last executing test programs: 2.898753064s ago: executing program 1 (id=1832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 2.898484564s ago: executing program 1 (id=1833): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 2.627242878s ago: executing program 4 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x7}}}}}}, 0x0) 2.570852778s ago: executing program 4 (id=1841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/19, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) 2.529139089s ago: executing program 4 (id=1842): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15) 2.46325884s ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.46261962s ago: executing program 3 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.43146028s ago: executing program 3 (id=1845): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02f1ffff03000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 2.416805721s ago: executing program 2 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) semctl$IPC_RMID(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.080084755s ago: executing program 3 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.940731046s ago: executing program 0 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.925752926s ago: executing program 1 (id=1849): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.476994452s ago: executing program 2 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 1.398342903s ago: executing program 1 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 1.359131443s ago: executing program 4 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x7}}}}}}, 0x0) 1.312977714s ago: executing program 2 (id=1853): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) 1.297607344s ago: executing program 4 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) semctl$IPC_RMID(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.136054096s ago: executing program 3 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.044342717s ago: executing program 1 (id=1856): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x755, &(0x7f00000007c0)="$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") close_range(r4, 0xffffffffffffffff, 0x0) 1.043975847s ago: executing program 2 (id=1857): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02f1ffff03000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 887.869289ms ago: executing program 3 (id=1858): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0}, 0x40) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f0000000900)=[&(0x7f00000005c0)='kfree\x00', &(0x7f0000000600)='[\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='GPL\x00', &(0x7f0000000400)='\'%/{\xe0-}\x00'], 0x0, 0x9}}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd, 0x2000, 0xffffffffffffffff, @value=r6, @void, @void, @void, r5}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r2, 0x2f, 0x4, 0x0, @void, @value=r0, @void, @void, r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xcf, 0x8, 0x0, @private1, @local, 0x8000, 0x8, 0x7, 0x6}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 875.874649ms ago: executing program 0 (id=1859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 664.336702ms ago: executing program 2 (id=1860): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 663.526232ms ago: executing program 0 (id=1861): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) bpf$PROG_LOAD(0x5, 0x0, 0x0) 633.398312ms ago: executing program 3 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 611.484042ms ago: executing program 1 (id=1863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 456.222174ms ago: executing program 0 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x7}}}}}}, 0x0) 338.539206ms ago: executing program 4 (id=1865): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15) 276.094967ms ago: executing program 0 (id=1866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1867): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x78, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7fff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xdc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 32.879626][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888380][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.897158][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.917559][ T3323] veth1_macvtap: entered promiscuous mode [ 32.931230][ T3325] veth0_vlan: entered promiscuous mode [ 32.944350][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.961740][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.965905][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.989145][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.998045][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006811][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.015582][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.039105][ T3325] veth1_vlan: entered promiscuous mode [ 33.050428][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.050446][ T29] audit: type=1400 audit(1748553609.784:90): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.080906][ T29] audit: type=1400 audit(1748553609.784:91): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.105132][ T29] audit: type=1400 audit(1748553609.784:92): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.131475][ T29] audit: type=1400 audit(1748553609.794:93): avc: denied { read write } for pid=3455 comm="syz.1.2" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.155782][ T29] audit: type=1400 audit(1748553609.794:94): avc: denied { open } for pid=3455 comm="syz.1.2" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.180451][ T29] audit: type=1400 audit(1748553609.794:95): avc: denied { open } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.199304][ T29] audit: type=1400 audit(1748553609.794:96): avc: denied { perfmon } for pid=3455 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.219949][ T29] audit: type=1400 audit(1748553609.794:97): avc: denied { kernel } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.238972][ T29] audit: type=1400 audit(1748553609.854:98): avc: denied { create } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.259022][ T29] audit: type=1400 audit(1748553609.854:99): avc: denied { write } for pid=3455 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.324582][ T3325] veth0_macvtap: entered promiscuous mode [ 33.357680][ T3325] veth1_macvtap: entered promiscuous mode [ 33.375446][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.378642][ T3458] infiniband syz0: set down [ 33.387390][ T3458] infiniband syz0: added ipvlan1 [ 33.401610][ T3465] loop4: detected capacity change from 0 to 128 [ 33.403994][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.417910][ T3466] loop0: detected capacity change from 0 to 128 [ 33.435013][ T3458] RDS/IB: syz0: added [ 33.439568][ T3458] smc: adding ib device syz0 with port count 1 [ 33.459592][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.468413][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.477342][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.479890][ T3458] smc: ib device syz0 port 1 has pnetid [ 33.486113][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.576046][ T3473] loop3: detected capacity change from 0 to 128 [ 33.624259][ T3465] syz.4.5: attempt to access beyond end of device [ 33.624259][ T3465] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.625149][ T3475] syz.0.1: attempt to access beyond end of device [ 33.625149][ T3475] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.660412][ T3475] syz.0.1: attempt to access beyond end of device [ 33.660412][ T3475] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.662922][ T3473] syz.3.4: attempt to access beyond end of device [ 33.662922][ T3473] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.697489][ T3473] syz.3.4: attempt to access beyond end of device [ 33.697489][ T3473] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.742714][ T3465] syz.4.5: attempt to access beyond end of device [ 33.742714][ T3465] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.763095][ T3473] syz.3.4: attempt to access beyond end of device [ 33.763095][ T3473] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 33.763954][ T3475] syz.0.1: attempt to access beyond end of device [ 33.763954][ T3475] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 33.794030][ T3473] syz.3.4: attempt to access beyond end of device [ 33.794030][ T3473] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 33.809998][ T3473] syz.3.4: attempt to access beyond end of device [ 33.809998][ T3473] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 33.824396][ T3480] loop2: detected capacity change from 0 to 128 [ 34.010273][ C1] hrtimer: interrupt took 36250 ns [ 34.179054][ T3490] loop4: detected capacity change from 0 to 256 [ 34.194258][ T3491] loop0: detected capacity change from 0 to 128 [ 34.254526][ T3490] atomic_op ffff88811a098128 conn xmit_atomic 0000000000000000 [ 34.283947][ T3495] loop3: detected capacity change from 0 to 128 [ 34.478825][ T3504] loop2: detected capacity change from 0 to 128 [ 34.509284][ T3505] loop4: detected capacity change from 0 to 128 [ 34.620665][ T3458] syz.1.2 (3458) used greatest stack depth: 10624 bytes left [ 34.714224][ T3511] loop1: detected capacity change from 0 to 128 [ 34.905885][ T3524] loop3: detected capacity change from 0 to 128 [ 34.929249][ T3527] loop0: detected capacity change from 0 to 128 [ 35.197418][ T3552] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 35.457403][ T3579] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 35.503778][ T3586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3586 comm=syz.1.42 [ 35.527342][ T3586] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 35.550986][ T3589] veth3: entered promiscuous mode [ 35.694905][ T3599] Falling back ldisc for ptm0. [ 36.285226][ T3655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.432991][ T3669] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 36.439660][ T3669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.447271][ T3669] vhci_hcd vhci_hcd.0: Device attached [ 36.517359][ T3675] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 36.524024][ T3675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.531699][ T3675] vhci_hcd vhci_hcd.0: Device attached [ 36.592320][ T3669] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 36.599003][ T3669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.606726][ T3669] vhci_hcd vhci_hcd.0: Device attached [ 36.651213][ T3678] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.683869][ T3675] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 36.690582][ T3675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 36.698350][ T3675] vhci_hcd vhci_hcd.0: Device attached [ 36.703907][ T3392] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 36.774454][ T3675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.774765][ T3669] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 36.789390][ T3669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 36.797317][ T3669] vhci_hcd vhci_hcd.0: Device attached [ 36.822969][ T3669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.863582][ T3669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.908523][ T3669] vhci_hcd vhci_hcd.0: port 0 already used [ 36.927155][ T3690] vhci_hcd: connection closed [ 36.927492][ T3688] vhci_hcd: connection closed [ 36.932467][ T3672] vhci_hcd: connection closed [ 36.937650][ T3670] vhci_hcd: connection reset by peer [ 36.948194][ T3676] vhci_hcd: connection closed [ 36.952246][ T37] vhci_hcd: stop threads [ 36.961505][ T37] vhci_hcd: release socket [ 36.966023][ T37] vhci_hcd: disconnect device [ 36.980159][ T37] vhci_hcd: stop threads [ 36.984515][ T37] vhci_hcd: release socket [ 36.989143][ T37] vhci_hcd: disconnect device [ 37.009047][ T37] vhci_hcd: stop threads [ 37.013539][ T37] vhci_hcd: release socket [ 37.018112][ T37] vhci_hcd: disconnect device [ 37.023706][ T3704] loop3: detected capacity change from 0 to 2048 [ 37.029167][ T3709] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 37.030883][ T37] vhci_hcd: stop threads [ 37.045083][ T37] vhci_hcd: release socket [ 37.049594][ T37] vhci_hcd: disconnect device [ 37.055170][ T3704] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.061726][ T3704] EXT4-fs: Ignoring removed i_version option [ 37.069358][ T37] vhci_hcd: stop threads [ 37.073630][ T37] vhci_hcd: release socket [ 37.078142][ T37] vhci_hcd: disconnect device [ 37.104066][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.132377][ T3717] loop1: detected capacity change from 0 to 512 [ 37.151095][ T3717] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.89: casefold flag without casefold feature [ 37.168082][ T3717] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.89: couldn't read orphan inode 15 (err -117) [ 37.183830][ T3717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.199496][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.445263][ T3744] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 37.529456][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.637805][ T3761] loop0: detected capacity change from 0 to 2048 [ 37.644852][ T3761] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.651492][ T3761] EXT4-fs: Ignoring removed i_version option [ 37.706586][ T3770] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.713943][ T3770] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.715892][ T3761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.769578][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.803276][ T3780] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 37.847720][ T3786] loop0: detected capacity change from 0 to 512 [ 37.856145][ T3786] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.117: casefold flag without casefold feature [ 37.876221][ T3786] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.117: couldn't read orphan inode 15 (err -117) [ 37.907638][ T3786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.034930][ T3805] loop1: detected capacity change from 0 to 2048 [ 38.055016][ T3807] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 38.103611][ T3805] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.110223][ T3805] EXT4-fs: Ignoring removed i_version option [ 38.146588][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.169687][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.223482][ T3820] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 38.311423][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 38.311441][ T29] audit: type=1400 audit(1748553615.054:201): avc: denied { read } for pid=3819 comm="syz.3.136" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.349522][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.419917][ T3842] loop3: detected capacity change from 0 to 512 [ 38.432282][ T3842] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.144: casefold flag without casefold feature [ 38.446603][ T3842] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.144: couldn't read orphan inode 15 (err -117) [ 38.470880][ T3842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.659400][ T3863] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 38.773079][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.789381][ T3867] loop0: detected capacity change from 0 to 2048 [ 38.796066][ T3867] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.802646][ T3867] EXT4-fs: Ignoring removed i_version option [ 38.869490][ T3867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.911705][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.979607][ T29] audit: type=1400 audit(1748553615.724:202): avc: denied { firmware_load } for pid=3878 comm="syz.0.159" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 39.084849][ T3879] syz.0.159 (3879) used greatest stack depth: 10176 bytes left [ 39.134213][ T3895] loop0: detected capacity change from 0 to 512 [ 39.162346][ T3895] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.167: casefold flag without casefold feature [ 39.176399][ T3895] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.167: couldn't read orphan inode 15 (err -117) [ 39.191925][ T3895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.298937][ T3901] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 39.455087][ T3911] loop1: detected capacity change from 0 to 2048 [ 39.511326][ T3911] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.517907][ T3911] EXT4-fs: Ignoring removed i_version option [ 39.525544][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.612898][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.730928][ T3933] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 39.764055][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.786481][ T29] audit: type=1400 audit(1748553616.524:203): avc: denied { name_bind } for pid=3936 comm="syz.2.187" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.799189][ T3941] loop4: detected capacity change from 0 to 512 [ 39.856898][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.188: casefold flag without casefold feature [ 39.886826][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.188: couldn't read orphan inode 15 (err -117) [ 39.904311][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.055903][ T3968] loop1: detected capacity change from 0 to 2048 [ 40.069666][ T3968] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.071076][ T29] audit: type=1400 audit(1748553616.814:204): avc: denied { append } for pid=3969 comm="syz.0.201" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.076146][ T3968] EXT4-fs: Ignoring removed i_version option [ 40.105938][ T29] audit: type=1400 audit(1748553616.814:205): avc: denied { open } for pid=3969 comm="syz.0.201" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.190369][ T3968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.348330][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.389972][ T29] audit: type=1400 audit(1748553617.134:206): avc: denied { ioctl } for pid=3969 comm="syz.0.201" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.438004][ T29] audit: type=1400 audit(1748553617.174:207): avc: denied { create } for pid=3998 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.440204][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 40.461873][ T29] audit: type=1400 audit(1748553617.184:208): avc: denied { write } for pid=3998 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.487906][ T29] audit: type=1400 audit(1748553617.184:209): avc: denied { nlmsg_read } for pid=3998 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.500681][ T4002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.556551][ T29] audit: type=1400 audit(1748553617.234:210): avc: denied { read write } for pid=3997 comm="syz.1.211" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.580578][ T4002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.594718][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.920004][ T4025] loop2: detected capacity change from 0 to 2048 [ 40.931180][ T4029] loop4: detected capacity change from 0 to 512 [ 40.947422][ T4025] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.953984][ T4025] EXT4-fs: Ignoring removed i_version option [ 40.961044][ T4029] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.224: casefold flag without casefold feature [ 40.976966][ T4029] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 40.994543][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.080239][ T4025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.163073][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.292921][ T4063] capability: warning: `syz.0.239' uses 32-bit capabilities (legacy support in use) [ 41.419281][ T4077] loop2: detected capacity change from 0 to 2048 [ 41.429445][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.443762][ T4077] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.450367][ T4077] EXT4-fs: Ignoring removed i_version option [ 41.509751][ T4077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.586381][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.630831][ T4109] loop4: detected capacity change from 0 to 512 [ 41.658377][ T4109] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.260: casefold flag without casefold feature [ 41.672044][ T4109] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.260: couldn't read orphan inode 15 (err -117) [ 41.685748][ T4109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.715555][ T4118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.746912][ T3392] usb 5-1: enqueue for inactive port 0 [ 41.760375][ T3392] usb 5-1: enqueue for inactive port 0 [ 41.837073][ T3392] vhci_hcd: vhci_device speed not set [ 41.923438][ T4137] loop0: detected capacity change from 0 to 2048 [ 41.930670][ T4137] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.937230][ T4137] EXT4-fs: Ignoring removed i_version option [ 41.999456][ T4137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.107874][ T4155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 42.175232][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.187453][ T4162] Zero length message leads to an empty skb [ 42.208061][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.428742][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 42.440823][ T4198] loop2: detected capacity change from 0 to 512 [ 42.469249][ T4198] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.296: casefold flag without casefold feature [ 42.535843][ T4201] loop0: detected capacity change from 0 to 2048 [ 42.556900][ T4198] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.296: couldn't read orphan inode 15 (err -117) [ 42.588609][ T4201] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.595304][ T4201] EXT4-fs: Ignoring removed i_version option [ 42.619404][ T4198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.655656][ T4201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.743322][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.872424][ T4238] 8021q: VLANs not supported on ipvlan0 [ 42.907690][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.042899][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.050203][ T4255] loop1: detected capacity change from 0 to 2048 [ 43.050288][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.057256][ T4255] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.072155][ T4255] EXT4-fs: Ignoring removed i_version option [ 43.105270][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.169944][ T4274] loop0: detected capacity change from 0 to 512 [ 43.191874][ T4274] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.328: casefold flag without casefold feature [ 43.206784][ T4274] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 43.227864][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.242431][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.362651][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.369997][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.485532][ T4306] loop1: detected capacity change from 0 to 2048 [ 43.512254][ T4306] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.518851][ T4306] EXT4-fs: Ignoring removed i_version option [ 43.539453][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.565448][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.589382][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 43.589442][ T29] audit: type=1400 audit(1748553620.334:227): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.660694][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.735556][ T4335] loop1: detected capacity change from 0 to 512 [ 43.755414][ T4335] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.356: casefold flag without casefold feature [ 43.768945][ T4335] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.356: couldn't read orphan inode 15 (err -117) [ 43.781431][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.925488][ T4353] loop3: detected capacity change from 0 to 2048 [ 43.933339][ T4353] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.939930][ T4353] EXT4-fs: Ignoring removed i_version option [ 43.969093][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.058432][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.157183][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.223210][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.230650][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.345854][ T4398] loop0: detected capacity change from 0 to 2048 [ 44.387020][ T2970] usb usb6-port1: attempt power cycle [ 44.401788][ T29] audit: type=1400 audit(1748553621.144:228): avc: denied { create } for pid=4403 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.430580][ T4408] loop1: detected capacity change from 0 to 512 [ 44.441670][ T4398] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.448667][ T4398] EXT4-fs: Ignoring removed i_version option [ 44.472067][ T4408] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.386: casefold flag without casefold feature [ 44.486516][ T29] audit: type=1400 audit(1748553621.234:229): avc: denied { write } for pid=4411 comm="syz.4.389" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.512496][ T4408] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.386: couldn't read orphan inode 15 (err -117) [ 44.560410][ T4408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.621466][ T4398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.740610][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.898361][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.387'. [ 44.944631][ T29] audit: type=1400 audit(1748553621.684:230): avc: denied { ioctl } for pid=4428 comm="syz.4.395" path="socket:[6895]" dev="sockfs" ino=6895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.018618][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.156662][ T4448] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.234453][ T4450] loop0: detected capacity change from 0 to 2048 [ 45.287149][ T4450] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.293676][ T4450] EXT4-fs: Ignoring removed i_version option [ 45.380668][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.408265][ T4463] loop4: detected capacity change from 0 to 512 [ 45.429660][ T4463] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.408: casefold flag without casefold feature [ 45.498589][ T4463] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.408: couldn't read orphan inode 15 (err -117) [ 45.547609][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.557196][ T4463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.629861][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.720025][ T4486] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.811515][ T4495] loop1: detected capacity change from 0 to 512 [ 45.839912][ T4498] loop4: detected capacity change from 0 to 2048 [ 45.878017][ T4498] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.884643][ T4498] EXT4-fs: Ignoring removed i_version option [ 45.897591][ T4495] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.423: casefold flag without casefold feature [ 45.958636][ T4495] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.423: couldn't read orphan inode 15 (err -117) [ 45.988313][ T4512] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 46.027012][ T4498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.057317][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.134412][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.164027][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.208266][ T29] audit: type=1400 audit(1748553622.954:231): avc: denied { bind } for pid=4524 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.257107][ T2970] usb usb6-port1: unable to enumerate USB device [ 46.352189][ T4545] loop0: detected capacity change from 0 to 512 [ 46.371170][ T29] audit: type=1400 audit(1748553623.114:232): avc: denied { create } for pid=4547 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.390512][ T29] audit: type=1400 audit(1748553623.114:233): avc: denied { setopt } for pid=4547 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.411654][ T4545] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.444: casefold flag without casefold feature [ 46.443742][ T4545] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.444: couldn't read orphan inode 15 (err -117) [ 46.459219][ T4545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.524946][ T4554] loop4: detected capacity change from 0 to 2048 [ 46.542666][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.557572][ T4554] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.564090][ T4554] EXT4-fs: Ignoring removed i_version option [ 46.581484][ T29] audit: type=1400 audit(1748553623.324:234): avc: denied { create } for pid=4557 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.608009][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 46.619753][ T4554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.665047][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.760279][ T29] audit: type=1326 audit(1748553623.504:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89291e969 code=0x7fc00000 [ 46.783953][ T29] audit: type=1400 audit(1748553623.504:236): avc: denied { read } for pid=4557 comm="syz.2.451" path="socket:[7065]" dev="sockfs" ino=7065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.800710][ T4581] loop4: detected capacity change from 0 to 512 [ 46.815494][ T4581] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.459: casefold flag without casefold feature [ 46.829646][ T4581] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.459: couldn't read orphan inode 15 (err -117) [ 46.830394][ T4581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.862522][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.047426][ T4593] loop4: detected capacity change from 0 to 2048 [ 47.064570][ T4593] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.071120][ T4593] EXT4-fs: Ignoring removed i_version option [ 47.109663][ T4593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.171042][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.302189][ T4613] loop4: detected capacity change from 0 to 512 [ 47.328761][ T4613] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.470: casefold flag without casefold feature [ 47.345366][ T4613] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.470: couldn't read orphan inode 15 (err -117) [ 47.363505][ T4613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.393663][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.402761][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.403364][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.443092][ T4626] ======================================================= [ 47.443092][ T4626] WARNING: The mand mount option has been deprecated and [ 47.443092][ T4626] and is ignored by this kernel. Remove the mand [ 47.443092][ T4626] option from the mount to silence this warning. [ 47.443092][ T4626] ======================================================= [ 47.495232][ T4626] 9pnet_virtio: no channels available for device syz [ 47.536151][ T4637] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 47.547205][ T4638] loop4: detected capacity change from 0 to 2048 [ 47.563785][ T4638] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.570411][ T4638] EXT4-fs: Ignoring removed i_version option [ 47.588605][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.634554][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.674750][ T4646] loop2: detected capacity change from 0 to 512 [ 47.685517][ T4646] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.486: casefold flag without casefold feature [ 47.734979][ T4646] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.486: couldn't read orphan inode 15 (err -117) [ 47.749507][ T4646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.814223][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.950966][ T4668] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 48.177448][ T4674] loop4: detected capacity change from 0 to 2048 [ 48.185028][ T4674] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.191678][ T4674] EXT4-fs: Ignoring removed i_version option [ 48.281758][ T4674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.383913][ T4688] loop0: detected capacity change from 0 to 2048 [ 48.398784][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.413828][ T4688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.451958][ T4694] loop4: detected capacity change from 0 to 512 [ 48.461413][ T4693] syzkaller1: entered promiscuous mode [ 48.467062][ T4693] syzkaller1: entered allmulticast mode [ 48.489729][ T4694] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.501: casefold flag without casefold feature [ 48.514288][ T4694] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.501: couldn't read orphan inode 15 (err -117) [ 48.553108][ T4688] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.601112][ T4688] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 48.613921][ T4688] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.613921][ T4688] [ 48.623656][ T4688] EXT4-fs (loop0): Total free blocks count 0 [ 48.629708][ T4688] EXT4-fs (loop0): Free/Dirty block details [ 48.635631][ T4688] EXT4-fs (loop0): free_blocks=2415919104 [ 48.641424][ T4688] EXT4-fs (loop0): dirty_blocks=656 [ 48.646780][ T4688] EXT4-fs (loop0): Block reservation details [ 48.652814][ T4688] EXT4-fs (loop0): i_reserved_data_blocks=41 [ 48.701591][ T4687] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.724015][ T4702] loop3: detected capacity change from 0 to 128 [ 48.730706][ T4702] EXT4-fs: dax option not supported [ 48.733540][ T4688] syz.0.502 (4688) used greatest stack depth: 9880 bytes left [ 48.762909][ T4705] bridge0: port 3(syz_tun) entered blocking state [ 48.769893][ T4705] bridge0: port 3(syz_tun) entered disabled state [ 48.778353][ T4705] syz_tun: entered allmulticast mode [ 48.784429][ T4705] syz_tun: entered promiscuous mode [ 48.802964][ T4705] bridge0: port 3(syz_tun) entered blocking state [ 48.809585][ T4705] bridge0: port 3(syz_tun) entered forwarding state [ 48.837103][ T4712] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 48.889220][ T4710] loop1: detected capacity change from 0 to 2048 [ 48.900726][ T4710] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.907587][ T4710] EXT4-fs: Ignoring removed i_version option [ 48.919348][ T4719] loop3: detected capacity change from 0 to 512 [ 48.936599][ T4719] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.514: casefold flag without casefold feature [ 48.952554][ T4719] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.514: couldn't read orphan inode 15 (err -117) [ 49.003243][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 49.003340][ T29] audit: type=1400 audit(1748553625.744:246): avc: denied { connect } for pid=4727 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.117069][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 49.145098][ T4754] loop1: detected capacity change from 0 to 512 [ 49.155684][ T29] audit: type=1400 audit(1748553625.884:247): avc: denied { create } for pid=4751 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.176222][ T29] audit: type=1400 audit(1748553625.884:248): avc: denied { ioctl } for pid=4751 comm="syz.2.529" path="socket:[8339]" dev="sockfs" ino=8339 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.202124][ T4754] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.530: casefold flag without casefold feature [ 49.219587][ T4754] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.530: couldn't read orphan inode 15 (err -117) [ 49.279665][ T29] audit: type=1400 audit(1748553626.024:249): avc: denied { append } for pid=4766 comm="syz.4.536" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.310022][ T4757] loop2: detected capacity change from 0 to 2048 [ 49.319422][ T4757] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.326270][ T4757] EXT4-fs: Ignoring removed i_version option [ 49.380727][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 49.414056][ T4785] loop1: detected capacity change from 0 to 512 [ 49.432062][ T29] audit: type=1400 audit(1748553626.164:250): avc: denied { create } for pid=4786 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.451478][ T29] audit: type=1400 audit(1748553626.164:251): avc: denied { ioctl } for pid=4786 comm="syz.0.544" path="socket:[8389]" dev="sockfs" ino=8389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.493702][ T4785] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.545: casefold flag without casefold feature [ 49.516888][ T4785] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.545: couldn't read orphan inode 15 (err -117) [ 49.531911][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.540624][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.625218][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 49.696007][ T29] audit: type=1400 audit(1748553626.434:252): avc: denied { ioctl } for pid=4821 comm="syz.3.561" path="socket:[9509]" dev="sockfs" ino=9509 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.755344][ T4824] loop4: detected capacity change from 0 to 2048 [ 49.776767][ T4829] netlink: 68 bytes leftover after parsing attributes in process `syz.3.563'. [ 49.804702][ T4824] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.811328][ T4824] EXT4-fs: Ignoring removed i_version option [ 49.829845][ T4833] loop2: detected capacity change from 0 to 512 [ 49.852617][ T4833] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.565: casefold flag without casefold feature [ 49.875743][ T4833] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.565: couldn't read orphan inode 15 (err -117) [ 49.969532][ T4840] bridge0: port 3(syz_tun) entered blocking state [ 49.976042][ T4840] bridge0: port 3(syz_tun) entered disabled state [ 50.007109][ T4840] syz_tun: entered allmulticast mode [ 50.013496][ T4840] syz_tun: entered promiscuous mode [ 50.255448][ T4864] loop4: detected capacity change from 0 to 2048 [ 50.262263][ T4865] loop2: detected capacity change from 0 to 512 [ 50.280364][ T4865] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.578: casefold flag without casefold feature [ 50.295525][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.302159][ T4864] EXT4-fs: Ignoring removed i_version option [ 50.311017][ T4865] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.578: couldn't read orphan inode 15 (err -117) [ 50.379478][ T4873] bridge0: port 3(syz_tun) entered blocking state [ 50.386000][ T4873] bridge0: port 3(syz_tun) entered disabled state [ 50.393346][ T4873] syz_tun: entered allmulticast mode [ 50.400066][ T4873] syz_tun: entered promiscuous mode [ 50.431802][ T29] audit: type=1326 audit(1748553627.164:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2276e969 code=0x7fc00000 [ 50.542992][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 50.625995][ T4897] loop1: detected capacity change from 0 to 512 [ 50.636144][ T4897] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.591: casefold flag without casefold feature [ 50.649001][ T4897] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.591: couldn't read orphan inode 15 (err -117) [ 50.693635][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 50.730910][ T29] audit: type=1400 audit(1748553627.474:254): avc: denied { bind } for pid=4882 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.787948][ T4906] bridge0: port 3(syz_tun) entered blocking state [ 50.794473][ T4906] bridge0: port 3(syz_tun) entered disabled state [ 50.811354][ T29] audit: type=1400 audit(1748553627.474:255): avc: denied { name_bind } for pid=4882 comm="syz.0.586" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.857748][ T4907] loop3: detected capacity change from 0 to 2048 [ 50.872929][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.879574][ T4907] EXT4-fs: Ignoring removed i_version option [ 50.884727][ T4906] syz_tun: entered allmulticast mode [ 50.917351][ T4906] syz_tun: entered promiscuous mode [ 50.937254][ T4912] syz.4.596 uses obsolete (PF_INET,SOCK_PACKET) [ 51.063948][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 51.216450][ T4936] loop3: detected capacity change from 0 to 512 [ 51.255917][ T4936] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.602: casefold flag without casefold feature [ 51.278928][ T4936] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.602: couldn't read orphan inode 15 (err -117) [ 51.397924][ T4941] bridge0: port 3(syz_tun) entered blocking state [ 51.404460][ T4941] bridge0: port 3(syz_tun) entered disabled state [ 51.421355][ T4941] syz_tun: entered allmulticast mode [ 51.448412][ T4941] syz_tun: entered promiscuous mode [ 51.592819][ T4954] vhci_hcd: invalid port number 255 [ 51.598258][ T4954] vhci_hcd: invalid port number 255 [ 51.620919][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 51.650719][ T4962] loop2: detected capacity change from 0 to 512 [ 51.658589][ T4962] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.617: casefold flag without casefold feature [ 51.674525][ T4962] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.617: couldn't read orphan inode 15 (err -117) [ 51.680136][ T4952] loop1: detected capacity change from 0 to 2048 [ 51.734982][ T4952] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.741588][ T4952] EXT4-fs: Ignoring removed i_version option [ 51.825088][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.835870][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.946232][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.957360][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.999020][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.034774][ T5003] loop0: detected capacity change from 0 to 2048 [ 52.041384][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.055971][ T5003] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.062571][ T5003] EXT4-fs: Ignoring removed i_version option [ 52.307601][ T5023] syz.0.643 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.471546][ T5038] loop3: detected capacity change from 0 to 2048 [ 52.486413][ T5038] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.493214][ T5038] EXT4-fs: Ignoring removed i_version option [ 52.561313][ T5056] 9pnet_virtio: no channels available for device syz [ 52.858659][ T5076] 9pnet_virtio: no channels available for device syz [ 52.957841][ T5087] loop3: detected capacity change from 0 to 2048 [ 52.964831][ T5087] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.971544][ T5087] EXT4-fs: Ignoring removed i_version option [ 53.527752][ T5124] loop0: detected capacity change from 0 to 2048 [ 53.554926][ T5124] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.561584][ T5124] EXT4-fs: Ignoring removed i_version option [ 54.089031][ T5163] loop0: detected capacity change from 0 to 2048 [ 54.107395][ T5163] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.113898][ T5163] EXT4-fs: Ignoring removed i_version option [ 54.539020][ T5202] loop2: detected capacity change from 0 to 2048 [ 54.571482][ T5202] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.578114][ T5202] EXT4-fs: Ignoring removed i_version option [ 54.611667][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.621805][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.702700][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 54.702718][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 54.702719][ T29] audit: type=1400 audit(1748553631.444:287): avc: denied { write } for pid=5224 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.702753][ T29] audit: type=1400 audit(1748553631.444:288): avc: denied { nlmsg_write } for pid=5224 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.763879][ T5228] team0: entered promiscuous mode [ 54.770618][ T5228] team_slave_0: entered promiscuous mode [ 54.776432][ T5228] team_slave_1: entered promiscuous mode [ 54.809778][ T5232] syzkaller1: entered promiscuous mode [ 54.815337][ T5232] syzkaller1: entered allmulticast mode [ 54.830421][ T29] audit: type=1400 audit(1748553631.574:289): avc: denied { mount } for pid=5234 comm="syz.0.730" name="/" dev="configfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.853360][ T29] audit: type=1400 audit(1748553631.574:290): avc: denied { search } for pid=5234 comm="syz.0.730" name="/" dev="configfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.875592][ T29] audit: type=1400 audit(1748553631.594:291): avc: denied { search } for pid=5234 comm="syz.0.730" name="/" dev="configfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.898367][ T29] audit: type=1400 audit(1748553631.594:292): avc: denied { read open } for pid=5234 comm="syz.0.730" path="/" dev="configfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.962743][ T29] audit: type=1400 audit(1748553631.704:293): avc: denied { execute } for pid=5241 comm="syz.3.733" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 55.082347][ T5247] loop1: detected capacity change from 0 to 2048 [ 55.089162][ T5247] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.095715][ T5247] EXT4-fs: Ignoring removed i_version option [ 55.207723][ T5264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 55.273264][ T29] audit: type=1400 audit(1748553632.014:294): avc: denied { connect } for pid=5271 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.364720][ T5278] syzkaller1: entered promiscuous mode [ 55.370403][ T5278] syzkaller1: entered allmulticast mode [ 55.472559][ T5284] loop4: detected capacity change from 0 to 2048 [ 55.480776][ T5284] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.487335][ T5284] EXT4-fs: Ignoring removed i_version option [ 55.779652][ T5316] syzkaller1: entered promiscuous mode [ 55.785438][ T5316] syzkaller1: entered allmulticast mode [ 55.899929][ T5325] loop3: detected capacity change from 0 to 2048 [ 55.906925][ T5325] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.913420][ T5325] EXT4-fs: Ignoring removed i_version option [ 56.068555][ T5356] syzkaller1: entered promiscuous mode [ 56.074117][ T5356] syzkaller1: entered allmulticast mode [ 56.179887][ T5365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.207674][ T5366] loop0: detected capacity change from 0 to 2048 [ 56.221578][ T5366] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.228187][ T5366] EXT4-fs: Ignoring removed i_version option [ 56.264825][ T5375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.784'. [ 56.290681][ T29] audit: type=1400 audit(1748553633.034:295): avc: denied { setopt } for pid=5376 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.350629][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 56.449447][ T5403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'. [ 56.539941][ T5417] loop4: detected capacity change from 0 to 2048 [ 56.549580][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 56.563184][ T5417] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.569799][ T5417] EXT4-fs: Ignoring removed i_version option [ 56.613732][ T29] audit: type=1400 audit(1748553633.344:296): avc: denied { map } for pid=5429 comm="syz.3.808" path="socket:[11448]" dev="sockfs" ino=11448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.651895][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.811'. [ 56.730390][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 56.871805][ T5469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'. [ 56.911864][ T5474] loop1: detected capacity change from 0 to 2048 [ 56.924485][ T5474] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.931072][ T5474] EXT4-fs: Ignoring removed i_version option [ 57.001218][ T5485] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 57.001218][ T5485] program syz.4.833 not setting count and/or reply_len properly [ 57.152772][ T5503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.838'. [ 57.382019][ T5516] loop0: detected capacity change from 0 to 2048 [ 57.389165][ T5516] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.395664][ T5516] EXT4-fs: Ignoring removed i_version option [ 57.546457][ T5535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.850'. [ 57.669180][ T5540] 9pnet_virtio: no channels available for device syz [ 57.732657][ T5546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.856'. [ 57.840754][ T5557] loop1: detected capacity change from 0 to 2048 [ 57.852240][ T5557] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.858805][ T5557] EXT4-fs: Ignoring removed i_version option [ 57.936825][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 58.285715][ T5589] loop3: detected capacity change from 0 to 2048 [ 58.308255][ T5589] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.314850][ T5589] EXT4-fs: Ignoring removed i_version option [ 58.323370][ T5517] syz.4.839 (5517) used greatest stack depth: 8768 bytes left [ 58.496456][ T5622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5622 comm=syz.2.888 [ 58.607777][ T5635] loop4: detected capacity change from 0 to 2048 [ 58.614519][ T5635] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.621072][ T5635] EXT4-fs: Ignoring removed i_version option [ 58.734279][ T5659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.904'. [ 58.925602][ T5678] syzkaller1: entered promiscuous mode [ 58.931387][ T5678] syzkaller1: entered allmulticast mode [ 58.961001][ T5683] 9pnet: Could not find request transport: xen [ 59.001844][ T5685] loop3: detected capacity change from 0 to 2048 [ 59.027083][ T5685] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.033583][ T5685] EXT4-fs: Ignoring removed i_version option [ 59.060087][ T5687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.916'. [ 59.510145][ T5717] syzkaller1: entered promiscuous mode [ 59.515853][ T5717] syzkaller1: entered allmulticast mode [ 59.573947][ T5722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.930'. [ 59.610548][ T5723] loop2: detected capacity change from 0 to 2048 [ 59.617948][ T5723] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.624503][ T5723] EXT4-fs: Ignoring removed i_version option [ 59.657572][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.666398][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.795139][ T5749] syzkaller1: entered promiscuous mode [ 59.800795][ T5749] syzkaller1: entered allmulticast mode [ 59.916203][ T5754] loop3: detected capacity change from 0 to 2048 [ 59.923304][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.929853][ T5754] EXT4-fs: Ignoring removed i_version option [ 59.971945][ T5763] tmpfs: Unsupported parameter 'huge' [ 60.036927][ T5773] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 60.173667][ T5789] loop0: detected capacity change from 0 to 2048 [ 60.192156][ T5789] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.198812][ T5789] EXT4-fs: Ignoring removed i_version option [ 60.214196][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 60.214216][ T29] audit: type=1400 audit(1748553636.954:314): avc: denied { getopt } for pid=5796 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.450209][ T29] audit: type=1400 audit(1748553637.194:315): avc: denied { setopt } for pid=5834 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.479301][ T5836] loop0: detected capacity change from 0 to 2048 [ 60.492646][ T5836] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.499224][ T5836] EXT4-fs: Ignoring removed i_version option [ 60.642096][ T5857] netlink: 'syz.4.990': attribute type 5 has an invalid length. [ 60.716714][ T29] audit: type=1400 audit(1748553637.454:316): avc: denied { remount } for pid=5856 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.764441][ T5872] netlink: 'syz.0.997': attribute type 5 has an invalid length. [ 60.967902][ T5897] loop2: detected capacity change from 0 to 2048 [ 60.974637][ T5897] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.981267][ T5897] EXT4-fs: Ignoring removed i_version option [ 61.012735][ T5913] loop4: detected capacity change from 0 to 128 [ 61.029137][ T5913] EXT4-fs: Ignoring removed nobh option [ 61.059999][ T5913] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.093408][ T5918] bridge0: port 3(syz_tun) entered disabled state [ 61.102544][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.104926][ T29] audit: type=1400 audit(1748553637.844:317): avc: denied { create } for pid=5912 comm="syz.4.1015" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.109875][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.130128][ T29] audit: type=1400 audit(1748553637.844:318): avc: denied { write open } for pid=5912 comm="syz.4.1015" path="/219/mnt/bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.160077][ T29] audit: type=1400 audit(1748553637.844:319): avc: denied { read } for pid=5912 comm="syz.4.1015" path="/219/mnt/file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.184855][ T5924] loop2: detected capacity change from 0 to 128 [ 61.206660][ T29] audit: type=1400 audit(1748553637.934:320): avc: denied { ioctl } for pid=5912 comm="syz.4.1015" path="/219/mnt/file1" dev="loop4" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.275378][ T5924] bio_check_eod: 764 callbacks suppressed [ 61.275400][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.275400][ T5924] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.276269][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.281516][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.281516][ T5924] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.302075][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.303952][ T5929] ref_ctr increment failed for inode: 0x439 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005b3c0 [ 61.334877][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.334877][ T5924] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.349043][ T5931] loop4: detected capacity change from 0 to 512 [ 61.351911][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.351911][ T5924] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.373649][ T5918] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.382993][ T5918] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.389115][ T5927] 9pnet_fd: Insufficient options for proto=fd [ 61.392110][ T5918] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.398407][ T29] audit: type=1400 audit(1748553638.124:321): avc: denied { mounton } for pid=5921 comm="syz.2.1017" path="/192/file0/file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 61.407919][ T5918] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.436192][ T5931] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.441168][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.441168][ T5924] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 61.454370][ T5931] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.470664][ T5925] uprobe: syz.0.1029:5925 failed to unregister, leaking uprobe [ 61.487157][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.487157][ T5924] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 61.493890][ T5931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 61.500991][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.500991][ T5924] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 61.508972][ T5931] System zones: 1-12 [ 61.524195][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.524195][ T5924] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 61.540914][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.540914][ T5924] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 61.543537][ T5931] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.554749][ T5924] syz.2.1017: attempt to access beyond end of device [ 61.554749][ T5924] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 61.568816][ T5931] EXT4-fs (loop4): 1 truncate cleaned up [ 61.651811][ T5935] loop0: detected capacity change from 0 to 512 [ 61.686261][ T5935] EXT4-fs: Ignoring removed oldalloc option [ 61.692369][ T5935] EXT4-fs: inline encryption not supported [ 61.715051][ T5935] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.759110][ T5935] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1020: bg 0: block 64: padding at end of block bitmap is not set [ 61.793350][ T5943] loop1: detected capacity change from 0 to 128 [ 61.805128][ T5935] Quota error (device loop0): write_blk: dquota write failed [ 61.833572][ T5935] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 61.875062][ T5935] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1020: Failed to acquire dquot type 0 [ 61.884693][ T5946] loop3: detected capacity change from 0 to 128 [ 61.887659][ T5935] EXT4-fs (loop0): 1 truncate cleaned up [ 62.008055][ T5935] getblk(): invalid block size 4096 requested [ 62.014287][ T5935] logical block size: 32768 [ 62.019019][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.0.1020 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 62.019055][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.019122][ T5935] Call Trace: [ 62.019129][ T5935] [ 62.019138][ T5935] __dump_stack+0x1d/0x30 [ 62.019167][ T5935] dump_stack_lvl+0xe8/0x140 [ 62.019211][ T5935] dump_stack+0x15/0x1b [ 62.019290][ T5935] bdev_getblk+0x37c/0x3d0 [ 62.019333][ T5935] ext4_getblk+0x1b6/0x510 [ 62.019357][ T5935] ext4_bread+0x28/0x110 [ 62.019378][ T5935] ext4_quota_read+0xe8/0x260 [ 62.019417][ T5935] ? __pfx_ext4_quota_read+0x10/0x10 [ 62.019465][ T5935] do_insert_tree+0x150/0x9b0 [ 62.019541][ T5935] qtree_write_dquot+0x2cb/0x300 [ 62.019576][ T5935] v2_write_dquot+0xda/0x140 [ 62.019610][ T5935] dquot_acquire+0x1c0/0x2b0 [ 62.019732][ T5935] ext4_acquire_dquot+0x15f/0x200 [ 62.019762][ T5935] dqget+0x532/0x8d0 [ 62.019803][ T5935] dquot_get_dqblk+0x24/0x1a0 [ 62.019826][ T5935] quota_getquota+0x153/0x310 [ 62.019868][ T5935] ? avc_has_perm+0xd3/0x150 [ 62.019922][ T5935] do_quotactl+0x608/0x670 [ 62.019980][ T5935] __se_sys_quotactl+0x3a5/0x670 [ 62.020017][ T5935] __x64_sys_quotactl+0x55/0x70 [ 62.020044][ T5935] x64_sys_call+0x2886/0x2fb0 [ 62.020081][ T5935] do_syscall_64+0xd2/0x200 [ 62.020179][ T5935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.020212][ T5935] ? clear_bhb_loop+0x40/0x90 [ 62.020240][ T5935] ? clear_bhb_loop+0x40/0x90 [ 62.020308][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.020331][ T5935] RIP: 0033:0x7f88e04de969 [ 62.020354][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.020372][ T5935] RSP: 002b:00007f88deb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 62.020397][ T5935] RAX: ffffffffffffffda RBX: 00007f88e0705fa0 RCX: 00007f88e04de969 [ 62.020492][ T5935] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000700 [ 62.020507][ T5935] RBP: 00007f88e0560ab1 R08: 0000000000000000 R09: 0000000000000000 [ 62.020520][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.020601][ T5935] R13: 0000000000000000 R14: 00007f88e0705fa0 R15: 00007ffc50d26438 [ 62.020626][ T5935] [ 62.020640][ T5935] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1020: Failed to acquire dquot type 0 [ 62.266782][ T5935] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 62.275083][ T5935] EXT4-fs (loop0): I/O error while writing superblock [ 62.306330][ T37] getblk(): invalid block size 4096 requested [ 62.312688][ T37] logical block size: 32768 [ 62.317321][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 62.317394][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.317411][ T37] Workqueue: writeback wb_workfn (flush-7:0) [ 62.317445][ T37] Call Trace: [ 62.317452][ T37] [ 62.317461][ T37] __dump_stack+0x1d/0x30 [ 62.317514][ T37] dump_stack_lvl+0xe8/0x140 [ 62.317535][ T37] dump_stack+0x15/0x1b [ 62.317553][ T37] bdev_getblk+0x37c/0x3d0 [ 62.317589][ T37] ? ext4_get_group_desc+0x16b/0x190 [ 62.317635][ T37] __ext4_get_inode_loc+0x303/0x930 [ 62.317670][ T37] ext4_write_inode+0x1ca/0x3c0 [ 62.317700][ T37] __writeback_single_inode+0x31c/0x7c0 [ 62.317734][ T37] writeback_sb_inodes+0x480/0xa20 [ 62.317765][ T37] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 62.317893][ T37] wb_writeback+0x252/0x5c0 [ 62.317922][ T37] ? queue_io+0xe1/0x2c0 [ 62.317953][ T37] wb_workfn+0x194/0x910 [ 62.318054][ T37] ? sched_clock+0x3f/0x60 [ 62.318092][ T37] ? update_load_avg+0x1da/0x820 [ 62.318163][ T37] ? __list_add_valid_or_report+0x38/0xe0 [ 62.318189][ T37] ? sized_strscpy+0x121/0x1a0 [ 62.318224][ T37] process_scheduled_works+0x4ce/0x9d0 [ 62.318267][ T37] worker_thread+0x582/0x770 [ 62.318361][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 62.318452][ T37] ? schedule+0x5f/0xd0 [ 62.318490][ T37] kthread+0x486/0x510 [ 62.318534][ T37] ? finish_task_switch+0xad/0x2b0 [ 62.318557][ T37] ? __pfx_worker_thread+0x10/0x10 [ 62.318592][ T37] ? __pfx_kthread+0x10/0x10 [ 62.318627][ T37] ret_from_fork+0xda/0x150 [ 62.318650][ T37] ? __pfx_kthread+0x10/0x10 [ 62.318672][ T37] ret_from_fork_asm+0x1a/0x30 [ 62.318706][ T37] [ 62.321902][ T3315] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 62.401926][ T5954] loop2: detected capacity change from 0 to 8192 [ 62.407252][ T3315] EXT4-fs (loop0): I/O error while writing superblock [ 62.425935][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.497939][ T5954] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.501214][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.512483][ T5939] Buffer I/O error on dev loop0, logical block 8, lost sync page write [ 62.588285][ T5962] netlink: 'syz.3.1028': attribute type 8 has an invalid length. [ 62.605139][ T5956] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.639889][ T5966] loop1: detected capacity change from 0 to 512 [ 62.681812][ T5963] infiniband syz1: set active [ 62.686617][ T5963] infiniband syz1: added syz_tun [ 62.697238][ T5963] RDS/IB: syz1: added [ 62.701368][ T5963] smc: adding ib device syz1 with port count 1 [ 62.707767][ T5963] smc: ib device syz1 port 1 has pnetid [ 62.819297][ T5966] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1030: bg 0: block 425: padding at end of block bitmap is not set [ 62.852230][ T5973] loop3: detected capacity change from 0 to 512 [ 62.877395][ T5966] EXT4-fs (loop1): Remounting filesystem read-only [ 62.889878][ T5973] EXT4-fs: Ignoring removed bh option [ 62.908182][ T5973] EXT4-fs: Ignoring removed bh option [ 62.934475][ T5973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.960491][ T5973] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.008117][ T5973] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.042052][ T5973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.074786][ T5973] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.118383][ T5973] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 63.125496][ T5973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1031: Invalid block bitmap block 0 in block_group 0 [ 63.147714][ T5973] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 63.167046][ T5973] EXT4-fs (loop3): 1 orphan inode deleted [ 63.190805][ T5982] syzkaller0: entered promiscuous mode [ 63.196414][ T5982] syzkaller0: entered allmulticast mode [ 63.252992][ T5986] syzkaller1: entered promiscuous mode [ 63.258742][ T5986] syzkaller1: entered allmulticast mode [ 63.330063][ T5988] loop4: detected capacity change from 0 to 512 [ 63.337060][ T5988] EXT4-fs: Ignoring removed orlov option [ 63.354788][ T5988] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1035: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 1(4), depth 0(0) [ 63.375901][ T5988] EXT4-fs (loop4): Remounting filesystem read-only [ 63.379064][ T5992] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 63.382635][ T5988] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 63.391109][ T12] bond0: (slave bond_slave_0): interface is now down [ 63.407309][ T5988] EXT4-fs (loop4): mount failed [ 63.412276][ T12] bond0: (slave bond_slave_1): interface is now down [ 63.430617][ T5992] syz_tun: left allmulticast mode [ 63.435925][ T5992] bridge0: port 3(syz_tun) entered disabled state [ 63.442570][ T12] bond0: (slave bond_slave_0): interface is now down [ 63.449340][ T12] bond0: (slave bond_slave_1): interface is now down [ 63.472306][ T5992] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 63.475167][ T12] bond0: (slave bond_slave_0): interface is now down [ 63.487924][ T12] bond0: (slave bond_slave_1): interface is now down [ 63.494646][ T12] bond0: (slave syz_tun): interface is now down [ 63.515820][ T12] bond0: now running without any active interface! [ 63.849601][ T6015] __nla_validate_parse: 7 callbacks suppressed [ 63.849619][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 64.015538][ T6026] loop0: detected capacity change from 0 to 2048 [ 64.064557][ T6026] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.071310][ T6026] EXT4-fs: Ignoring removed i_version option [ 64.168845][ T6033] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 64.440723][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 64.459329][ T6043] syz_tun (unregistering): left allmulticast mode [ 64.465916][ T6043] syz_tun (unregistering): left promiscuous mode [ 64.472486][ T6043] bridge0: port 3(syz_tun) entered disabled state [ 64.632709][ T37] smc: removing ib device syz1 [ 64.639596][ T23] syz1: Port: 1 Link DOWN [ 64.915238][ T6050] loop1: detected capacity change from 0 to 512 [ 64.953792][ T6050] EXT4-fs: Ignoring removed oldalloc option [ 64.959853][ T6050] EXT4-fs: inline encryption not supported [ 64.999261][ T6050] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.031314][ T6050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1059: bg 0: block 64: padding at end of block bitmap is not set [ 65.087086][ T6050] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1059: Failed to acquire dquot type 0 [ 65.111918][ T6050] EXT4-fs (loop1): 1 truncate cleaned up [ 65.154886][ T37] ------------[ cut here ]------------ [ 65.160538][ T37] GID entry ref leak for dev syz1 index 2 ref=1 [ 65.167617][ T37] WARNING: CPU: 0 PID: 37 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x21f/0x2a0 [ 65.178383][ T37] Modules linked in: [ 65.182349][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 65.194495][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.204696][ T37] Workqueue: ib-unreg-wq ib_unregister_work [ 65.210654][ T37] RIP: 0010:gid_table_release_one+0x21f/0x2a0 [ 65.216845][ T37] Code: 47 1e 89 fd 4d 8b 3c 2f 4c 89 ff e8 ab 2e 89 fd 41 8b 0f 41 8d 54 24 ff 48 c7 c7 3a 0c 3c 86 48 8b 74 24 08 e8 b2 f4 38 fd 90 <0f> 0b 90 90 4c 89 ef e8 35 19 89 fd 45 8b 7d 00 e9 42 ff ff ff e8 [ 65.236797][ T37] RSP: 0018:ffffc90000143c10 EFLAGS: 00010246 [ 65.242937][ T37] RAX: fa90fa2dd457bd00 RBX: ffff888119723230 RCX: ffff8881009b1040 [ 65.251057][ T37] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 65.259115][ T37] RBP: 0000000000000010 R08: 0001c90000143a8f R09: 0000000000000000 [ 65.267221][ T37] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000003 [ 65.275228][ T37] R13: ffff888119723200 R14: 00000000000000c0 R15: ffff888118319a80 [ 65.283318][ T37] FS: 0000000000000000(0000) GS:ffff8882aee38000(0000) knlGS:0000000000000000 [ 65.292497][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.299156][ T37] CR2: 00007f3c624d1da0 CR3: 0000000006834000 CR4: 00000000003506f0 [ 65.307193][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.315284][ T37] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.323426][ T37] Call Trace: [ 65.326774][ T37] [ 65.327615][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 65.327712][ T29] audit: type=1400 audit(1748553642.074:330): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.329768][ T37] ib_cache_release_one+0xd0/0xf0 [ 65.361123][ T37] ? __pfx_device_release+0x10/0x10 [ 65.366415][ T37] ib_device_release+0x90/0x120 [ 65.371517][ T37] ? __pfx_ib_device_release+0x10/0x10 [ 65.377051][ T37] device_release+0x64/0x140 [ 65.381743][ T37] kobject_put+0xef/0x190 [ 65.386118][ T37] put_device+0x1f/0x40 [ 65.390479][ T37] ib_unregister_work+0x28/0x30 [ 65.395378][ T37] process_scheduled_works+0x4ce/0x9d0 [ 65.400949][ T37] worker_thread+0x582/0x770 [ 65.405714][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 65.411760][ T37] ? schedule+0x5f/0xd0 [ 65.415970][ T37] kthread+0x486/0x510 [ 65.420114][ T37] ? finish_task_switch+0xad/0x2b0 [ 65.425464][ T37] ? __pfx_worker_thread+0x10/0x10 [ 65.430713][ T37] ? __pfx_kthread+0x10/0x10 [ 65.435429][ T37] ret_from_fork+0xda/0x150 [ 65.440009][ T37] ? __pfx_kthread+0x10/0x10 [ 65.444646][ T37] ret_from_fork_asm+0x1a/0x30 [ 65.449535][ T37] [ 65.452567][ T37] ---[ end trace 0000000000000000 ]--- [ 65.529838][ T6057] loop0: detected capacity change from 0 to 512 [ 65.543109][ T6057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.557557][ T6057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 65.587188][ T6057] System zones: 1-12 [ 65.596740][ T6057] EXT4-fs (loop0): 1 truncate cleaned up [ 65.773128][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.780874][ T6072] loop4: detected capacity change from 0 to 2048 [ 65.794240][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.827071][ T6072] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.833603][ T6072] EXT4-fs: Ignoring removed i_version option [ 65.855775][ T6065] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.864801][ T6065] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.874028][ T6065] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.883104][ T6065] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.140766][ T6092] loop1: detected capacity change from 0 to 512 [ 66.167140][ T6092] EXT4-fs: Ignoring removed oldalloc option [ 66.173343][ T6092] EXT4-fs: inline encryption not supported [ 66.181730][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.197824][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.217158][ T6097] netlink: 'syz.0.1076': attribute type 8 has an invalid length. [ 66.225954][ T6092] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.238818][ T6096] netlink: 'syz.3.1075': attribute type 8 has an invalid length. [ 66.273158][ T6092] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1072: bg 0: block 64: padding at end of block bitmap is not set [ 66.317428][ T6106] loop3: detected capacity change from 0 to 512 [ 66.333996][ T6092] Quota error (device loop1): write_blk: dquota write failed [ 66.342177][ T6106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.358812][ T6092] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 66.362501][ T6106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 66.369050][ T6092] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1072: Failed to acquire dquot type 0 [ 66.389656][ T6092] EXT4-fs (loop1): 1 truncate cleaned up [ 66.407981][ T6106] System zones: 1-12 [ 66.426654][ T6106] EXT4-fs (loop3): 1 truncate cleaned up [ 66.575647][ T6125] loop0: detected capacity change from 0 to 2048 [ 66.593932][ T6125] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.600573][ T6125] EXT4-fs: Ignoring removed i_version option [ 66.722041][ T6137] loop0: detected capacity change from 0 to 512 [ 66.731098][ T6137] EXT4-fs: Ignoring removed oldalloc option [ 66.736329][ T6139] netlink: 'syz.2.1089': attribute type 8 has an invalid length. [ 66.737296][ T6137] EXT4-fs: inline encryption not supported [ 66.752760][ T6137] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.770535][ T6137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1090: bg 0: block 64: padding at end of block bitmap is not set [ 66.785627][ T6137] Quota error (device loop0): write_blk: dquota write failed [ 66.794492][ T6137] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 66.804911][ T6137] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1090: Failed to acquire dquot type 0 [ 66.817976][ T6137] EXT4-fs (loop0): 1 truncate cleaned up [ 66.818202][ T6149] loop2: detected capacity change from 0 to 512 [ 66.830553][ T6149] EXT4-fs: Ignoring removed oldalloc option [ 66.836535][ T6149] EXT4-fs: inline encryption not supported [ 66.843028][ T6149] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.868129][ T6149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1094: bg 0: block 64: padding at end of block bitmap is not set [ 66.887238][ T6149] Quota error (device loop2): write_blk: dquota write failed [ 66.898421][ T6149] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 66.898792][ T51] getblk(): invalid block size 4096 requested [ 66.908452][ T6149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1094: Failed to acquire dquot type 0 [ 66.914511][ T51] logical block size: 32768 [ 66.914533][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Tainted: G W 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 66.914631][ T51] Tainted: [W]=WARN [ 66.914640][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.914659][ T51] Workqueue: writeback wb_workfn (flush-7:0) [ 66.914697][ T51] Call Trace: [ 66.914706][ T51] [ 66.914717][ T51] __dump_stack+0x1d/0x30 [ 66.914761][ T51] dump_stack_lvl+0xe8/0x140 [ 66.914835][ T51] dump_stack+0x15/0x1b [ 66.914857][ T51] bdev_getblk+0x37c/0x3d0 [ 66.914900][ T51] ? ext4_get_group_desc+0x16b/0x190 [ 66.914930][ T51] __ext4_get_inode_loc+0x303/0x930 [ 66.915026][ T51] ext4_write_inode+0x1ca/0x3c0 [ 66.915060][ T51] __writeback_single_inode+0x31c/0x7c0 [ 66.915099][ T51] writeback_sb_inodes+0x480/0xa20 [ 66.915236][ T51] wb_writeback+0x252/0x5c0 [ 66.915269][ T51] ? queue_io+0xe1/0x2c0 [ 66.915387][ T51] wb_workfn+0x194/0x910 [ 66.915415][ T51] ? update_load_avg+0x1da/0x820 [ 66.915451][ T51] ? __list_add_valid_or_report+0x38/0xe0 [ 66.915482][ T51] ? sized_strscpy+0x121/0x1a0 [ 66.915521][ T51] process_scheduled_works+0x4ce/0x9d0 [ 66.915660][ T51] worker_thread+0x582/0x770 [ 66.915706][ T51] kthread+0x486/0x510 [ 66.915727][ T51] ? finish_task_switch+0xad/0x2b0 [ 66.915746][ T51] ? __pfx_worker_thread+0x10/0x10 [ 66.915800][ T51] ? __pfx_kthread+0x10/0x10 [ 66.915825][ T51] ret_from_fork+0xda/0x150 [ 66.915852][ T51] ? __pfx_kthread+0x10/0x10 [ 66.915878][ T51] ret_from_fork_asm+0x1a/0x30 [ 66.915998][ T51] [ 66.939747][ T3315] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 67.114778][ T6155] loop1: detected capacity change from 0 to 2048 [ 67.123224][ T6149] EXT4-fs (loop2): 1 truncate cleaned up [ 67.130011][ T6155] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.136512][ T6155] EXT4-fs: Ignoring removed i_version option [ 67.145405][ T6149] Quota error (device loop2): write_blk: dquota write failed [ 67.154738][ T6149] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 67.166754][ T6149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1094: Failed to acquire dquot type 0 [ 67.181970][ T3315] EXT4-fs (loop0): I/O error while writing superblock [ 67.200807][ T6142] Buffer I/O error on dev loop0, logical block 8, lost sync page write [ 67.218638][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.229255][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.262733][ T6147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.271818][ T6147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.280852][ T6147] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.376189][ T6179] netlink: 'syz.1.1104': attribute type 8 has an invalid length. [ 67.438344][ T6187] loop1: detected capacity change from 0 to 512 [ 67.454131][ T6187] EXT4-fs: Ignoring removed oldalloc option [ 67.455478][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.460237][ T6187] EXT4-fs: inline encryption not supported [ 67.468872][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.483043][ T6192] loop2: detected capacity change from 0 to 512 [ 67.489720][ T6187] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.503830][ T6189] loop3: detected capacity change from 0 to 512 [ 67.508670][ T6192] EXT4-fs: Ignoring removed oldalloc option [ 67.513678][ T6189] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.516115][ T6192] EXT4-fs: inline encryption not supported [ 67.532879][ T6192] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.534503][ T6187] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1107: bg 0: block 64: padding at end of block bitmap is not set [ 67.559211][ T6189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 67.559286][ T6187] Quota error (device loop1): write_blk: dquota write failed [ 67.574986][ T6187] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1107: Failed to acquire dquot type 0 [ 67.575005][ T6189] System zones: [ 67.575423][ T6187] EXT4-fs (loop1): 1 truncate cleaned up [ 67.586277][ T6189] 1-12 [ 67.600131][ T6189] EXT4-fs (loop3): 1 truncate cleaned up [ 67.618289][ T6192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1109: bg 0: block 64: padding at end of block bitmap is not set [ 67.633059][ T6192] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1109: Failed to acquire dquot type 0 [ 67.644793][ T6192] EXT4-fs (loop2): 1 truncate cleaned up [ 67.666362][ T6192] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1109: Failed to acquire dquot type 0 [ 67.732966][ T6203] infiniband syz1: set down [ 67.737577][ T6203] infiniband syz1: added syz_tun [ 67.748474][ T6203] RDS/IB: syz1: added [ 67.752507][ T6203] smc: adding ib device syz1 with port count 1 [ 67.758739][ T6203] smc: ib device syz1 port 1 has pnetid [ 67.998347][ T6210] loop1: detected capacity change from 0 to 2048 [ 68.018853][ T6210] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.025391][ T6210] EXT4-fs: Ignoring removed i_version option [ 68.080899][ T6227] netlink: 'syz.2.1119': attribute type 8 has an invalid length. [ 68.142658][ T6230] loop0: detected capacity change from 0 to 512 [ 68.158499][ T6230] EXT4-fs: Ignoring removed oldalloc option [ 68.164506][ T6230] EXT4-fs: inline encryption not supported [ 68.172818][ T6230] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.186274][ T6232] ref_ctr increment failed for inode: 0x496 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119b0e780 [ 68.192336][ T6234] loop2: detected capacity change from 0 to 512 [ 68.205917][ T6234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.210155][ T6231] uprobe: syz.1.1121:6231 failed to unregister, leaking uprobe [ 68.218494][ T6230] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1120: bg 0: block 64: padding at end of block bitmap is not set [ 68.239208][ T6230] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1120: Failed to acquire dquot type 0 [ 68.250818][ T6230] EXT4-fs (loop0): 1 truncate cleaned up [ 68.267247][ T6234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 68.278665][ T6234] System zones: 1-12 [ 68.283302][ T6234] EXT4-fs (loop2): 1 truncate cleaned up [ 68.362431][ T6245] loop1: detected capacity change from 0 to 512 [ 68.370161][ T6245] EXT4-fs: Ignoring removed oldalloc option [ 68.376232][ T6245] EXT4-fs: inline encryption not supported [ 68.389090][ T6245] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.420672][ T6249] netlink: 'syz.3.1128': attribute type 8 has an invalid length. [ 68.440437][ T6245] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1125: bg 0: block 64: padding at end of block bitmap is not set [ 68.460849][ T6245] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1125: Failed to acquire dquot type 0 [ 68.477236][ T6245] EXT4-fs (loop1): 1 truncate cleaned up [ 68.529435][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.546940][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.584633][ T6241] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.593652][ T6241] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.602758][ T6241] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.611834][ T6241] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.692394][ T6265] loop3: detected capacity change from 0 to 512 [ 68.698191][ T6268] loop1: detected capacity change from 0 to 512 [ 68.722323][ T6268] EXT4-fs: Ignoring removed oldalloc option [ 68.728458][ T6268] EXT4-fs: inline encryption not supported [ 68.739252][ T6265] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1129: bg 0: block 425: padding at end of block bitmap is not set [ 68.749910][ T6269] syzkaller0: entered promiscuous mode [ 68.759068][ T6269] syzkaller0: entered allmulticast mode [ 68.774154][ T6268] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.787523][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.805474][ T6265] EXT4-fs (loop3): Remounting filesystem read-only [ 68.818712][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.835345][ T6268] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1139: bg 0: block 64: padding at end of block bitmap is not set [ 68.856385][ T3323] EXT4-fs unmount: 119 callbacks suppressed [ 68.856405][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.857205][ T6268] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1139: Failed to acquire dquot type 0 [ 68.897093][ T6268] EXT4-fs (loop1): 1 truncate cleaned up [ 68.913688][ T6268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.960944][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.983161][ T6282] loop1: detected capacity change from 0 to 512 [ 68.991095][ T6282] EXT4-fs: Ignoring removed oldalloc option [ 68.997085][ T6282] EXT4-fs: inline encryption not supported [ 69.013516][ T6283] loop3: detected capacity change from 0 to 2048 [ 69.020507][ T6282] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.043563][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.062347][ T6282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1133: bg 0: block 64: padding at end of block bitmap is not set [ 69.064187][ T6287] netlink: 'syz.2.1134': attribute type 8 has an invalid length. [ 69.078232][ T6283] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.091203][ T6283] EXT4-fs: Ignoring removed i_version option [ 69.099513][ T6282] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1133: Failed to acquire dquot type 0 [ 69.126990][ T6282] EXT4-fs (loop1): 1 truncate cleaned up [ 69.135661][ T6282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.159412][ T6283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.193669][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.232864][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.245217][ T6299] netlink: 'syz.2.1141': attribute type 8 has an invalid length. [ 69.294842][ T6307] loop3: detected capacity change from 0 to 512 [ 69.301817][ T6307] EXT4-fs: Ignoring removed oldalloc option [ 69.307931][ T6307] EXT4-fs: inline encryption not supported [ 69.314892][ T6307] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.330194][ T6307] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1144: bg 0: block 64: padding at end of block bitmap is not set [ 69.344966][ T6307] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1144: Failed to acquire dquot type 0 [ 69.356634][ T6307] EXT4-fs (loop3): 1 truncate cleaned up [ 69.363015][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.381806][ T6311] ref_ctr increment failed for inode: 0x4b3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119b0f300 [ 69.393804][ T6310] uprobe: syz.1.1145:6310 failed to unregister, leaking uprobe [ 69.394092][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.427648][ T6318] netlink: 'syz.2.1147': attribute type 8 has an invalid length. [ 69.485312][ T6323] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 69.494607][ T6323] syz_tun: left allmulticast mode [ 69.499841][ T6323] bridge0: port 3(syz_tun) entered disabled state [ 69.512079][ T6323] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.521273][ T6260] syz1: Port: 1 Link ACTIVE [ 69.556259][ T6328] loop1: detected capacity change from 0 to 2048 [ 69.610446][ T6328] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.617270][ T6328] EXT4-fs: Ignoring removed i_version option [ 69.629818][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.672149][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.714016][ T6348] ref_ctr increment failed for inode: 0x4c4 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100059140 [ 69.725753][ T6347] uprobe: syz.1.1160:6347 failed to unregister, leaking uprobe [ 69.948077][ T6375] loop1: detected capacity change from 0 to 2048 [ 69.954899][ T6375] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.955467][ T6378] uprobe: syz.4.1175:6378 failed to unregister, leaking uprobe [ 69.961428][ T6375] EXT4-fs: Ignoring removed i_version option [ 70.008658][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.043618][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.110526][ T6397] rdma_rxe: rxe_newlink: failed to add syz_tun [ 70.301811][ T6409] loop2: detected capacity change from 0 to 2048 [ 70.310041][ T6409] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.316536][ T6409] EXT4-fs: Ignoring removed i_version option [ 70.364825][ T6412] syzkaller0: entered promiscuous mode [ 70.370484][ T6412] syzkaller0: entered allmulticast mode [ 70.378297][ T6414] uprobe: syz.4.1191:6414 failed to unregister, leaking uprobe [ 70.394530][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.462437][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.717149][ T6453] loop2: detected capacity change from 0 to 2048 [ 70.735544][ T6453] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.742148][ T6453] EXT4-fs: Ignoring removed i_version option [ 70.755502][ T6458] uprobe: syz.0.1209:6458 failed to unregister, leaking uprobe [ 70.769681][ T6453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.810065][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.855214][ T6467] syzkaller0: entered promiscuous mode [ 70.860914][ T6467] syzkaller0: entered allmulticast mode [ 71.147791][ T6491] uprobe: syz.2.1224:6491 failed to unregister, leaking uprobe [ 71.196141][ T6493] loop0: detected capacity change from 0 to 2048 [ 71.203039][ T6493] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.209598][ T6493] EXT4-fs: Ignoring removed i_version option [ 71.229567][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.271707][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.334229][ T6501] syzkaller0: entered promiscuous mode [ 71.339955][ T6501] syzkaller0: entered allmulticast mode [ 71.376891][ T6509] validate_nla: 9 callbacks suppressed [ 71.376910][ T6509] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 71.401956][ T6511] netlink: 'syz.4.1232': attribute type 8 has an invalid length. [ 71.555083][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.558826][ T6527] loop0: detected capacity change from 0 to 2048 [ 71.571272][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.627768][ T6527] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.634297][ T6527] EXT4-fs: Ignoring removed i_version option [ 71.691018][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.814069][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.951138][ T6550] syzkaller0: entered promiscuous mode [ 71.956771][ T6550] syzkaller0: entered allmulticast mode [ 71.982717][ T6553] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 72.139733][ T6564] loop2: detected capacity change from 0 to 512 [ 72.140898][ T6565] loop0: detected capacity change from 0 to 512 [ 72.146508][ T6564] EXT4-fs: Ignoring removed oldalloc option [ 72.154887][ T6565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.158388][ T6564] EXT4-fs: inline encryption not supported [ 72.174695][ T6565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1254: bg 0: block 425: padding at end of block bitmap is not set [ 72.190965][ T6564] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.191790][ T6565] EXT4-fs (loop0): Remounting filesystem read-only [ 72.217991][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.218967][ T6564] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1253: bg 0: block 64: padding at end of block bitmap is not set [ 72.241665][ T6564] __quota_error: 15 callbacks suppressed [ 72.241682][ T6564] Quota error (device loop2): write_blk: dquota write failed [ 72.254879][ T6564] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.266426][ T6564] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1253: Failed to acquire dquot type 0 [ 72.301278][ T6564] EXT4-fs (loop2): 1 truncate cleaned up [ 72.307934][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.375506][ T6582] syz1: rxe_newlink: already configured on syz_tun [ 72.386181][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.483795][ T6585] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 72.544269][ T6587] syzkaller0: entered promiscuous mode [ 72.549993][ T6587] syzkaller0: entered allmulticast mode [ 72.588980][ T6591] syz1: rxe_newlink: already configured on syz_tun [ 72.617534][ T6594] loop1: detected capacity change from 0 to 512 [ 72.629942][ T6594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.644959][ T6594] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1266: bg 0: block 425: padding at end of block bitmap is not set [ 72.660862][ T6594] EXT4-fs (loop1): Remounting filesystem read-only [ 72.681340][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.748801][ T6595] loop3: detected capacity change from 0 to 8192 [ 72.767735][ T6595] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.799462][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.832184][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.850730][ T6610] loop2: detected capacity change from 0 to 512 [ 72.867356][ T6610] EXT4-fs: Ignoring removed oldalloc option [ 72.873500][ T6610] EXT4-fs: inline encryption not supported [ 72.908666][ T6610] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.915576][ T6614] syz1: rxe_newlink: already configured on syz_tun [ 73.033542][ T6610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1271: bg 0: block 64: padding at end of block bitmap is not set [ 73.099841][ T6610] Quota error (device loop2): write_blk: dquota write failed [ 73.110793][ T6610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 73.125333][ T6610] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1271: Failed to acquire dquot type 0 [ 73.158959][ T6610] EXT4-fs (loop2): 1 truncate cleaned up [ 73.169364][ T6610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.230115][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.273456][ T6629] loop2: detected capacity change from 0 to 512 [ 73.288938][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.308396][ T6629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1278: bg 0: block 425: padding at end of block bitmap is not set [ 73.390881][ T6629] EXT4-fs (loop2): Remounting filesystem read-only [ 73.411972][ T6634] syzkaller0: entered promiscuous mode [ 73.417582][ T6634] syzkaller0: entered allmulticast mode [ 73.428421][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.551559][ T6642] rdma_rxe: rxe_newlink: failed to add syz_tun [ 73.553629][ T6643] syz1: rxe_newlink: already configured on syz_tun [ 74.023031][ T6666] netlink: 'syz.4.1293': attribute type 8 has an invalid length. [ 74.211457][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 74.226743][ T6678] bond0: (slave syz_tun): Releasing backup interface [ 74.406849][ T6703] loop0: detected capacity change from 0 to 2048 [ 74.413541][ T6703] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.420088][ T6703] EXT4-fs: Ignoring removed i_version option [ 74.586226][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.671661][ T6728] rdma_rxe: rxe_newlink: failed to add syz_tun [ 74.753456][ T6733] netlink: 'syz.2.1319': attribute type 10 has an invalid length. [ 74.858581][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.890702][ T6744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1323'. [ 74.910358][ T6751] loop2: detected capacity change from 0 to 512 [ 75.018328][ T6751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.042488][ T6751] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1326: bg 0: block 425: padding at end of block bitmap is not set [ 75.058416][ T6751] EXT4-fs (loop2): Remounting filesystem read-only [ 75.060410][ T6765] syzkaller0: entered promiscuous mode [ 75.070834][ T6765] syzkaller0: entered allmulticast mode [ 75.104446][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.134239][ T6773] rdma_rxe: rxe_newlink: failed to add syz_tun [ 75.159389][ T6779] netlink: 'syz.2.1334': attribute type 10 has an invalid length. [ 75.481676][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.506848][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.548792][ T6820] syzkaller0: entered promiscuous mode [ 75.554560][ T6820] syzkaller0: entered allmulticast mode [ 76.074080][ T6845] syz1: rxe_newlink: already configured on syz_tun [ 76.360375][ T6847] syzkaller1: entered promiscuous mode [ 76.365934][ T6847] syzkaller1: entered allmulticast mode [ 76.513670][ T6856] loop3: detected capacity change from 0 to 2048 [ 76.539464][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.581906][ T6856] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.596931][ T6856] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 76.609526][ T6856] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.609526][ T6856] [ 76.619325][ T6856] EXT4-fs (loop3): Total free blocks count 0 [ 76.625407][ T6856] EXT4-fs (loop3): Free/Dirty block details [ 76.631478][ T6856] EXT4-fs (loop3): free_blocks=2415919104 [ 76.637318][ T6856] EXT4-fs (loop3): dirty_blocks=656 [ 76.642589][ T6856] EXT4-fs (loop3): Block reservation details [ 76.648639][ T6856] EXT4-fs (loop3): i_reserved_data_blocks=41 [ 76.746328][ T6867] syzkaller0: entered promiscuous mode [ 76.751974][ T6867] syzkaller0: entered allmulticast mode [ 76.779836][ T6854] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.839751][ T6877] syz1: rxe_newlink: already configured on syz_tun [ 76.883756][ T6881] rdma_rxe: rxe_newlink: failed to add syz_tun [ 76.955633][ T6885] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 76.978136][ T6885] syz_tun: left allmulticast mode [ 76.983494][ T6885] bridge0: port 3(syz_tun) entered disabled state [ 77.031329][ T6885] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 77.136238][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.152977][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.282697][ T6919] syzkaller1: entered promiscuous mode [ 77.288291][ T6919] syzkaller1: entered allmulticast mode [ 77.298738][ T6917] syz1: rxe_newlink: already configured on syz_tun [ 77.414840][ T6924] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1388'. [ 77.472372][ T6928] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 77.579516][ T6935] loop4: detected capacity change from 0 to 2048 [ 77.586219][ T6935] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.592876][ T6935] EXT4-fs: Ignoring removed i_version option [ 77.625374][ T6935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.674712][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.795258][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 77.853202][ T6956] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 77.902747][ T6960] syzkaller1: entered promiscuous mode [ 77.908361][ T6960] syzkaller1: entered allmulticast mode [ 77.957472][ T6967] syzkaller0: entered promiscuous mode [ 77.963044][ T6967] syzkaller0: entered allmulticast mode [ 78.122958][ T6981] rdma_rxe: rxe_newlink: failed to add syz_tun [ 78.304344][ T7006] rdma_rxe: rxe_newlink: failed to add syz_tun [ 78.578019][ T7016] loop0: detected capacity change from 0 to 512 [ 78.613848][ T7016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.664802][ T7016] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1429: bg 0: block 425: padding at end of block bitmap is not set [ 78.724848][ T7016] EXT4-fs (loop0): Remounting filesystem read-only [ 78.758075][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.778263][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1434'. [ 78.910861][ T7041] loop2: detected capacity change from 0 to 2048 [ 78.919145][ T7041] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.925643][ T7041] EXT4-fs: Ignoring removed i_version option [ 78.971283][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.138270][ T7046] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 79.146566][ T7046] syz_tun: left allmulticast mode [ 79.151923][ T7046] bridge0: port 3(syz_tun) entered disabled state [ 79.277887][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.303991][ T7046] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 79.413892][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 79.551376][ T7083] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 79.646384][ T7096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1460'. [ 80.503097][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1483'. [ 80.706841][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 80.779593][ T7180] loop3: detected capacity change from 0 to 512 [ 80.909594][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.193697][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.474982][ T7212] loop0: detected capacity change from 0 to 2048 [ 81.507045][ T7212] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.513575][ T7212] EXT4-fs: Ignoring removed i_version option [ 81.707535][ T7212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.866356][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.922188][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1526'. [ 82.232104][ T7272] loop4: detected capacity change from 0 to 2048 [ 82.239594][ T7272] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.246301][ T7272] EXT4-fs: Ignoring removed i_version option [ 82.278759][ T7272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.316048][ T7282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 82.360667][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.662462][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1557'. [ 82.726102][ T7321] loop1: detected capacity change from 0 to 2048 [ 82.767130][ T7321] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.774206][ T7321] EXT4-fs: Ignoring removed i_version option [ 82.874998][ T7321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.929066][ T7341] syz1: rxe_newlink: already configured on syz_tun [ 83.007488][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.027851][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1571'. [ 83.336590][ T7371] loop2: detected capacity change from 0 to 2048 [ 83.345594][ T7371] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.352156][ T7371] EXT4-fs: Ignoring removed i_version option [ 83.460033][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1586'. [ 83.886515][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.972545][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.030703][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 84.059924][ T7405] bond0: (slave syz_tun): Releasing backup interface [ 84.179383][ T7414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7414 comm=syz.0.1601 [ 84.407283][ T7428] loop4: detected capacity change from 0 to 2048 [ 84.427144][ T7428] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.433733][ T7428] EXT4-fs: Ignoring removed i_version option [ 84.471727][ T7428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.532154][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.568255][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 84.650998][ T7447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7447 comm=syz.3.1615 [ 85.218644][ T7464] loop4: detected capacity change from 0 to 2048 [ 85.243865][ T7464] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.250435][ T7464] EXT4-fs: Ignoring removed i_version option [ 85.299331][ T7464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.450803][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.476220][ T7477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7477 comm=syz.3.1628 [ 85.541542][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'. [ 85.594631][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 86.134512][ T7501] loop2: detected capacity change from 0 to 2048 [ 86.166757][ T7501] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.173304][ T7501] EXT4-fs: Ignoring removed i_version option [ 86.270091][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.424025][ T7513] syz1: rxe_newlink: already configured on syz_tun [ 86.455849][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.474726][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'. [ 86.515402][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7521 comm=syz.2.1643 [ 86.545445][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 86.793673][ T7542] loop1: detected capacity change from 0 to 2048 [ 86.810918][ T7542] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.817559][ T7542] EXT4-fs: Ignoring removed i_version option [ 87.055000][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1656'. [ 87.082938][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.114003][ T7553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7553 comm=syz.3.1658 [ 87.262970][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.844947][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1671'. [ 87.892473][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7589 comm=syz.2.1674 [ 87.933161][ T7590] loop3: detected capacity change from 0 to 2048 [ 87.966299][ T7590] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.972983][ T7590] EXT4-fs: Ignoring removed i_version option [ 88.158723][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.465541][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1684'. [ 88.602360][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.661428][ T7621] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1686'. [ 88.891088][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 89.022735][ T7646] loop1: detected capacity change from 0 to 2048 [ 89.050584][ T7646] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.057214][ T7646] EXT4-fs: Ignoring removed i_version option [ 89.256455][ T7658] syz1: rxe_newlink: already configured on syz_tun [ 89.585091][ T7685] uprobe: syz.4.1714:7685 failed to unregister, leaking uprobe [ 89.953656][ T7704] syz1: rxe_newlink: already configured on syz_tun [ 90.078275][ T7709] __nla_validate_parse: 4 callbacks suppressed [ 90.078297][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 90.123541][ T7702] loop2: detected capacity change from 0 to 2048 [ 90.162439][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 90.181533][ T7702] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.188216][ T7702] EXT4-fs: Ignoring removed i_version option [ 90.262002][ T7718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1725'. [ 90.387151][ T7729] uprobe: syz.2.1730:7729 failed to unregister, leaking uprobe [ 90.506009][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'. [ 90.663777][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 90.700748][ T7748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1737'. [ 90.726407][ T7745] bond0: (slave syz_tun): Releasing backup interface [ 91.039305][ T7753] loop3: detected capacity change from 0 to 2048 [ 91.046058][ T7753] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.052632][ T7753] EXT4-fs: Ignoring removed i_version option [ 91.189821][ T7771] uprobe: syz.1.1747:7771 failed to unregister, leaking uprobe [ 91.246975][ T7778] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1750'. [ 91.491249][ T7792] loop4: detected capacity change from 0 to 2048 [ 91.506483][ T7792] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.513150][ T7792] EXT4-fs: Ignoring removed i_version option [ 91.528319][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 91.785099][ T7806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1761'. [ 91.895890][ T7816] ref_ctr increment failed for inode: 0x73d offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119b09140 [ 91.910238][ T7815] uprobe: syz.1.1765:7815 failed to unregister, leaking uprobe [ 92.176920][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.193319][ T7831] loop4: detected capacity change from 0 to 2048 [ 92.224724][ T7831] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.226843][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.231302][ T7831] EXT4-fs: Ignoring removed i_version option [ 92.266886][ T7840] syzkaller0: entered promiscuous mode [ 92.272419][ T7840] syzkaller0: entered allmulticast mode [ 92.284548][ T7844] netlink: 'syz.1.1777': attribute type 8 has an invalid length. [ 92.428944][ T7850] loop4: detected capacity change from 0 to 8192 [ 92.446277][ T7850] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.468026][ T7858] loop3: detected capacity change from 0 to 512 [ 92.478046][ T7858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1783: bg 0: block 425: padding at end of block bitmap is not set [ 92.492584][ T7858] EXT4-fs (loop3): Remounting filesystem read-only [ 93.268372][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1788'. [ 93.429453][ T7883] netlink: 'syz.4.1792': attribute type 8 has an invalid length. [ 93.430007][ T7881] loop1: detected capacity change from 0 to 2048 [ 93.458203][ T7885] ref_ctr increment failed for inode: 0x7ae offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810005cac0 [ 93.489740][ T7881] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.496297][ T7881] EXT4-fs: Ignoring removed i_version option [ 93.507217][ T7884] uprobe: syz.3.1793:7884 failed to unregister, leaking uprobe [ 93.542723][ T7889] loop4: detected capacity change from 0 to 512 [ 93.576034][ T7889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1795: bg 0: block 425: padding at end of block bitmap is not set [ 93.645646][ T7889] EXT4-fs (loop4): Remounting filesystem read-only [ 93.820111][ T7918] netlink: 'syz.0.1805': attribute type 8 has an invalid length. [ 93.831304][ T7914] syzkaller0: entered promiscuous mode [ 93.836926][ T7914] syzkaller0: entered allmulticast mode [ 93.882414][ T7920] ref_ctr increment failed for inode: 0x6b5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119b0dc00 [ 93.894056][ T7919] uprobe: syz.0.1806:7919 failed to unregister, leaking uprobe [ 94.007372][ T7933] loop0: detected capacity change from 0 to 512 [ 94.039376][ T7934] loop3: detected capacity change from 0 to 2048 [ 94.046249][ T7934] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.052167][ T7933] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1811: bg 0: block 425: padding at end of block bitmap is not set [ 94.052801][ T7934] EXT4-fs: Ignoring removed i_version option [ 94.078270][ T7933] EXT4-fs (loop0): Remounting filesystem read-only [ 94.472626][ T7967] syzkaller0: entered promiscuous mode [ 94.478350][ T7967] syzkaller0: entered allmulticast mode [ 94.498752][ T7972] loop2: detected capacity change from 0 to 2048 [ 94.534968][ T7972] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.541688][ T7972] EXT4-fs: Ignoring removed i_version option [ 94.592282][ T7975] loop4: detected capacity change from 0 to 512 [ 94.635442][ T7975] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1825: bg 0: block 425: padding at end of block bitmap is not set [ 94.662034][ T7975] EXT4-fs (loop4): Remounting filesystem read-only [ 94.920160][ T8006] syzkaller0: entered promiscuous mode [ 94.925697][ T8006] syzkaller0: entered allmulticast mode [ 94.967002][ T8009] syzkaller1: entered promiscuous mode [ 94.972871][ T8009] syzkaller1: entered allmulticast mode [ 95.112119][ T8014] loop3: detected capacity change from 0 to 2048 [ 95.126698][ T8014] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.133281][ T8014] EXT4-fs: Ignoring removed i_version option [ 95.158238][ T8018] __nla_validate_parse: 3 callbacks suppressed [ 95.158258][ T8018] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1841'. [ 95.230492][ T8021] loop4: detected capacity change from 0 to 8192 [ 95.239618][ T8021] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.304748][ T8045] syzkaller0: entered promiscuous mode [ 96.310330][ T8045] syzkaller0: entered allmulticast mode [ 96.329389][ T8047] syzkaller1: entered promiscuous mode [ 96.334987][ T8047] syzkaller1: entered allmulticast mode [ 96.947892][ T8066] loop1: detected capacity change from 0 to 2048 [ 96.975216][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'. [ 97.021753][ T8066] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.028437][ T8066] EXT4-fs: Ignoring removed i_version option [ 97.236423][ T8085] syzkaller0: entered promiscuous mode [ 97.242000][ T8085] syzkaller0: entered allmulticast mode [ 97.514816][ T8094] syzkaller1: entered promiscuous mode [ 97.520619][ T8094] syzkaller1: entered allmulticast mode [ 97.622614][ T8092] loop4: detected capacity change from 0 to 8192 [ 97.632869][ T8092] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.820938][ T8098] ================================================================== [ 97.829086][ T8098] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 97.836297][ T8098] [ 97.838651][ T8098] write to 0xffff8881333d7de8 of 1 bytes by task 8092 on cpu 1: [ 97.846283][ T8098] fat12_ent_put+0x74/0x170 [ 97.850812][ T8098] fat_alloc_clusters+0x4d1/0xa80 [ 97.855855][ T8098] fat_get_block+0x258/0x5e0 [ 97.860791][ T8098] __block_write_begin_int+0x3fd/0xf90 [ 97.866378][ T8098] cont_write_begin+0x5fc/0x970 [ 97.871243][ T8098] fat_write_begin+0x4f/0xe0 [ 97.875859][ T8098] generic_perform_write+0x181/0x490 [ 97.881162][ T8098] __generic_file_write_iter+0x9e/0x120 [ 97.886724][ T8098] generic_file_write_iter+0x8d/0x2f0 [ 97.892112][ T8098] vfs_write+0x4a0/0x8e0 [ 97.896814][ T8098] ksys_write+0xda/0x1a0 [ 97.901343][ T8098] __x64_sys_write+0x40/0x50 [ 97.905968][ T8098] x64_sys_call+0x2cdd/0x2fb0 [ 97.910659][ T8098] do_syscall_64+0xd2/0x200 [ 97.915183][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.921104][ T8098] [ 97.923443][ T8098] read to 0xffff8881333d7c00 of 512 bytes by task 8098 on cpu 0: [ 97.931169][ T8098] fat_mirror_bhs+0x1df/0x320 [ 97.935859][ T8098] fat_ent_write+0xd0/0xe0 [ 97.940286][ T8098] fat_chain_add+0x15b/0x3f0 [ 97.944899][ T8098] fat_get_block+0x46c/0x5e0 [ 97.949507][ T8098] __block_write_begin_int+0x3fd/0xf90 [ 97.954994][ T8098] cont_write_begin+0x5fc/0x970 [ 97.959855][ T8098] fat_write_begin+0x4f/0xe0 [ 97.964477][ T8098] generic_perform_write+0x181/0x490 [ 97.969783][ T8098] __generic_file_write_iter+0x9e/0x120 [ 97.975344][ T8098] generic_file_write_iter+0x8d/0x2f0 [ 97.980731][ T8098] do_iter_readv_writev+0x3ee/0x4b0 [ 97.985946][ T8098] vfs_writev+0x2df/0x8b0 [ 97.990319][ T8098] __se_sys_pwritev2+0xfc/0x1c0 [ 97.995184][ T8098] __x64_sys_pwritev2+0x67/0x80 [ 98.000072][ T8098] x64_sys_call+0x1cea/0x2fb0 [ 98.004771][ T8098] do_syscall_64+0xd2/0x200 [ 98.009295][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.015210][ T8098] [ 98.017542][ T8098] Reported by Kernel Concurrency Sanitizer on: [ 98.023702][ T8098] CPU: 0 UID: 0 PID: 8098 Comm: syz.4.1865 Tainted: G W 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 98.037350][ T8098] Tainted: [W]=WARN [ 98.041156][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.051323][ T8098] ==================================================================