last executing test programs: 50.220760673s ago: executing program 32 (id=370): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000040)={[{@nombcache}, {@oldalloc}]}, 0xff, 0x548, &(0x7f0000001300)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x200) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) 47.236961907s ago: executing program 33 (id=445): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r0], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 25.217546921s ago: executing program 6 (id=1445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 25.193335813s ago: executing program 6 (id=1446): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x20000090) 25.172086115s ago: executing program 6 (id=1447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4040084) 25.157805786s ago: executing program 6 (id=1448): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 25.070024555s ago: executing program 6 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000100)=""/148, &(0x7f0000000000)=0x94) 24.896940382s ago: executing program 6 (id=1450): unshare(0x400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 24.875865694s ago: executing program 34 (id=1450): unshare(0x400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 22.546981694s ago: executing program 4 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 22.541773165s ago: executing program 4 (id=1511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001340)={'filter\x00', 0x6002, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3ff, {0x8c0}}}}, {{@arp={@loopback, @empty, 0x0, 0xff, 0xe, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x7b1e90c128cfb101, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xff29, 0x2, 0x8001, 0x3, 0x20, 0x158, 'veth0_vlan\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x104}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010106, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @empty, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 22.497493569s ago: executing program 4 (id=1513): write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8170081"], 0x27) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 22.497367989s ago: executing program 4 (id=1514): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 22.417951967s ago: executing program 4 (id=1516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 22.269786712s ago: executing program 4 (id=1520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 22.269696751s ago: executing program 35 (id=1520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 21.805861267s ago: executing program 5 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 21.805533187s ago: executing program 5 (id=1529): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1803, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 21.620589786s ago: executing program 5 (id=1532): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(0x0, 0x7) 21.332813554s ago: executing program 1 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 21.228265554s ago: executing program 1 (id=1536): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(0xffffffffffffffff) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000005c0)={0x4, 0x100, 0x1, 0xc78f, 0x400, 0x4, 0x2007, 0x80000001}, 0x20) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000002, 0x2) 20.729709574s ago: executing program 5 (id=1543): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 20.679475158s ago: executing program 5 (id=1549): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x6020400) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xc18cc2f97927b6b}, [{{0x254, 0x1, {{0x1, 0x4}, 0x3, 0xf, 0xf, 0x8, 0x6, 'syz1\x00', "cda2d77488fbc82d825f9baa1fab4f44d5aceddfa16ca73deef421af434e139d", "7827782723cc9024f15bcc3f1e0dca2b46a77991c63b1ea8bcd27359fbf78f73", [{0x800, 0x5, {0x3, 0x6}}, {0x1000, 0x6, {0x1, 0xfffff000}}, {0x8, 0xb, {0x1}}, {0xd, 0x1, {0x0, 0x9}}, {0xb37, 0x5, {0x0, 0x200}}, {0x1ff, 0x9, {0x1, 0x100}}, {0x6, 0x2, {0x2, 0xc}}, {0xb, 0x0, {0x5, 0x7}}, {0x9, 0x7cc6, {0x3, 0x8}}, {0xa, 0xf, {0x2, 0x9}}, {0x0, 0x800, {0x2, 0xc370}}, {0x40, 0xfffc, {0x1, 0xc0}}, {0x8197, 0x1e, {0x3, 0xfff}}, {0x3, 0x6, {0x2, 0x6}}, {0x2, 0xc, {0x2, 0x5}}, {0xc, 0x200, {0xc6c8843f70726fcc, 0x7}}, {0xb, 0xb1c1, {0x0, 0x7}}, {0x3, 0xfff9, {0x3, 0x48}}, {0x9, 0x0, {0xc1d55dc34a5ba0b1, 0x1}}, {0x872, 0x1, {0x2, 0x6}}, {0x3, 0xff47, {0x1, 0x1}}, {0x10, 0x5, {0x1, 0x10001}}, {0x5, 0xff, {0x2, 0x6}}, {0x2, 0x81, {0x2, 0xfff}}, {0x468f, 0x5b, {0x2, 0x2f5}}, {0x0, 0x1ff, {0x1, 0x7}}, {0x7, 0x6, {0x1, 0x2}}, {0x0, 0x2d, {0x0, 0x6}}, {0x6, 0x0, {0x1, 0x8}}, {0x1, 0x5, {0x0, 0x6}}, {0x6, 0xffff, {0x2, 0x7}}, {0xc, 0x7fff, {0x3, 0x7}}, {0x9, 0x7, {0x2, 0x16b}}, {0x3, 0x3, {0x1, 0x3ff}}, {0x8a, 0xffff, {0x2, 0x7f}}, {0x9, 0x7, {0x1, 0xf}}, {0x4, 0x1, {0x2, 0x3}}, {0x0, 0x6, {0x1, 0x3}}, {0xa, 0x3, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 20.313959004s ago: executing program 1 (id=1557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000005c0)={0x4, 0x100, 0x1, 0xc78f, 0x400, 0x4, 0x2007, 0x80000001}, 0x20) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb6, 0x1a}, 0x9c) 20.265773809s ago: executing program 5 (id=1558): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x11}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000580)={0x0, 0xf36e, 0x10100, 0x4, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 20.231469303s ago: executing program 36 (id=1558): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x11}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000580)={0x0, 0xf36e, 0x10100, 0x4, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 19.465931089s ago: executing program 1 (id=1576): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 19.433084402s ago: executing program 1 (id=1578): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x1000) sendfile(r0, r0, 0x0, 0x7f03) 19.025384932s ago: executing program 1 (id=1581): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004140)=ANY=[@ANYBLOB="58020000", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf251d00000008000300", @ANYRES32=r2], 0x258}, 0x1, 0x0, 0x0, 0x4040000}, 0x2040800) 19.007900474s ago: executing program 37 (id=1581): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004140)=ANY=[@ANYBLOB="58020000", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf251d00000008000300", @ANYRES32=r2], 0x258}, 0x1, 0x0, 0x0, 0x4040000}, 0x2040800) 11.533448011s ago: executing program 7 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240000000000800054000000000080003"], 0x9c}}, 0x0) 11.521269842s ago: executing program 7 (id=1736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 10.52830074s ago: executing program 7 (id=1747): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000880)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.567947255s ago: executing program 7 (id=1765): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$eJzs3c1rXFUbAPDnTpKmTfu+iSBo3RgQNFA6MTW2CgoVFyJYKOjadphMQ80kUzKT0oSALSK4EVRcCLrpyoUfdefWj63+Fy7EUjUtVlxI5E5m0kkzk07SZCaa3w9u5px77+ScZ879ODPncm8Ae9Zw+icTcTgi3ksiBmvzk4joq6Z6I06urHd7aTGfTkksL7/6W1Jd59bSYj4a3pM6WMs8HBHfvR1xJLO+3PL8wlSuWCzM1vKjlekLo+X5haPnp3OThcnCzPGx8fFjJ54+cXz7Yv3jx4VD199/6YkvT/711kPX3v0+iZNxqLasMY4te35tdjiGa59JX/oRrvHifRe2uyTdrgBbku6aPSt7eRyOweippgCA/7I3I2IZANhjEud/ANhj6r8D3FpazNen7v4i0Vk3XoiI/Svx18c3V5b01sbs9lfHQQduJWtGRpKIGNqG8ocj4pOvX/88nWK7xiEB2nD5SkScHRpef/xP1l2zsFlPbrBsX+11+K75aflGoKEzvkn7P8806/9lVvs/0aT/099k392KZvt/EnF5dcaBbShkAzc+jXiu4dq22w3x1wz11HL/q/b5+pJz54uF9Nj2/4gYib7+ND+2QRkjN/++2WpZY//v9w/e+CwtP329s0bml97+te+ZyFVy9xNzoxtXIh7pbRZ/str+SYv+7+k2y3j52Xc+brUsjT+Ntz6ti7/a/jt3Rli+GvF40/a/c0VbsuH1iaPVzWG0vlE08dVPHw20Kr+x/dMpLb/+XaAT0vYf2Dj+oaTxes3y5sv44ergt62W3Tv+5tv/vuS1arrej7iUq1RmxyL2Ja+sn3/sznsv5R6tpVbWT+Mfeaz5/r/R9p9+JzzbZvy913/9Yuvx76w0/olNtf/mE9duT/W0Kr+99h+vpkZqc9o5/rVbwfv57AAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBRJJruazmSy2ZVneD8YA5liqVw5cq40NzMR1WdlD0Vfpn6ry8GG+6GO1e6HX88fuyv/VEQ8EBEf9h9I6vdRnOhy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQd7DF8/9TP/d3u3YAwI7Z3+0KAAAd5/wPAHuP8z8A7D3tnf97drweAEDn+P4PAHuP8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA77PSpU+m0/OfSYj7NT1ycn5sqXTw6UShPZafn8tl8afZCdrJUmiwWsvnS9L3+X7FUujAeM3OXRiuFcmW0PL9wZro0N1M5c346N1k4U+jrSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDnl+YWpXLFYmJXYQmJ5d1Sj+4me2ua0W+rT0USyO6qxzYkuH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA//8vWSHt") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 9.454794877s ago: executing program 7 (id=1767): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r0 = open(0x0, 0x0, 0x120) getdents64(r0, &(0x7f0000000600)=""/60, 0x48) getdents64(r0, 0xfffffffffffffffe, 0x41) 8.584250032s ago: executing program 7 (id=1778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 8.584122573s ago: executing program 38 (id=1778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 1.595734632s ago: executing program 0 (id=2035): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040011}, 0x100) r1 = io_uring_setup(0x296, &(0x7f0000000540)={0x0, 0xd1e7, 0x800, 0xfffefffd}) fcntl$lock(r1, 0x24, &(0x7f0000000400)={0x2, 0x1, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000000)='0\x00', 0x67) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) 1.41661703s ago: executing program 2 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500400000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 1.294747462s ago: executing program 2 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x0) 1.266153755s ago: executing program 2 (id=2051): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.230091248s ago: executing program 2 (id=2054): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000090) 773.152403ms ago: executing program 8 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x1d, 0x0, 0x4, {0x1, 0xf0, 0x4}, 0x3}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 736.399307ms ago: executing program 8 (id=2083): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) semget(0x3, 0x2, 0x480) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 735.982797ms ago: executing program 8 (id=2085): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 731.250207ms ago: executing program 0 (id=2086): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r1, 0xe, "000500", "1da01af0ccfc11aa04d6b81f39d72b45121b5cc82166a058ee51b59038b6d1abea0dfcf7c078a9e575d29c2ed3d6187d944b4f207e2240862d21247c8e926f512e19d81707d381cac7aa54b6513ffe5e63bcd649bebc869db7af5659474b173a01f9f5ad61488c86a40f03195e63eeb5cbd00155ee18b4812885ac9594858cbfa48e05c1bba9107f851cb0649db8e63ff519a578ebc9a3c4082d9b89853fc94c9f1c3267bc756c1d0f09a48739e2045713d95458c53eb6cf2bd43e52eef63a072cbe3e69b5f30b088b85fa8c2a9c5b99c2f801d7a510cc7bc2986bded68b1b84312afa13b9afe26ea5caebc817935f9d2300"}}, 0x110) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r3, 0x40099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 669.613473ms ago: executing program 0 (id=2088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 669.457413ms ago: executing program 8 (id=2089): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000020940)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x8001, 0x859c, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x0, 0x9, 0xa, 0x0, 0xfffffffffffffffe}]}) 666.357764ms ago: executing program 0 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x20040000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 662.708854ms ago: executing program 3 (id=2091): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 661.177724ms ago: executing program 8 (id=2092): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80}, {0x6}]}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045004a49000004"], 0x0) 642.656016ms ago: executing program 8 (id=2093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffa, 0x7, 0x6361, 0x5, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 624.702328ms ago: executing program 3 (id=2094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251500000008002a008500000008000300", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 618.070738ms ago: executing program 0 (id=2095): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\f', 0x1, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) io_uring_setup(0x3819, &(0x7f00000003c0)) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x407006}, 0x106) 587.805481ms ago: executing program 0 (id=2096): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040011}, 0x100) r1 = io_uring_setup(0x296, &(0x7f0000000540)={0x0, 0xd1e7, 0x800, 0xfffefffd}) fcntl$lock(r1, 0x24, &(0x7f0000000400)={0x2, 0x1, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000000)='0\x00', 0x67) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) 587.231241ms ago: executing program 3 (id=2097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000703000000746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0xb63, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="b69bb5", 0x3}], 0x2}, 0x0) 567.778573ms ago: executing program 3 (id=2098): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000003c0)={0x0, 0x14, 0x8e, "b48ba477d7aa28c5346f3ecd49e2152e217a5ec859ca2e7a386473363367fb46ed69c48e63089491a996acbbf25e2a34315670091e4da4617303e713f2de4e310031f54ed6c9e228fbeea1475edcc4a0877a29deaafcf1fc68413288c2da2a19255acdfd6dd1e1e2ffa2fd552f7470f9c6a15d49115f42d6e381ad38848e6651fdd78714fc762c82d135033f8e39"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "0486a8d6959879570c99b2739541300acf40dd2c779999191f9160508584d9136bdcaa73324e1485cda668c676d6df"}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 380.242412ms ago: executing program 2 (id=2100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 339.473696ms ago: executing program 2 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000880)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 257.534494ms ago: executing program 9 (id=2106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000900)={0x58, 0x9, 0x0, 0x4cf22, 0xa, 0x8003, 0x6, 0x1, r2}, 0x20) 257.306444ms ago: executing program 9 (id=2107): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x0, 0x42, 0x0, 0x1}, 0x28) 257.146384ms ago: executing program 9 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000703000000746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0xb63, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e", 0x26}, {&(0x7f0000000100)="b69bb5", 0x3}], 0x2}, 0x0) 239.232236ms ago: executing program 9 (id=2109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x1d, r1, 0x4, {0x1, 0xf0, 0x4}, 0x3}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 177.952202ms ago: executing program 9 (id=2110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x5, 0x0, 0x0) 177.794412ms ago: executing program 9 (id=2111): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) write(r1, &(0x7f00000001c0)="49bd", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 29.414346ms ago: executing program 3 (id=2112): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1, 0x0, @loopback, @local}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 3 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240"], 0x9c}}, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.432077][ T4589] loop0: detected capacity change from 0 to 1024 [ 57.436873][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.443697][ T4589] EXT4-fs: Ignoring removed nobh option [ 57.449266][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.454929][ T4589] EXT4-fs: Ignoring removed bh option [ 57.480954][ T4471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.507517][ T4589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.523242][ T4471] hsr_slave_0: entered promiscuous mode [ 57.529633][ T4471] hsr_slave_1: entered promiscuous mode [ 57.535899][ T4471] debugfs: 'hsr0' already exists in 'hsr' [ 57.541674][ T4471] Cannot create hsr debugfs directory [ 57.552368][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.574350][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 57.599073][ T4599] loop1: detected capacity change from 0 to 128 [ 57.628621][ T4601] loop1: detected capacity change from 0 to 512 [ 57.653474][ T4601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.655830][ T4471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.673181][ T4601] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.685895][ T4471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.694508][ T4601] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.417: corrupted xattr block 6: invalid header [ 57.710289][ T4471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.715853][ T4601] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 57.726281][ T4601] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.417: corrupted xattr block 6: invalid header [ 57.740134][ T4601] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 57.742433][ T4471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.756914][ T4601] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #12: comm syz.1.417: corrupted xattr block 6: invalid header [ 57.802428][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.816403][ T4471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.837663][ T4471] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.859122][ T4471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.869623][ T4471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.884620][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.891908][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.918542][ T4624] netlink: 'syz.4.425': attribute type 35 has an invalid length. [ 57.931244][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.938396][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.984361][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 58.069514][ T4471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.249363][ T4471] veth0_vlan: entered promiscuous mode [ 58.257713][ T4471] veth1_vlan: entered promiscuous mode [ 58.271559][ T4471] veth0_macvtap: entered promiscuous mode [ 58.286546][ T4471] veth1_macvtap: entered promiscuous mode [ 58.303831][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.314877][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.326140][ T3451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.335636][ T3451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.344963][ T3451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.360723][ T3451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.408931][ T4686] loop8: detected capacity change from 0 to 8 [ 58.409216][ T4685] loop3: detected capacity change from 0 to 512 [ 58.447222][ T148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.464763][ T4689] syz.3.446 uses obsolete (PF_INET,SOCK_PACKET) [ 58.474374][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 58.497659][ T148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.555316][ T148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.634950][ T4703] loop3: detected capacity change from 0 to 2048 [ 58.647953][ T4703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.661103][ T148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.673093][ T4703] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.710834][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 58.768379][ T4693] chnl_net:caif_netlink_parms(): no params data found [ 58.789974][ T148] bridge_slave_1: left allmulticast mode [ 58.795790][ T148] bridge_slave_1: left promiscuous mode [ 58.801610][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.814557][ T148] bridge_slave_0: left allmulticast mode [ 58.820427][ T148] bridge_slave_0: left promiscuous mode [ 58.826340][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.861600][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.870553][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.928374][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.939414][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.949625][ T148] bond0 (unregistering): Released all slaves [ 58.962464][ T148] bond1 (unregistering): (slave veth3): Releasing active interface [ 58.977543][ T148] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 58.987920][ T148] bond1 (unregistering): Released all slaves [ 59.041089][ T148] tipc: Left network mode [ 59.052106][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.059403][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.067259][ T4693] bridge_slave_0: entered allmulticast mode [ 59.074036][ T4693] bridge_slave_0: entered promiscuous mode [ 59.081287][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.088392][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.095805][ T4693] bridge_slave_1: entered allmulticast mode [ 59.102378][ T4693] bridge_slave_1: entered promiscuous mode [ 59.111511][ T148] hsr_slave_0: left promiscuous mode [ 59.117249][ T148] hsr_slave_1: left promiscuous mode [ 59.123359][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.130962][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.141911][ T148] veth1_macvtap: left promiscuous mode [ 59.147517][ T148] veth0_macvtap: left promiscuous mode [ 59.153557][ T148] veth1_vlan: left promiscuous mode [ 59.159031][ T148] veth0_vlan: left promiscuous mode [ 59.212854][ T148] team0 (unregistering): Port device team_slave_1 removed [ 59.222584][ T148] team0 (unregistering): Port device team_slave_0 removed [ 59.267344][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.281797][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.309115][ T4693] team0: Port device team_slave_0 added [ 59.317451][ T4693] team0: Port device team_slave_1 added [ 59.337038][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.344131][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.357943][ T4752] loop5: detected capacity change from 0 to 512 [ 59.370675][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.386689][ T4752] ext4: Bad value for 'sb' [ 59.389186][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.399653][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.426132][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.456439][ T4693] hsr_slave_0: entered promiscuous mode [ 59.462925][ T4693] hsr_slave_1: entered promiscuous mode [ 59.544921][ T4693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.554630][ T4693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.560499][ T4764] tmpfs: Unknown parameter 'usrquota' [ 59.569079][ T4693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.595862][ T4693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.603733][ T4768] loop5: detected capacity change from 0 to 512 [ 59.622445][ T4768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.642210][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.649335][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.653897][ T4768] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.656930][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.672272][ T4768] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.471: corrupted xattr block 19: overlapping e_value [ 59.674296][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.688193][ T4768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 59.707064][ T4768] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.471: corrupted xattr block 19: overlapping e_value [ 59.721021][ T4768] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 59.732002][ T4768] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 59.733251][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.747703][ T4768] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.471: Failed to acquire dquot type 0 [ 59.769446][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.778278][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.788467][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.819241][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.835528][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.842814][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.866504][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.873708][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.884978][ T4790] loop4: detected capacity change from 0 to 512 [ 59.900527][ T4790] ------------[ cut here ]------------ [ 59.906087][ T4790] EA inode 11 i_nlink=2 [ 59.906178][ T4793] loop5: detected capacity change from 0 to 736 [ 59.906482][ T4790] WARNING: CPU: 1 PID: 4790 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 59.919172][ T4693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.926832][ T4790] Modules linked in: [ 59.926880][ T4790] CPU: 1 UID: 0 PID: 4790 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.926913][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.937382][ T4693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.941280][ T4790] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 59.978267][ T4790] Code: 90 49 8d 7e 40 e8 66 01 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fc b8 ff 41 8b 56 48 48 c7 c7 b2 4d 55 86 4c 89 ee e8 c7 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 77 b0 03 0f 1f 84 00 00 00 00 00 [ 59.998113][ T4790] RSP: 0018:ffffc900116fb5a0 EFLAGS: 00010246 [ 59.999132][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.004206][ T4790] RAX: f7e4898bf06eef00 RBX: ffff88811ac82d18 RCX: 0000000000080000 [ 60.012703][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.020599][ T4790] RDX: ffffc9000357f000 RSI: 0000000000003abf RDI: 0000000000003ac0 [ 60.036373][ T4790] RBP: 0000000000000002 R08: 0001c900116fb427 R09: 0000000000000000 [ 60.044553][ T4790] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811ac82cc8 [ 60.052636][ T4790] R13: 000000000000000b R14: ffff88811ac82c80 R15: 0000000000000001 [ 60.060778][ T4790] FS: 00007f1c3de476c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 60.069973][ T4790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.076598][ T4790] CR2: 00007f0d238f5000 CR3: 000000011b242000 CR4: 00000000003506f0 [ 60.084607][ T4790] Call Trace: [ 60.087928][ T4790] [ 60.090887][ T4790] ext4_xattr_set_entry+0x77f/0x1020 [ 60.096284][ T4790] ext4_xattr_ibody_set+0x184/0x3c0 [ 60.101525][ T4790] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 60.107420][ T4790] __ext4_expand_extra_isize+0x246/0x280 [ 60.113175][ T4790] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 60.118843][ T4790] ext4_evict_inode+0x80e/0xd90 [ 60.123717][ T4790] ? __pfx_ext4_evict_inode+0x10/0x10 [ 60.129122][ T4790] evict+0x2e3/0x550 [ 60.133125][ T4790] ? __dquot_initialize+0x146/0x7c0 [ 60.138435][ T4790] iput+0x4ed/0x650 [ 60.142327][ T4790] ext4_process_orphan+0x1a9/0x1c0 [ 60.147463][ T4790] ext4_orphan_cleanup+0x6a8/0xa00 [ 60.152671][ T4790] ext4_fill_super+0x3483/0x3810 [ 60.157744][ T4790] ? snprintf+0x86/0xb0 [ 60.161936][ T4790] ? set_blocksize+0x1a8/0x310 [ 60.166755][ T4790] ? sb_set_blocksize+0xe3/0x100 [ 60.171723][ T4790] ? setup_bdev_super+0x30e/0x370 [ 60.176814][ T4790] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.182132][ T4790] get_tree_bdev_flags+0x291/0x300 [ 60.187309][ T4790] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.192708][ T4790] get_tree_bdev+0x1f/0x30 [ 60.197302][ T4790] ext4_get_tree+0x1c/0x30 [ 60.201753][ T4790] vfs_get_tree+0x57/0x1d0 [ 60.206220][ T4790] do_new_mount+0x24d/0x660 [ 60.210790][ T4790] path_mount+0x4a5/0xb70 [ 60.215163][ T4790] ? user_path_at+0x109/0x130 [ 60.220008][ T4790] __se_sys_mount+0x28c/0x2e0 [ 60.224916][ T4790] __x64_sys_mount+0x67/0x80 [ 60.229569][ T4790] x64_sys_call+0x2b51/0x3000 [ 60.234309][ T4790] do_syscall_64+0xd2/0x200 [ 60.238959][ T4790] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.245148][ T4790] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.250949][ T4790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.257165][ T4790] RIP: 0033:0x7f1c3f3e066a [ 60.261656][ T4790] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.281588][ T4790] RSP: 002b:00007f1c3de46e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.290061][ T4790] RAX: ffffffffffffffda RBX: 00007f1c3de46ef0 RCX: 00007f1c3f3e066a [ 60.298147][ T4790] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1c3de46eb0 [ 60.306432][ T4790] RBP: 0000200000000180 R08: 00007f1c3de46ef0 R09: 0000000001800700 [ 60.314525][ T4790] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 60.322550][ T4790] R13: 00007f1c3de46eb0 R14: 000000000000047c R15: 00002000000004c0 [ 60.330615][ T4790] [ 60.333667][ T4790] ---[ end trace 0000000000000000 ]--- [ 60.341361][ T4790] EXT4-fs (loop4): 1 orphan inode deleted [ 60.348074][ T4790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.382513][ T4818] loop1: detected capacity change from 0 to 512 [ 60.395843][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.419181][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.599958][ T4854] loop4: detected capacity change from 0 to 512 [ 60.613540][ T4854] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.614008][ T4693] veth0_vlan: entered promiscuous mode [ 60.629400][ T4693] veth1_vlan: entered promiscuous mode [ 60.647119][ T4693] veth0_macvtap: entered promiscuous mode [ 60.654862][ T4693] veth1_macvtap: entered promiscuous mode [ 60.672520][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.692965][ T4863] loop4: detected capacity change from 0 to 512 [ 60.701249][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.727578][ T86] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.741608][ T86] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.757801][ T4863] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.764379][ T86] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.771191][ T4863] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 60.792342][ T86] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.820510][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 60.820528][ T29] audit: type=1400 audit(1760480214.668:1589): avc: denied { write } for pid=4875 comm="syz.6.448" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.849944][ T29] audit: type=1400 audit(1760480214.668:1590): avc: denied { open } for pid=4875 comm="syz.6.448" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.851917][ T4877] random: crng reseeded on system resumption [ 60.911671][ T29] audit: type=1400 audit(1760480214.758:1591): avc: denied { ioctl } for pid=4875 comm="syz.6.448" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.223288][ T4942] loop1: detected capacity change from 0 to 512 [ 61.238232][ T4942] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 61.246468][ T4942] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 61.402071][ T4978] loop4: detected capacity change from 0 to 512 [ 61.418583][ T4978] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.426645][ T4978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 61.439361][ T4978] System zones: 0-1, 15-15, 18-18, 34-34 [ 61.445267][ T4978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.452085][ T4978] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 61.464595][ T4978] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 61.479888][ T4978] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 61.487297][ T4978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.558: bg 0: block 40: padding at end of block bitmap is not set [ 61.501678][ T4978] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 61.510695][ T4978] EXT4-fs (loop4): 1 truncate cleaned up [ 61.516800][ T4978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.539724][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.572998][ T4996] loop4: detected capacity change from 0 to 512 [ 61.598943][ T4998] random: crng reseeded on system resumption [ 61.688783][ T5008] syzkaller0: entered promiscuous mode [ 61.694340][ T5008] syzkaller0: entered allmulticast mode [ 61.943862][ T5026] loop4: detected capacity change from 0 to 512 [ 61.952168][ T5026] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 61.960947][ T5026] EXT4-fs (loop4): 1 truncate cleaned up [ 61.967162][ T5026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.991247][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.044031][ T5033] syzkaller0: entered promiscuous mode [ 62.049649][ T5033] syzkaller0: entered allmulticast mode [ 62.527410][ T5092] loop5: detected capacity change from 0 to 512 [ 62.543582][ T5092] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.582247][ T5098] loop3: detected capacity change from 0 to 512 [ 62.595021][ T5098] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 62.605272][ T5098] EXT4-fs (loop3): 1 truncate cleaned up [ 62.625237][ T5092] EXT4-fs (loop5): 1 truncate cleaned up [ 62.631465][ T5098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.644774][ T5092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.673334][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.695362][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.787526][ T5118] loop5: detected capacity change from 0 to 1024 [ 62.806104][ T5118] EXT4-fs: Ignoring removed nobh option [ 62.811790][ T5118] EXT4-fs: Ignoring removed bh option [ 62.824559][ T5122] loop3: detected capacity change from 0 to 2048 [ 62.839213][ T5118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.852598][ T5122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 62.884146][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.908418][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 62.981377][ T5135] syzkaller0: entered promiscuous mode [ 62.987204][ T5135] syzkaller0: entered allmulticast mode [ 62.995300][ T5137] loop3: detected capacity change from 0 to 1024 [ 63.009691][ T5137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.166554][ T5152] loop5: detected capacity change from 0 to 1024 [ 63.173678][ T5152] EXT4-fs: Ignoring removed nobh option [ 63.179485][ T5152] EXT4-fs: Ignoring removed bh option [ 63.197081][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.207928][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.247873][ T5161] loop3: detected capacity change from 0 to 512 [ 63.264430][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.278135][ T5165] loop6: detected capacity change from 0 to 512 [ 63.284783][ T5161] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 63.293572][ T5161] EXT4-fs (loop3): 1 truncate cleaned up [ 63.307563][ T5165] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 63.317873][ T5161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.323050][ T5172] syzkaller0: entered promiscuous mode [ 63.336017][ T5172] syzkaller0: entered allmulticast mode [ 63.350305][ T5165] EXT4-fs (loop6): 1 truncate cleaned up [ 63.358661][ T5165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.375128][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.404416][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.453892][ T5187] loop4: detected capacity change from 0 to 1024 [ 63.464011][ T5187] EXT4-fs: Ignoring removed nobh option [ 63.469788][ T5187] EXT4-fs: Ignoring removed bh option [ 63.478315][ T5190] loop6: detected capacity change from 0 to 512 [ 63.487814][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.588694][ T5202] loop3: detected capacity change from 0 to 512 [ 63.589034][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.605638][ T5202] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 63.614677][ T5202] EXT4-fs (loop3): 1 truncate cleaned up [ 63.621616][ T5202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.677237][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.700982][ T5213] netlink: 'syz.4.658': attribute type 2 has an invalid length. [ 63.717917][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.664'. [ 63.740665][ T5221] loop5: detected capacity change from 0 to 512 [ 63.766754][ T5227] random: crng reseeded on system resumption [ 63.787688][ T5225] syzkaller0: entered promiscuous mode [ 63.793213][ T5225] syzkaller0: entered allmulticast mode [ 63.827001][ T5235] loop6: detected capacity change from 0 to 512 [ 63.859524][ T5235] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 63.903721][ T5235] EXT4-fs (loop6): 1 truncate cleaned up [ 63.932443][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 63.960944][ T5254] random: crng reseeded on system resumption [ 64.080004][ T5278] loop1: detected capacity change from 0 to 736 [ 64.201337][ T5299] loop5: detected capacity change from 0 to 512 [ 64.234452][ T5299] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.268437][ T5299] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.290485][ T5316] loop1: detected capacity change from 0 to 736 [ 64.306505][ T5299] EXT4-fs (loop5): 1 truncate cleaned up [ 64.346197][ T5299] EXT4-fs (loop5): shut down requested (2) [ 64.346199][ T29] audit: type=1400 audit(1760480218.198:1592): avc: denied { ioctl } for pid=5298 comm="syz.5.705" path="/46/file1/bus" dev="loop5" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.404338][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 64.420668][ T29] audit: type=1400 audit(1760480218.198:1593): avc: denied { execute } for pid=5298 comm="syz.5.705" path="/46/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.494519][ T5334] loop6: detected capacity change from 0 to 1024 [ 64.532945][ T5334] EXT4-fs: Ignoring removed nobh option [ 64.538804][ T5334] EXT4-fs: Ignoring removed bh option [ 64.596299][ T5349] loop5: detected capacity change from 0 to 512 [ 64.624106][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.632633][ T5349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.645828][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.651557][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 64.664208][ T5349] EXT4-fs (loop5): 1 truncate cleaned up [ 64.742695][ T5370] netlink: 'syz.6.736': attribute type 2 has an invalid length. [ 64.874951][ T5386] loop6: detected capacity change from 0 to 512 [ 64.897039][ T5386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 64.911079][ T5386] EXT4-fs (loop6): 1 truncate cleaned up [ 64.960318][ T5397] loop1: detected capacity change from 0 to 512 [ 65.023476][ T5403] loop6: detected capacity change from 0 to 736 [ 65.061978][ T5409] loop5: detected capacity change from 0 to 512 [ 65.069537][ T5409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.080613][ T5409] EXT4-fs (loop5): 1 truncate cleaned up [ 65.142167][ T29] audit: type=1400 audit(1760480218.988:1594): avc: denied { read write } for pid=5414 comm="syz.5.758" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.188544][ T29] audit: type=1400 audit(1760480218.988:1595): avc: denied { open } for pid=5414 comm="syz.5.758" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.223319][ T5425] netlink: 240 bytes leftover after parsing attributes in process `syz.1.753'. [ 65.347657][ T29] audit: type=1400 audit(1760480219.188:1596): avc: denied { ioctl } for pid=5447 comm="syz.4.773" path="socket:[11865]" dev="sockfs" ino=11865 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.373164][ T29] audit: type=1400 audit(1760480219.198:1597): avc: denied { ioctl } for pid=5428 comm="syz.6.767" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.471755][ T5468] loop4: detected capacity change from 0 to 512 [ 65.478092][ T5469] netlink: 240 bytes leftover after parsing attributes in process `syz.1.769'. [ 65.479519][ T5468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.499354][ T5468] EXT4-fs (loop4): 1 truncate cleaned up [ 65.548661][ T5479] netlink: 'syz.4.785': attribute type 2 has an invalid length. [ 65.582565][ T5487] netlink: 240 bytes leftover after parsing attributes in process `syz.6.776'. [ 65.670265][ T5504] loop4: detected capacity change from 0 to 512 [ 65.677361][ T5504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.681007][ T5506] loop6: detected capacity change from 0 to 1024 [ 65.688692][ T5504] EXT4-fs (loop4): 1 truncate cleaned up [ 65.739403][ T5516] random: crng reseeded on system resumption [ 65.750338][ T5516] Unrecognized hibernate image header format! [ 65.756480][ T5516] PM: hibernation: Image mismatch: architecture specific data [ 65.833424][ T5525] netlink: 240 bytes leftover after parsing attributes in process `syz.5.795'. [ 65.905582][ T5537] loop5: detected capacity change from 0 to 512 [ 65.913923][ T5540] netlink: 240 bytes leftover after parsing attributes in process `syz.6.801'. [ 65.924454][ T5537] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 65.936350][ T5537] EXT4-fs (loop5): 1 truncate cleaned up [ 65.962597][ T5543] loop4: detected capacity change from 0 to 1024 [ 65.979930][ T5549] netlink: 'syz.5.812': attribute type 2 has an invalid length. [ 65.990787][ T5551] loop6: detected capacity change from 0 to 1764 [ 66.145817][ T5576] netlink: 'syz.3.824': attribute type 2 has an invalid length. [ 66.167933][ T5578] netlink: 240 bytes leftover after parsing attributes in process `syz.5.814'. [ 66.208397][ T5585] loop5: detected capacity change from 0 to 2048 [ 66.289766][ T5585] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.297165][ T5600] loop3: detected capacity change from 0 to 2048 [ 66.312362][ T5585] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1748 with error 28 [ 66.324884][ T5585] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.324884][ T5585] [ 66.334600][ T5585] EXT4-fs (loop5): Total free blocks count 0 [ 66.340649][ T5585] EXT4-fs (loop5): Free/Dirty block details [ 66.346944][ T5585] EXT4-fs (loop5): free_blocks=2415919104 [ 66.352701][ T5585] EXT4-fs (loop5): dirty_blocks=1760 [ 66.358349][ T5585] EXT4-fs (loop5): Block reservation details [ 66.364608][ T5585] EXT4-fs (loop5): i_reserved_data_blocks=110 [ 66.412999][ T5609] netlink: 'syz.1.835': attribute type 2 has an invalid length. [ 66.466223][ T5619] loop3: detected capacity change from 0 to 1024 [ 66.473263][ T5619] EXT4-fs: Ignoring removed nobh option [ 66.479036][ T5619] EXT4-fs: Ignoring removed bh option [ 66.511115][ T5625] xt_hashlimit: max too large, truncated to 1048576 [ 66.565338][ T5628] loop1: detected capacity change from 0 to 512 [ 66.580404][ T5630] loop3: detected capacity change from 0 to 512 [ 66.594184][ T5630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.616494][ T5630] EXT4-fs (loop3): 1 truncate cleaned up [ 66.645610][ T5635] loop8: detected capacity change from 0 to 8 [ 66.692696][ T5641] netlink: 'syz.3.848': attribute type 2 has an invalid length. [ 66.764362][ T5649] loop3: detected capacity change from 0 to 512 [ 66.845156][ T5657] loop3: detected capacity change from 0 to 512 [ 66.855060][ T5659] loop1: detected capacity change from 0 to 2048 [ 66.863874][ T5657] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 66.882918][ T5657] EXT4-fs (loop3): 1 truncate cleaned up [ 67.112152][ T5689] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 67.171472][ T5699] loop5: detected capacity change from 0 to 1024 [ 67.178727][ T5699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.204805][ T29] audit: type=1400 audit(1760480221.048:1598): avc: denied { append } for pid=5698 comm="syz.5.874" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.231979][ T5708] loop6: detected capacity change from 0 to 512 [ 67.260105][ T5712] loop3: detected capacity change from 0 to 1764 [ 67.280567][ T5717] capability: warning: `syz.6.880' uses deprecated v2 capabilities in a way that may be insecure [ 67.303846][ T5719] netlink: 'syz.5.882': attribute type 2 has an invalid length. [ 67.334280][ T5723] loop6: detected capacity change from 0 to 764 [ 67.342230][ T5723] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.393567][ T5731] loop5: detected capacity change from 0 to 512 [ 67.396064][ T5732] loop6: detected capacity change from 0 to 1024 [ 67.404626][ T5731] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 67.407775][ T5732] EXT4-fs: Ignoring removed nobh option [ 67.416564][ T5731] EXT4-fs (loop5): 1 truncate cleaned up [ 67.420868][ T5732] EXT4-fs: Ignoring removed bh option [ 67.469296][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.485788][ T5740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.598621][ T5757] loop6: detected capacity change from 0 to 512 [ 67.616723][ T5757] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 67.619130][ T5763] loop4: detected capacity change from 0 to 512 [ 67.633174][ T5763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.643579][ T5761] loop5: detected capacity change from 0 to 1024 [ 67.644085][ T5757] EXT4-fs (loop6): 1 truncate cleaned up [ 67.650593][ T5761] EXT4-fs: Ignoring removed nobh option [ 67.661372][ T5761] EXT4-fs: Ignoring removed bh option [ 67.673059][ T5763] EXT4-fs (loop4): 1 truncate cleaned up [ 67.716929][ T5773] loop4: detected capacity change from 0 to 512 [ 67.836984][ T5795] loop5: detected capacity change from 0 to 512 [ 67.843353][ T5797] loop4: detected capacity change from 0 to 1024 [ 67.845142][ T5795] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.850304][ T5797] EXT4-fs: Ignoring removed nobh option [ 67.865323][ T5797] EXT4-fs: Ignoring removed bh option [ 67.872461][ T5795] EXT4-fs (loop5): 1 truncate cleaned up [ 67.904069][ T5804] loop6: detected capacity change from 0 to 512 [ 68.010031][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.018716][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.031717][ T5827] loop6: detected capacity change from 0 to 512 [ 68.037254][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.039156][ T5827] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 68.056689][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.056855][ T5827] EXT4-fs (loop6): 1 truncate cleaned up [ 68.096865][ T5833] loop6: detected capacity change from 0 to 512 [ 68.127634][ T5836] loop6: detected capacity change from 0 to 512 [ 68.128156][ T5837] loop4: detected capacity change from 0 to 256 [ 68.150766][ T5837] FAT-fs (loop4): IO charset cp863 not found [ 68.190329][ T36] hid_parser_main: 8 callbacks suppressed [ 68.190385][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.203716][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.211183][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.218658][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.226101][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.233526][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.241066][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.248674][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.256130][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.263574][ T36] hid-generic 01FF:0000:0800.0002: unknown main item tag 0x0 [ 68.273006][ T36] hid-generic 01FF:0000:0800.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 68.314559][ T5859] loop4: detected capacity change from 0 to 512 [ 68.321903][ T5859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.333616][ T5859] EXT4-fs (loop4): 1 truncate cleaned up [ 68.371337][ T5864] loop4: detected capacity change from 0 to 512 [ 68.481024][ T5879] loop4: detected capacity change from 0 to 1024 [ 68.488293][ T5879] EXT4-fs: Ignoring removed nobh option [ 68.494041][ T5879] EXT4-fs: Ignoring removed bh option [ 68.560131][ T5888] loop4: detected capacity change from 0 to 512 [ 68.567549][ T5888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.588494][ T5888] EXT4-fs (loop4): 1 truncate cleaned up [ 68.636813][ T5895] xt_hashlimit: max too large, truncated to 1048576 [ 68.737241][ T36] hid-generic 0003:0003:0000.0003: hidraw0: USB HID v0.03 Device [syz0] on syz1 [ 68.774188][ T5911] loop5: detected capacity change from 0 to 2048 [ 68.792561][ T5911] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.858227][ T5923] loop4: detected capacity change from 0 to 512 [ 68.865074][ T5923] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.877548][ T5923] EXT4-fs (loop4): 1 truncate cleaned up [ 68.914212][ T5929] __nla_validate_parse: 9 callbacks suppressed [ 68.914233][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 69.017662][ T29] audit: type=1400 audit(1760480222.868:1599): avc: denied { setopt } for pid=5944 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.063553][ T5951] loop1: detected capacity change from 0 to 512 [ 69.073317][ T5951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.080097][ T5953] loop3: detected capacity change from 0 to 512 [ 69.085184][ T5951] EXT4-fs (loop1): 1 truncate cleaned up [ 69.125803][ T5958] netlink: 240 bytes leftover after parsing attributes in process `syz.1.984'. [ 69.143387][ T5960] netlink: 'syz.3.985': attribute type 2 has an invalid length. [ 69.286522][ T5976] loop3: detected capacity change from 0 to 512 [ 69.407969][ T5984] netlink: 'syz.6.997': attribute type 2 has an invalid length. [ 69.561277][ T5993] netlink: 240 bytes leftover after parsing attributes in process `syz.3.996'. [ 69.598900][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 69.624075][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.637841][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.797228][ T6012] netlink: 'syz.3.1008': attribute type 2 has an invalid length. [ 69.993058][ T6037] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1010'. [ 70.035780][ T6039] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1020'. [ 70.080160][ T6049] loop4: detected capacity change from 0 to 512 [ 70.098789][ T6049] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 70.109630][ T6054] xt_hashlimit: max too large, truncated to 1048576 [ 70.121073][ T6049] EXT4-fs (loop4): 1 truncate cleaned up [ 70.136291][ T6049] EXT4-fs mount: 64 callbacks suppressed [ 70.136308][ T6049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.153385][ T6059] netlink: 'syz.3.1030': attribute type 2 has an invalid length. [ 70.158342][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1024'. [ 70.194789][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.355923][ T6082] xt_hashlimit: max too large, truncated to 1048576 [ 70.409130][ T29] audit: type=1400 audit(1760480224.258:1600): avc: denied { write } for pid=6090 comm="syz.4.1043" lport=46663 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.437276][ T29] audit: type=1400 audit(1760480224.258:1601): avc: denied { getopt } for pid=6090 comm="syz.4.1043" lport=46663 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.623426][ T6122] xt_hashlimit: max too large, truncated to 1048576 [ 70.652404][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.661136][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.689074][ T6132] loop4: detected capacity change from 0 to 512 [ 70.707666][ T6132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.720265][ T6132] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.745242][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.901537][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 70.938326][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 71.110822][ T6162] loop1: detected capacity change from 0 to 1024 [ 71.127736][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.162000][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.345339][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 71.708963][ T6263] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1101'. [ 71.796944][ T6274] loop5: detected capacity change from 0 to 1024 [ 71.803684][ T6274] EXT4-fs: Ignoring removed orlov option [ 71.810250][ T6274] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 0 [ 71.868589][ T6280] syzkaller0: entered promiscuous mode [ 71.874162][ T6280] syzkaller0: entered allmulticast mode [ 71.955759][ T37] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.978110][ T37] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.990850][ T37] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.999884][ T37] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.052622][ T6304] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 72.077516][ T3413] kernel write not supported for file bpf-prog (pid: 3413 comm: kworker/0:4) [ 72.282098][ T6328] loop8: detected capacity change from 0 to 8 [ 72.320565][ T29] audit: type=1400 audit(1760480226.168:1602): avc: denied { ioctl } for pid=6331 comm="syz.1.1144" path="socket:[14293]" dev="sockfs" ino=14293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.396917][ T6338] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 72.456115][ T6345] loop3: detected capacity change from 0 to 1024 [ 72.477255][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.490538][ T29] audit: type=1400 audit(1760480226.338:1603): avc: denied { getopt } for pid=6343 comm="syz.3.1150" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.522988][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.558533][ T6355] loop3: detected capacity change from 0 to 512 [ 72.567589][ T6355] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.576397][ T6355] EXT4-fs (loop3): 1 truncate cleaned up [ 72.582398][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.606783][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.912099][ T6381] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 73.047969][ T6405] netlink: 'syz.4.1176': attribute type 2 has an invalid length. [ 73.092638][ T6413] erspan0: entered promiscuous mode [ 73.098273][ T29] audit: type=1326 audit(1760480226.938:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.113144][ T6413] macvtap1: entered promiscuous mode [ 73.121957][ T29] audit: type=1326 audit(1760480226.938:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.127629][ T6413] macvtap1: entered allmulticast mode [ 73.151098][ T29] audit: type=1326 audit(1760480226.938:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.156644][ T6413] erspan0: entered allmulticast mode [ 73.179976][ T29] audit: type=1326 audit(1760480226.938:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.180014][ T29] audit: type=1326 audit(1760480226.938:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.180047][ T29] audit: type=1326 audit(1760480226.938:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.256062][ T29] audit: type=1326 audit(1760480226.938:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.5.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2d2aeec9 code=0x7ffc0000 [ 73.302280][ T6413] erspan0: left allmulticast mode [ 73.307735][ T6413] erspan0: left promiscuous mode [ 73.349810][ T6427] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 73.371919][ T6432] loop5: detected capacity change from 0 to 164 [ 73.377998][ T6427] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 73.391210][ T6427] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 73.413296][ T6427] bond1 (unregistering): Released all slaves [ 73.534166][ T6458] veth1_macvtap: left promiscuous mode [ 73.541116][ T6458] macsec0: entered allmulticast mode [ 73.551531][ T6462] loop3: detected capacity change from 0 to 512 [ 73.551653][ T6458] veth1_macvtap: entered promiscuous mode [ 73.563910][ T6458] veth1_macvtap: entered allmulticast mode [ 73.570725][ T6458] macsec0: left allmulticast mode [ 73.575826][ T6458] veth1_macvtap: left allmulticast mode [ 73.583458][ T6462] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 73.605834][ T6467] syzkaller0: tun_chr_ioctl cmd 35108 [ 73.606428][ T6462] EXT4-fs (loop3): 1 truncate cleaned up [ 73.617487][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.654391][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.790215][ T6504] netlink: 'syz.6.1216': attribute type 2 has an invalid length. [ 73.809978][ T6509] loop4: detected capacity change from 0 to 512 [ 73.837630][ T6509] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 73.855287][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 73.857200][ T6509] EXT4-fs (loop4): 1 truncate cleaned up [ 73.868092][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.936904][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.120177][ T6544] loop4: detected capacity change from 0 to 512 [ 74.137642][ T6544] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 74.151485][ T6544] EXT4-fs (loop4): 1 truncate cleaned up [ 74.157951][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.172561][ T6544] __nla_validate_parse: 6 callbacks suppressed [ 74.172578][ T6544] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1234'. [ 74.206953][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.287312][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 74.444589][ T6573] loop1: detected capacity change from 0 to 512 [ 74.452898][ T6573] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 74.461724][ T6573] EXT4-fs (loop1): 1 truncate cleaned up [ 74.467848][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.482252][ T6573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1246'. [ 74.502483][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.520646][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 74.529788][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.559838][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.078031][ T6606] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.109473][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 75.110063][ T6613] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1256'. [ 75.118671][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.151483][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.331222][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.339860][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.562741][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 75.663825][ T6661] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1275'. [ 75.698982][ T6665] loop1: detected capacity change from 0 to 512 [ 75.706143][ T6665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.726404][ T6665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1284: invalid indirect mapped block 4294967295 (level 0) [ 75.740771][ T6665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1284: invalid indirect mapped block 4294967295 (level 1) [ 75.755914][ T6665] EXT4-fs (loop1): 1 orphan inode deleted [ 75.761771][ T6665] EXT4-fs (loop1): 1 truncate cleaned up [ 75.767836][ T6665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.783289][ T29] audit: type=1400 audit(1760480229.628:1611): avc: denied { remount } for pid=6664 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.792127][ T6675] loop4: detected capacity change from 0 to 512 [ 75.807543][ T6665] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.811737][ T6675] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 75.826037][ T6675] EXT4-fs (loop4): 1 truncate cleaned up [ 75.832118][ T6675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.848371][ T6675] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1288'. [ 75.859283][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.878259][ T6678] loop6: detected capacity change from 0 to 512 [ 75.885291][ T6678] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.890696][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 75.897522][ T6678] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.903166][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.914582][ T6678] EXT4-fs (loop6): 1 truncate cleaned up [ 75.929575][ T6678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.947701][ T6678] tmpfs: Bad value for 'mpol' [ 75.966919][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.042747][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 76.104388][ T6712] loop3: detected capacity change from 0 to 1024 [ 76.112931][ T6713] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1295'. [ 76.120878][ T6712] EXT4-fs: Ignoring removed orlov option [ 76.136469][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.147690][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.180302][ T6712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.208638][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.420165][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.428863][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.895867][ T36] hid_parser_main: 98 callbacks suppressed [ 76.895885][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.909640][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.036902][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 77.058212][ T6811] loop6: detected capacity change from 0 to 512 [ 77.068038][ T6811] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 77.092104][ T6811] EXT4-fs (loop6): 1 truncate cleaned up [ 77.111095][ T6811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.150176][ T4693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.168265][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.177316][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.356034][ T29] audit: type=1400 audit(1760480231.198:1612): avc: denied { write } for pid=6864 comm="syz.4.1364" name="tcp" dev="proc" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.619123][ T6896] loop4: detected capacity change from 0 to 128 [ 77.627934][ T6896] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.640610][ T6896] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.663475][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.208608][ T6916] loop5: detected capacity change from 0 to 256 [ 78.489521][ T6941] loop8: detected capacity change from 0 to 8 [ 79.269534][ T29] audit: type=1400 audit(1760480233.118:1613): avc: denied { relabelfrom } for pid=6976 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.289775][ T29] audit: type=1400 audit(1760480233.118:1614): avc: denied { relabelto } for pid=6976 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.558825][ T29] audit: type=1400 audit(1760480233.408:1615): avc: denied { associate } for pid=6996 comm="syz.6.1421" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.613880][ T7002] loop4: detected capacity change from 0 to 512 [ 79.627207][ T7002] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 79.636851][ T7002] EXT4-fs (loop4): 1 truncate cleaned up [ 79.642965][ T7002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.657252][ T7002] __nla_validate_parse: 5 callbacks suppressed [ 79.657271][ T7002] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1423'. [ 79.685410][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.707059][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 79.716175][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 79.722371][ T7008] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1419'. [ 79.730201][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 79.734611][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.743078][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 79.752627][ T37] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.768580][ T37] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.777802][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.812687][ T7015] syzkaller0: entered promiscuous mode [ 79.818341][ T7015] syzkaller0: entered allmulticast mode [ 79.904489][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 80.000567][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 80.221903][ T7033] loop5: detected capacity change from 0 to 512 [ 80.261604][ T7033] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 80.270881][ T7033] EXT4-fs (loop5): 1 truncate cleaned up [ 80.276989][ T7033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.291230][ T7033] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1435'. [ 80.313760][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.351703][ T7048] syzkaller0: entered promiscuous mode [ 80.357551][ T7048] syzkaller0: entered allmulticast mode [ 80.427140][ T7053] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1436'. [ 80.508873][ T7059] loop6: detected capacity change from 0 to 256 [ 80.578336][ T7068] loop6: detected capacity change from 0 to 2048 [ 80.586307][ T7068] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 80.832261][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.870815][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.946507][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.999647][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.011149][ T7082] syzkaller0: entered promiscuous mode [ 81.016740][ T7082] syzkaller0: entered allmulticast mode [ 81.060669][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 81.117500][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.124633][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.132227][ T7070] bridge_slave_0: entered allmulticast mode [ 81.138944][ T7070] bridge_slave_0: entered promiscuous mode [ 81.146475][ T52] bridge_slave_1: left allmulticast mode [ 81.152261][ T52] bridge_slave_1: left promiscuous mode [ 81.158060][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.166325][ T52] bridge_slave_0: left allmulticast mode [ 81.172119][ T52] bridge_slave_0: left promiscuous mode [ 81.178277][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.231410][ T7094] loop5: detected capacity change from 0 to 764 [ 81.239134][ T7094] rock: directory entry would overflow storage [ 81.245384][ T7094] rock: sig=0x5245, size=8, remaining=5 [ 81.268277][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.278778][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.288696][ T52] bond0 (unregistering): Released all slaves [ 81.296986][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.304245][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.311649][ T7070] bridge_slave_1: entered allmulticast mode [ 81.318344][ T7070] bridge_slave_1: entered promiscuous mode [ 81.355694][ T29] audit: type=1400 audit(1760480235.198:1616): avc: denied { create } for pid=7102 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.381916][ T52] hsr_slave_0: left promiscuous mode [ 81.388209][ T52] hsr_slave_1: left promiscuous mode [ 81.394124][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.401611][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.412801][ T52] veth1_macvtap: left promiscuous mode [ 81.418481][ T52] veth0_macvtap: left promiscuous mode [ 81.424014][ T52] veth1_vlan: left promiscuous mode [ 81.429408][ T52] veth0_vlan: left promiscuous mode [ 81.492654][ T52] team0 (unregistering): Port device team_slave_1 removed [ 81.503204][ T52] team0 (unregistering): Port device team_slave_0 removed [ 81.542343][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.555318][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.600804][ T7070] team0: Port device team_slave_0 added [ 81.611051][ T7070] team0: Port device team_slave_1 added [ 81.628769][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.635870][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.662164][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.673448][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.680541][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.706636][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.733488][ T7070] hsr_slave_0: entered promiscuous mode [ 81.739798][ T7070] hsr_slave_1: entered promiscuous mode [ 81.822262][ T7070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 81.831812][ T7070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 81.841486][ T7070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 81.851148][ T7070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 81.887144][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.900117][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.910461][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.917639][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.928589][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.935941][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.001896][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.117186][ T7070] veth0_vlan: entered promiscuous mode [ 82.125151][ T7070] veth1_vlan: entered promiscuous mode [ 82.141210][ T7070] veth0_macvtap: entered promiscuous mode [ 82.148793][ T7070] veth1_macvtap: entered promiscuous mode [ 82.160411][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.171817][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.182733][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.191932][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.201460][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210362][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.640172][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.648050][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.655860][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.663641][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.671504][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.679381][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.687257][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.695155][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.702976][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.711039][ T7190] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.844528][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.853730][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.231741][ T7255] loop4: detected capacity change from 0 to 2048 [ 83.238975][ T7255] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 83.420824][ T7264] loop1: detected capacity change from 0 to 764 [ 83.432822][ T3451] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.442809][ T3451] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.453628][ T7264] rock: directory entry would overflow storage [ 83.459884][ T7264] rock: sig=0x5245, size=8, remaining=5 [ 83.497424][ T3451] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.507411][ T3451] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.567910][ T3451] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.577811][ T3451] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.629748][ T3451] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.639895][ T3451] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.691097][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 83.734393][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.741751][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.749642][ T7268] bridge_slave_0: entered allmulticast mode [ 83.756337][ T7268] bridge_slave_0: entered promiscuous mode [ 83.765690][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.772947][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.780561][ T7268] bridge_slave_1: entered allmulticast mode [ 83.787180][ T7268] bridge_slave_1: entered promiscuous mode [ 83.809921][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.821385][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.901037][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.918260][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.928283][ T3451] bond0 (unregistering): Released all slaves [ 83.937945][ T7268] team0: Port device team_slave_0 added [ 83.945156][ T7268] team0: Port device team_slave_1 added [ 83.969727][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.976998][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.997024][ T29] audit: type=1400 audit(1760480237.828:1617): avc: denied { create } for pid=7298 comm="syz.7.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.003015][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.005051][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.022891][ T29] audit: type=1400 audit(1760480237.828:1618): avc: denied { ioctl } for pid=7298 comm="syz.7.1530" path="socket:[19087]" dev="sockfs" ino=19087 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.033213][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.033259][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.123410][ T7268] hsr_slave_0: entered promiscuous mode [ 84.129830][ T7268] hsr_slave_1: entered promiscuous mode [ 84.135888][ T7268] debugfs: 'hsr0' already exists in 'hsr' [ 84.141639][ T7268] Cannot create hsr debugfs directory [ 84.149760][ T3451] hsr_slave_0: left promiscuous mode [ 84.155521][ T3451] hsr_slave_1: left promiscuous mode [ 84.161515][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.169075][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.179213][ T3451] veth1_macvtap: left promiscuous mode [ 84.184867][ T3451] veth0_macvtap: left promiscuous mode [ 84.190695][ T3451] veth1_vlan: left promiscuous mode [ 84.196232][ T3451] veth0_vlan: left promiscuous mode [ 84.343013][ T7268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 84.351954][ T7268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 84.362230][ T7268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 84.371636][ T7268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 84.404586][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.411836][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.419711][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.426865][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.456482][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.468287][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.478054][ T2083] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.486505][ T2083] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.497996][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.505139][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.518729][ T2083] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.525891][ T2083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.551034][ T3451] IPVS: stop unused estimator thread 0... [ 84.552737][ T7268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.609802][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.721169][ T7268] veth0_vlan: entered promiscuous mode [ 84.729057][ T7268] veth1_vlan: entered promiscuous mode [ 84.744324][ T7268] veth0_macvtap: entered promiscuous mode [ 84.751896][ T7268] veth1_macvtap: entered promiscuous mode [ 84.762307][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.773657][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.784862][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.794117][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803430][ T3451] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.823365][ T3451] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.918871][ T7352] loop7: detected capacity change from 0 to 128 [ 84.925571][ T7352] EXT4-fs: Ignoring removed nobh option [ 84.933294][ T7352] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.945964][ T7352] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.971330][ T7070] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.980988][ T7359] loop5: detected capacity change from 0 to 2048 [ 84.989153][ T7359] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 85.054764][ T7370] loop8: detected capacity change from 0 to 128 [ 85.061951][ T7370] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 85.073832][ T7370] FAT-fs (loop8): error, clusters badly computed (0 != 1) [ 85.081119][ T7370] FAT-fs (loop8): Filesystem has been set read-only [ 85.087888][ T7370] FAT-fs (loop8): error, clusters badly computed (1 != 2) [ 85.095203][ T7370] FAT-fs (loop8): error, clusters badly computed (2 != 3) [ 85.102562][ T7370] FAT-fs (loop8): error, clusters badly computed (3 != 4) [ 85.109750][ T7370] FAT-fs (loop8): error, clusters badly computed (4 != 5) [ 85.117048][ T7370] FAT-fs (loop8): error, clusters badly computed (5 != 6) [ 85.124402][ T7370] FAT-fs (loop8): error, clusters badly computed (6 != 7) [ 85.131590][ T7370] FAT-fs (loop8): error, clusters badly computed (7 != 8) [ 85.138903][ T7370] FAT-fs (loop8): error, clusters badly computed (8 != 9) [ 85.146138][ T7370] FAT-fs (loop8): error, clusters badly computed (9 != 10) [ 85.177716][ T7268] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 85.466768][ T3451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.477151][ T3451] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.539160][ T3451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.543195][ T7396] __nla_validate_parse: 4 callbacks suppressed [ 85.543210][ T7396] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1556'. [ 85.549640][ T3451] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.600307][ T7400] syzkaller0: entered promiscuous mode [ 85.605936][ T7400] syzkaller0: entered allmulticast mode [ 85.630142][ T3451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.640658][ T3451] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.711466][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 85.724845][ T3451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.735264][ T3451] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.783090][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.790613][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.798215][ T7393] bridge_slave_0: entered allmulticast mode [ 85.804907][ T7393] bridge_slave_0: entered promiscuous mode [ 85.811985][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.819273][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.827165][ T7393] bridge_slave_1: entered allmulticast mode [ 85.831601][ T7419] loop3: detected capacity change from 0 to 2048 [ 85.833919][ T7393] bridge_slave_1: entered promiscuous mode [ 85.857213][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.869891][ T7419] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.898706][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.908505][ T3451] bridge_slave_1: left allmulticast mode [ 85.914220][ T3451] bridge_slave_1: left promiscuous mode [ 85.920077][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.928900][ T3451] bridge_slave_0: left allmulticast mode [ 85.932551][ T7423] loop7: detected capacity change from 0 to 512 [ 85.934604][ T3451] bridge_slave_0: left promiscuous mode [ 85.946889][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.947733][ T7423] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 85.964599][ T7423] EXT4-fs (loop7): 1 truncate cleaned up [ 85.970798][ T7423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.984498][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.986498][ T7423] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1565'. [ 86.014811][ T7070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.079784][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.108104][ T29] audit: type=1400 audit(1760480239.948:1619): avc: denied { ioctl } for pid=7435 comm="syz.3.1571" path="socket:[20660]" dev="sockfs" ino=20660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.133689][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.145320][ T3451] bond0 (unregistering): Released all slaves [ 86.157938][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.210390][ T3451] hsr_slave_0: left promiscuous mode [ 86.216345][ T3451] hsr_slave_1: left promiscuous mode [ 86.225583][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.233044][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.234235][ T7452] loop1: detected capacity change from 0 to 2048 [ 86.247468][ T7452] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 86.256110][ T7453] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1569'. [ 86.257264][ T3451] veth1_macvtap: left promiscuous mode [ 86.271225][ T3451] veth0_macvtap: left promiscuous mode [ 86.305837][ T3451] veth1_vlan: left promiscuous mode [ 86.320658][ T3451] veth0_vlan: left promiscuous mode [ 86.390006][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 86.399923][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 86.433189][ T7393] team0: Port device team_slave_0 added [ 86.439528][ T7451] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1575'. [ 86.448844][ T7454] syzkaller0: entered promiscuous mode [ 86.454355][ T7454] syzkaller0: entered allmulticast mode [ 86.488883][ T7393] team0: Port device team_slave_1 added [ 86.520438][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.527569][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.554071][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.566230][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.573332][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.599308][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.627779][ T7393] hsr_slave_0: entered promiscuous mode [ 86.633890][ T7393] hsr_slave_1: entered promiscuous mode [ 86.639740][ T7393] debugfs: 'hsr0' already exists in 'hsr' [ 86.645469][ T7393] Cannot create hsr debugfs directory [ 86.759927][ T7393] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 86.777197][ T7393] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 86.787106][ T7393] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 86.798642][ T7393] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 86.857050][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.874072][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.888805][ T3451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.902985][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.910147][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.932833][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.940013][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.957738][ T3451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.012758][ T3451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.030964][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 87.059378][ T3451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.092335][ T7502] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1587'. [ 87.102428][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.109705][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.117024][ T7470] bridge_slave_0: entered allmulticast mode [ 87.126472][ T7470] bridge_slave_0: entered promiscuous mode [ 87.134233][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.141587][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.150100][ T7470] bridge_slave_1: entered allmulticast mode [ 87.157096][ T7470] bridge_slave_1: entered promiscuous mode [ 87.197812][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.213651][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.229517][ T3451] bridge_slave_1: left allmulticast mode [ 87.235312][ T3451] bridge_slave_1: left promiscuous mode [ 87.241201][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.251152][ T7511] loop3: detected capacity change from 0 to 2048 [ 87.258000][ T3451] bridge_slave_0: left allmulticast mode [ 87.263728][ T3451] bridge_slave_0: left promiscuous mode [ 87.269622][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.287740][ T7511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.300477][ T7511] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.334035][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.344209][ T3451] team0: Port device geneve1 removed [ 87.459245][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.469803][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.479419][ T3451] bond0 (unregistering): Released all slaves [ 87.488139][ T3451] bond1 (unregistering): Released all slaves [ 87.499774][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.532180][ T7470] team0: Port device team_slave_0 added [ 87.549113][ T3451] hsr_slave_0: left promiscuous mode [ 87.554931][ T3451] hsr_slave_1: left promiscuous mode [ 87.560714][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.568269][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.578458][ T3451] veth1_macvtap: left promiscuous mode [ 87.583968][ T3451] veth0_macvtap: left promiscuous mode [ 87.589605][ T3451] veth1_vlan: left promiscuous mode [ 87.594941][ T3451] veth0_vlan: left promiscuous mode [ 87.651975][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 87.661651][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 87.724349][ T7470] team0: Port device team_slave_1 added [ 87.754540][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.761576][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.787846][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.800184][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.807272][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.833498][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.878151][ T7470] hsr_slave_0: entered promiscuous mode [ 87.886376][ T7470] hsr_slave_1: entered promiscuous mode [ 87.892334][ T7470] debugfs: 'hsr0' already exists in 'hsr' [ 87.898229][ T7470] Cannot create hsr debugfs directory [ 87.972870][ T7393] veth0_vlan: entered promiscuous mode [ 87.980968][ T7393] veth1_vlan: entered promiscuous mode [ 87.996585][ T7393] veth0_macvtap: entered promiscuous mode [ 88.003819][ T7393] veth1_macvtap: entered promiscuous mode [ 88.015058][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.027096][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.039744][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.049143][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.058470][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.069866][ T7546] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1596'. [ 88.080317][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.125424][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1559'. [ 88.134370][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1559'. [ 88.148037][ T2083] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.157052][ T2083] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.167015][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1559'. [ 88.176018][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1559'. [ 88.186904][ T2083] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.216295][ T2083] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.283476][ T7568] loop8: detected capacity change from 0 to 2048 [ 88.308434][ T7568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.309350][ T7470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.325940][ T7568] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.340387][ T7470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.351174][ T7470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.360207][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.362045][ T7470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.410696][ T29] audit: type=1400 audit(1760480242.258:1620): avc: denied { bind } for pid=7585 comm="syz.8.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.425503][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.430268][ T29] audit: type=1400 audit(1760480242.258:1621): avc: denied { name_bind } for pid=7585 comm="syz.8.1609" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.430302][ T29] audit: type=1400 audit(1760480242.258:1622): avc: denied { node_bind } for pid=7585 comm="syz.8.1609" saddr=fe80::31 src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 88.442715][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.498626][ T2083] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.506018][ T2083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.517396][ T29] audit: type=1326 audit(1760480242.368:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e82d1eec9 code=0x7ffc0000 [ 88.541019][ T29] audit: type=1326 audit(1760480242.368:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e82d1eec9 code=0x7ffc0000 [ 88.564624][ T29] audit: type=1326 audit(1760480242.368:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f4e82d1eec9 code=0x7ffc0000 [ 88.588663][ T29] audit: type=1326 audit(1760480242.368:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.7.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e82d1eec9 code=0x7ffc0000 [ 88.616254][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.623355][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.650426][ T7470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.660973][ T7470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.740976][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.832503][ T7470] veth0_vlan: entered promiscuous mode [ 88.843569][ T7470] veth1_vlan: entered promiscuous mode [ 88.863547][ T7470] veth0_macvtap: entered promiscuous mode [ 88.872247][ T7470] veth1_macvtap: entered promiscuous mode [ 88.885120][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.898601][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.918506][ T3451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933478][ T3451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953471][ T3451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963311][ T3451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.189681][ T3451] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.206487][ T3451] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.215344][ T3451] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.238753][ T3451] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.299669][ T7638] loop8: detected capacity change from 0 to 256 [ 89.413376][ T7660] loop8: detected capacity change from 0 to 2048 [ 89.429326][ T7660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.464591][ T7660] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.484491][ T7674] loop3: detected capacity change from 0 to 764 [ 89.492225][ T7674] rock: directory entry would overflow storage [ 89.498512][ T7674] rock: sig=0x5245, size=8, remaining=5 [ 89.516814][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.533372][ T7676] tmpfs: Bad value for 'mpol' [ 89.655476][ T7700] loop8: detected capacity change from 0 to 2048 [ 89.667940][ T7700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.692728][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.891965][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.900980][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.912257][ T7713] loop8: detected capacity change from 0 to 512 [ 89.919819][ T7713] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.926729][ T7713] EXT4-fs: test_dummy_encryption option not supported [ 90.029770][ T7729] loop2: detected capacity change from 0 to 128 [ 90.040553][ T7729] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 90.050973][ T7729] FAT-fs (loop2): error, clusters badly computed (0 != 1) [ 90.058336][ T7729] FAT-fs (loop2): Filesystem has been set read-only [ 90.065022][ T7729] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 90.072441][ T7729] FAT-fs (loop2): error, clusters badly computed (2 != 3) [ 90.079829][ T7729] FAT-fs (loop2): error, clusters badly computed (3 != 4) [ 90.087326][ T7729] FAT-fs (loop2): error, clusters badly computed (4 != 5) [ 90.094508][ T7729] FAT-fs (loop2): error, clusters badly computed (5 != 6) [ 90.101781][ T7729] FAT-fs (loop2): error, clusters badly computed (6 != 7) [ 90.109318][ T7729] FAT-fs (loop2): error, clusters badly computed (7 != 8) [ 90.116516][ T7729] FAT-fs (loop2): error, clusters badly computed (8 != 9) [ 90.123700][ T7729] FAT-fs (loop2): error, clusters badly computed (9 != 10) [ 90.141606][ T7470] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.251950][ T29] audit: type=1400 audit(1760480245.098:1627): avc: denied { create } for pid=7781 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.414101][ T7789] loop2: detected capacity change from 0 to 764 [ 91.424178][ T7789] rock: directory entry would overflow storage [ 91.430462][ T7789] rock: sig=0x5245, size=8, remaining=5 [ 91.466582][ T7795] loop3: detected capacity change from 0 to 2048 [ 91.482240][ T7795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.506383][ T7801] loop2: detected capacity change from 0 to 128 [ 91.513019][ T7801] EXT4-fs: test_dummy_encryption option not supported [ 91.520826][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.470458][ T7829] loop2: detected capacity change from 0 to 2048 [ 92.487686][ T7829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.500008][ T7829] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.524696][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.550214][ T7836] loop2: detected capacity change from 0 to 2048 [ 92.567301][ T7836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.590395][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.614763][ T7842] __nla_validate_parse: 7 callbacks suppressed [ 92.614779][ T7842] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1705'. [ 93.193775][ T7863] loop2: detected capacity change from 0 to 256 [ 93.205219][ T7865] loop7: detected capacity change from 0 to 2048 [ 93.217626][ T7865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.244265][ T7070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.263095][ T7871] random: crng reseeded on system resumption [ 93.300774][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 93.310607][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 93.824780][ T7898] loop9: detected capacity change from 0 to 512 [ 93.833118][ T7898] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.913613][ T7898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 93.921691][ T7898] EXT4-fs (loop9): orphan cleanup on readonly fs [ 93.928044][ T7898] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1731: bad orphan inode 267 [ 93.938400][ T7898] EXT4-fs (loop9): Remounting filesystem read-only [ 93.945498][ T7898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 93.959096][ T7898] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1731: dx entry: limit 0 != root limit 125 [ 93.971079][ T7898] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1731: Corrupt directory, running e2fsck is recommended [ 93.993530][ T7393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 94.042757][ T7905] loop9: detected capacity change from 0 to 128 [ 94.484931][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119d37000: rx timeout, send abort [ 94.677235][ T7920] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1741'. [ 94.686499][ T29] audit: type=1400 audit(1760480248.528:1628): avc: denied { nlmsg_read } for pid=7919 comm="syz.8.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.993364][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119d37000: abort rx timeout. Force session deactivation [ 95.333298][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.349273][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.365892][ T148] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.376115][ T148] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.413717][ T7939] loop9: detected capacity change from 0 to 512 [ 95.420492][ T7939] EXT4-fs: Ignoring removed oldalloc option [ 95.432312][ T7939] EXT4-fs (loop9): 1 truncate cleaned up [ 95.443727][ T7939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.491922][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.510282][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.519721][ T7393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.541121][ T7951] loop9: detected capacity change from 0 to 256 [ 95.764660][ T7964] loop8: detected capacity change from 0 to 764 [ 95.772078][ T7964] rock: directory entry would overflow storage [ 95.778339][ T7964] rock: sig=0x5245, size=8, remaining=5 [ 95.803722][ T7966] loop8: detected capacity change from 0 to 128 [ 96.155937][ T7975] loop2: detected capacity change from 0 to 512 [ 96.163236][ T7975] EXT4-fs: Ignoring removed oldalloc option [ 96.173986][ T7975] EXT4-fs (loop2): 1 truncate cleaned up [ 96.184396][ T7978] loop7: detected capacity change from 0 to 2048 [ 96.191521][ T7975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.217735][ T7978] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 96.218914][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.249461][ T7981] loop2: detected capacity change from 0 to 256 [ 96.856598][ T7992] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1771'. [ 96.865789][ T29] audit: type=1400 audit(1760480250.698:1629): avc: denied { map } for pid=7991 comm="syz.9.1771" path="socket:[22088]" dev="sockfs" ino=22088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.889282][ T29] audit: type=1400 audit(1760480250.698:1630): avc: denied { read accept } for pid=7991 comm="syz.9.1771" path="socket:[22088]" dev="sockfs" ino=22088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.935751][ T29] audit: type=1400 audit(1760480250.768:1631): avc: denied { bind } for pid=7991 comm="syz.9.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.071846][ T8006] loop3: detected capacity change from 0 to 512 [ 97.078538][ T8006] EXT4-fs: Ignoring removed oldalloc option [ 97.086168][ T8006] EXT4-fs (loop3): 1 truncate cleaned up [ 97.092083][ T8006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.128004][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.306198][ T8036] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1787'. [ 97.374039][ T8047] loop2: detected capacity change from 0 to 764 [ 97.388263][ T8047] rock: directory entry would overflow storage [ 97.394533][ T8047] rock: sig=0x5245, size=8, remaining=5 [ 97.416326][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 97.478927][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.486105][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.493524][ T8016] bridge_slave_0: entered allmulticast mode [ 97.501097][ T8016] bridge_slave_0: entered promiscuous mode [ 97.508413][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.515765][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.522994][ T8016] bridge_slave_1: entered allmulticast mode [ 97.529820][ T8016] bridge_slave_1: entered promiscuous mode [ 97.548790][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.560060][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.857939][ T8016] team0: Port device team_slave_0 added [ 97.866211][ T8016] team0: Port device team_slave_1 added [ 97.912040][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.919164][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.945268][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.957289][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.964287][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.990431][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.019845][ T8016] hsr_slave_0: entered promiscuous mode [ 98.026288][ T8016] hsr_slave_1: entered promiscuous mode [ 98.032168][ T8016] debugfs: 'hsr0' already exists in 'hsr' [ 98.037982][ T8016] Cannot create hsr debugfs directory [ 98.242350][ T8070] loop9: detected capacity change from 0 to 2048 [ 98.279002][ T8070] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.319449][ T8016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.328450][ T8016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.338098][ T8016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.355863][ T8016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.391684][ T148] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.425141][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.432282][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.439589][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.446795][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.464131][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.477663][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.516856][ T148] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.558779][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.571333][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.581883][ T148] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.605898][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.613058][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.621857][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.628944][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.660970][ T148] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.105280][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.135864][ T148] bridge_slave_1: left allmulticast mode [ 99.141612][ T148] bridge_slave_1: left promiscuous mode [ 99.147409][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.156629][ T148] bridge_slave_0: left allmulticast mode [ 99.162337][ T148] bridge_slave_0: left promiscuous mode [ 99.168332][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.247817][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.258333][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.268569][ T148] bond0 (unregistering): Released all slaves [ 99.312524][ T148] hsr_slave_0: left promiscuous mode [ 99.318759][ T148] hsr_slave_1: left promiscuous mode [ 99.324719][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.332191][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.341133][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.348597][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.360361][ T148] veth1_macvtap: left promiscuous mode [ 99.367216][ T148] veth0_macvtap: left promiscuous mode [ 99.372799][ T148] veth1_vlan: left promiscuous mode [ 99.378514][ T148] veth0_vlan: left promiscuous mode [ 99.455342][ T148] team0 (unregistering): Port device team_slave_1 removed [ 99.465585][ T148] team0 (unregistering): Port device team_slave_0 removed [ 99.529730][ T8016] veth0_vlan: entered promiscuous mode [ 99.538837][ T8016] veth1_vlan: entered promiscuous mode [ 99.563274][ T8131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1814'. [ 99.573821][ T8016] veth0_macvtap: entered promiscuous mode [ 99.581442][ T8016] veth1_macvtap: entered promiscuous mode [ 99.614078][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.633528][ T8139] loop8: detected capacity change from 0 to 2048 [ 99.641078][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.650207][ T8139] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 99.656714][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670719][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688020][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697193][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.295906][ T8162] loop9: detected capacity change from 0 to 764 [ 100.303326][ T8162] rock: directory entry would overflow storage [ 100.309771][ T8162] rock: sig=0x5245, size=8, remaining=5 [ 100.658146][ T8193] usb usb8: usbfs: process 8193 (syz.3.1841) did not claim interface 0 before use [ 100.687358][ T8197] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 100.770612][ T8206] syzkaller0: entered promiscuous mode [ 100.776233][ T8206] syzkaller0: entered allmulticast mode [ 100.977355][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 101.033092][ T8224] loop3: detected capacity change from 0 to 1024 [ 101.039946][ T8224] EXT4-fs: Ignoring removed nobh option [ 101.046199][ T8224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.058798][ T8224] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 101.078026][ T8224] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1854: couldn't read orphan inode 11 (err -117) [ 101.090532][ T8224] EXT4-fs mount: 2 callbacks suppressed [ 101.090548][ T8224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.113008][ T8224] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1854: Invalid block bitmap block 0 in block_group 0 [ 101.126803][ T8224] Quota error (device loop3): write_blk: dquota write failed [ 101.133581][ T8232] syzkaller0: entered promiscuous mode [ 101.134287][ T8224] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 101.139995][ T8232] syzkaller0: entered allmulticast mode [ 101.150190][ T8224] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1854: Failed to acquire dquot type 0 [ 101.186141][ T148] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm kworker/u8:5: Invalid inode table block 21474836481 in block_group 0 [ 101.201067][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.268789][ T8241] loop2: detected capacity change from 0 to 512 [ 101.276264][ T8241] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.288380][ T8241] EXT4-fs (loop2): 1 truncate cleaned up [ 101.294627][ T8241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.312433][ T8241] tmpfs: Bad value for 'mpol' [ 101.330445][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.346904][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 101.355915][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 101.365115][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 101.374264][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 101.423805][ T29] audit: type=1400 audit(1760480255.268:1632): avc: denied { getopt } for pid=8256 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.444940][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1870'. [ 101.481122][ T8265] syzkaller0: entered promiscuous mode [ 101.486804][ T8265] syzkaller0: entered allmulticast mode [ 101.629915][ T8293] loop2: detected capacity change from 0 to 512 [ 101.641617][ T8293] EXT4-fs: Ignoring removed oldalloc option [ 101.655887][ T8293] EXT4-fs (loop2): 1 truncate cleaned up [ 101.661964][ T8293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.690399][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.711393][ T8309] loop2: detected capacity change from 0 to 512 [ 101.718108][ T8309] EXT4-fs: Ignoring removed nobh option [ 101.725703][ T8309] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 101.734438][ T8309] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1891: attempt to clear invalid blocks 1 len 1 [ 101.748393][ T8309] EXT4-fs (loop2): Remounting filesystem read-only [ 101.755364][ T8309] EXT4-fs (loop2): 1 truncate cleaned up [ 101.761500][ T8309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.775182][ T8309] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 101.799191][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.880306][ T8333] syzkaller0: entered promiscuous mode [ 101.886029][ T8333] syzkaller0: entered allmulticast mode [ 101.925337][ T8339] loop3: detected capacity change from 0 to 1024 [ 101.932696][ T8339] EXT4-fs: Ignoring removed nobh option [ 101.938889][ T8339] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.950847][ T8339] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1905: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 101.970012][ T8339] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1905: couldn't read orphan inode 11 (err -117) [ 101.975224][ T8344] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1907'. [ 101.985440][ T8339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.012202][ T8339] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1905: Invalid block bitmap block 0 in block_group 0 [ 102.030199][ T8339] Quota error (device loop3): write_blk: dquota write failed [ 102.037813][ T8339] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.050112][ T8339] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1905: Failed to acquire dquot type 0 [ 102.087308][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.137684][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1916'. [ 102.161377][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1918'. [ 102.170636][ T8368] syzkaller0: entered promiscuous mode [ 102.176273][ T8368] syzkaller0: entered allmulticast mode [ 102.245132][ T8378] loop3: detected capacity change from 0 to 256 [ 102.254841][ T29] audit: type=1400 audit(1760480256.098:1633): avc: denied { lock } for pid=8379 comm="syz.8.1924" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.310541][ T8378] FAT-fs (loop3): codepage cp775 not found [ 102.556684][ T8414] loop0: detected capacity change from 0 to 1024 [ 102.567121][ T8414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.591604][ T8016] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.749308][ T8442] loop3: detected capacity change from 0 to 1024 [ 102.756203][ T8442] EXT4-fs: Ignoring removed nobh option [ 102.762361][ T8442] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.776167][ T8442] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1952: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.795285][ T8442] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1952: couldn't read orphan inode 11 (err -117) [ 102.807868][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.823102][ T8442] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1952: Invalid block bitmap block 0 in block_group 0 [ 102.837567][ T8442] Quota error (device loop3): write_blk: dquota write failed [ 102.844977][ T8442] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.855347][ T8442] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1952: Failed to acquire dquot type 0 [ 102.869623][ T8450] syzkaller0: entered promiscuous mode [ 102.875240][ T8450] syzkaller0: entered allmulticast mode [ 102.886430][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.211651][ T8510] loop9: detected capacity change from 0 to 1024 [ 103.229394][ T8510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.250593][ T8518] netlink: 'syz.2.1988': attribute type 10 has an invalid length. [ 103.260155][ T7393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.488582][ T8544] loop9: detected capacity change from 0 to 512 [ 103.499845][ T8544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.503850][ T8547] loop2: detected capacity change from 0 to 128 [ 103.519328][ T8547] EXT4-fs: Ignoring removed nobh option [ 103.527090][ T8547] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.539550][ T8547] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.540147][ T7393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.554115][ T8547] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.2001: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 103.591964][ T7470] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.641504][ T29] audit: type=1400 audit(1760480257.488:1634): avc: denied { write } for pid=8557 comm="syz.2.2006" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.758133][ T8578] program syz.9.2016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.784976][ T8580] loop2: detected capacity change from 0 to 2048 [ 103.797620][ T8580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.811724][ T29] audit: type=1400 audit(1760480257.658:1635): avc: denied { rename } for pid=8579 comm="syz.2.2017" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.827399][ T8586] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.834382][ T29] audit: type=1400 audit(1760480257.658:1636): avc: denied { unlink } for pid=8579 comm="syz.2.2017" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.872092][ T7470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.910300][ T8590] loop9: detected capacity change from 0 to 1024 [ 103.934192][ T8595] loop8: detected capacity change from 0 to 512 [ 103.948113][ T8590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.960882][ T8590] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.984686][ T8590] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.2021: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.005496][ T8595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.020847][ T8608] program syz.0.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.028180][ T8590] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 104.030767][ T8595] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.042778][ T8590] EXT4-fs (loop9): This should not happen!! Data will be lost [ 104.042778][ T8590] [ 104.101524][ T2083] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2) [ 104.131152][ T29] audit: type=1400 audit(1760480257.968:1637): avc: denied { create } for pid=8593 comm="syz.8.2024" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 104.183987][ T2083] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 104.196649][ T2083] EXT4-fs (loop9): This should not happen!! Data will be lost [ 104.196649][ T2083] [ 104.208080][ T86] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 104.226767][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.264090][ T86] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 104.276576][ T86] EXT4-fs (loop9): This should not happen!! Data will be lost [ 104.276576][ T86] [ 104.287603][ T8631] syz_tun: entered allmulticast mode [ 104.293858][ T8631] syz_tun: left allmulticast mode [ 104.330120][ T8638] loop8: detected capacity change from 0 to 1024 [ 104.337821][ T8638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.347616][ T7393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.358228][ T8638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.417455][ T7268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.602695][ T8681] __nla_validate_parse: 20 callbacks suppressed [ 104.602722][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2062'. [ 104.625320][ T8683] loop3: detected capacity change from 0 to 1024 [ 104.632091][ T8683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.638838][ T8683] EXT4-fs: inline encryption not supported [ 104.644713][ T8683] EXT4-fs: Ignoring removed i_version option [ 104.664753][ T8683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.693252][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.765871][ T8700] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2070'. [ 104.812887][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2074'. [ 104.877255][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 104.882715][ T29] audit: type=1400 audit(1760480258.728:1638): avc: denied { create } for pid=8719 comm="syz.8.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 104.886204][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 104.886761][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 104.925704][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 104.999439][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2085'. [ 105.023566][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2087'. [ 105.093824][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 105.103758][ T8746] syzkaller0: entered promiscuous mode [ 105.109345][ T8746] syzkaller0: entered allmulticast mode [ 105.160530][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.169329][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.316514][ T8758] netlink: 'syz.9.2099': attribute type 4 has an invalid length. [ 105.521646][ T8783] loop9: detected capacity change from 0 to 128 [ 105.729292][ T8784] ================================================================== [ 105.737516][ T8784] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 105.745829][ T8784] [ 105.748201][ T8784] write to 0xffff88811ac7df28 of 4 bytes by task 8783 on cpu 0: [ 105.755848][ T8784] writeback_single_inode+0x150/0x3f0 [ 105.761356][ T8784] sync_inode_metadata+0x5b/0x90 [ 105.766434][ T8784] __generic_file_fsync+0xf8/0x140 [ 105.771594][ T8784] fat_file_fsync+0x49/0x100 [ 105.776211][ T8784] vfs_fsync_range+0x10d/0x130 [ 105.781026][ T8784] generic_file_write_iter+0x1b8/0x2f0 [ 105.786528][ T8784] iter_file_splice_write+0x666/0xa60 [ 105.791930][ T8784] direct_splice_actor+0x156/0x2a0 [ 105.797076][ T8784] splice_direct_to_actor+0x312/0x680 [ 105.802497][ T8784] do_splice_direct+0xda/0x150 [ 105.807306][ T8784] do_sendfile+0x380/0x650 [ 105.811773][ T8784] __x64_sys_sendfile64+0x105/0x150 [ 105.817020][ T8784] x64_sys_call+0x2bb4/0x3000 [ 105.821731][ T8784] do_syscall_64+0xd2/0x200 [ 105.826359][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.832351][ T8784] [ 105.834708][ T8784] read to 0xffff88811ac7df28 of 4 bytes by task 8784 on cpu 1: [ 105.842294][ T8784] __mark_inode_dirty+0x191/0x750 [ 105.847361][ T8784] fat_update_time+0x1ec/0x200 [ 105.852171][ T8784] touch_atime+0x148/0x340 [ 105.856731][ T8784] filemap_splice_read+0x6ba/0x740 [ 105.861885][ T8784] splice_direct_to_actor+0x26f/0x680 [ 105.867281][ T8784] do_splice_direct+0xda/0x150 [ 105.872067][ T8784] do_sendfile+0x380/0x650 [ 105.876539][ T8784] __x64_sys_sendfile64+0x105/0x150 [ 105.881775][ T8784] x64_sys_call+0x2bb4/0x3000 [ 105.886580][ T8784] do_syscall_64+0xd2/0x200 [ 105.891147][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.897090][ T8784] [ 105.899444][ T8784] value changed: 0x00000070 -> 0x00000002 [ 105.905185][ T8784] [ 105.907624][ T8784] Reported by Kernel Concurrency Sanitizer on: [ 105.913806][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.9.2111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.925131][ T8784] Tainted: [W]=WARN [ 105.928943][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.939187][ T8784] ================================================================== [ 106.117679][ T8784] ================================================================== [ 106.125923][ T8784] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 106.133977][ T8784] [ 106.136323][ T8784] write to 0xffff88811ac7df28 of 4 bytes by task 8783 on cpu 1: [ 106.143977][ T8784] __mark_inode_dirty+0x248/0x750 [ 106.149049][ T8784] fat_update_time+0x1ec/0x200 [ 106.153854][ T8784] touch_atime+0x148/0x340 [ 106.158311][ T8784] filemap_splice_read+0x6ba/0x740 [ 106.163555][ T8784] splice_direct_to_actor+0x26f/0x680 [ 106.168960][ T8784] do_splice_direct+0xda/0x150 [ 106.173754][ T8784] do_sendfile+0x380/0x650 [ 106.178212][ T8784] __x64_sys_sendfile64+0x105/0x150 [ 106.183443][ T8784] x64_sys_call+0x2bb4/0x3000 [ 106.188138][ T8784] do_syscall_64+0xd2/0x200 [ 106.192671][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.198593][ T8784] [ 106.200939][ T8784] read to 0xffff88811ac7df28 of 4 bytes by task 8784 on cpu 0: [ 106.208680][ T8784] __mark_inode_dirty+0x191/0x750 [ 106.213846][ T8784] fat_update_time+0x1ec/0x200 [ 106.218829][ T8784] touch_atime+0x148/0x340 [ 106.223372][ T8784] filemap_splice_read+0x6ba/0x740 [ 106.228524][ T8784] splice_direct_to_actor+0x26f/0x680 [ 106.233928][ T8784] do_splice_direct+0xda/0x150 [ 106.238815][ T8784] do_sendfile+0x380/0x650 [ 106.243268][ T8784] __x64_sys_sendfile64+0x105/0x150 [ 106.248512][ T8784] x64_sys_call+0x2bb4/0x3000 [ 106.253226][ T8784] do_syscall_64+0xd2/0x200 [ 106.257760][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.263694][ T8784] [ 106.266061][ T8784] value changed: 0x00000000 -> 0x00000070 [ 106.271798][ T8784] [ 106.274139][ T8784] Reported by Kernel Concurrency Sanitizer on: [ 106.280320][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.9.2111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.291640][ T8784] Tainted: [W]=WARN [ 106.295488][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.305568][ T8784] ==================================================================