last executing test programs: 2m15.236589383s ago: executing program 32 (id=179): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m57.498475827s ago: executing program 33 (id=543): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0xff, 'batadv_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x21, 0x6, 0x61}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x5, 0x2, 0x5, 0x2], 0x6, 0x4}, {0x1, [0x3, 0x4, 0x0, 0x2, 0x1, 0x4], 0x5, 0x4}}}}, {{@ip={@remote, @local, 0xff000000, 0xff000000, 'pim6reg0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x56c, 0xe, [0x1e, 0x35, 0x3, 0x36, 0x5, 0x3a, 0x2f, 0x12, 0x1b, 0x22, 0x3d, 0x1c, 0x25, 0x3d, 0x0, 0x29], 0x0, 0x2086, 0x86ad}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m33.945317758s ago: executing program 34 (id=961): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) memfd_create(0x0, 0x0) 1m29.443406467s ago: executing program 6 (id=1038): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000004c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file3\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 1m29.416330261s ago: executing program 6 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {}, {0x9, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1m29.300420196s ago: executing program 6 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1m29.26435069s ago: executing program 6 (id=1044): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x125) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0x123) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1, 0x8000, 0x9, 0x1b) 1m29.060498917s ago: executing program 6 (id=1049): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1m28.636211532s ago: executing program 6 (id=1063): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000240)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) 1m28.529578035s ago: executing program 35 (id=1063): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000240)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) 1m15.446238049s ago: executing program 7 (id=1305): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r1, 0x1b) 1m14.592853929s ago: executing program 7 (id=1321): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m14.546455625s ago: executing program 7 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m14.486141013s ago: executing program 7 (id=1324): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 1m14.465920455s ago: executing program 7 (id=1325): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 1m14.222935457s ago: executing program 7 (id=1336): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x800, 0x6, 0x3a2}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1m14.186098951s ago: executing program 36 (id=1336): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x800, 0x6, 0x3a2}) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1m12.052970826s ago: executing program 4 (id=1369): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m11.999486943s ago: executing program 4 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x0, 0xb}}}, 0x24}}, 0x20000000) 1m11.899967036s ago: executing program 4 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}, @TCA_EM_META_RVALUE={0x66, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m11.747814235s ago: executing program 4 (id=1373): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x125) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0x123) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1, 0x8000, 0x9, 0x1b) 1m11.670591705s ago: executing program 4 (id=1374): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) 1m11.280458125s ago: executing program 4 (id=1383): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m11.280241455s ago: executing program 37 (id=1383): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m5.138925496s ago: executing program 5 (id=1501): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0), 0x106}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000000b000000be00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) rt_sigpending(0x0, 0x0) 1m5.138545146s ago: executing program 5 (id=1502): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xa00) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) close_range(r2, 0xffffffffffffffff, 0x0) 1m4.273032627s ago: executing program 5 (id=1511): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg$unix(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1, 0x0, 0x0, 0x20000011}}], 0x1, 0x4040011) 1m3.328064289s ago: executing program 5 (id=1529): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x125) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0x123) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1, 0x8000, 0x9, 0x1b) 1m3.140582633s ago: executing program 5 (id=1533): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000004c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file3\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 1m2.821364804s ago: executing program 5 (id=1540): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1m2.812456565s ago: executing program 38 (id=1540): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 43.724006042s ago: executing program 8 (id=1853): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 43.701719205s ago: executing program 8 (id=1854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 42.844597465s ago: executing program 8 (id=1868): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000ffffffff00000a0000010500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 42.788618573s ago: executing program 8 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) 42.765485445s ago: executing program 8 (id=1871): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 42.138037796s ago: executing program 8 (id=1884): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)="2631be7bb4400e4b2bd31ed62c2b4fcae67d995afbb29faed78062b2ac6f1f9e7f569b40d7dec364e7b2fb214c50c99e51e976", 0xfffffeb2, 0x40) sendfile(r2, r2, 0x0, 0xe3aa6ea) 42.10931699s ago: executing program 39 (id=1884): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)="2631be7bb4400e4b2bd31ed62c2b4fcae67d995afbb29faed78062b2ac6f1f9e7f569b40d7dec364e7b2fb214c50c99e51e976", 0xfffffeb2, 0x40) sendfile(r2, r2, 0x0, 0xe3aa6ea) 2.670800096s ago: executing program 2 (id=2633): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.547095462s ago: executing program 2 (id=2634): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x622, &(0x7f0000000400)={0x0, 0x779b, 0x1, 0x3, 0x3e6}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.525235895s ago: executing program 2 (id=2635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000c00)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x37, 0x28, 0x67, 0x0, 0x1, 0x6, 0x0, @empty, @local}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x4, 0x0, 0x8}}}}}}, 0x0) 2.503817447s ago: executing program 2 (id=2636): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.32924558s ago: executing program 2 (id=2639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.197103457s ago: executing program 2 (id=2643): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @random="d313d8ca81a4"}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 687.030691ms ago: executing program 9 (id=2669): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 656.754695ms ago: executing program 9 (id=2672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x48}}, 0x0) 614.604671ms ago: executing program 0 (id=2674): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') 599.636392ms ago: executing program 9 (id=2675): r0 = epoll_create(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x401) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 566.119707ms ago: executing program 9 (id=2677): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) sendmmsg$unix(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8841}}], 0x1, 0x4000040) 561.606798ms ago: executing program 0 (id=2678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x40, 0x0, 0x101}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 507.300514ms ago: executing program 9 (id=2681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77f, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x5, 0x0) 470.571929ms ago: executing program 9 (id=2682): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 453.916881ms ago: executing program 3 (id=2684): r0 = eventfd(0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0xfffffffb, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) 441.829633ms ago: executing program 0 (id=2685): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 336.013496ms ago: executing program 1 (id=2686): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) 335.675366ms ago: executing program 0 (id=2687): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) 335.260456ms ago: executing program 1 (id=2688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 321.740728ms ago: executing program 0 (id=2689): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r0, r1, 0x0) 272.145385ms ago: executing program 3 (id=2690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r3, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf800}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 202.857923ms ago: executing program 0 (id=2691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call]}, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 197.306735ms ago: executing program 1 (id=2692): ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000180)={0x7, "a044fede466bc14ba145063d968d9743a4c5129582396af332678a4a56db5c8dc8db7833cfbdfd76bf2f6e860938f0e0beac9e7b5a5f5e0a0ff6e0f4d52de131"}) r0 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 168.062998ms ago: executing program 3 (id=2693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 160.217789ms ago: executing program 1 (id=2694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 96.225567ms ago: executing program 3 (id=2695): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r1) accept4(r0, 0x0, 0x0, 0x80800) 63.314272ms ago: executing program 3 (id=2696): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) 62.801892ms ago: executing program 3 (id=2697): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)=""/44, 0x2c}], 0x2}, 0x10000}], 0x1, 0x10000, 0x0) 430.93µs ago: executing program 1 (id=2698): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0x1000, 0x0, 0x7, 0xff, 0x7, [0x3, 0xffffce76]}}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 1 (id=2699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1003ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): dge_slave_0) entered disabled state [ 102.064657][ T7603] bridge_slave_0: entered allmulticast mode [ 102.071423][ T7603] bridge_slave_0: entered promiscuous mode [ 102.079366][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.086534][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.094041][ T7603] bridge_slave_1: entered allmulticast mode [ 102.100845][ T7603] bridge_slave_1: entered promiscuous mode [ 102.119706][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.130488][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.150571][ T7603] team0: Port device team_slave_0 added [ 102.157649][ T7603] team0: Port device team_slave_1 added [ 102.174576][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.181635][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.208175][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.220078][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.227133][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.253221][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.284669][ T7603] hsr_slave_0: entered promiscuous mode [ 102.290965][ T7603] hsr_slave_1: entered promiscuous mode [ 102.297190][ T7603] debugfs: 'hsr0' already exists in 'hsr' [ 102.302968][ T7603] Cannot create hsr debugfs directory [ 102.392769][ T7603] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 102.401930][ T7603] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 102.411283][ T7603] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 102.420867][ T7603] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 102.464695][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.481604][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.492987][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.500206][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.512676][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.519802][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.639343][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.695934][ T7654] loop5: detected capacity change from 0 to 128 [ 102.748063][ T7654] msdos filesystem being mounted at /224/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 102.972570][ T7603] veth0_vlan: entered promiscuous mode [ 102.982715][ T7603] veth1_vlan: entered promiscuous mode [ 103.014108][ T7603] veth0_macvtap: entered promiscuous mode [ 103.022754][ T7603] veth1_macvtap: entered promiscuous mode [ 103.047464][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.070322][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.083446][ T2165] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.105644][ T2165] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.120830][ T6229] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.148157][ T6229] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.208993][ T29] audit: type=1400 audit(3916140402.587:1154): avc: denied { map } for pid=7681 comm="syz.4.1349" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.263511][ T29] audit: type=1400 audit(3916140402.587:1155): avc: denied { execute } for pid=7681 comm="syz.4.1349" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.402923][ T7685] loop4: detected capacity change from 0 to 8192 [ 103.425105][ T7685] vfat filesystem being mounted at /284/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 103.486327][ T29] audit: type=1400 audit(3916140402.857:1156): avc: denied { name_bind } for pid=7706 comm="syz.9.1361" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 103.507359][ T29] audit: type=1400 audit(3916140402.867:1157): avc: denied { setopt } for pid=7706 comm="syz.9.1361" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.645574][ T7720] loop3: detected capacity change from 0 to 1024 [ 103.662564][ T7720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.694819][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.739921][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 103.746834][ T29] audit: type=1400 audit(3916140403.117:1158): avc: denied { ioctl } for pid=7728 comm="syz.3.1367" path="socket:[20370]" dev="sockfs" ino=20370 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.777271][ T29] audit: type=1326 audit(3916140403.157:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab0a3acb9 code=0x7ffc0000 [ 103.801050][ T29] audit: type=1326 audit(3916140403.157:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab0a3acb9 code=0x7ffc0000 [ 103.824853][ T29] audit: type=1326 audit(3916140403.157:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdab0a3acb9 code=0x7ffc0000 [ 103.848815][ T29] audit: type=1326 audit(3916140403.157:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab0a3acb9 code=0x7ffc0000 [ 103.872341][ T29] audit: type=1326 audit(3916140403.157:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdab0a3acb9 code=0x7ffc0000 [ 103.896294][ T4235] Bluetooth: hci0: command 0x1003 tx timeout [ 103.902595][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.043112][ T7737] gtp0: entered promiscuous mode [ 104.052021][ T7737] __nla_validate_parse: 2 callbacks suppressed [ 104.052036][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 104.141440][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 104.297723][ T7743] loop4: detected capacity change from 0 to 512 [ 104.304424][ T7743] EXT4-fs: Ignoring removed bh option [ 104.310519][ T7743] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.320770][ T7743] EXT4-fs (loop4): 1 truncate cleaned up [ 104.327100][ T7743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.360643][ T3324] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 104.373246][ T3324] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 104.489472][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1378'. [ 104.694078][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.882568][ T7769] lo speed is unknown, defaulting to 1000 [ 104.970625][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 105.036377][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.043669][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.051274][ T7769] bridge_slave_0: entered allmulticast mode [ 105.058551][ T7769] bridge_slave_0: entered promiscuous mode [ 105.072284][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.079429][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.087026][ T7769] bridge_slave_1: entered allmulticast mode [ 105.100805][ T7769] bridge_slave_1: entered promiscuous mode [ 105.120748][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.138468][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.160203][ T7769] team0: Port device team_slave_0 added [ 105.167997][ T7769] team0: Port device team_slave_1 added [ 105.186001][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.193047][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.219034][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.232821][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.239946][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.265905][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.312587][ T7769] hsr_slave_0: entered promiscuous mode [ 105.319275][ T7769] hsr_slave_1: entered promiscuous mode [ 105.326162][ T7769] debugfs: 'hsr0' already exists in 'hsr' [ 105.332007][ T7769] Cannot create hsr debugfs directory [ 105.372439][ T7811] loop9: detected capacity change from 0 to 128 [ 105.379480][ T7811] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 105.580894][ T7832] loop5: detected capacity change from 0 to 512 [ 105.608659][ T7832] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1401: bg 0: block 5: invalid block bitmap [ 105.670597][ T7832] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 105.699156][ T7832] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1401: invalid indirect mapped block 3 (level 2) [ 105.739792][ T7832] EXT4-fs (loop5): 2 truncates cleaned up [ 105.794629][ T3584] Bluetooth: hci1: command 0x1003 tx timeout [ 105.800888][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 105.819648][ T7769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.820971][ T7832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.841807][ T7769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.889297][ T7769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.900482][ T7769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.921773][ T7832] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1401: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=124 fake=0 [ 105.968538][ T7859] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.053653][ T7859] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.087920][ T3951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.099219][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.122232][ T7859] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.246860][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.262979][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.270239][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.320867][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.328139][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.411977][ T7769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.422953][ T7769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.577114][ T7859] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.796240][ T2165] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.835095][ T7898] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.845062][ T6263] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.855947][ T6263] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.925159][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.113322][ T7769] veth0_vlan: entered promiscuous mode [ 107.134014][ T7769] veth1_vlan: entered promiscuous mode [ 107.186772][ T7769] veth0_macvtap: entered promiscuous mode [ 107.210714][ T7769] veth1_macvtap: entered promiscuous mode [ 107.226429][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.249976][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.280849][ T6229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309889][ T6229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.337994][ T6229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.357813][ T6229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.547258][ T7868] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.597294][ T7868] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.646201][ T7868] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.921492][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1448'. [ 108.963329][ T8131] team0: entered promiscuous mode [ 108.968590][ T8131] team0: entered allmulticast mode [ 108.973996][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.986029][ T8134] geneve2: entered promiscuous mode [ 109.113477][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 109.113497][ T29] audit: type=1400 audit(3916140408.477:1173): avc: denied { create } for pid=8139 comm="syz.9.1451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.140420][ T29] audit: type=1400 audit(3916140408.477:1174): avc: denied { read } for pid=8139 comm="syz.9.1451" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.162886][ T29] audit: type=1400 audit(3916140408.477:1175): avc: denied { open } for pid=8139 comm="syz.9.1451" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.185644][ T29] audit: type=1400 audit(3916140408.487:1176): avc: denied { unlink } for pid=7603 comm="syz-executor" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.232561][ T8152] loop3: detected capacity change from 0 to 1024 [ 109.266268][ T8156] loop1: detected capacity change from 0 to 256 [ 109.274224][ T8152] EXT4-fs: inline encryption not supported [ 109.280651][ T8156] vfat filesystem being mounted at /6/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 109.327063][ T8152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.414501][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.595558][ T29] audit: type=1400 audit(3916140408.967:1177): avc: denied { connect } for pid=8168 comm="syz.3.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.781951][ T8192] geneve3: entered promiscuous mode [ 110.058080][ T29] audit: type=1326 audit(3916140409.437:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.5.1480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75fe85acb9 code=0x0 [ 110.141959][ T8225] lo speed is unknown, defaulting to 1000 [ 110.409834][ T29] audit: type=1400 audit(3916140409.787:1179): avc: denied { read } for pid=8233 comm="syz.1.1489" path="socket:[22724]" dev="sockfs" ino=22724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.461673][ T29] audit: type=1400 audit(3916140409.837:1180): avc: denied { write } for pid=8233 comm="syz.1.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.500968][ T8236] siw: device registration error -23 [ 110.514990][ T6246] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.538733][ T6246] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.577492][ T7868] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.620191][ T7868] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.789764][ T29] audit: type=1326 audit(3916140410.167:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 110.813571][ T29] audit: type=1326 audit(3916140410.167:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 111.164861][ T8270] lo speed is unknown, defaulting to 1000 [ 111.858965][ T8298] loop9: detected capacity change from 0 to 2048 [ 111.908781][ T3312] Alternate GPT is invalid, using primary GPT. [ 111.915199][ T3312] loop9: p2 p3 p7 [ 111.942854][ T8298] Alternate GPT is invalid, using primary GPT. [ 111.949712][ T8298] loop9: p2 p3 p7 [ 111.976411][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 111.993673][ T8301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.014990][ T8301] bond1: option ad_select: unable to set because the bond device is up [ 112.024871][ T8302] loop3: detected capacity change from 0 to 2048 [ 112.076661][ T8302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 112.157266][ T8302] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.172643][ T8302] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1562 with error 28 [ 112.185235][ T8302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.185235][ T8302] [ 112.194960][ T8302] EXT4-fs (loop3): Total free blocks count 0 [ 112.201097][ T8302] EXT4-fs (loop3): Free/Dirty block details [ 112.207038][ T8302] EXT4-fs (loop3): free_blocks=2415919104 [ 112.212849][ T8302] EXT4-fs (loop3): dirty_blocks=1568 [ 112.218225][ T8302] EXT4-fs (loop3): Block reservation details [ 112.224246][ T8302] EXT4-fs (loop3): i_reserved_data_blocks=98 [ 112.346959][ T6222] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 112.414752][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 112.458375][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 112.469000][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 112.538842][ T8327] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 112.577466][ T8330] lo speed is unknown, defaulting to 1000 [ 112.624640][ T8333] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1527'. [ 112.635907][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.643885][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.652217][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.661428][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.671296][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.680212][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.711932][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.728269][ T8337] loop5: detected capacity change from 0 to 512 [ 112.736026][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.744071][ T8337] EXT4-fs: Ignoring removed bh option [ 112.744188][ T8335] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 112.763424][ T8337] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 112.809955][ T8337] EXT4-fs (loop5): 1 truncate cleaned up [ 112.849795][ T8344] loop1: detected capacity change from 0 to 1024 [ 112.858079][ T8337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.888232][ T8344] EXT4-fs: Ignoring removed bh option [ 112.896345][ T3951] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 112.910384][ T3951] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 112.947000][ T8344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.011068][ T8344] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1532: Allocating blocks 385-513 which overlap fs metadata [ 113.033056][ T8344] EXT4-fs (loop1): pa ffff8881079b3930: logic 16, phys. 129, len 24 [ 113.041263][ T8344] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 113.075326][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.128430][ T3951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.136183][ T6229] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.147456][ T6229] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.187440][ T6229] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.197316][ T6229] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.207360][ T8361] loop3: detected capacity change from 0 to 512 [ 113.239326][ T8361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.266280][ T8361] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.278256][ T6229] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.288119][ T6229] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.310577][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.357740][ T6229] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.367686][ T6229] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.488493][ T8368] lo speed is unknown, defaulting to 1000 [ 113.648791][ T6229] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 113.661883][ T6229] bond0 (unregistering): (slave team0): Releasing backup interface [ 113.677549][ T6229] bond0 (unregistering): Released all slaves [ 113.691563][ T6229] bond1 (unregistering): Released all slaves [ 113.739156][ T6229] hsr_slave_0: left promiscuous mode [ 113.745578][ T6229] hsr_slave_1: left promiscuous mode [ 113.754285][ T6229] veth1_macvtap: left promiscuous mode [ 113.771275][ T6229] veth0_macvtap: left promiscuous mode [ 113.780932][ T6229] veth1_vlan: left promiscuous mode [ 113.786917][ T6229] veth0_vlan: left promiscuous mode [ 113.987394][ T3489] lo speed is unknown, defaulting to 1000 [ 113.993405][ T3489] infiniband syz2: ib_query_port failed (-19) [ 114.046668][ T8368] chnl_net:caif_netlink_parms(): no params data found [ 114.096458][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.103604][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.111764][ T8368] bridge_slave_0: entered allmulticast mode [ 114.118955][ T8368] bridge_slave_0: entered promiscuous mode [ 114.126453][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.133617][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.141506][ T8368] bridge_slave_1: entered allmulticast mode [ 114.148273][ T8368] bridge_slave_1: entered promiscuous mode [ 114.168125][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.179185][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.199788][ T8368] team0: Port device team_slave_0 added [ 114.206957][ T8368] team0: Port device team_slave_1 added [ 114.223427][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.230491][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.256469][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.271749][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.278851][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.304865][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.341295][ T8438] loop9: detected capacity change from 0 to 1024 [ 114.351499][ T8368] hsr_slave_0: entered promiscuous mode [ 114.358382][ T8368] hsr_slave_1: entered promiscuous mode [ 114.364671][ T8368] debugfs: 'hsr0' already exists in 'hsr' [ 114.370584][ T8368] Cannot create hsr debugfs directory [ 114.376798][ T8438] EXT4-fs: Ignoring removed bh option [ 114.431678][ T8438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.488842][ T8438] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.1548: Allocating blocks 385-513 which overlap fs metadata [ 114.568209][ T8438] EXT4-fs (loop9): pa ffff8881079b38c0: logic 16, phys. 129, len 24 [ 114.576309][ T8438] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.669811][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.888761][ T8368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.908232][ T8368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.925344][ T8368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.951193][ T8368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.050343][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.084779][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.108953][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.116103][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.175043][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.182503][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.210234][ T8515] loop8: detected capacity change from 0 to 1024 [ 115.230173][ T8515] EXT4-fs: inline encryption not supported [ 115.236180][ T8515] EXT4-fs: Ignoring removed orlov option [ 115.283868][ T8515] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 115.347170][ T8515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 115.367589][ T8515] System zones: 0-1, 3-12 [ 115.382156][ T8515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.460117][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.473389][ T6749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.553187][ T8542] wg1: entered promiscuous mode [ 115.558211][ T8542] wg1: entered allmulticast mode [ 115.570529][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 115.570545][ T29] audit: type=1400 audit(3916140414.947:1841): avc: denied { nlmsg_write } for pid=8540 comm="syz.1.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 115.575045][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.608561][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.684908][ T8368] veth0_vlan: entered promiscuous mode [ 115.693749][ T8368] veth1_vlan: entered promiscuous mode [ 115.709742][ T8368] veth0_macvtap: entered promiscuous mode [ 115.721703][ T8368] veth1_macvtap: entered promiscuous mode [ 115.733920][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.752160][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.775025][ T6229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.786723][ T6229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.796534][ T6229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.806380][ T6229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.841758][ T29] audit: type=1400 audit(3916140415.217:1842): avc: denied { remount } for pid=8563 comm="syz.8.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.903382][ T29] audit: type=1400 audit(3916140415.257:1843): avc: denied { mount } for pid=8368 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.165724][ T8606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1570'. [ 116.166675][ T8598] loop8: detected capacity change from 0 to 2048 [ 116.254337][ T8598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 116.393640][ T8630] loop9: detected capacity change from 0 to 512 [ 116.414347][ T8630] EXT4-fs: Ignoring removed nobh option [ 116.417153][ T8611] loop1: detected capacity change from 0 to 8192 [ 116.429935][ T8630] EXT4-fs: old and new quota format mixing [ 116.439923][ T8598] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.457584][ T8611] vfat filesystem being mounted at /40/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 116.490273][ T8598] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 116.502768][ T8598] EXT4-fs (loop8): This should not happen!! Data will be lost [ 116.502768][ T8598] [ 116.512619][ T8598] EXT4-fs (loop8): Total free blocks count 0 [ 116.518737][ T8598] EXT4-fs (loop8): Free/Dirty block details [ 116.524676][ T8598] EXT4-fs (loop8): free_blocks=2415919104 [ 116.530631][ T8598] EXT4-fs (loop8): dirty_blocks=464 [ 116.535905][ T8598] EXT4-fs (loop8): Block reservation details [ 116.542019][ T8598] EXT4-fs (loop8): i_reserved_data_blocks=29 [ 116.576826][ T7769] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 116.584704][ T7769] FAT-fs (loop1): Filesystem has been set read-only [ 116.669371][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1578'. [ 116.678385][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1578'. [ 116.708204][ T6222] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.763297][ T6222] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.816932][ T8656] team0 (unregistering): Port device team_slave_0 removed [ 116.824774][ T6229] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 116.845595][ T8656] team0 (unregistering): Port device team_slave_1 removed [ 116.874266][ T6222] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.911818][ T6222] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.983887][ T8665] loop0: detected capacity change from 0 to 8192 [ 116.997882][ T8665] vfat filesystem being mounted at /1/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 117.025762][ T3393] kernel write not supported for file /142/net/sockstat6 (pid: 3393 comm: kworker/1:3) [ 117.058811][ T8368] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 117.066811][ T8368] FAT-fs (loop0): Filesystem has been set read-only [ 117.121701][ T8683] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 117.133967][ T8683] syzkaller1: Refused to change device type [ 117.148629][ T3393] hid_parser_main: 34 callbacks suppressed [ 117.148649][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.161994][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.169476][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.176951][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.184432][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.192024][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.199507][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.206994][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.214474][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.221940][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.246670][ T3393] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 117.273038][ T8694] fido_id[8694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.341495][ T6263] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.385222][ T6263] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.386622][ T8706] loop0: detected capacity change from 0 to 128 [ 117.403678][ T6263] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.416781][ T6263] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.441753][ T8706] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.505396][ T8706] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.569477][ T8368] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.607066][ T29] audit: type=1400 audit(3916140416.987:1844): avc: denied { create } for pid=8724 comm="syz.8.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.650736][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 117.698856][ T8729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.745587][ T8729] bond3: Unable to set up delay as MII monitoring is disabled [ 117.985642][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 118.221111][ T8779] loop3: detected capacity change from 0 to 128 [ 118.257855][ T8779] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.274716][ T8779] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.330592][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.424488][ T8797] loop3: detected capacity change from 0 to 2048 [ 118.433120][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1609'. [ 118.461226][ T8799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.466116][ T8797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.507177][ T8799] bond1: Unable to set up delay as MII monitoring is disabled [ 118.608644][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1612'. [ 118.621244][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1613'. [ 118.643475][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.346634][ T8826] loop9: detected capacity change from 0 to 128 [ 119.357702][ T8826] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.370217][ T8826] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.412108][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.476375][ T8832] loop0: detected capacity change from 0 to 1024 [ 119.485501][ T8832] EXT4-fs: Ignoring removed bh option [ 119.507717][ T8832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.545841][ T8832] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1621: Allocating blocks 385-513 which overlap fs metadata [ 119.574326][ T8840] loop1: detected capacity change from 0 to 1024 [ 119.586400][ T8840] EXT4-fs: Ignoring removed bh option [ 119.598170][ T8832] EXT4-fs (loop0): pa ffff88810985a460: logic 16, phys. 129, len 24 [ 119.606293][ T8832] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 119.649006][ T8840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.682974][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.705552][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.779891][ T8848] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 119.787100][ T8848] syzkaller1: Refused to change device type [ 119.824585][ T8854] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1629'. [ 119.885036][ T8858] syz_tun: entered allmulticast mode [ 119.893123][ T8857] syz_tun: left allmulticast mode [ 119.927519][ T8862] validate_nla: 46 callbacks suppressed [ 119.927544][ T8862] netlink: 'syz.3.1633': attribute type 3 has an invalid length. [ 120.058550][ T8877] loop3: detected capacity change from 0 to 128 [ 120.069937][ T8877] msdos filesystem being mounted at /357/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 120.274823][ T8890] syz_tun: entered allmulticast mode [ 120.283440][ T8889] syz_tun: left allmulticast mode [ 120.321906][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1645'. [ 120.416332][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.480044][ T8903] loop1: detected capacity change from 0 to 512 [ 120.497685][ T8903] EXT4-fs: Ignoring removed bh option [ 120.512686][ T8903] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.522027][ T8903] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 120.550722][ T8903] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 120.561722][ T8903] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 120.581199][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.622888][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.659672][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.668931][ T8907] bridge_slave_1: left allmulticast mode [ 120.674661][ T8907] bridge_slave_1: left promiscuous mode [ 120.680426][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.697344][ T8907] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 120.732893][ T6246] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.741914][ T8910] netlink: 'syz.8.1653': attribute type 3 has an invalid length. [ 121.136962][ T8933] wireguard0: entered promiscuous mode [ 121.142493][ T8933] wireguard0: entered allmulticast mode [ 121.245967][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 121.409065][ T31] nci: nci_ntf_packet: unsupported ntf opcode 0xf15 [ 121.596903][ T8967] loop0: detected capacity change from 0 to 512 [ 121.612641][ T8967] EXT4-fs: Ignoring removed bh option [ 121.629722][ T8967] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.638885][ T8967] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 121.653309][ T8967] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 121.662922][ T8967] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 121.671715][ T8967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.702912][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.950103][ T8996] loop9: detected capacity change from 0 to 128 [ 121.964409][ T8996] msdos filesystem being mounted at /88/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 122.149286][ T9005] loop0: detected capacity change from 0 to 128 [ 122.168930][ T9005] vfat filesystem being mounted at /28/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 122.187723][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1692'. [ 122.284226][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1695'. [ 122.300501][ T2165] bio_check_eod: 27 callbacks suppressed [ 122.300520][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.300520][ T2165] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 122.320886][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.320886][ T2165] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 122.334832][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.334832][ T2165] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 122.350544][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.350544][ T2165] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 122.364179][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.364179][ T2165] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 122.378501][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.378501][ T2165] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 122.400971][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.400971][ T2165] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 122.415550][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.415550][ T2165] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 122.434179][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.434179][ T2165] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 122.456065][ T2165] kworker/u8:12: attempt to access beyond end of device [ 122.456065][ T2165] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 122.735205][ T9040] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 122.755538][ T3584] Bluetooth: hci0: command 0x1003 tx timeout [ 122.761641][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.896502][ T9051] loop8: detected capacity change from 0 to 128 [ 122.905021][ T9049] loop9: detected capacity change from 0 to 512 [ 122.929854][ T9049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.943055][ T9051] vfat filesystem being mounted at /64/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 122.970545][ T9049] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.033703][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.139562][ T9066] __nla_validate_parse: 1 callbacks suppressed [ 123.139577][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1713'. [ 123.154752][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1713'. [ 123.163683][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1716'. [ 123.198843][ T9071] IPv4: Oversized IP packet from 127.202.26.0 [ 123.246323][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1716'. [ 123.282148][ T9073] syz_tun: entered allmulticast mode [ 123.324368][ T9072] syz_tun: left allmulticast mode [ 123.396897][ T29] audit: type=1326 audit(3916140422.777:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.3.1721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x0 [ 123.702940][ T9100] syz_tun: entered allmulticast mode [ 123.724570][ T9099] syz_tun: left allmulticast mode [ 123.839452][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 123.848556][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 124.078844][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 124.225888][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 124.584104][ T29] audit: type=1326 audit(3916140423.957:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9154 comm="syz.9.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x0 [ 124.724275][ T29] audit: type=1400 audit(3916140424.097:1847): avc: denied { bind } for pid=9161 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.744199][ T29] audit: type=1400 audit(3916140424.097:1848): avc: denied { setopt } for pid=9161 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.764580][ T6269] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.436165][ T9179] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.477713][ T9179] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.529321][ T9179] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.584533][ T9179] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.661421][ T6238] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.695849][ T6238] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.723948][ T6238] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.744539][ T6238] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.420117][ T29] audit: type=1400 audit(3916140425.797:1849): avc: denied { create } for pid=9209 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.440395][ T29] audit: type=1400 audit(3916140425.817:1850): avc: denied { write } for pid=9209 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.512554][ T29] audit: type=1400 audit(3916140425.887:1851): avc: denied { ioctl } for pid=9217 comm="syz.3.1774" path="socket:[31464]" dev="sockfs" ino=31464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.559171][ T9220] geneve2: entered promiscuous mode [ 126.575535][ T6277] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.592072][ T6277] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.601596][ T6277] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.610715][ T6277] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.835614][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.842738][ T3584] Bluetooth: hci0: command 0x1003 tx timeout [ 127.127465][ T9236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.137860][ T9236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.231306][ T9236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.241769][ T9236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.346090][ T9236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.356527][ T9236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.447037][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'. [ 127.456215][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 127.473900][ T9236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.484292][ T9236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.560713][ T6233] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.571035][ T6233] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.623827][ T6233] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.644536][ T6233] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.727715][ T6233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.736134][ T6233] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.770237][ T6233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.778641][ T6233] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.853785][ T6233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.862324][ T6233] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.020971][ T6263] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.043354][ T6233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.052449][ T6233] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.097479][ T9277] veth2: entered promiscuous mode [ 128.102575][ T9277] veth2: entered allmulticast mode [ 128.454778][ T9297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.492123][ T9298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.578006][ T9300] __nla_validate_parse: 2 callbacks suppressed [ 128.578026][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1804'. [ 128.593504][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1804'. [ 128.655886][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1804'. [ 128.665128][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1804'. [ 128.857461][ T9323] ipip0: entered promiscuous mode [ 128.930636][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 129.007709][ T9338] loop3: detected capacity change from 0 to 1024 [ 129.014583][ T9338] EXT4-fs: Ignoring removed oldalloc option [ 129.020702][ T9338] EXT4-fs: Ignoring removed bh option [ 129.053600][ T9338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.122233][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1818'. [ 129.599962][ T9350] Set syz1 is full, maxelem 768 reached [ 130.028637][ T9372] ipip0: entered promiscuous mode [ 130.076498][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.105566][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 130.111806][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.313161][ T29] audit: type=1400 audit(3916140429.687:1852): avc: denied { unmount } for pid=9398 comm="syz.8.1835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.411698][ T9408] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1837'. [ 130.457557][ T9411] netlink: 'syz.8.1849': attribute type 20 has an invalid length. [ 130.465613][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1849'. [ 130.465646][ T6222] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.484112][ T6222] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.484151][ T9411] netlink: 'syz.8.1849': attribute type 20 has an invalid length. [ 130.484175][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1849'. [ 130.510381][ T6222] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.518893][ T6222] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.527179][ T6222] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.231082][ T9422] loop9: detected capacity change from 0 to 1024 [ 131.238076][ T9422] EXT4-fs: Ignoring removed oldalloc option [ 131.244064][ T9422] EXT4-fs: Ignoring removed bh option [ 131.247336][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1842'. [ 131.268577][ T9422] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.118777][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.275022][ T9445] netlink: 'syz.9.1852': attribute type 20 has an invalid length. [ 132.335993][ T9445] netlink: 'syz.9.1852': attribute type 20 has an invalid length. [ 132.507309][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 132.513799][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.528534][ T9468] syz_tun: entered allmulticast mode [ 132.564353][ T9468] syz_tun (unregistering): left allmulticast mode [ 133.336832][ T9491] syz_tun: entered allmulticast mode [ 133.359558][ T9491] syz_tun (unregistering): left allmulticast mode [ 133.388080][ T9494] netlink: 'syz.3.1872': attribute type 20 has an invalid length. [ 133.408052][ T9495] Set syz1 is full, maxelem 6117 reached [ 133.475783][ T9494] netlink: 'syz.3.1872': attribute type 20 has an invalid length. [ 133.754729][ T9511] loop1: detected capacity change from 0 to 128 [ 133.784604][ T9511] msdos filesystem being mounted at /90/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 134.100815][ T2165] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.154734][ T9540] netlink: 'syz.1.1891': attribute type 20 has an invalid length. [ 134.162821][ T9540] __nla_validate_parse: 7 callbacks suppressed [ 134.162890][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 134.231398][ T9540] netlink: 'syz.1.1891': attribute type 20 has an invalid length. [ 134.239337][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 134.312701][ T9521] chnl_net:caif_netlink_parms(): no params data found [ 134.346885][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'. [ 134.421592][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.429076][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.436769][ T9521] bridge_slave_0: entered allmulticast mode [ 134.443383][ T9521] bridge_slave_0: entered promiscuous mode [ 134.450688][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.457924][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.465352][ T9521] bridge_slave_1: entered allmulticast mode [ 134.474147][ T9521] bridge_slave_1: entered promiscuous mode [ 134.515305][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.547700][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.581069][ T9563] loop1: detected capacity change from 0 to 8192 [ 134.591123][ T9521] team0: Port device team_slave_0 added [ 134.599550][ T9563] vfat filesystem being mounted at /95/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 134.610828][ T9521] team0: Port device team_slave_1 added [ 134.634955][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.642122][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.668260][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.687789][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.694870][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.721005][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.790692][ T9521] hsr_slave_0: entered promiscuous mode [ 134.797004][ T9521] hsr_slave_1: entered promiscuous mode [ 134.803006][ T9521] debugfs: 'hsr0' already exists in 'hsr' [ 134.808796][ T9521] Cannot create hsr debugfs directory [ 134.839555][ T9576] loop9: detected capacity change from 0 to 128 [ 134.862567][ T9576] msdos filesystem being mounted at /143/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 134.944047][ T29] audit: type=1326 audit(3916140434.317:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 134.967566][ T29] audit: type=1326 audit(3916140434.317:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 134.991880][ T29] audit: type=1326 audit(3916140434.327:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.015542][ T29] audit: type=1326 audit(3916140434.327:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.039308][ T29] audit: type=1326 audit(3916140434.327:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.063151][ T29] audit: type=1326 audit(3916140434.337:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.104582][ T29] audit: type=1326 audit(3916140434.467:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.128454][ T29] audit: type=1326 audit(3916140434.467:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.164772][ T29] audit: type=1326 audit(3916140434.537:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.0.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 135.260024][ T9597] Set syz1 is full, maxelem 6117 reached [ 135.449785][ T9521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.463692][ T9521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.478574][ T9521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.488675][ T9521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.549425][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.566826][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.578837][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.585997][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.613865][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.621097][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.649757][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.729046][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.830226][ T9521] veth0_vlan: entered promiscuous mode [ 135.840494][ T9521] veth1_vlan: entered promiscuous mode [ 135.863091][ T9521] veth0_macvtap: entered promiscuous mode [ 135.872964][ T9521] veth1_macvtap: entered promiscuous mode [ 135.889889][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.904890][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.918490][ T6273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.939055][ T6273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.961577][ T6273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.974766][ T6273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.016622][ T9691] loop1: detected capacity change from 0 to 128 [ 136.033163][ T9691] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 136.049609][ T9691] vfat filesystem being mounted at /102/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 136.185760][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 136.191825][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.982664][ T9818] geneve4: entered promiscuous mode [ 136.996083][ T31] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.008660][ T31] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.018218][ T31] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.027310][ T31] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.050818][ T6262] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.086634][ T6273] Bluetooth: hci1: Frame reassembly failed (-84) [ 137.132578][ T9829] loop2: detected capacity change from 0 to 128 [ 137.141077][ T9829] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 137.152559][ T9829] vfat filesystem being mounted at /3/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 137.746521][ T9835] loop0: detected capacity change from 0 to 8192 [ 137.761282][ T9835] vfat filesystem being mounted at /70/bus supports timestamps until 2107-12-31 (0x10391447e) [ 138.005304][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 138.011681][ T29] audit: type=1326 audit(3916140437.377:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x0 [ 138.070108][ T9857] netlink: 'syz.2.1943': attribute type 10 has an invalid length. [ 138.081192][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.090349][ T9857] bond0: (slave team0): Enslaving as an active interface with an up link [ 139.065528][ T4235] Bluetooth: hci0: command 0x1003 tx timeout [ 139.072039][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.145676][ T3584] Bluetooth: hci1: command 0x1003 tx timeout [ 139.152429][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.933957][ T9935] netlink: 'syz.0.1972': attribute type 1 has an invalid length. [ 139.961247][ T9935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.004649][ T9935] bond1: entered allmulticast mode [ 140.203406][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 140.212517][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 140.228738][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 140.237852][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 141.333161][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1994'. [ 141.342539][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1994'. [ 141.352065][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1994'. [ 141.361032][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1994'. [ 141.378679][ T9988] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 141.412278][ T9988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.438969][ T1038] IPVS: starting estimator thread 0... [ 141.467120][ T9988] bond4: entered allmulticast mode [ 141.535984][ T9996] IPVS: using max 2208 ests per chain, 110400 per kthread [ 141.910813][T10035] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 141.920189][T10035] vlan1: entered allmulticast mode [ 141.926946][T10035] veth0_vlan: entered allmulticast mode [ 142.068477][T10039] loop2: detected capacity change from 0 to 8192 [ 142.093849][T10039] vfat filesystem being mounted at /23/bus supports timestamps until 2107-12-31 (0x10391447e) [ 142.124614][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'. [ 142.133715][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 142.148210][T10055] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 142.162200][T10055] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.187586][T10055] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.241757][T10064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10064 comm=syz.3.2025 [ 142.286821][T10064] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 142.310291][T10066] loop1: detected capacity change from 0 to 1024 [ 142.331574][T10066] EXT4-fs: inline encryption not supported [ 142.353282][T10064] bond5: (slave bridge3): making interface the new active one [ 142.372386][T10066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.386611][T10064] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 142.424686][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.482908][ T29] audit: type=1400 audit(3916140441.857:1865): avc: denied { write } for pid=10083 comm="syz.1.2032" name="file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.513469][ T29] audit: type=1400 audit(3916140441.887:1866): avc: denied { ioctl } for pid=10083 comm="syz.1.2032" path="/131/file0" dev="tmpfs" ino=697 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.911176][T10124] tipc: Started in network mode [ 142.916700][T10124] tipc: Node identity ac14140f, cluster identity 4711 [ 142.929276][T10124] tipc: New replicast peer: 255.255.255.255 [ 142.936239][T10124] tipc: Enabled bearer , priority 10 [ 142.953345][ T29] audit: type=1326 audit(3916140442.327:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.1.2040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x0 [ 143.064448][T10137] netlink: 'syz.1.2043': attribute type 3 has an invalid length. [ 143.074190][T10137] netlink: 'syz.1.2043': attribute type 3 has an invalid length. [ 143.143351][T10143] gtp0: entered promiscuous mode [ 143.274107][T10162] SELinux: failed to load policy [ 143.293316][T10158] bond2 (unregistering): Released all slaves [ 143.348638][ T29] audit: type=1326 audit(3916140442.727:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10174 comm="syz.1.2052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x0 [ 143.633391][ T29] audit: type=1326 audit(3916140443.007:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10224 comm="syz.9.2056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x0 [ 143.935575][ T4179] tipc: Node number set to 2886997007 [ 144.295008][T10243] syzkaller1: entered promiscuous mode [ 144.300993][T10243] syzkaller1: entered allmulticast mode [ 144.486925][T10253] tipc: Started in network mode [ 144.491914][T10253] tipc: Node identity ac14140f, cluster identity 4711 [ 144.499333][T10253] tipc: New replicast peer: 255.255.255.255 [ 144.505473][T10253] tipc: Enabled bearer , priority 10 [ 144.571870][T10256] gtp0: entered promiscuous mode [ 144.871079][T10278] syzkaller1: entered promiscuous mode [ 144.876809][T10278] syzkaller1: entered allmulticast mode [ 145.322343][T10309] netlink: 'syz.0.2087': attribute type 3 has an invalid length. [ 145.346275][T10309] netlink: 'syz.0.2087': attribute type 3 has an invalid length. [ 145.626001][ T4179] tipc: Node number set to 2886997007 [ 145.641110][T10326] SELinux: failed to load policy [ 145.807837][T10336] wg1: entered promiscuous mode [ 145.813429][T10336] wg1: entered allmulticast mode [ 145.841512][T10336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.860860][T10336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.918805][ T3485] IPVS: starting estimator thread 0... [ 145.925178][T10346] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 145.932582][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 146.005621][T10347] IPVS: using max 2256 ests per chain, 112800 per kthread [ 146.058346][ T29] audit: type=1400 audit(3916140445.437:1870): avc: denied { read write } for pid=10358 comm="syz.2.2106" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.083394][ T29] audit: type=1400 audit(3916140445.437:1871): avc: denied { open } for pid=10358 comm="syz.2.2106" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.104302][ T3488] kernel read not supported for file /105/uid_map (pid: 3488 comm: kworker/1:8) [ 146.241404][T10367] SELinux: failed to load policy [ 146.274841][T10372] __nla_validate_parse: 7 callbacks suppressed [ 146.274858][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2111'. [ 146.497578][ T29] audit: type=1326 audit(3916140445.877:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.521318][ T29] audit: type=1326 audit(3916140445.877:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.545137][ T29] audit: type=1326 audit(3916140445.877:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.568878][ T29] audit: type=1326 audit(3916140445.877:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.621198][T10391] loop9: detected capacity change from 0 to 1024 [ 146.695510][ T29] audit: type=1326 audit(3916140445.967:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.697493][T10391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.719516][ T29] audit: type=1326 audit(3916140445.967:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 146.889506][T10391] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.2114: inode #4: comm syz.9.2114: iget: illegal inode # [ 146.906369][T10391] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2114: error while reading EA inode 4 err=-117 [ 147.029533][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.041190][T10407] loop0: detected capacity change from 0 to 8192 [ 147.085855][ T3312] loop0: p1 p2 p3 [ 147.089691][ T3312] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 147.118278][T10416] wg1: entered promiscuous mode [ 147.123208][T10416] wg1: entered allmulticast mode [ 147.136221][ T3312] loop0: p2 size 117440512 extends beyond EOD, truncated [ 147.147303][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.155959][ T3312] loop0: p3 start 4294901760 is beyond EOD, truncated [ 147.164859][T10407] loop0: p1 p2 p3 [ 147.168844][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.173897][T10407] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 147.205876][T10407] loop0: p2 size 117440512 extends beyond EOD, truncated [ 147.229419][T10407] loop0: p3 start 4294901760 is beyond EOD, truncated [ 147.234709][ T3427] kernel read not supported for file /445/uid_map (pid: 3427 comm: kworker/1:6) [ 147.613474][T10434] batadv_slave_0: entered promiscuous mode [ 147.638611][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 147.649983][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 147.661578][T10433] batadv_slave_0: left promiscuous mode [ 148.117819][T10473] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 148.126020][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 148.882029][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 148.882048][ T29] audit: type=1326 audit(3916140448.257:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 148.935724][T10530] wg1: entered promiscuous mode [ 148.940715][T10530] wg1: entered allmulticast mode [ 148.945633][ T29] audit: type=1326 audit(3916140448.287:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 148.969441][ T29] audit: type=1326 audit(3916140448.287:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 148.993362][ T29] audit: type=1326 audit(3916140448.287:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.017298][ T29] audit: type=1326 audit(3916140448.297:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.041087][ T29] audit: type=1326 audit(3916140448.297:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.065351][ T29] audit: type=1326 audit(3916140448.297:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.089104][ T29] audit: type=1326 audit(3916140448.297:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.096886][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.113375][ T29] audit: type=1326 audit(3916140448.297:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.145072][ T29] audit: type=1326 audit(3916140448.297:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 149.206531][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.256354][T10541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2148'. [ 149.367526][T10543] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.378045][T10543] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.468612][T10543] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.479191][T10543] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.577947][T10543] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.588494][T10543] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.657955][T10543] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.668475][T10543] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.749712][ T6271] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.758094][ T6271] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.807794][ T6271] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.816911][ T6271] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.846905][ T6271] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.855134][ T6271] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.948030][T10569] loop1: detected capacity change from 0 to 1024 [ 149.976136][T10569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.998033][T10569] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.2161: inode #4: comm syz.1.2161: iget: illegal inode # [ 150.011542][T10569] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2161: error while reading EA inode 4 err=-117 [ 150.056771][T10571] loop3: detected capacity change from 0 to 8192 [ 150.072058][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.096122][ T3310] loop3: p1 p2 p3 [ 150.099965][ T3310] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 150.125855][ T3310] loop3: p2 size 117440512 extends beyond EOD, truncated [ 150.144689][ T3310] loop3: p3 start 4294901760 is beyond EOD, truncated [ 150.151889][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 150.188420][T10571] loop3: p1 p2 p3 [ 150.192337][T10571] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 150.205640][T10571] loop3: p2 size 117440512 extends beyond EOD, truncated [ 150.214552][T10571] loop3: p3 start 4294901760 is beyond EOD, truncated [ 150.607788][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 150.619537][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 150.639516][T10589] netlink: 'syz.1.2168': attribute type 2 has an invalid length. [ 150.738026][T10595] loop2: detected capacity change from 0 to 128 [ 150.757644][T10595] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 150.782216][T10595] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.838764][ T9521] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.307312][T10544] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.317649][T10544] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.377410][T10544] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.387542][T10544] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.394784][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2188'. [ 151.468352][T10544] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.478192][T10544] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.852516][T10653] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2191'. [ 151.862119][T10653] netlink: 'syz.1.2191': attribute type 9 has an invalid length. [ 151.870203][T10653] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2191'. [ 151.879855][T10653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2191'. [ 152.246120][T10679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2211'. [ 152.311531][T10686] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2205'. [ 152.321080][T10686] netlink: 'syz.3.2205': attribute type 9 has an invalid length. [ 152.329111][T10686] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2205'. [ 152.338292][T10686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2205'. [ 152.366522][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 152.389145][T10691] loop0: detected capacity change from 0 to 512 [ 152.398259][T10691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.411486][T10691] EXT4-fs (loop0): 1 truncate cleaned up [ 152.418067][T10691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.446058][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.125240][T10708] GUP no longer grows the stack in syz.3.2214 (10708): 200000004000-20000000a000 (200000002000) [ 153.135828][T10708] CPU: 1 UID: 0 PID: 10708 Comm: syz.3.2214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.135868][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.135935][T10708] Call Trace: [ 153.135943][T10708] [ 153.135979][T10708] __dump_stack+0x1d/0x30 [ 153.136003][T10708] dump_stack_lvl+0x95/0xd0 [ 153.136024][T10708] dump_stack+0x15/0x1b [ 153.136049][T10708] __get_user_pages+0x195b/0x1ea0 [ 153.136084][T10708] ? __rcu_read_unlock+0x4e/0x70 [ 153.136103][T10708] get_user_pages_remote+0x1d5/0x6b0 [ 153.136186][T10708] __access_remote_vm+0x15c/0x580 [ 153.136234][T10708] access_remote_vm+0x32/0x40 [ 153.136263][T10708] proc_pid_cmdline_read+0x32b/0x6b0 [ 153.136292][T10708] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 153.136325][T10708] vfs_readv+0x432/0x6e0 [ 153.136358][T10708] __x64_sys_preadv+0xfd/0x1c0 [ 153.136379][T10708] x64_sys_call+0x2805/0x3000 [ 153.136481][T10708] do_syscall_64+0xc0/0x2a0 [ 153.136555][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.136659][T10708] RIP: 0033:0x7f9364d1acb9 [ 153.136720][T10708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.136738][T10708] RSP: 002b:00007f9363777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 153.136757][T10708] RAX: ffffffffffffffda RBX: 00007f9364f95fa0 RCX: 00007f9364d1acb9 [ 153.136770][T10708] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 153.136782][T10708] RBP: 00007f9364d88bf7 R08: 0000000000000000 R09: 0000000000000000 [ 153.136794][T10708] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 153.136805][T10708] R13: 00007f9364f96038 R14: 00007f9364f95fa0 R15: 00007ffdbd6c1028 [ 153.136831][T10708] [ 153.449498][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2219'. [ 153.465882][T10721] netlink: 'syz.0.2219': attribute type 9 has an invalid length. [ 153.534319][T10731] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 153.542364][T10731] netlink: 'syz.0.2224': attribute type 4 has an invalid length. [ 153.851034][ T6273] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.859620][ T6273] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.871601][ T6273] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.879990][ T6273] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.897649][ T6273] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.906007][ T6273] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.918599][ T6273] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.927003][ T6273] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.137824][T10791] netlink: 'syz.9.2242': attribute type 1 has an invalid length. [ 154.145821][T10791] netlink: 'syz.9.2242': attribute type 4 has an invalid length. [ 154.248171][T10803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.322983][T10803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.360585][T10815] loop9: detected capacity change from 0 to 128 [ 154.372139][T10815] vfat filesystem being mounted at /211/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 154.415107][T10803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.490060][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 154.490079][ T29] audit: type=1326 audit(3916140453.867:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.519871][ T29] audit: type=1326 audit(3916140453.867:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.543845][ T29] audit: type=1326 audit(3916140453.867:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.567397][ T29] audit: type=1326 audit(3916140453.867:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.590877][ T29] audit: type=1326 audit(3916140453.867:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.614494][ T29] audit: type=1326 audit(3916140453.867:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.638092][ T29] audit: type=1326 audit(3916140453.867:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.662143][ T29] audit: type=1326 audit(3916140453.867:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.686025][ T29] audit: type=1326 audit(3916140453.867:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.709800][ T29] audit: type=1326 audit(3916140453.867:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9364d1acb9 code=0x7ffc0000 [ 154.743490][T10803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.754452][ T6261] bio_check_eod: 119 callbacks suppressed [ 154.754471][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.754471][ T6261] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 154.780341][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.780341][ T6261] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 154.794173][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.794173][ T6261] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 154.829758][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.829758][ T6261] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 154.847771][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.847771][ T6261] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 154.862488][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.862488][ T6261] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 154.876197][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.876197][ T6261] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 154.889835][ T395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.898843][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.898843][ T6261] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 154.912744][ T395] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.970707][ T395] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.979946][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.979946][ T6261] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 154.994574][ T6261] kworker/u8:51: attempt to access beyond end of device [ 154.994574][ T6261] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 155.054593][T10855] loop0: detected capacity change from 0 to 512 [ 155.061779][T10855] EXT4-fs: inline encryption not supported [ 155.086452][T10855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.229589][T10873] loop9: detected capacity change from 0 to 1024 [ 155.236829][T10873] EXT4-fs (loop9): Can't support bigalloc feature without extents feature [ 155.236829][T10873] [ 155.247789][T10873] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 155.900390][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.051239][T10900] loop0: detected capacity change from 0 to 128 [ 156.069416][T10900] vfat filesystem being mounted at /134/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 156.181954][T10911] loop1: detected capacity change from 0 to 512 [ 156.191590][T10911] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2293: invalid block [ 156.208537][T10911] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2293: invalid indirect mapped block 4294967295 (level 1) [ 156.223551][T10911] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2293: invalid indirect mapped block 4294967295 (level 1) [ 156.238860][T10911] EXT4-fs (loop1): 2 truncates cleaned up [ 156.245167][T10911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.263709][T10911] EXT4-fs (loop1): shut down requested (1) [ 156.270201][T10911] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 156.279739][T10911] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 156.301014][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.419644][T10922] netlink: 'syz.3.2298': attribute type 13 has an invalid length. [ 156.649568][T10808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.687608][T10808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.787443][T10808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.825262][T10949] loop3: detected capacity change from 0 to 512 [ 156.834929][T10949] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2306: invalid indirect mapped block 4294967295 (level 1) [ 156.850234][T10949] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2306: invalid indirect mapped block 4294967295 (level 1) [ 156.865428][T10949] EXT4-fs (loop3): 2 truncates cleaned up [ 156.872438][T10949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.887810][T10949] EXT4-fs (loop3): shut down requested (1) [ 156.894028][T10949] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 156.903003][T10949] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 156.923692][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.345167][T10957] __nla_validate_parse: 4 callbacks suppressed [ 157.345187][T10957] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2310'. [ 157.389389][T10959] netlink: 'syz.0.2311': attribute type 13 has an invalid length. [ 157.714854][T10975] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 158.234817][T11005] loop1: detected capacity change from 0 to 512 [ 158.242437][T11005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.259711][T11005] EXT4-fs (loop1): 1 truncate cleaned up [ 158.267090][T11005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.371863][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.432686][ T6271] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.444423][ T6271] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.456249][ T6271] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.480605][T11010] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 158.481728][ T6271] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.650228][T11020] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2337'. [ 158.660030][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.667224][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.682329][T11020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11020 comm=syz.9.2337 [ 158.711030][T11020] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2337'. [ 159.023212][T11035] loop9: detected capacity change from 0 to 512 [ 159.043789][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'. [ 159.053300][T11035] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 159.070248][T11035] EXT4-fs (loop9): 1 truncate cleaned up [ 159.079065][T11035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.190086][T11042] raw_sendmsg: syz.0.2345 forgot to set AF_INET. Fix it! [ 159.230163][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.245091][T11045] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 159.297983][T11051] loop0: detected capacity change from 0 to 512 [ 159.323906][T11053] loop1: detected capacity change from 0 to 512 [ 159.325670][T11051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.337462][T11053] EXT4-fs: inline encryption not supported [ 159.356009][T11051] EXT4-fs (loop0): 1 truncate cleaned up [ 159.362294][T11051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.402511][T11053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.422145][T11058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2350'. [ 159.435812][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.443083][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.492546][T11058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11058 comm=syz.3.2350 [ 159.505378][T11058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2350'. [ 159.629380][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.871413][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2355'. [ 160.166286][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.646332][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 160.646351][ T29] audit: type=1326 audit(3916140460.027:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.687196][ T29] audit: type=1326 audit(3916140460.057:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.711012][ T29] audit: type=1326 audit(3916140460.057:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.734802][ T29] audit: type=1326 audit(3916140460.057:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.758458][ T29] audit: type=1326 audit(3916140460.057:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.782071][ T29] audit: type=1326 audit(3916140460.057:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 160.806031][ T29] audit: type=1326 audit(3916140460.057:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c81acb9 code=0x7ffc0000 [ 161.078604][T11140] only policy match revision 0 supported [ 161.078696][T11140] unable to load match [ 161.558795][ T29] audit: type=1326 audit(3916140460.937:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 161.583121][ T29] audit: type=1326 audit(3916140460.937:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 161.606822][ T29] audit: type=1326 audit(3916140460.967:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ec3bacb9 code=0x7ffc0000 [ 162.216686][T11193] only policy match revision 0 supported [ 162.216702][T11193] unable to load match [ 162.668867][ T3393] kernel read not supported for file /vga_arbiter (pid: 3393 comm: kworker/1:3) [ 162.936113][T11230] only policy match revision 0 supported [ 162.936131][T11230] unable to load match [ 163.091977][T11239] loop2: detected capacity change from 0 to 128 [ 163.110015][T11239] vfat filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 163.759798][T11269] loop0: detected capacity change from 0 to 1024 [ 163.778752][T11269] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.785313][T11269] EXT4-fs: inline encryption not supported [ 163.795614][T11269] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.833872][T11269] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2430: bad orphan inode 11 [ 163.844337][T11269] EXT4-fs (loop0): Remounting filesystem read-only [ 163.850973][T11269] ext4_test_bit(bit=10, block=4) = 1 [ 163.856524][T11269] is_bad_inode(inode)=0 [ 163.860712][T11269] NEXT_ORPHAN(inode)=3254779904 [ 163.865710][T11269] max_ino=32 [ 163.868940][T11269] i_nlink=0 [ 163.873548][T11269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.896655][T11269] EXT4-fs: Ignoring removed nobh option [ 163.902323][T11269] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 163.910199][T11269] EXT4-fs: Cannot change journaled quota options when quota turned on [ 163.929663][ T8368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.941684][T11275] loop1: detected capacity change from 0 to 128 [ 163.970347][T11275] vfat filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 163.992493][T11279] syzkaller1: entered promiscuous mode [ 164.008542][T11279] syzkaller1: entered allmulticast mode [ 164.430359][T11310] macvlan1: entered allmulticast mode [ 164.435858][T11310] veth1_vlan: entered allmulticast mode [ 164.458821][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2451'. [ 164.471170][T11310] macvlan1: entered promiscuous mode [ 164.532804][T11284] loop0: detected capacity change from 0 to 32768 [ 164.606857][T11307] macvlan1: left promiscuous mode [ 164.612146][T11307] macvlan1: left allmulticast mode [ 164.617456][T11307] veth1_vlan: left allmulticast mode [ 164.757135][T11341] loop9: detected capacity change from 0 to 128 [ 164.782478][T11346] loop3: detected capacity change from 0 to 512 [ 164.798613][T11346] EXT4-fs: Ignoring removed bh option [ 164.812479][T11341] vfat filesystem being mounted at /262/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 164.874544][T11346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.904075][T11351] loop1: detected capacity change from 0 to 128 [ 164.954948][T11346] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.967464][T11351] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.014556][T11351] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.048743][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.096114][ T7769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.414170][T11382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2476'. [ 165.539083][T11387] lo: Caught tx_queue_len zero misconfig [ 165.562162][T11387] sch_fq: defrate 7 ignored. [ 165.758881][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 165.880700][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 166.102177][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 166.172422][T11414] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 166.256536][T11418] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 166.278701][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2492'. [ 166.385869][T11426] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 166.401734][T11427] loop3: detected capacity change from 0 to 1024 [ 166.437066][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 166.460810][T11426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.475916][T11427] ext4: Unknown parameter 'func' [ 166.586719][T11430] bond2 (unregistering): Released all slaves [ 166.782442][T11439] ipip0: entered promiscuous mode [ 167.137971][T11464] loop1: detected capacity change from 0 to 512 [ 167.181488][T11464] EXT4-fs: Ignoring removed bh option [ 167.243768][T11464] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2510: iget: bad i_size value: 38620345925642 [ 167.256422][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 167.257002][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 167.312899][T11470] SELinux: failed to load policy [ 167.343549][T11464] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2510: couldn't read orphan inode 15 (err -117) [ 167.364018][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2514'. [ 167.376406][T11474] gtp1: entered promiscuous mode [ 167.394583][T11464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.434596][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 167.434615][ T29] audit: type=1400 audit(3916140466.807:2078): avc: denied { add_name } for pid=11462 comm="syz.1.2510" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.449627][T11464] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2510: bg 0: block 5: invalid block bitmap [ 167.505831][T11464] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 167.518250][T11464] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.518250][T11464] [ 167.527967][T11464] EXT4-fs (loop1): Total free blocks count 0 [ 167.533983][T11464] EXT4-fs (loop1): Free/Dirty block details [ 167.539976][T11464] EXT4-fs (loop1): free_blocks=0 [ 167.545048][T11464] EXT4-fs (loop1): dirty_blocks=66 [ 167.550228][T11464] EXT4-fs (loop1): Block reservation details [ 167.556287][T11464] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 167.664975][T11489] loop2: detected capacity change from 0 to 512 [ 167.675069][ T6226] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 167.692766][T11489] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2521: corrupted in-inode xattr: invalid ea_ino [ 167.720349][T11493] netlink: 'syz.9.2523': attribute type 7 has an invalid length. [ 167.728233][T11493] netlink: 'syz.9.2523': attribute type 8 has an invalid length. [ 167.759927][T11489] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2521: couldn't read orphan inode 15 (err -117) [ 167.810859][T11489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.956729][T11502] vfat filesystem being mounted at /242/bus supports timestamps until 2107-12-31 (0x10391447e) [ 167.973792][T11505] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.032636][T11505] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.062219][T11505] vfat filesystem being mounted at /526/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 168.089182][ T29] audit: type=1400 audit(3916140467.467:2079): avc: denied { unlink } for pid=11488 comm="syz.2.2521" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.290455][T11514] gre3: entered promiscuous mode [ 168.344234][ T9521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.189122][T11551] SELinux: failed to load policy [ 169.278034][T11557] netlink: 'syz.3.2550': attribute type 7 has an invalid length. [ 169.285949][T11557] netlink: 'syz.3.2550': attribute type 8 has an invalid length. [ 169.333288][T11563] set_capacity_and_notify: 2 callbacks suppressed [ 169.333342][T11563] loop2: detected capacity change from 0 to 256 [ 169.349602][T11563] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.361041][T11563] vfat filesystem being mounted at /117/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 169.629011][T11580] SELinux: failed to load policy [ 169.659569][T11582] loop2: detected capacity change from 0 to 128 [ 169.675181][T11582] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.694389][T11582] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.730426][T11582] vfat filesystem being mounted at /118/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 170.428260][T11613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.442820][T11613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.457841][T11615] SELinux: failed to load policy [ 170.479230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810a239e00: rx timeout, send abort [ 170.487768][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a239e00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.522361][T11617] loop1: detected capacity change from 0 to 512 [ 170.536802][T11617] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #11: block 530: comm syz.1.2577: lblock 4 mapped to illegal pblock 530 (length 1) [ 170.631868][T11617] ------------[ cut here ]------------ [ 170.637440][T11617] EA inode 11 i_nlink=2 [ 170.637460][T11617] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.1.2577/11617 [ 170.652549][T11617] Modules linked in: [ 170.656520][T11617] CPU: 1 UID: 0 PID: 11617 Comm: syz.1.2577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.666647][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.676936][T11617] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 170.683606][T11617] Code: 11 cf 9b ff 4c 8d 2d 4a aa 3f 05 49 8d 7e 40 e8 c1 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 f5 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c bc c5 03 66 66 66 2e 0f 1f 84 [ 170.703398][T11617] RSP: 0018:ffffc900083bf778 EFLAGS: 00010246 [ 170.709533][T11617] RAX: ffff8881286fdd10 RBX: ffff888109802db8 RCX: ffffffff81bc669b [ 170.717653][T11617] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc10d0 [ 170.725720][T11617] RBP: 000000000000000b R08: 0001888109802d6b R09: 0000000000000000 [ 170.733726][T11617] R10: ffffc900083bf6a8 R11: 0001c900083bf6a8 R12: ffff888109802d68 [ 170.741936][T11617] R13: ffffffff86fc10d0 R14: ffff888109802d20 R15: 0000000000000001 [ 170.750062][T11617] FS: 00007f16eae176c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 170.759078][T11617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.765742][T11617] CR2: 00007f21a5af7dac CR3: 000000012c0ac000 CR4: 00000000003506f0 [ 170.774413][T11617] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 170.782583][T11617] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 170.790630][T11617] Call Trace: [ 170.793963][T11617] [ 170.796973][T11617] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 170.803216][T11617] ? errseq_check+0x2c/0x50 [ 170.807816][T11617] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 170.813374][T11617] ? ext4_truncate+0x92b/0xad0 [ 170.818444][T11617] ext4_evict_inode+0xa1f/0xd40 [ 170.823473][T11617] ? __pfx_ext4_evict_inode+0x10/0x10 [ 170.829041][T11617] evict+0x2af/0x510 [ 170.833230][T11617] ? __dquot_initialize+0x146/0x7c0 [ 170.838691][T11617] iput+0x4b9/0x650 [ 170.842665][T11617] ext4_process_orphan+0x1a9/0x1c0 [ 170.847869][T11617] ext4_orphan_cleanup+0x6a8/0xa00 [ 170.853110][T11617] ext4_fill_super+0x3476/0x3800 [ 170.858250][T11617] ? set_blocksize+0x1a3/0x310 [ 170.863224][T11617] ? setup_bdev_super+0x30e/0x370 [ 170.868365][T11617] ? __pfx_ext4_fill_super+0x10/0x10 [ 170.873707][T11617] get_tree_bdev_flags+0x291/0x300 [ 170.878931][T11617] ? __pfx_ext4_fill_super+0x10/0x10 [ 170.884518][T11617] get_tree_bdev+0x1f/0x30 [ 170.889261][T11617] ext4_get_tree+0x1c/0x30 [ 170.893775][T11617] vfs_get_tree+0x57/0x1d0 [ 170.898635][T11617] do_new_mount+0x288/0x700 [ 170.903197][T11617] path_mount+0x4c0/0xb90 [ 170.907621][T11617] ? user_path_at+0xbf/0x130 [ 170.912371][T11617] __se_sys_mount+0x28c/0x2e0 [ 170.917142][T11617] ? restore_fpregs_from_fpstate+0x61/0x110 [ 170.923362][T11617] __x64_sys_mount+0x67/0x80 [ 170.928122][T11617] x64_sys_call+0x2cca/0x3000 [ 170.932996][T11617] do_syscall_64+0xc0/0x2a0 [ 170.937653][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.943628][T11617] RIP: 0033:0x7f16ec3bbf4a [ 170.948126][T11617] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.967871][T11617] RSP: 002b:00007f16eae16e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.976393][T11617] RAX: ffffffffffffffda RBX: 00007f16eae16ee0 RCX: 00007f16ec3bbf4a [ 170.984910][T11617] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f16eae16ea0 [ 170.992976][T11617] RBP: 0000200000000180 R08: 00007f16eae16ee0 R09: 0000000000800718 [ 171.001040][T11617] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 171.009182][T11617] R13: 00007f16eae16ea0 R14: 0000000000000482 R15: 0000200000000200 [ 171.017430][T11617] [ 171.020610][T11617] ---[ end trace 0000000000000000 ]--- [ 171.035991][T11617] EXT4-fs (loop1): 1 orphan inode deleted [ 171.042234][T11617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.111773][T11636] loop9: detected capacity change from 0 to 512 [ 171.129000][T11636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.143930][T11636] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.204090][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.256433][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.321126][T11650] loop1: detected capacity change from 0 to 512 [ 171.378743][T11650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.409568][T11650] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.437970][T11663] __nla_validate_parse: 7 callbacks suppressed [ 171.438051][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 171.513453][T11650] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 4: comm syz.1.2589: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 171.587082][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 171.615800][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.501028][T11779] tipc: Enabled bearer , priority 10 [ 172.622872][T11789] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.667269][ T29] audit: type=1400 audit(3916140472.037:2080): avc: denied { name_bind } for pid=11794 comm="syz.9.2616" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 172.739554][T11789] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.827464][T11789] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.843475][T11799] loop9: detected capacity change from 0 to 8192 [ 172.858105][T11809] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 172.879425][T11799] vfat filesystem being mounted at /299/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 172.921757][T11815] loop1: detected capacity change from 0 to 512 [ 172.929406][T11799] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 172.937410][T11799] FAT-fs (loop9): Filesystem has been set read-only [ 172.945912][T11789] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.961231][T11799] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 172.969397][T11815] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2623: inode has both inline data and extents flags [ 172.984396][ T29] audit: type=1400 audit(3916140472.367:2081): avc: denied { remount } for pid=11798 comm="syz.9.2618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 173.004509][T11815] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2623: couldn't read orphan inode 15 (err -117) [ 173.017316][T11815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.040061][ T6273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.061749][ T6273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.080391][ T6273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.097370][ T6273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.137977][T11825] all: renamed from bridge_slave_0 (while UP) [ 173.536561][T11845] loop2: detected capacity change from 0 to 2048 [ 173.560231][T11845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.695147][ T9521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.844549][T11861] syzkaller1: entered promiscuous mode [ 173.850202][T11861] syzkaller1: entered allmulticast mode [ 173.851394][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.917851][T11867] netlink: 'syz.1.2645': attribute type 12 has an invalid length. [ 174.190035][T11881] netlink: 'syz.3.2651': attribute type 12 has an invalid length. [ 174.195819][ T29] audit: type=1400 audit(3916140473.567:2082): avc: denied { read } for pid=11878 comm="syz.9.2650" lport=50109 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 174.330962][T11888] loop3: detected capacity change from 0 to 512 [ 174.344351][T11888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.364751][T11888] EXT4-fs (loop3): 1 orphan inode deleted [ 174.370568][T11888] EXT4-fs (loop3): 1 truncate cleaned up [ 174.384808][T11888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.409017][T11888] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.426464][T11888] EXT4-fs (loop3): Remounting filesystem read-only [ 174.444334][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.655997][ T29] audit: type=1326 audit(3916140474.037:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.700130][ T29] audit: type=1326 audit(3916140474.057:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.723700][ T29] audit: type=1326 audit(3916140474.057:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.747652][ T29] audit: type=1326 audit(3916140474.057:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.771471][ T29] audit: type=1326 audit(3916140474.057:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.795280][ T29] audit: type=1326 audit(3916140474.067:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11897 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cb6e2b58e code=0x7ffc0000 [ 174.818860][ T29] audit: type=1326 audit(3916140474.067:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.9.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9cb6e6acb9 code=0x7ffc0000 [ 174.878501][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2658'. [ 174.913123][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2658'. [ 174.933172][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2658'. [ 174.953100][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2658'. [ 174.973779][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2658'. [ 175.181047][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2665'. [ 175.215755][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2665'. [ 175.303659][T11924] loop1: detected capacity change from 0 to 512 [ 175.313810][T11924] EXT4-fs (loop1): can't read group descriptor 0 [ 175.410190][T11934] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2673'. [ 175.596475][T11955] netlink: 'syz.1.2683': attribute type 10 has an invalid length. [ 175.610668][T11955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 175.620579][T11955] team0: Failed to send options change via netlink (err -105) [ 175.628388][T11955] team0: Port device dummy0 added [ 175.668101][ T3393] IPVS: starting estimator thread 0... [ 175.755549][T11963] IPVS: using max 2112 ests per chain, 105600 per kthread [ 175.871707][T11979] erspan0: entered promiscuous mode [ 175.877280][T11979] macvtap1: entered promiscuous mode [ 175.882748][T11979] macvtap1: entered allmulticast mode [ 175.888375][T11979] erspan0: entered allmulticast mode [ 175.902545][T11979] erspan0: left allmulticast mode [ 175.908017][T11979] erspan0: left promiscuous mode [ 176.035351][T11991] loop1: detected capacity change from 0 to 1024 [ 176.042143][T11991] EXT4-fs: Ignoring removed orlov option [ 176.057546][T11991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.236724][T11995] ================================================================== [ 176.244857][T11995] BUG: KCSAN: data-race in filemap_read / filemap_read [ 176.251747][T11995] [ 176.254125][T11995] read to 0xffff888104e65168 of 8 bytes by task 11991 on cpu 1: [ 176.261804][T11995] filemap_read+0x6f/0xa10 [ 176.266270][T11995] generic_file_read_iter+0x79/0x330 [ 176.271590][T11995] ext4_file_read_iter+0x1cc/0x290 [ 176.276837][T11995] copy_splice_read+0x471/0x6c0 [ 176.281742][T11995] splice_direct_to_actor+0x28f/0x670 [ 176.287156][T11995] do_splice_direct+0x119/0x1a0 [ 176.292057][T11995] do_sendfile+0x380/0x650 [ 176.296516][T11995] __x64_sys_sendfile64+0x105/0x150 [ 176.301778][T11995] x64_sys_call+0x2db1/0x3000 [ 176.306531][T11995] do_syscall_64+0xc0/0x2a0 [ 176.311075][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.317178][T11995] [ 176.319533][T11995] write to 0xffff888104e65168 of 8 bytes by task 11995 on cpu 0: [ 176.327296][T11995] filemap_read+0x98d/0xa10 [ 176.331850][T11995] generic_file_read_iter+0x79/0x330 [ 176.337182][T11995] ext4_file_read_iter+0x1cc/0x290 [ 176.342377][T11995] copy_splice_read+0x471/0x6c0 [ 176.347316][T11995] splice_direct_to_actor+0x28f/0x670 [ 176.352742][T11995] do_splice_direct+0x119/0x1a0 [ 176.357626][T11995] do_sendfile+0x380/0x650 [ 176.362101][T11995] __x64_sys_sendfile64+0x105/0x150 [ 176.367343][T11995] x64_sys_call+0x2db1/0x3000 [ 176.372070][T11995] do_syscall_64+0xc0/0x2a0 [ 176.376621][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.382555][T11995] [ 176.384908][T11995] value changed: 0x000000000000018e -> 0x000000000000018f [ 176.392045][T11995] [ 176.394396][T11995] Reported by Kernel Concurrency Sanitizer on: [ 176.400923][T11995] CPU: 0 UID: 0 PID: 11995 Comm: syz.1.2699 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.412504][T11995] Tainted: [W]=WARN [ 176.416504][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.426583][T11995] ================================================================== [ 176.520908][ T7769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.