: detected capacity change from 0 to 1024 [ 56.721734][ T3985] syzkaller0: entered allmulticast mode [ 56.739039][ T3990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.770841][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.787493][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 56.787506][ T28] audit: type=1400 audit(1784390511.045:312): avc: denied { write } for pid=3989 comm="syz.3.132" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.823477][ T3990] EXT4-fs (loop3): shut down requested (1) [ 56.846795][ T28] audit: type=1400 audit(1784390511.085:313): avc: denied { map } for pid=3989 comm="syz.3.132" path="/25/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.869729][ T28] audit: type=1400 audit(1784390511.085:314): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 56.891832][ T28] audit: type=1400 audit(1784390511.085:315): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.892484][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.913632][ T28] audit: type=1400 audit(1784390511.085:316): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.959921][ T28] audit: type=1400 audit(1784390511.085:317): avc: denied { add_name } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.015395][ T28] audit: type=1400 audit(1784390511.085:318): avc: denied { create } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.036752][ T28] audit: type=1400 audit(1784390511.085:319): avc: denied { append open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.112775][ T28] audit: type=1400 audit(1784390511.085:320): avc: denied { getattr } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.151876][ T28] audit: type=1400 audit(1784390511.205:321): avc: denied { sqpoll } for pid=3998 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.283558][ T4020] pimreg: entered allmulticast mode [ 58.101839][ T4021] geneve2: entered promiscuous mode [ 58.107232][ T4021] geneve2: entered allmulticast mode [ 58.115098][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49865 - 0 [ 58.135428][ T36] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 57079 - 0 [ 58.174002][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49865 - 0 [ 58.186707][ T36] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 57079 - 0 [ 58.198255][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 58.314511][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49865 - 0 [ 58.531482][ T36] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 57079 - 0 [ 58.541038][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49865 - 0 [ 58.554763][ T36] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 57079 - 0 [ 58.564222][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.573068][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.581933][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.590946][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.599782][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.608627][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.617581][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.626444][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.635386][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 58.660413][ T4041] team0: Port device vlan2 removed [ 58.709513][ T4032] syzkaller0: entered promiscuous mode [ 58.716086][ T4032] syzkaller0: entered allmulticast mode [ 59.903306][ T4072] Illegal XDP return value 4033453994 on prog (id 15) dev N/A, expect packet loss! [ 60.261637][ T4097] pim6reg: entered allmulticast mode [ 60.277512][ T4096] pim6reg: left allmulticast mode [ 60.467133][ T4121] loop1: detected capacity change from 0 to 128 [ 60.485280][ T4121] EXT4-fs: test_dummy_encryption option not supported [ 60.667591][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.674868][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.291371][ T4142] syzkaller0: entered promiscuous mode [ 61.300545][ T4142] syzkaller0: entered allmulticast mode [ 61.580524][ T4106] Set syz1 is full, maxelem 65536 reached [ 61.595857][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.603189][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.766652][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.830820][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.842339][ T4167] loop4: detected capacity change from 0 to 128 [ 61.851990][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 61.852040][ T28] audit: type=1400 audit(1784390516.105:331): avc: denied { setopt } for pid=4166 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.090745][ T4170] loop1: detected capacity change from 0 to 256 [ 62.166303][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.230579][ T4170] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 62.310450][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.425621][ T4170] FAT-fs (loop1): Can't find a valid FAT filesystem [ 62.457399][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.772461][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.799598][ T4177] tmpfs: Unsupported parameter 'huge' [ 63.916458][ T4202] loop3: detected capacity change from 0 to 128 [ 64.543254][ T4212] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 65.026564][ T28] audit: type=1400 audit(1784390518.395:332): avc: denied { create } for pid=4201 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.147360][ T4212] bond1 (unregistering): Released all slaves [ 66.919077][ T4233] sctp: [Deprecated]: syz.4.215 (pid 4233) Use of int in maxseg socket option. [ 66.919077][ T4233] Use struct sctp_assoc_value instead [ 67.025132][ T4233] loop4: detected capacity change from 0 to 256 [ 67.044695][ T4233] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.151045][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.160605][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.022202][ T4250] netlink: 'syz.1.222': attribute type 21 has an invalid length. [ 68.054459][ T4250] __nla_validate_parse: 45 callbacks suppressed [ 68.054479][ T4250] netlink: 13 bytes leftover after parsing attributes in process `syz.1.222'. [ 68.092919][ T28] audit: type=1400 audit(1784390522.345:333): avc: denied { map } for pid=4249 comm="syz.1.222" path="socket:[7194]" dev="sockfs" ino=7194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.304212][ T4256] loop2: detected capacity change from 0 to 128 [ 68.359642][ T4256] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.401907][ T4256] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.579246][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.621146][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 68.685491][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 68.702487][ T4268] netlink: 80 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.713530][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 68.713555][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 68.713573][ T3300] Call Trace: [ 68.713581][ T3300] [ 68.713590][ T3300] __dump_stack+0x1d/0x30 [ 68.713613][ T3300] dump_stack_lvl+0x95/0xd0 [ 68.713655][ T3300] dump_stack+0x15/0x1b [ 68.713686][ T3300] dump_header+0x80/0x240 [ 68.713708][ T3300] oom_kill_process+0x295/0x350 [ 68.713806][ T3300] out_of_memory+0x981/0xbc0 [ 68.713883][ T3300] try_charge_memcg+0x621/0xa00 [ 68.713932][ T3300] charge_memcg+0x6d/0x120 [ 68.714004][ T3300] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 68.714182][ T3300] swap_cache_alloc_folio+0x47b/0x5e0 [ 68.714216][ T3300] swap_cluster_readahead+0x2b1/0x460 [ 68.714253][ T3300] swapin_readahead+0xd8/0x8a0 [ 68.714341][ T3300] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 68.714370][ T3300] ? hrtimer_start_range_ns+0x108/0x120 [ 68.714418][ T3300] ? __rcu_read_unlock+0x4e/0x70 [ 68.714498][ T3300] ? swap_cache_get_folio+0x1f7/0x200 [ 68.714601][ T3300] do_swap_page+0x2a2/0x1ec0 [ 68.714635][ T3300] ? __schedule+0x799/0xd10 [ 68.714663][ T3300] ? __rcu_read_lock+0x36/0x50 [ 68.714695][ T3300] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 68.714769][ T3300] handle_mm_fault+0xb3c/0x2da0 [ 68.714821][ T3300] do_user_addr_fault+0x634/0x1060 [ 68.714869][ T3300] ? trace_page_fault_user+0x1f/0xa0 [ 68.714931][ T3300] exc_page_fault+0x62/0xa0 [ 68.714967][ T3300] asm_exc_page_fault+0x26/0x30 [ 68.714996][ T3300] RIP: 0033:0x7f365fd19017 [ 68.715018][ T3300] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 68.715040][ T3300] RSP: 002b:00007ffd383d1de0 EFLAGS: 00010202 [ 68.715071][ T3300] RAX: 0000000000000000 RBX: 00005555656b3500 RCX: 00007f365fd19017 [ 68.715084][ T3300] RDX: 00007ffd383d1e20 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.715100][ T3300] RBP: 00007ffd383d1e8c R08: 0000000000000000 R09: 0000000000000000 [ 68.715115][ T3300] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 68.715131][ T3300] R13: 00000000000927c0 R14: 0000000000010927 R15: 00007ffd383d1ee0 [ 68.715173][ T3300] [ 68.938318][ T3300] memory: usage 307200kB, limit 307200kB, failcnt 357 [ 68.965878][ T3300] memory+swap: usage 307216kB, limit 9007199254740988kB, failcnt 0 [ 68.976931][ T3300] kmem: usage 295596kB, limit 9007199254740988kB, failcnt 0 [ 68.985423][ T3300] Memory cgroup stats for /syz4: [ 68.985740][ T3300] cache 11698176 [ 68.995436][ T3300] rss 184320 [ 68.999003][ T3300] shmem 0 [ 69.002094][ T3300] mapped_file 11698176 [ 69.015329][ T3300] dirty 4096 [ 69.018618][ T3300] writeback 0 [ 69.022001][ T3300] workingset_refault_anon 5 [ 69.026612][ T3300] workingset_refault_file 1211 [ 69.029858][ T4271] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 69.031554][ T3300] swap 16384 [ 69.037977][ T4271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.049977][ T3300] swapcached 36864 [ 69.053836][ T3300] pgpgin 29217 [ 69.057134][ T4271] vhci_hcd vhci_hcd.0: Device attached [ 69.057957][ T3300] pgpgout 26316 [ 69.070543][ T3300] pgfault 32434 [ 69.079273][ T3300] pgmajfault 23 [ 69.084072][ T3300] inactive_anon 0 [ 69.093401][ T4274] vhci_hcd vhci_hcd.0: port 0 already used [ 69.104630][ T3300] active_anon 0 [ 69.108359][ T3300] inactive_file 0 [ 69.109276][ T4271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 69.112141][ T3300] active_file 0 [ 69.112151][ T3300] unevictable 11882496 [ 69.112172][ T3300] hierarchical_memory_limit 314572800 [ 69.112182][ T3300] hierarchical_memsw_limit 9223372036854771712 [ 69.112193][ T3300] total_cache 11698176 [ 69.112215][ T3300] total_rss 184320 [ 69.112223][ T3300] total_shmem 0 [ 69.112232][ T3300] total_mapped_file 11698176 [ 69.112241][ T3300] total_dirty 4096 [ 69.112249][ T3300] total_writeback 0 [ 69.112257][ T3300] total_workingset_refault_anon 5 [ 69.112267][ T3300] total_workingset_refault_file 1211 [ 69.112297][ T3300] total_swap 16384 [ 69.112305][ T3300] total_swapcached 36864 [ 69.112314][ T3300] total_pgpgin 29217 [ 69.189870][ T3300] total_pgpgout 26316 [ 69.193919][ T3300] total_pgfault 32434 [ 69.198196][ T3300] total_pgmajfault 23 [ 69.202293][ T3300] total_inactive_anon 0 [ 69.206712][ T3300] total_active_anon 0 [ 69.210788][ T3300] total_inactive_file 0 [ 69.214996][ T3300] total_active_file 0 [ 69.219191][ T3300] total_unevictable 11882496 [ 69.223906][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.219,pid=4245,uid=0 [ 69.250671][ T3300] Memory cgroup out of memory: Killed process 4245 (syz.4.219) total-vm:229348kB, anon-rss:1424kB, file-rss:34536kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 69.273126][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 69.651456][ T4235] syz.0.214 (4235) used greatest stack depth: 9280 bytes left [ 69.715359][ T35] usb 8-1: SetAddress Request (2) to port 0 [ 69.721423][ T35] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 69.739185][ T4272] vhci_hcd: connection closed [ 69.739786][ T12] vhci_hcd vhci_hcd.3: stop threads [ 69.761314][ T12] vhci_hcd vhci_hcd.3: release socket [ 69.766863][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 69.799137][ T28] audit: type=1400 audit(1784390524.055:334): avc: denied { write } for pid=4288 comm="syz.4.235" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.844901][ T4291] netlink: 'syz.1.236': attribute type 21 has an invalid length. [ 69.861095][ T4291] netlink: 13 bytes leftover after parsing attributes in process `syz.1.236'. [ 69.865608][ T28] audit: type=1400 audit(1784390524.055:335): avc: denied { open } for pid=4288 comm="syz.4.235" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.887999][ T4289] random: crng reseeded on system resumption [ 69.894828][ T28] audit: type=1400 audit(1784390524.075:336): avc: denied { ioctl } for pid=4288 comm="syz.4.235" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x453f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.925617][ T28] audit: type=1400 audit(1784390524.125:337): avc: denied { write } for pid=4288 comm="syz.4.235" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.949091][ T28] audit: type=1400 audit(1784390524.125:338): avc: denied { open } for pid=4288 comm="syz.4.235" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.077590][ T4303] loop2: detected capacity change from 0 to 128 [ 70.084711][ T4303] msdos: Unknown parameter 'ÿÿ0x0000000000000000' [ 70.127561][ T4305] sctp: [Deprecated]: syz.1.242 (pid 4305) Use of int in maxseg socket option. [ 70.127561][ T4305] Use struct sctp_assoc_value instead [ 70.190497][ T4305] loop1: detected capacity change from 0 to 256 [ 70.210703][ T4305] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.285191][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 71.523968][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.534016][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.574813][ T4346] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 73.652626][ T4344] random: crng reseeded on system resumption [ 73.690436][ T4346] bond1 (unregistering): Released all slaves [ 73.976449][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 74.011546][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 74.046336][ T4372] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.066773][ T4372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.074022][ T4372] IPv6: NLM_F_CREATE should be set when creating new route [ 74.081264][ T4372] IPv6: NLM_F_CREATE should be set when creating new route [ 74.207076][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.273472][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.380739][ T4379] syzkaller0: entered promiscuous mode [ 74.391079][ T4379] syzkaller0: entered allmulticast mode [ 74.522469][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 74.582879][ T4386] random: crng reseeded on system resumption [ 74.717031][ T4399] random: crng reseeded on system resumption [ 74.896983][ T4402] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 74.911911][ T35] usb 8-1: device descriptor read/8, error -110 [ 74.930831][ T4402] bond1 (unregistering): Released all slaves [ 75.044176][ T35] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.080808][ T35] usb 8-1: enqueue for inactive port 0 [ 75.178991][ T35] usb 8-1: enqueue for inactive port 0 [ 75.290543][ T35] usb 8-1: enqueue for inactive port 0 [ 75.315896][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 75.406185][ T4340] syz.2.251 (4340) used greatest stack depth: 9088 bytes left [ 76.695884][ T4435] syzkaller0: entered promiscuous mode [ 76.728750][ T4435] syzkaller0: entered allmulticast mode [ 77.035730][ T35] usb usb8-port1: attempt power cycle [ 77.482571][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 77.491560][ T4452] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.546870][ T4451] random: crng reseeded on system resumption [ 78.042399][ T4462] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 78.081295][ T4462] bond1 (unregistering): Released all slaves [ 78.553038][ T4474] x_tables: ip_tables: osf match: only valid for protocol 6 [ 78.965014][ T4482] syzkaller0: entered promiscuous mode [ 78.982778][ T4482] syzkaller0: entered allmulticast mode [ 79.036250][ T35] usb usb8-port1: unable to enumerate USB device [ 79.583327][ T4486] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 79.609557][ T4486] bond1 (unregistering): Released all slaves [ 80.368674][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 80.659571][ T4472] syz.3.295 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 80.670593][ T4472] CPU: 0 UID: 0 PID: 4472 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.670622][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 80.670634][ T4472] Call Trace: [ 80.670640][ T4472] [ 80.670647][ T4472] __dump_stack+0x1d/0x30 [ 80.670669][ T4472] dump_stack_lvl+0x95/0xd0 [ 80.670692][ T4472] dump_stack+0x15/0x1b [ 80.670789][ T4472] dump_header+0x80/0x240 [ 80.670818][ T4472] oom_kill_process+0x295/0x350 [ 80.670853][ T4472] out_of_memory+0x981/0xbc0 [ 80.670923][ T4472] try_charge_memcg+0x621/0xa00 [ 80.670976][ T4472] ? should_fail_ex+0x30/0x270 [ 80.671019][ T4472] charge_memcg+0x6d/0x120 [ 80.671122][ T4472] __mem_cgroup_charge+0x28/0xb0 [ 80.671164][ T4472] filemap_add_folio+0x110/0x350 [ 80.671205][ T4472] __filemap_get_folio_mpol+0x32e/0x840 [ 80.671267][ T4472] filemap_fault+0x458/0xb60 [ 80.671296][ T4472] handle_mm_fault+0x167a/0x2da0 [ 80.671417][ T4472] __get_user_pages+0x129c/0x1f10 [ 80.671459][ T4472] __mm_populate+0x242/0x390 [ 80.671596][ T4472] __se_sys_mlockall+0x35e/0x3c0 [ 80.671623][ T4472] __x64_sys_mlockall+0x1f/0x30 [ 80.671673][ T4472] x64_sys_call+0xf90/0x3020 [ 80.671697][ T4472] do_syscall_64+0x136/0x3c0 [ 80.671723][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.671751][ T4472] RIP: 0033:0x7f8d870ede99 [ 80.671769][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.671849][ T4472] RSP: 002b:00007f8d85b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 80.671874][ T4472] RAX: ffffffffffffffda RBX: 00007f8d87375fa0 RCX: 00007f8d870ede99 [ 80.671888][ T4472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 80.671902][ T4472] RBP: 00007f8d87183eaf R08: 0000000000000000 R09: 0000000000000000 [ 80.671915][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.671931][ T4472] R13: 00007f8d87376038 R14: 00007f8d87375fa0 R15: 00007ffe4b886a88 [ 80.671956][ T4472] [ 80.672049][ T4472] memory: usage 307200kB, limit 307200kB, failcnt 451 [ 80.945855][ T4510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 80.970262][ T4510] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.999853][ T4510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.007118][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 81.014379][ T4510] IPv6: NLM_F_CREATE should be set when creating new route [ 81.117580][ T4472] memory+swap: usage 307216kB, limit 9007199254740988kB, failcnt 0 [ 81.134446][ T4472] kmem: usage 297984kB, limit 9007199254740988kB, failcnt 0 [ 81.196896][ T4472] Memory cgroup stats for /syz3: [ 81.197127][ T4472] cache 9252864 [ 81.212433][ T4516] syzkaller0: entered promiscuous mode [ 81.216779][ T4472] rss 184320 [ 81.226907][ T4472] shmem 0 [ 81.235023][ T4472] mapped_file 9252864 [ 81.238711][ T4516] syzkaller0: entered allmulticast mode [ 81.246265][ T4472] dirty 8192 [ 81.252458][ T4472] writeback 0 [ 81.260354][ T4472] workingset_refault_anon 3 [ 81.270759][ T4472] workingset_refault_file 588 [ 81.281282][ T4472] swap 16384 [ 81.289047][ T4472] swapcached 28672 [ 81.297295][ T4472] pgpgin 51738 [ 81.303597][ T4472] pgpgout 49434 [ 81.311502][ T4472] pgfault 52304 [ 81.315039][ T4472] pgmajfault 16 [ 81.318824][ T4472] inactive_anon 0 [ 81.322566][ T4472] active_anon 0 [ 81.326296][ T4472] inactive_file 0 [ 81.330035][ T4472] active_file 0 [ 81.333545][ T4472] unevictable 9437184 [ 81.338815][ T4472] hierarchical_memory_limit 314572800 [ 81.344300][ T4472] hierarchical_memsw_limit 9223372036854771712 [ 81.350645][ T4472] total_cache 9252864 [ 81.354682][ T4472] total_rss 184320 [ 81.358625][ T4472] total_shmem 0 [ 81.362163][ T4472] total_mapped_file 9252864 [ 81.367003][ T4472] total_dirty 8192 [ 81.370873][ T4472] total_writeback 0 [ 81.374818][ T4472] total_workingset_refault_anon 3 [ 81.380218][ T4472] total_workingset_refault_file 588 [ 81.385536][ T4472] total_swap 16384 [ 81.389290][ T4472] total_swapcached 28672 [ 81.393686][ T4472] total_pgpgin 51738 [ 81.403288][ T4472] total_pgpgout 49434 [ 81.410839][ T4472] total_pgfault 52304 [ 81.416080][ T4472] total_pgmajfault 16 [ 81.421323][ T4472] total_inactive_anon 0 [ 81.425559][ T4472] total_active_anon 0 [ 81.429629][ T4472] total_inactive_file 0 [ 81.433886][ T4472] total_active_file 0 [ 81.437965][ T4472] total_unevictable 9437184 [ 81.442537][ T4472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.295,pid=4471,uid=0 [ 81.458483][ T4472] Memory cgroup out of memory: Killed process 4471 (syz.3.295) total-vm:231396kB, anon-rss:1420kB, file-rss:50548kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 81.819119][ T4543] random: crng reseeded on system resumption [ 81.915741][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 82.142449][ T4554] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 82.184095][ T4554] bond1 (unregistering): Released all slaves [ 82.734300][ T4565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.748302][ T4565] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.777901][ T28] audit: type=1400 audit(1784390536.975:339): avc: denied { ioctl } for pid=4558 comm="syz.0.323" path="socket:[7818]" dev="sockfs" ino=7818 ioctlcmd=0x5874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.857791][ T4565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.871457][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.937852][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.056014][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.117012][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.183527][ T4565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.266758][ T4565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.339703][ T4565] veth1_vlan: left promiscuous mode [ 83.367088][ T4565] veth0_vlan: left promiscuous mode [ 83.401704][ T4565] veth0_vlan: entered promiscuous mode [ 83.429853][ T4565] veth1_vlan: entered promiscuous mode [ 83.477606][ T4565] veth1_macvtap: left promiscuous mode [ 83.506311][ T4565] veth0_macvtap: left promiscuous mode [ 83.538376][ T4565] veth0_macvtap: entered promiscuous mode [ 83.571275][ T4565] veth1_macvtap: entered promiscuous mode [ 83.616379][ T4565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.633777][ T4565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.642336][ T4565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.651096][ T4565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.670110][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.677257][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.730285][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.737418][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.803367][ T4583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 83.830190][ T4583] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.193674][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.201871][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.212131][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.220670][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.252781][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.262095][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282309][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.291398][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.529045][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 84.722309][ T4608] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 84.775697][ T4608] bond1 (unregistering): Released all slaves [ 85.846428][ T4631] loop4: detected capacity change from 0 to 512 [ 85.873450][ T4631] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 85.914424][ T4631] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: comm syz.4.345: inode #436207616: comm syz.4.345: iget: illegal inode # [ 85.951295][ T4631] loop4: lost filesystem error report for type 5 error -117 [ 85.951448][ T4631] EXT4-fs (loop4): no journal found [ 85.958852][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 85.958873][ C1] EXT4-fs (loop4): initial error at time 1784390540: ext4_get_journal_inode:5900 [ 85.958900][ C1] EXT4-fs (loop4): last error at time 1784390540: ext4_get_journal_inode:5900 [ 86.073065][ T4631] EXT4-fs (loop4): can't get journal size [ 86.310471][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 86.346949][ T4631] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 86.378800][ T4631] EXT4-fs (loop4): failed to initialize system zone (-22) [ 86.404476][ T4631] EXT4-fs (loop4): mount failed [ 86.585468][ T4661] netlink: 80 bytes leftover after parsing attributes in process `syz.0.362'. [ 86.732371][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 86.807804][ T4649] loop1: detected capacity change from 0 to 512 [ 86.898389][ T4649] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 86.916849][ T4649] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 86.941800][ T4649] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.350: Failed to acquire dquot type 1 [ 86.985217][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.994879][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.447876][ T4649] loop1: lost filesystem error report for type 5 error -117 [ 87.449536][ T4649] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 87.457326][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.457396][ C0] EXT4-fs (loop1): last error at time 1784390541: ext4_acquire_dquot:7041 [ 87.699329][ T4649] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 87.718203][ T28] audit: type=1400 audit(1784390541.975:340): avc: denied { write } for pid=4679 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.757172][ T4649] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.350: Failed to acquire dquot type 1 [ 87.807287][ T4649] loop1: lost filesystem error report for type 5 error -117 [ 87.814836][ T4649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.350: bg 0: block 248: padding at end of block bitmap is not set [ 87.891046][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 87.927523][ T4649] loop1: lost filesystem error report for type 5 error -117 [ 87.928027][ T4649] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.966205][ T4649] loop1: lost filesystem error report for type 5 error -117 [ 87.974968][ T4649] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 88.014590][ T4649] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.037600][ T4649] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.350: Failed to acquire dquot type 1 [ 88.061534][ T4649] loop1: lost filesystem error report for type 5 error -117 [ 88.062743][ T4649] EXT4-fs (loop1): 1 orphan inode deleted [ 88.101068][ T4649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.155352][ T4649] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.210930][ T4649] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.350: deleted inode referenced: 12 [ 88.254414][ T4649] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.350: deleted inode referenced: 12 [ 88.315583][ T28] audit: type=1400 audit(1784390542.565:341): avc: denied { ioctl } for pid=4647 comm="syz.1.350" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.600645][ T4697] loop0: detected capacity change from 0 to 512 [ 88.661383][ T4697] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 88.674761][ T4697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.686427][ T4697] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.366: Failed to acquire dquot type 1 [ 88.699088][ T4697] loop0: lost filesystem error report for type 5 error -117 [ 88.701870][ T4697] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 88.709436][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 88.709852][ C0] EXT4-fs (loop0): last error at time 1784390542: ext4_acquire_dquot:7041 [ 88.739213][ T4697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.749521][ T4697] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.366: Failed to acquire dquot type 1 [ 88.764277][ T4697] loop0: lost filesystem error report for type 5 error -117 [ 88.767634][ T4697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.366: bg 0: block 248: padding at end of block bitmap is not set [ 88.790066][ T4697] loop0: lost filesystem error report for type 5 error -117 [ 88.791975][ T4697] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.815396][ T4697] loop0: lost filesystem error report for type 5 error -117 [ 88.817473][ T4697] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 88.854480][ T4697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.867028][ T4697] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.366: Failed to acquire dquot type 1 [ 88.881396][ T4697] EXT4-fs (loop0): 1 orphan inode deleted [ 88.907388][ T4697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.939916][ T4697] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.954656][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.000652][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 89.033110][ T4728] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.366: deleted inode referenced: 12 [ 89.071754][ T4697] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.366: deleted inode referenced: 12 [ 89.598801][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.640932][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.623071][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.707893][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 91.995088][ T4797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'. [ 92.335750][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 93.230140][ T4813] loop1: detected capacity change from 0 to 512 [ 93.443301][ T4813] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 93.484128][ T4813] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 93.532068][ T4813] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.402: Failed to acquire dquot type 1 [ 93.578465][ T4813] fserror_report: 1 callbacks suppressed [ 93.578530][ T4813] loop1: lost filesystem error report for type 5 error -117 [ 93.599444][ T4813] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 93.607175][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 93.607204][ C0] EXT4-fs (loop1): last error at time 1784390547: ext4_acquire_dquot:7041 [ 93.693182][ T4843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.411'. [ 93.740123][ T4813] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 93.761616][ T4813] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.402: Failed to acquire dquot type 1 [ 93.789792][ T4813] loop1: lost filesystem error report for type 5 error -117 [ 93.793475][ T4813] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.402: bg 0: block 248: padding at end of block bitmap is not set [ 93.835518][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 93.845413][ T4813] loop1: lost filesystem error report for type 5 error -117 [ 93.846648][ T4813] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.881393][ T4813] loop1: lost filesystem error report for type 5 error -117 [ 93.882949][ T4813] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 93.962341][ T4813] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 94.005466][ T4813] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.402: Failed to acquire dquot type 1 [ 94.030965][ T4813] loop1: lost filesystem error report for type 5 error -117 [ 94.032024][ T4813] EXT4-fs (loop1): 1 orphan inode deleted [ 94.068363][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.098159][ T4813] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.159512][ T4813] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.402: deleted inode referenced: 12 [ 94.189150][ T4813] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.402: deleted inode referenced: 12 [ 94.294153][ T4854] loop2: detected capacity change from 0 to 512 [ 94.371031][ T4854] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 94.394512][ T4854] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.427036][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.415: Failed to acquire dquot type 1 [ 94.451715][ T4860] netlink: 80 bytes leftover after parsing attributes in process `syz.4.416'. [ 94.463791][ T4854] loop2: lost filesystem error report for type 5 error -117 [ 94.464913][ T4854] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 94.472694][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 94.472774][ C0] EXT4-fs (loop2): last error at time 1784390548: ext4_acquire_dquot:7041 [ 94.537669][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 94.572657][ T4854] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.583637][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.415: Failed to acquire dquot type 1 [ 94.598906][ T4854] loop2: lost filesystem error report for type 5 error -117 [ 94.602106][ T4854] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.415: bg 0: block 248: padding at end of block bitmap is not set [ 94.625467][ T4854] loop2: lost filesystem error report for type 5 error -117 [ 94.627182][ T4854] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 94.667204][ T4854] loop2: lost filesystem error report for type 5 error -117 [ 94.669026][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.415: Failed to acquire dquot type 1 [ 94.707472][ T4854] loop2: lost filesystem error report for type 5 error -117 [ 94.709217][ T4854] EXT4-fs (loop2): 1 orphan inode deleted [ 94.750730][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.763910][ T4854] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.870214][ T4854] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.415: deleted inode referenced: 12 [ 94.894144][ T4854] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.415: deleted inode referenced: 12 [ 95.069799][ T4874] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 95.101327][ T4874] bond1 (unregistering): Released all slaves [ 95.865592][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.894608][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.229432][ T4903] netlink: 80 bytes leftover after parsing attributes in process `syz.0.432'. [ 97.240821][ T4897] loop4: detected capacity change from 0 to 512 [ 97.374890][ T4897] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.429: Failed to acquire dquot type 1 [ 97.401849][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 97.434360][ T4897] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.429: Failed to acquire dquot type 1 [ 97.445868][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 97.445922][ C0] EXT4-fs (loop4): last error at time 1784390551: ext4_acquire_dquot:7041 [ 97.474255][ T4908] random: crng reseeded on system resumption [ 97.538344][ T4897] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.429: bg 0: block 248: padding at end of block bitmap is not set [ 97.611804][ T4897] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 97.651148][ T4897] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.429: Failed to acquire dquot type 1 [ 97.699793][ T4917] syzkaller0: entered promiscuous mode [ 97.713723][ T4897] EXT4-fs (loop4): 1 orphan inode deleted [ 97.726186][ T4917] syzkaller0: entered allmulticast mode [ 97.774180][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.818942][ T4897] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.951370][ T4897] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.429: deleted inode referenced: 12 [ 97.997381][ T4897] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.429: deleted inode referenced: 12 [ 98.333870][ T4945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.350562][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.361903][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.374295][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.384423][ T4950] syzkaller0: entered promiscuous mode [ 98.394876][ T4950] syzkaller0: entered allmulticast mode [ 98.606555][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 98.666633][ T4962] random: crng reseeded on system resumption [ 98.825706][ T4975] loop3: detected capacity change from 0 to 512 [ 98.849699][ T4975] __quota_error: 8 callbacks suppressed [ 98.849716][ T4975] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.875376][ T4975] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 98.886520][ T4975] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.460: Failed to acquire dquot type 1 [ 98.899402][ T4975] fserror_report: 5 callbacks suppressed [ 98.899500][ T4975] loop3: lost filesystem error report for type 5 error -117 [ 98.909674][ T4975] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.917231][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 98.917286][ C1] EXT4-fs (loop3): last error at time 1784390553: ext4_acquire_dquot:7041 [ 98.997340][ T4975] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.008633][ T4975] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.460: Failed to acquire dquot type 1 [ 99.020790][ T4975] loop3: lost filesystem error report for type 5 error -117 [ 99.043416][ T4975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.460: bg 0: block 248: padding at end of block bitmap is not set [ 99.207501][ T4975] loop3: lost filesystem error report for type 5 error -117 [ 99.208114][ T4975] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 99.226649][ T4975] loop3: lost filesystem error report for type 5 error -117 [ 99.229263][ T4975] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 99.250689][ T4975] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.261259][ T4975] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.460: Failed to acquire dquot type 1 [ 99.273289][ T4975] loop3: lost filesystem error report for type 5 error -117 [ 99.274219][ T4975] EXT4-fs (loop3): 1 orphan inode deleted [ 99.294897][ T4975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.308669][ T4975] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.339476][ T4975] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.460: deleted inode referenced: 12 [ 99.360235][ T4975] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.460: deleted inode referenced: 12 [ 99.630943][ T4988] syzkaller0: entered promiscuous mode [ 99.653744][ T4988] syzkaller0: entered allmulticast mode [ 99.821108][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.038461][ T4997] random: crng reseeded on system resumption [ 101.507283][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 102.486956][ T5043] random: crng reseeded on system resumption [ 102.855218][ T5059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.864493][ T5059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.196817][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 104.137637][ T5081] random: crng reseeded on system resumption [ 104.792128][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 105.477313][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 105.610689][ T5133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.617992][ T5133] IPv6: NLM_F_CREATE should be set when creating new route [ 105.625239][ T5133] IPv6: NLM_F_CREATE should be set when creating new route [ 106.132796][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.230392][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.785821][ T5149] random: crng reseeded on system resumption [ 106.885056][ T5156] syzkaller0: entered promiscuous mode [ 106.900292][ T5156] syzkaller0: entered allmulticast mode [ 107.071475][ T5171] netlink: 80 bytes leftover after parsing attributes in process `syz.2.523'. [ 107.111910][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 108.609294][ T5196] loop2: detected capacity change from 0 to 512 [ 108.667289][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.698755][ T5197] random: crng reseeded on system resumption [ 108.727573][ T5196] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.784886][ T28] audit: type=1400 audit(1784390563.035:342): avc: denied { write } for pid=5195 comm="syz.2.529" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.810577][ T5196] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 108.857229][ T5196] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.894946][ T5196] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.529: Failed to acquire dquot type 0 [ 108.967902][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.070556][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 109.607172][ T5218] syzkaller0: entered promiscuous mode [ 109.634466][ T5218] syzkaller0: entered allmulticast mode [ 110.427891][ T5242] random: crng reseeded on system resumption [ 110.969393][ T5252] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 111.118029][ T5252] bond1 (unregistering): Released all slaves [ 111.816781][ T5231] syz.3.522 (5231) used greatest stack depth: 9008 bytes left [ 114.101929][ T5293] loop3: detected capacity change from 0 to 2048 [ 114.207666][ T5298] geneve2: entered promiscuous mode [ 114.213044][ T5298] geneve2: entered allmulticast mode [ 114.232072][ T3975] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 49215 - 0 [ 114.280198][ T3975] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 51828 - 0 [ 114.301564][ T5293] loop3: p3 < > p4 < > [ 114.305844][ T5293] loop3: partition table partially beyond EOD, truncated [ 114.313061][ T5293] loop3: p3 start 4284289 is beyond EOD, truncated [ 114.449523][ T3975] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 49215 - 0 [ 114.464105][ T3975] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 51828 - 0 [ 114.473625][ T3975] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 49215 - 0 [ 114.535060][ T3975] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 51828 - 0 [ 114.654969][ T3975] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 49215 - 0 [ 114.663835][ T3975] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 51828 - 0 [ 114.701639][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 115.062260][ T5317] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 115.114477][ T5317] bond1 (unregistering): Released all slaves [ 115.190290][ T5320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.566'. [ 115.231370][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 115.801833][ T5337] loop2: detected capacity change from 0 to 512 [ 116.469068][ T5339] x_tables: ip_tables: osf match: only valid for protocol 6 [ 116.522280][ T5337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 116.536910][ T5337] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.576272][ T5346] loop1: detected capacity change from 0 to 128 [ 116.589295][ T5345] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 116.610441][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 117.860171][ T5362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'. [ 118.260567][ T5373] geneve2: entered promiscuous mode [ 118.265986][ T5373] geneve2: entered allmulticast mode [ 118.558188][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 35453 - 0 [ 118.595459][ T30] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50936 - 0 [ 118.652231][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 35453 - 0 [ 118.661078][ T30] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50936 - 0 [ 118.689241][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 35453 - 0 [ 118.698342][ T30] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50936 - 0 [ 118.707294][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 35453 - 0 [ 118.716262][ T30] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50936 - 0 [ 118.884889][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.892217][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.979513][ T5402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.594'. [ 119.928136][ T5433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 120.098409][ T5446] syzkaller0: entered promiscuous mode [ 120.117072][ T5446] syzkaller0: entered allmulticast mode [ 121.301935][ T5466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.620'. [ 121.465862][ T5473] loop1: detected capacity change from 0 to 128 [ 122.609394][ T5501] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 122.702913][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 122.792721][ T5519] random: crng reseeded on system resumption [ 122.801073][ T5525] syzkaller0: entered promiscuous mode [ 122.807709][ T5525] syzkaller0: entered allmulticast mode [ 124.026181][ T5563] syzkaller0: entered promiscuous mode [ 124.038003][ T5563] syzkaller0: entered allmulticast mode [ 124.988316][ T5578] random: crng reseeded on system resumption [ 125.803606][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5588 comm=syz.3.664 [ 127.051603][ T5594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.109414][ T5594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.241958][ T5622] loop3: detected capacity change from 0 to 512 [ 127.257114][ T5594] geneve2: left promiscuous mode [ 127.262703][ T5594] geneve2: left allmulticast mode [ 127.273595][ T5605] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 127.281290][ T5622] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 127.291369][ T5622] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.301327][ T5622] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.675: Failed to acquire dquot type 1 [ 127.312500][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 127.313734][ T5622] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 127.321164][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.321178][ C1] EXT4-fs (loop3): last error at time 1784390581: ext4_acquire_dquot:7041 [ 127.350247][ T107] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.359476][ T5622] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.369508][ T107] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 49865 - 0 [ 127.378592][ T107] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 57079 - 0 [ 127.378669][ T5622] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.675: Failed to acquire dquot type 1 [ 127.400661][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.428613][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 127.428927][ T5622] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.675: bg 0: block 248: padding at end of block bitmap is not set [ 127.448625][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 49865 - 0 [ 127.451287][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 127.459957][ T5622] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 127.505970][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 127.506179][ T5622] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 127.524016][ T5622] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.534037][ T5622] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.675: Failed to acquire dquot type 1 [ 127.545859][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 127.546073][ T5622] EXT4-fs (loop3): 1 orphan inode deleted [ 127.624343][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 57079 - 0 [ 127.648900][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.683914][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 49865 - 0 [ 127.702952][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.732303][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 57079 - 0 [ 127.772416][ T5622] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.799794][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.853832][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 49865 - 0 [ 127.883775][ T5618] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.675: deleted inode referenced: 12 [ 127.909618][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 57079 - 0 [ 128.108985][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.139650][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.224092][ T5618] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.675: deleted inode referenced: 12 [ 128.987187][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.415439][ T5661] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 129.631865][ T5672] random: crng reseeded on system resumption [ 130.074325][ T5683] syzkaller0: entered promiscuous mode [ 130.079921][ T5683] syzkaller0: entered allmulticast mode [ 130.123685][ T5687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5687 comm=syz.1.698 [ 130.153174][ T28] audit: type=1400 audit(1784390584.405:343): avc: denied { create } for pid=5689 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.189484][ T5690] loop2: detected capacity change from 0 to 512 [ 130.220979][ T5690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 130.233964][ T5690] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.247585][ T28] audit: type=1400 audit(1784390584.505:344): avc: denied { write } for pid=5689 comm="syz.2.699" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.287258][ T28] audit: type=1400 audit(1784390584.545:345): avc: denied { append open } for pid=5689 comm="syz.2.699" path="/141/file2/devices.list" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.313668][ T5690] usb usb5: usbfs: process 5690 (syz.2.699) did not claim interface 0 before use [ 130.369627][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.411608][ T5702] loop2: detected capacity change from 0 to 128 [ 131.440228][ T28] audit: type=1400 audit(1784390585.695:346): avc: denied { ioctl } for pid=5725 comm="syz.4.710" path="socket:[12306]" dev="sockfs" ino=12306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.465868][ T5726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.710'. [ 131.641149][ T5731] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 131.940058][ T5739] pim6reg: entered allmulticast mode [ 131.997219][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 132.184681][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.191920][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.391674][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 132.444496][ T5748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.512700][ T5748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.559291][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.577603][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.599844][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.616793][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.914135][ T5776] pim6reg: entered allmulticast mode [ 132.992095][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 133.195651][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.221622][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.390872][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.400499][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.563585][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 135.347189][ T5811] geneve2: left promiscuous mode [ 135.352250][ T5811] geneve2: left allmulticast mode [ 135.364831][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 35453 - 0 [ 135.379510][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 50936 - 0 [ 135.389681][ T5815] loop4: detected capacity change from 0 to 128 [ 135.396338][ T107] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 35453 - 0 [ 135.405841][ T107] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 50936 - 0 [ 135.429965][ T107] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 35453 - 0 [ 135.505906][ T107] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 50936 - 0 [ 135.514897][ T107] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 35453 - 0 [ 135.524046][ T107] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 50936 - 0 [ 136.317766][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 136.344095][ T5848] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 136.476844][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.484118][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.549087][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.560175][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.410459][ T5875] loop1: detected capacity change from 0 to 128 [ 137.419184][ T5876] loop3: detected capacity change from 0 to 128 [ 137.545319][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.583096][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.625754][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.669936][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.262302][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 138.410328][ T5899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.761'. [ 138.600499][ T5931] x_tables: ip_tables: osf match: only valid for protocol 6 [ 139.598491][ T5941] loop4: detected capacity change from 0 to 128 [ 139.823019][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 139.902332][ T5949] loop1: detected capacity change from 0 to 128 [ 140.410119][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 141.159477][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.183885][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.383069][ T5980] netlink: 14 bytes leftover after parsing attributes in process `syz.4.779'. [ 141.693272][ T5993] loop1: detected capacity change from 0 to 128 [ 142.180210][ T5998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5998 comm=syz.3.787 [ 142.621019][ T6004] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 142.712914][ T6004] bond1 (unregistering): Released all slaves [ 142.872572][ T28] audit: type=1400 audit(1784390597.125:347): avc: denied { listen } for pid=6010 comm="syz.2.790" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.901617][ T6012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6012 comm=syz.2.790 [ 143.009977][ T6013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6013 comm=syz.2.790 [ 144.163277][ T6021] x_tables: ip_tables: osf match: only valid for protocol 6 [ 144.227500][ T6025] loop1: detected capacity change from 0 to 128 [ 144.287522][ T6031] syzkaller0: entered promiscuous mode [ 144.316624][ T6031] syzkaller0: entered allmulticast mode [ 144.385429][ T6029] netlink: 14 bytes leftover after parsing attributes in process `syz.2.795'. [ 145.299316][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.310144][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.438776][ T6049] loop4: detected capacity change from 0 to 128 [ 145.954549][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.975367][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.712298][ T6055] random: crng reseeded on system resumption [ 147.939447][ T6077] x_tables: ip_tables: osf match: only valid for protocol 6 [ 147.953158][ T6078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6078 comm=syz.3.809 [ 148.045955][ T6080] geneve2: entered promiscuous mode [ 148.051247][ T6080] geneve2: entered allmulticast mode [ 148.061752][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 55595 - 0 [ 148.065484][ T6074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6074 comm=syz.3.809 [ 148.090394][ T30] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49551 - 0 [ 148.105153][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 55595 - 0 [ 148.118661][ T30] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49551 - 0 [ 148.133488][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 55595 - 0 [ 148.146790][ T30] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49551 - 0 [ 148.161738][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 55595 - 0 [ 148.190925][ T30] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49551 - 0 [ 148.881830][ T6084] loop0: detected capacity change from 0 to 128 [ 148.969371][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.816'. [ 149.053157][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.069873][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 149.166963][ T6108] netlink: 14 bytes leftover after parsing attributes in process `syz.2.819'. [ 150.242320][ T6123] random: crng reseeded on system resumption [ 151.407573][ T6135] x_tables: ip_tables: osf match: only valid for protocol 6 [ 151.775033][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 152.247831][ T6143] netlink: 'syz.0.831': attribute type 16 has an invalid length. [ 152.264587][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 152.457535][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 152.493444][ T6151] loop3: detected capacity change from 0 to 512 [ 152.528754][ T6159] loop0: detected capacity change from 0 to 128 [ 152.561104][ T6141] loop4: detected capacity change from 0 to 512 [ 152.599654][ T6141] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 152.615390][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 152.637105][ T6141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 152.652499][ T6151] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.668789][ T6141] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.830: Failed to acquire dquot type 1 [ 152.704084][ T6141] loop4: lost filesystem error report for type 5 error -117 [ 152.704728][ T6141] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 152.712265][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 152.712313][ C0] EXT4-fs (loop4): last error at time 1784390606: ext4_acquire_dquot:7041 [ 152.746789][ T6151] usb usb5: usbfs: process 6151 (syz.3.835) did not claim interface 0 before use [ 152.756364][ T28] audit: type=1400 audit(1784390606.945:348): avc: denied { write } for pid=6150 comm="syz.3.835" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.785874][ T6141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 152.815355][ T6141] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.830: Failed to acquire dquot type 1 [ 152.827577][ T6141] loop4: lost filesystem error report for type 5 error -117 [ 152.848834][ T6141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.830: bg 0: block 248: padding at end of block bitmap is not set [ 152.881435][ T6141] loop4: lost filesystem error report for type 5 error -117 [ 152.881939][ T6141] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 152.917398][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 152.981329][ T6141] loop4: lost filesystem error report for type 5 error -117 [ 152.982925][ T6141] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 153.021364][ T6141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 153.042161][ T6141] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.830: Failed to acquire dquot type 1 [ 153.063869][ T6141] loop4: lost filesystem error report for type 5 error -117 [ 153.065626][ T6141] EXT4-fs (loop4): 1 orphan inode deleted [ 153.100000][ T6141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.128114][ T6141] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.169546][ T6141] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.830: deleted inode referenced: 12 [ 153.201965][ T6141] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.830: deleted inode referenced: 12 [ 153.271534][ T6171] netlink: 84 bytes leftover after parsing attributes in process `syz.2.840'. [ 153.421643][ T6177] random: crng reseeded on system resumption [ 153.517664][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 153.527900][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 153.870708][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.251390][ T6206] netlink: 84 bytes leftover after parsing attributes in process `syz.3.852'. [ 154.541954][ T6217] x_tables: ip_tables: osf match: only valid for protocol 6 [ 155.715782][ T6220] random: crng reseeded on system resumption [ 155.843512][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 155.887032][ T6235] syzkaller0: entered promiscuous mode [ 155.898441][ T6235] syzkaller0: entered allmulticast mode [ 156.031980][ T6246] netlink: 84 bytes leftover after parsing attributes in process `syz.0.864'. [ 156.174181][ T6241] loop2: detected capacity change from 0 to 512 [ 156.260178][ T6241] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.272424][ T6241] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 156.283139][ T6241] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.862: Failed to acquire dquot type 1 [ 156.295418][ T6241] loop2: lost filesystem error report for type 5 error -117 [ 156.297314][ T6241] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 156.314707][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 156.314766][ C0] EXT4-fs (loop2): last error at time 1784390610: ext4_acquire_dquot:7041 [ 156.341277][ T6241] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.862: Failed to acquire dquot type 1 [ 156.362974][ T6241] loop2: lost filesystem error report for type 5 error -117 [ 156.366410][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 156.382749][ T6241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.862: bg 0: block 248: padding at end of block bitmap is not set [ 156.398196][ T6241] loop2: lost filesystem error report for type 5 error -117 [ 156.398891][ T6241] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 156.419898][ T6241] loop2: lost filesystem error report for type 5 error -117 [ 156.424523][ T6241] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.862: Failed to acquire dquot type 1 [ 156.444454][ T6241] loop2: lost filesystem error report for type 5 error -117 [ 156.445786][ T6241] EXT4-fs (loop2): 1 orphan inode deleted [ 156.501545][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.540204][ T6241] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.571139][ T6241] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.862: deleted inode referenced: 12 [ 156.598275][ T6241] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.862: deleted inode referenced: 12 [ 156.710485][ T6278] netlink: 'syz.1.874': attribute type 21 has an invalid length. [ 156.889524][ T6291] __nla_validate_parse: 4 callbacks suppressed [ 156.889540][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 156.908009][ T6291] geneve2: entered promiscuous mode [ 156.913516][ T6291] geneve2: entered allmulticast mode [ 156.920380][ T107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.931816][ T107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.945779][ T107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.956604][ T107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.013180][ T6294] netlink: 14 bytes leftover after parsing attributes in process `syz.3.880'. [ 157.031730][ T6263] loop4: detected capacity change from 0 to 8192 [ 157.061417][ T6298] loop3: detected capacity change from 0 to 512 [ 157.080053][ T6263] loop4: p1 p2 p3 [ 157.089694][ T6263] loop4: p2 start 9961480 is beyond EOD, truncated [ 157.096743][ T6263] loop4: p3 start 117772289 is beyond EOD, truncated [ 157.123301][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 157.137799][ T6298] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.170789][ T6298] usb usb5: usbfs: process 6298 (syz.3.881) did not claim interface 0 before use [ 157.218489][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 157.233294][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 157.317005][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.393893][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 157.640262][ T6319] C: renamed from veth1_to_team [ 157.718840][ T6319] netlink: 'syz.3.888': attribute type 3 has an invalid length. [ 157.769664][ T6319] netlink: 116 bytes leftover after parsing attributes in process `syz.3.888'. [ 157.779277][ T6319] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.928420][ T6326] netlink: 14 bytes leftover after parsing attributes in process `syz.2.891'. [ 158.061671][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.071377][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.170980][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 159.230769][ T6351] loop0: detected capacity change from 0 to 512 [ 159.433361][ T6351] __quota_error: 4 callbacks suppressed [ 159.433381][ T6351] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 159.470316][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 159.564700][ T6351] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 159.670483][ T6375] netlink: 14 bytes leftover after parsing attributes in process `syz.2.903'. [ 159.682904][ T6351] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.896: Failed to acquire dquot type 1 [ 159.770793][ T6351] loop0: lost filesystem error report for type 5 error -117 [ 159.774816][ T6351] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 159.775253][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 159.799092][ C0] EXT4-fs (loop0): last error at time 1784390614: ext4_acquire_dquot:7041 [ 159.808934][ T6351] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 159.892386][ T6351] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.896: Failed to acquire dquot type 1 [ 159.973522][ T6351] loop0: lost filesystem error report for type 5 error -117 [ 159.980742][ T6351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.896: bg 0: block 248: padding at end of block bitmap is not set [ 160.003433][ T6351] loop0: lost filesystem error report for type 5 error -117 [ 160.003975][ T6351] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.055721][ T6351] loop0: lost filesystem error report for type 5 error -117 [ 160.087794][ T6351] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.152219][ T6351] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 160.171470][ T6351] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.896: Failed to acquire dquot type 1 [ 160.194528][ T6351] loop0: lost filesystem error report for type 5 error -117 [ 160.195676][ T6351] EXT4-fs (loop0): 1 orphan inode deleted [ 160.218034][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.232527][ T6351] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.265690][ T6351] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.896: deleted inode referenced: 12 [ 160.284402][ T6351] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.896: deleted inode referenced: 12 [ 160.821284][ T6399] loop1: detected capacity change from 0 to 8192 [ 160.870101][ T6399] loop1: p1 p2 p3 [ 160.874897][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 160.903177][ T6399] loop1: p2 start 9961480 is beyond EOD, truncated [ 160.912062][ T6399] loop1: p3 start 117772289 is beyond EOD, truncated [ 160.941655][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.256181][ T6434] loop0: detected capacity change from 0 to 128 [ 161.681620][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 161.965327][ T6436] ================================================================== [ 161.973547][ T6436] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 161.981398][ T6436] [ 161.983733][ T6436] write to 0xffff88811b5a3cc4 of 4 bytes by task 6434 on cpu 1: [ 161.991371][ T6436] inode_update_time+0x2ce/0x360 [ 161.996396][ T6436] file_update_time_flags+0x277/0x2e0 [ 162.001812][ T6436] file_update_time+0x17/0x20 [ 162.006548][ T6436] shmem_file_write_iter+0x9c/0xf0 [ 162.011710][ T6436] iter_file_splice_write+0x6a0/0xa60 [ 162.017121][ T6436] direct_splice_actor+0x156/0x280 [ 162.022283][ T6436] splice_direct_to_actor+0x2f9/0x680 [ 162.027685][ T6436] do_splice_direct+0x119/0x1a0 [ 162.032565][ T6436] do_sendfile+0x37d/0x640 [ 162.037019][ T6436] __x64_sys_sendfile64+0x105/0x150 [ 162.042250][ T6436] x64_sys_call+0x2dc4/0x3020 [ 162.047069][ T6436] do_syscall_64+0x136/0x3c0 [ 162.051698][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.057617][ T6436] [ 162.059963][ T6436] read to 0xffff88811b5a3cc4 of 4 bytes by task 6436 on cpu 0: [ 162.067529][ T6436] atime_needs_update+0x2a8/0x3e0 [ 162.072602][ T6436] touch_atime+0x4a/0x300 [ 162.076962][ T6436] shmem_file_splice_read+0x53c/0x590 [ 162.082387][ T6436] splice_direct_to_actor+0x261/0x680 [ 162.087801][ T6436] do_splice_direct+0x119/0x1a0 [ 162.092716][ T6436] do_sendfile+0x37d/0x640 [ 162.097171][ T6436] __x64_sys_sendfile64+0x105/0x150 [ 162.102422][ T6436] x64_sys_call+0x2dc4/0x3020 [ 162.107129][ T6436] do_syscall_64+0x136/0x3c0 [ 162.111740][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.117653][ T6436] [ 162.120003][ T6436] value changed: 0x0cdc6e76 -> 0x0d7504f6 [ 162.125735][ T6436] [ 162.128063][ T6436] Reported by Kernel Concurrency Sanitizer on: [ 162.134219][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.143460][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 162.153529][ T6436] ================================================================== [ 162.229778][ T6463] loop4: detected capacity change from 0 to 512 [ 162.259115][ T6463] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 162.269753][ T6463] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 162.280022][ T6463] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.931: Failed to acquire dquot type 1 [ 162.291640][ T6463] loop4: lost filesystem error report for type 5 error -117 [ 162.292095][ T6463] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 162.299517][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 162.299544][ C0] EXT4-fs (loop4): last error at time 1784390616: ext4_acquire_dquot:7041 [ 162.325516][ T6463] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 162.335736][ T6463] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.931: Failed to acquire dquot type 1 [ 162.347206][ T6463] loop4: lost filesystem error report for type 5 error -117 [ 162.348601][ T6463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.931: bg 0: block 248: padding at end of block bitmap is not set [ 162.372719][ T6463] loop4: lost filesystem error report for type 5 error -117 [ 162.373272][ T6463] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 162.390393][ T6463] loop4: lost filesystem error report for type 5 error -117 [ 162.391158][ T6463] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.931: Failed to acquire dquot type 1 [ 162.410129][ T6463] loop4: lost filesystem error report for type 5 error -117 [ 162.410469][ T6463] EXT4-fs (loop4): 1 orphan inode deleted [ 162.425458][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.438211][ T6463] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.453983][ T6463] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.931: deleted inode referenced: 12 [ 162.467763][ T6463] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.931: deleted inode referenced: 12 [ 163.046660][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.