last executing test programs: 1m23.98969354s ago: executing program 3 (id=497): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m23.955624564s ago: executing program 3 (id=499): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffb, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m23.898889951s ago: executing program 3 (id=500): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xa, 0x2, 0x4, 0xfa, 0xe]}, &(0x7f0000000080)=0x78) 1m23.178908224s ago: executing program 3 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m23.145081688s ago: executing program 3 (id=519): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x2000003, 0x0, 0x0, 'queue0\x00', 0xffffffff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r1, r1, 0x0) 1m22.89448026s ago: executing program 3 (id=527): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x1800403, &(0x7f0000000840)={[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/qrtr-tun\x00\xcet'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1m22.894307331s ago: executing program 32 (id=527): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x1800403, &(0x7f0000000840)={[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/qrtr-tun\x00\xcet'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1m15.763584119s ago: executing program 4 (id=633): r0 = socket(0x1e, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 1m15.640965145s ago: executing program 4 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x0, 0x3, 0x6, 0x0, @local, @private=0xa010100}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0x16, 0x0, 0x3, 0x6, 0x1, 0x2, 0xfff, 0x4, 0x3, 0x4e21, 0x4e24}, 0x4, 0x4}, 0x3, 0x3}}}}}}}}, 0x56) 1m15.166122476s ago: executing program 4 (id=643): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000140)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1m15.034528493s ago: executing program 4 (id=646): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 1m14.908598109s ago: executing program 4 (id=650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m14.82422543s ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 59.695538159s ago: executing program 33 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.916547603s ago: executing program 0 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10000014}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 27.882324598s ago: executing program 0 (id=1499): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfc, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x2400}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000004000000", 0x30) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x37}}, 0x14) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x48, 0x2f, 0xff, @private0={0xfc, 0x3, '\x00', 0xff}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7, 0x0, 0x0, [0x81, 0x9]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x288, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x4}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x1f, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x29}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x438) 27.854131932s ago: executing program 0 (id=1500): socket$inet(0x2b, 0x801, 0x2) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 27.678612434s ago: executing program 0 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) 27.678409554s ago: executing program 0 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000d0a01f9ffffff00000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 27.135572564s ago: executing program 0 (id=1517): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000740)="00cd04ac514d", 0x6, 0x200448d1, 0x0, 0x0) 27.118211106s ago: executing program 34 (id=1517): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000740)="00cd04ac514d", 0x6, 0x200448d1, 0x0, 0x0) 8.483777087s ago: executing program 5 (id=1924): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000680)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 8.392280459s ago: executing program 5 (id=1928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4080) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x0, 0x0, 0x4, 0x6, 0x200000}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 7.517343511s ago: executing program 5 (id=1940): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x5, 0x1}, 0x10) 7.464532638s ago: executing program 5 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 7.427229083s ago: executing program 5 (id=1942): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 6.802041483s ago: executing program 5 (id=1949): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[], 0x0) 6.770005367s ago: executing program 35 (id=1949): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[], 0x0) 2.395206061s ago: executing program 7 (id=2022): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x8006, 0x0, 0x5) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 1.962469317s ago: executing program 7 (id=2024): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638877fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.751069914s ago: executing program 1 (id=2028): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv6=@mcast1, @ipv4=@rand_addr=0x64010101, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@local, @icmp_id, @gre_key=0x4}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000], [0x0, 0xff000000], 'wg1\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv6=@private2, @ipv4=@broadcast, @icmp_id=0x64, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.622439621s ago: executing program 8 (id=1952): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a0, &(0x7f0000001400)="$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") mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000009c0)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) 913.040932ms ago: executing program 7 (id=2032): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sync() syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 849.81878ms ago: executing program 1 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 801.019846ms ago: executing program 2 (id=2034): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="feff0000000000000000000000763b0000110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 632.826028ms ago: executing program 2 (id=2036): unshare(0x400) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008802, &(0x7f0000000180), 0x9, 0x606, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @aes256, 0x2, '\x00', @auto="47181acc4af3c038b94f02ffdc7337d8"}) 606.904962ms ago: executing program 1 (id=2037): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 580.238355ms ago: executing program 7 (id=2039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 536.173571ms ago: executing program 2 (id=2041): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 535.780171ms ago: executing program 1 (id=2042): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) 501.805905ms ago: executing program 6 (id=2043): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd37, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x20004000) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup, 0x5, 0x1, 0x524f8546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 440.118033ms ago: executing program 2 (id=2044): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 437.608683ms ago: executing program 1 (id=2045): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 382.508701ms ago: executing program 6 (id=2046): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 382.203911ms ago: executing program 6 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 379.803231ms ago: executing program 6 (id=2048): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd79, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa9700) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) getgroups(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 345.172246ms ago: executing program 6 (id=2049): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x22020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000380), 0x0, 0x189040) ioctl$RTC_RD_TIME(r0, 0x4008700c, 0x0) 286.669523ms ago: executing program 1 (id=2050): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sync() syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 286.396943ms ago: executing program 2 (id=2051): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 172.927228ms ago: executing program 7 (id=2052): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 172.044228ms ago: executing program 6 (id=2053): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$nl_route(r0, 0x0, 0x20) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x40400c0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLZFftmK+ANEraKx8UdLCyoHD2o08aCJiR7wuLaFIAs1tCZCiFYPeDQk3o1HE/8CT3ox6snEq94NCTFcQE9rZnem3S67C1223cp+Psku7+284X2/O/N238xjCWBgjWdPScSuiPgjIkbr1bUNxut/XL96Yfafqxdmk6hW3/k7qbW7dvXCbNG02G9nXplId7btd/Hc+VPlSmX+bF6fWjr94dTiufPPnTxdPjF/Yv7MzNGjRw5Pv/jCzPM9yTOL5Nr+TxYO7HvjvUtvzR679P4v3yVF/k15rLHcdZfjnTY+Wa12/RdvRbsbyslQHwNhXUoRkR2u4dr4H41SrB680Xj9874GB2yoarVabf8tHctV4A6WRL8jAPqj+KLPrn+LxyZNPbaEK6/UL4CyvK/nj/qWoUjzNsNN17e9NB4Rx5b//Tp7RKf7EAAAPfJDNv95ttX8L437G9rdna8NjUXEPRGxJyLujYi9EXFfRK3tAxHx4Dr7b14kuXH+k17Onke6Se4WZPO/l/K1rbXzv2L2F2OlvLa7lv9wcvxkZf5Q/p5MxPC2rD7doY8fX/v9y3bbGud/2SPrv5gL5nFcHtq2dp+58lL5dnJudOWziP1DrfJPVlYCkojYFxH7u+zj5NPfHmi37eb5d9CDdabqNxFP1Y//cjTlX0g6r09O3RWV+UNTxVlxo19/u/h2u/5vK/8eyI7/jpbn/0r+Y0njeu3i+vu4+OcXba9puj3/R5J3a+Xic+Hj8tLS2emIkeTNetCNr8+s7lvUi/ZZ/hMHW4//PbH6TjwUEdlJ/HBEPBIRj+axPxYRj0fEwQ75//zqEx90n//GyvKfW9fxXy2MRPMrrQulUz99v6bTsfXknx3/I7XSRP7KrXz+3Upc3Z3NAAAA8P+TRsSuSNLJlXKaTk7W/7383tiRVhYWl545vvDRmbn6bwTGYjgt7nSNNtwPnc4v64v6TFP9cH7f+KvS9lp9cnahMtfv5GHA7Wwz/jN/lfodHbDh/F4LBpfxD4PL+IfBZfzD4Gox/rd3ap9uYCzA5mr1/f9pH+IANl/T+F9Z9nu5D7EAm8v1Pwwu4x8Gl/EPA2lxe9z8R/IKG1Ao/n+F/oZRim53j7T/7+EdUxjOT4atEs+pcqWPH0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA99F8AAAD//w5u304=") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) 28.006406ms ago: executing program 2 (id=2054): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x24a0, 0x0, 0x1, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=2055): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) kernel console output (not intermixed with test programs): - 0 [ 78.878887][ T6025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.942226][ T6025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.019401][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.159628][ T6037] loop2: detected capacity change from 0 to 512 [ 79.189210][ T6037] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 79.218066][ T6037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.307979][ T3503] tipc: Node number set to 2886997007 [ 79.318596][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.329009][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381109][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.553144][ T6047] FAT-fs (loop2): FAT read failed (blocknr 128) [ 79.632285][ T6069] netlink: 'syz.5.739': attribute type 4 has an invalid length. [ 80.378403][ T6109] loop1: detected capacity change from 0 to 512 [ 80.399231][ T6109] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 80.437435][ T6109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 80.468218][ T6109] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.750: corrupted in-inode xattr: e_value size too large [ 80.595798][ T6109] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.750: couldn't read orphan inode 15 (err -117) [ 80.618407][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.649665][ T6109] EXT4-fs error (device loop1): ext4_check_dx_root:2201: inode #2: comm syz.1.750: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 80.749292][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.059353][ T6138] loop5: detected capacity change from 0 to 2048 [ 81.174717][ T6143] loop1: detected capacity change from 0 to 2048 [ 81.268895][ T6138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 81.285004][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.507658][ T4409] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.577610][ T4409] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 81.590358][ T4409] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.590358][ T4409] [ 81.600340][ T4409] EXT4-fs (loop5): Total free blocks count 0 [ 81.606404][ T4409] EXT4-fs (loop5): Free/Dirty block details [ 81.612380][ T4409] EXT4-fs (loop5): free_blocks=2415919104 [ 81.618170][ T4409] EXT4-fs (loop5): dirty_blocks=2720 [ 81.623489][ T4409] EXT4-fs (loop5): Block reservation details [ 81.629560][ T4409] EXT4-fs (loop5): i_reserved_data_blocks=170 [ 81.702030][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.733966][ T4409] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 656 with error 28 [ 81.905823][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 81.905841][ T29] audit: type=1326 audit(1768753032.884:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 81.997493][ T29] audit: type=1326 audit(1768753032.914:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.020798][ T29] audit: type=1326 audit(1768753032.914:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.044179][ T29] audit: type=1326 audit(1768753032.914:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.067901][ T29] audit: type=1326 audit(1768753032.914:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.091257][ T29] audit: type=1326 audit(1768753032.914:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.115168][ T29] audit: type=1326 audit(1768753032.934:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.138627][ T29] audit: type=1326 audit(1768753032.934:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.161939][ T29] audit: type=1326 audit(1768753032.934:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.185308][ T29] audit: type=1326 audit(1768753032.934:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.0.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f26803dacb9 code=0x7ffc0000 [ 82.344679][ T6163] netlink: 'syz.0.763': attribute type 4 has an invalid length. [ 82.396439][ T6165] netlink: 'syz.0.763': attribute type 4 has an invalid length. [ 82.449598][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.763'. [ 82.687920][ T4404] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.702734][ T4404] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.754295][ T4404] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.804492][ T4404] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.174442][ T6182] loop5: detected capacity change from 0 to 8192 [ 83.608241][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 84.224125][ T6239] loop0: detected capacity change from 0 to 512 [ 84.266840][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.501462][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 84.540982][ T6256] loop2: detected capacity change from 0 to 512 [ 84.548615][ T6256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.567790][ T6256] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 1: comm syz.2.798: invalid block [ 84.576262][ T6254] bond1: entered promiscuous mode [ 84.601731][ T6254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.602134][ T6256] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.798: couldn't read orphan inode 11 (err -117) [ 84.665094][ T6256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.703550][ T6261] geneve2: entered promiscuous mode [ 84.708860][ T6261] geneve2: entered allmulticast mode [ 84.760306][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.771023][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.839487][ T6265] loop1: detected capacity change from 0 to 128 [ 84.865030][ T6265] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.892603][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 84.916425][ T6265] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.993383][ T6273] loop5: detected capacity change from 0 to 1024 [ 85.057961][ T6273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.194738][ T5256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.524324][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 86.533227][ T6291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'. [ 86.560447][ T6291] geneve2: entered promiscuous mode [ 86.565815][ T6291] geneve2: entered allmulticast mode [ 86.574805][ T4409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584732][ T4404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.631124][ T4404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.660927][ T4404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.878957][ T4404] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.187322][ T6311] loop1: detected capacity change from 0 to 512 [ 87.222481][ T6311] EXT4-fs (loop1): 1 truncate cleaned up [ 87.229646][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 87.229664][ T29] audit: type=1400 audit(1768753038.214:986): avc: denied { watch watch_reads } for pid=6313 comm="syz.2.820" path="/18/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.240254][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.321639][ T6311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.819: bg 0: block 465: padding at end of block bitmap is not set [ 87.341144][ T6311] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 87.353581][ T6311] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.353581][ T6311] [ 87.363455][ T6311] EXT4-fs (loop1): Total free blocks count 0 [ 87.369571][ T6311] EXT4-fs (loop1): Free/Dirty block details [ 87.375538][ T6311] EXT4-fs (loop1): free_blocks=0 [ 87.380575][ T6311] EXT4-fs (loop1): dirty_blocks=1 [ 87.385720][ T6311] EXT4-fs (loop1): Block reservation details [ 87.391854][ T6311] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 87.416398][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.858345][ T6354] loop0: detected capacity change from 0 to 512 [ 87.873828][ T6354] journal_path: Non-blockdev passed as './bus' [ 87.880234][ T6354] EXT4-fs: error: could not find journal device path [ 87.905966][ T29] audit: type=1400 audit(1768753038.884:987): avc: denied { create } for pid=6352 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.971720][ T29] audit: type=1400 audit(1768753038.884:988): avc: denied { write } for pid=6352 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.983740][ T6360] loop0: detected capacity change from 0 to 1024 [ 88.020794][ T6360] EXT4-fs: Ignoring removed bh option [ 88.047202][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.061814][ T6360] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.086251][ T29] audit: type=1400 audit(1768753039.064:989): avc: denied { read write } for pid=6359 comm="syz.0.828" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.109449][ T29] audit: type=1400 audit(1768753039.064:990): avc: denied { open } for pid=6359 comm="syz.0.828" path="/206/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.135364][ T6360] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 3) [ 88.150375][ T6360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 88.163204][ T6360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.163204][ T6360] [ 88.184031][ T29] audit: type=1400 audit(1768753039.154:991): avc: denied { map } for pid=6359 comm="syz.0.828" path="/206/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.207244][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.226002][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.253177][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.276631][ T6359] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.304546][ T6359] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.346066][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 88.368508][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.447552][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.476074][ T29] audit: type=1400 audit(1768753039.454:992): avc: denied { create } for pid=6386 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.507353][ T6359] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.521840][ T29] audit: type=1400 audit(1768753039.474:993): avc: denied { bind } for pid=6386 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.541018][ T29] audit: type=1400 audit(1768753039.474:994): avc: denied { write } for pid=6386 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.560595][ T6367] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.828: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.580848][ T6387] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.681961][ T4424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.752578][ T4424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.846231][ T4404] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 88.858642][ T4404] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.858642][ T4404] [ 88.877354][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.888622][ T4424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.003276][ T4424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.024594][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 89.168996][ T29] audit: type=1400 audit(1768753040.144:995): avc: denied { watch watch_reads } for pid=6443 comm="syz.1.842" path="pipe:[18081]" dev="pipefs" ino=18081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.227298][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 89.351684][ T6464] loop0: detected capacity change from 0 to 512 [ 89.395560][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.408374][ T6464] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.422409][ T6464] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.436848][ T6464] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 89.454258][ T6464] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.472515][ T6464] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 89.514884][ T6471] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.585338][ T6464] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.642424][ T6471] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 89.664497][ T6471] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.680488][ T4424] bond0 (unregistering): Released all slaves [ 89.686712][ T3493] IPVS: starting estimator thread 0... [ 89.694704][ T6464] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 89.738305][ T6471] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 89.749751][ T6471] EXT4-fs error (device loop0): ext4_xattr_block_find:1878: inode #15: comm syz.0.845: corrupted xattr block 33: invalid checksum [ 89.771793][ T4424] hsr_slave_0: left promiscuous mode [ 89.777622][ T6493] IPVS: using max 1728 ests per chain, 86400 per kthread [ 89.789946][ T4424] hsr_slave_1: left promiscuous mode [ 89.815219][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.838348][ T4424] veth1_macvtap: left promiscuous mode [ 89.843895][ T4424] veth0_macvtap: left promiscuous mode [ 89.873910][ T4424] veth1_vlan: left promiscuous mode [ 89.896718][ T4424] veth0_vlan: left promiscuous mode [ 90.260005][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.267337][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.288205][ T6390] bridge_slave_0: entered allmulticast mode [ 90.295462][ T6390] bridge_slave_0: entered promiscuous mode [ 90.302531][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.309752][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.317166][ T6390] bridge_slave_1: entered allmulticast mode [ 90.323883][ T6390] bridge_slave_1: entered promiscuous mode [ 90.335482][ T6558] loop2: detected capacity change from 0 to 128 [ 90.370976][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.384827][ T6558] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.406138][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.436484][ T6558] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.466975][ T6390] team0: Port device team_slave_0 added [ 90.482312][ T6390] team0: Port device team_slave_1 added [ 90.526291][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.533352][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.559415][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.586058][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.593096][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.619117][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.746810][ T6390] hsr_slave_0: entered promiscuous mode [ 90.765371][ T6390] hsr_slave_1: entered promiscuous mode [ 91.085599][ T6390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.111965][ T6390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.125653][ T6390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.136050][ T6390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.299046][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.339920][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.359512][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.366832][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.383762][ T6650] Cannot find add_set index 0 as target [ 91.390996][ T4409] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.401961][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.409182][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.468158][ T6656] program syz.0.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.561448][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.785965][ T6390] veth0_vlan: entered promiscuous mode [ 91.797866][ T6390] veth1_vlan: entered promiscuous mode [ 91.843960][ T6390] veth0_macvtap: entered promiscuous mode [ 91.868479][ T6390] veth1_macvtap: entered promiscuous mode [ 91.893421][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.909836][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.945310][ T4424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.974146][ T4424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983319][ T6702] syzkaller1: entered promiscuous mode [ 91.988995][ T6702] syzkaller1: entered allmulticast mode [ 92.006960][ T4424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.031775][ T4424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.112123][ T6714] loop0: detected capacity change from 0 to 1024 [ 92.120285][ T6714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.138648][ T6714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.168258][ T6723] netlink: 'syz.6.885': attribute type 4 has an invalid length. [ 92.180521][ T6723] netlink: 'syz.6.885': attribute type 4 has an invalid length. [ 92.193394][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.885'. [ 92.219314][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.226722][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.286594][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 92.286625][ T29] audit: type=1400 audit(1768753043.264:1090): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.343330][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.359580][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.403135][ T4424] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.425983][ T4424] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.449397][ T4424] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.473449][ T4424] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.515623][ T29] audit: type=1400 audit(1768753043.494:1091): avc: denied { setopt } for pid=6732 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.566913][ T6736] loop6: detected capacity change from 0 to 512 [ 92.581669][ T6736] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.889: corrupted in-inode xattr: e_value size too large [ 92.608679][ T6736] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.889: couldn't read orphan inode 15 (err -117) [ 92.630078][ T6736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.655376][ T29] audit: type=1400 audit(1768753043.634:1092): avc: denied { remove_name } for pid=6735 comm="syz.6.889" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.678070][ T29] audit: type=1400 audit(1768753043.634:1093): avc: denied { rename } for pid=6735 comm="syz.6.889" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.709066][ T29] audit: type=1400 audit(1768753043.684:1094): avc: denied { create } for pid=6713 comm="syz.0.883" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.709785][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.957373][ T6748] xt_hashlimit: max too large, truncated to 1048576 [ 93.138813][ T6714] syz.0.883 (6714) used greatest stack depth: 7048 bytes left [ 93.211503][ T6758] netlink: 48 bytes leftover after parsing attributes in process `syz.5.898'. [ 93.230415][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.898'. [ 93.239367][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.898'. [ 93.325689][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.618565][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.907'. [ 93.638632][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.907'. [ 93.781921][ T29] audit: type=1400 audit(1768753044.754:1095): avc: denied { mount } for pid=6785 comm="syz.5.910" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.828056][ T29] audit: type=1400 audit(1768753044.784:1096): avc: denied { search } for pid=6785 comm="syz.5.910" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.849937][ T29] audit: type=1400 audit(1768753044.784:1097): avc: denied { search } for pid=6785 comm="syz.5.910" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.871800][ T29] audit: type=1400 audit(1768753044.784:1098): avc: denied { read open } for pid=6785 comm="syz.5.910" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.965730][ T29] audit: type=1400 audit(1768753044.944:1099): avc: denied { open } for pid=6794 comm="syz.5.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.101500][ T3422] IPVS: starting estimator thread 0... [ 94.194501][ T6807] IPVS: using max 1920 ests per chain, 96000 per kthread [ 94.385186][ T6822] batadv_slave_0: entered promiscuous mode [ 94.391743][ T6822] batadv_slave_1: entered promiscuous mode [ 94.398280][ T6820] batadv_slave_1: left promiscuous mode [ 94.403993][ T6820] batadv_slave_0: left promiscuous mode [ 94.477393][ T6831] loop0: detected capacity change from 0 to 2048 [ 94.500336][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 94.653478][ T4428] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.671087][ T4428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.683634][ T4428] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.683634][ T4428] [ 94.693542][ T4428] EXT4-fs (loop0): Total free blocks count 0 [ 94.699576][ T4428] EXT4-fs (loop0): Free/Dirty block details [ 94.705575][ T4428] EXT4-fs (loop0): free_blocks=2415919104 [ 94.712116][ T4428] EXT4-fs (loop0): dirty_blocks=4208 [ 94.717537][ T4428] EXT4-fs (loop0): Block reservation details [ 94.723546][ T4428] EXT4-fs (loop0): i_reserved_data_blocks=264 [ 94.770862][ T6844] l2tp_ppp: sess 2/0: no socket in recv [ 94.777161][ T4428] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 94.879840][ T6854] loop6: detected capacity change from 0 to 128 [ 95.495210][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 95.577911][ T6914] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 95.647500][ T6914] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 95.940533][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 95.949560][ T6943] netlink: 'syz.5.952': attribute type 5 has an invalid length. [ 95.987648][ T4409] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.017992][ T4409] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.057158][ T4409] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.084882][ T4409] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.506265][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.962'. [ 96.554920][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.866707][ T7021] netlink: 'syz.5.970': attribute type 1 has an invalid length. [ 96.918061][ T7021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.988868][ T7021] bond1: (slave dummy0): making interface the new active one [ 97.045310][ T7021] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 97.500404][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 97.500421][ T29] audit: type=1326 audit(1768753048.474:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.614549][ T29] audit: type=1326 audit(1768753048.474:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.637965][ T29] audit: type=1326 audit(1768753048.504:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.661467][ T29] audit: type=1326 audit(1768753048.504:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.684831][ T29] audit: type=1326 audit(1768753048.514:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.708296][ T29] audit: type=1400 audit(1768753048.514:1136): avc: denied { create } for pid=7054 comm="syz.5.973" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.729014][ T29] audit: type=1326 audit(1768753048.514:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.752646][ T29] audit: type=1326 audit(1768753048.524:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 97.776066][ T29] audit: type=1400 audit(1768753048.524:1139): avc: denied { write } for pid=7054 comm="syz.5.973" name="file0" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.798380][ T29] audit: type=1400 audit(1768753048.524:1140): avc: denied { open } for pid=7054 comm="syz.5.973" path="/91/file0" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.433937][ T7083] loop6: detected capacity change from 0 to 8192 [ 99.451050][ T7083] FAT-fs (loop6): bogus logical sector size 0 [ 99.457234][ T7083] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 99.466618][ T7083] FAT-fs (loop6): Can't find a valid FAT filesystem [ 99.621344][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 99.750490][ T7119] loop1: detected capacity change from 0 to 8192 [ 100.564284][ T7174] loop5: detected capacity change from 0 to 512 [ 100.592260][ T7174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.614126][ T7174] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.655537][ T5256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.535569][ T7228] loop5: detected capacity change from 0 to 128 [ 101.556087][ T7228] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.572903][ T7228] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.625868][ T5256] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.699807][ T7246] loop5: detected capacity change from 0 to 1024 [ 101.714471][ T7246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.738531][ T7246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.115048][ T7287] loop6: detected capacity change from 0 to 128 [ 102.217577][ T7287] syz.6.1058: attempt to access beyond end of device [ 102.217577][ T7287] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 102.247998][ T7287] syz.6.1058: attempt to access beyond end of device [ 102.247998][ T7287] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 102.277917][ T7287] syz.6.1058: attempt to access beyond end of device [ 102.277917][ T7287] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 102.318227][ T7287] syz.6.1058: attempt to access beyond end of device [ 102.318227][ T7287] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 102.839307][ T5256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.950647][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1071'. [ 102.961669][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1071'. [ 102.986189][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 103.019182][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 103.019201][ T29] audit: type=1400 audit(1768753053.994:1164): avc: denied { bind } for pid=7350 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.044835][ T29] audit: type=1400 audit(1768753053.994:1165): avc: denied { name_bind } for pid=7350 comm="syz.2.1074" src=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 103.065505][ T29] audit: type=1400 audit(1768753053.994:1166): avc: denied { node_bind } for pid=7350 comm="syz.2.1074" src=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 103.175653][ T7368] syz_tun: entered allmulticast mode [ 103.182020][ T7368] syz_tun: left allmulticast mode [ 103.274101][ T7377] loop6: detected capacity change from 0 to 512 [ 103.295405][ T7380] netlink: 'syz.2.1086': attribute type 13 has an invalid length. [ 103.307125][ T7377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.324066][ T7377] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.354026][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.388834][ T7388] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1089'. [ 104.191855][ T29] audit: type=1400 audit(1768753055.164:1167): avc: denied { associate } for pid=7435 comm="syz.2.1101" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.329323][ T7444] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1103'. [ 104.338690][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 104.480766][ T4417] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 104.718568][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 104.757605][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 104.767963][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 104.989968][ T7489] loop2: detected capacity change from 0 to 8192 [ 105.261556][ T7518] syzkaller0: entered allmulticast mode [ 105.268465][ T7518] syzkaller0: entered promiscuous mode [ 105.282925][ T7518] syzkaller0 (unregistering): left allmulticast mode [ 105.289699][ T7518] syzkaller0 (unregistering): left promiscuous mode [ 105.331028][ T29] audit: type=1326 audit(1768753056.304:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.355308][ T7527] loop1: detected capacity change from 0 to 512 [ 105.355511][ T29] audit: type=1326 audit(1768753056.304:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.377401][ T7527] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.385326][ T29] audit: type=1326 audit(1768753056.304:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.396612][ T7527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.416418][ T29] audit: type=1326 audit(1768753056.304:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.416514][ T29] audit: type=1326 audit(1768753056.304:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.416627][ T29] audit: type=1326 audit(1768753056.304:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7526 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 105.496444][ T7527] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1139: error while reading EA inode 32 err=-116 [ 105.509201][ T7527] EXT4-fs (loop1): Remounting filesystem read-only [ 105.521703][ T7527] EXT4-fs (loop1): 1 orphan inode deleted [ 105.530010][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.587212][ T7535] capability: warning: `syz.0.1142' uses 32-bit capabilities (legacy support in use) [ 105.623496][ T7533] loop6: detected capacity change from 0 to 512 [ 105.633810][ T7526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.646647][ T7533] EXT4-fs: Ignoring removed nobh option [ 105.670998][ T7540] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 105.692338][ T7533] ------------[ cut here ]------------ [ 105.698007][ T7533] EA inode 11 i_nlink=1026 [ 105.698034][ T7533] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.6.1140/7533 [ 105.714062][ T7533] Modules linked in: [ 105.718205][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.6.1140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.728287][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.739329][ T7533] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 105.746215][ T7533] Code: 11 cf 9b ff 4c 8d 2d 4a aa 3f 05 49 8d 7e 40 e8 c1 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 f5 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c bc c5 03 66 66 66 2e 0f 1f 84 [ 105.766847][ T7533] RSP: 0018:ffffc9000127f5a8 EFLAGS: 00010246 [ 105.772992][ T7533] RAX: ffff88810351bc10 RBX: ffff88811e9b41a8 RCX: ffffffff81bc669b [ 105.781168][ T7533] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc10d0 [ 105.789334][ T7533] RBP: 000000000000000b R08: 000188811e9b415b R09: 0000000000000000 [ 105.798181][ T7533] R10: ffffc9000127f4d8 R11: 0001c9000127f4d8 R12: ffff88811e9b4158 [ 105.806396][ T7533] R13: ffffffff86fc10d0 R14: ffff88811e9b4110 R15: 0000000000000001 [ 105.814555][ T7533] FS: 00007f926ed376c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 105.823611][ T7533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.831098][ T7533] CR2: 00007ff7fd26097e CR3: 000000010702e000 CR4: 00000000003506f0 [ 105.839358][ T7533] Call Trace: [ 105.842744][ T7533] [ 105.845812][ T7533] ext4_xattr_set_entry+0x77c/0x1010 [ 105.851222][ T7533] ext4_xattr_ibody_set+0x184/0x3c0 [ 105.857425][ T7533] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 105.863322][ T7533] __ext4_expand_extra_isize+0x246/0x280 [ 105.869239][ T7533] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 105.874983][ T7533] ext4_evict_inode+0x7c3/0xd40 [ 105.879903][ T7533] ? __pfx_ext4_evict_inode+0x10/0x10 [ 105.886284][ T7533] evict+0x2af/0x510 [ 105.890254][ T7533] ? __dquot_initialize+0x146/0x7c0 [ 105.895691][ T7533] iput+0x4b9/0x650 [ 105.899540][ T7533] ext4_process_orphan+0x1a9/0x1c0 [ 105.904856][ T7533] ext4_orphan_cleanup+0x6a8/0xa00 [ 105.910203][ T7533] ext4_fill_super+0x3476/0x3800 [ 105.916100][ T7533] ? set_blocksize+0x1a3/0x310 [ 105.920940][ T7533] ? setup_bdev_super+0x30e/0x370 [ 105.926154][ T7533] ? __pfx_ext4_fill_super+0x10/0x10 [ 105.931619][ T7533] get_tree_bdev_flags+0x291/0x300 [ 105.937019][ T7533] ? __pfx_ext4_fill_super+0x10/0x10 [ 105.942355][ T7533] get_tree_bdev+0x1f/0x30 [ 105.946980][ T7533] ext4_get_tree+0x1c/0x30 [ 105.951443][ T7533] vfs_get_tree+0x57/0x1d0 [ 105.956817][ T7533] do_new_mount+0x288/0x700 [ 105.961379][ T7533] path_mount+0x4c0/0xb90 [ 105.965818][ T7533] ? user_path_at+0xbf/0x130 [ 105.970461][ T7533] __se_sys_mount+0x28c/0x2e0 [ 105.975286][ T7533] __x64_sys_mount+0x67/0x80 [ 105.979917][ T7533] x64_sys_call+0x2cca/0x3000 [ 105.985346][ T7533] do_syscall_64+0xc0/0x2a0 [ 105.989957][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.996004][ T7533] RIP: 0033:0x7f92702dbf4a [ 106.000480][ T7533] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.021087][ T7533] RSP: 002b:00007f926ed36e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.029583][ T7533] RAX: ffffffffffffffda RBX: 00007f926ed36ee0 RCX: 00007f92702dbf4a [ 106.037717][ T7533] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f926ed36ea0 [ 106.046418][ T7533] RBP: 0000200000000180 R08: 00007f926ed36ee0 R09: 0000000000800718 [ 106.050792][ T7552] netlink: 'syz.1.1147': attribute type 13 has an invalid length. [ 106.054469][ T7533] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 106.070504][ T7533] R13: 00007f926ed36ea0 R14: 0000000000000497 R15: 0000200000000200 [ 106.079249][ T7533] [ 106.082324][ T7533] ---[ end trace 0000000000000000 ]--- [ 106.114947][ T7552] gretap0: refused to change device tx_queue_len [ 106.140917][ T7552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 106.166682][ T7533] EXT4-fs (loop6): 1 orphan inode deleted [ 106.173543][ T7533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.205654][ T7533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.538707][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1161'. [ 106.571567][ T7591] loop2: detected capacity change from 0 to 2048 [ 106.616605][ T7591] loop2: p1 p2 p3 [ 106.629527][ T7591] bond0: Caught tx_queue_len zero misconfig [ 106.632677][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 106.645449][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 106.657142][ T3005] loop2: p1 p2 p3 [ 106.679283][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.703192][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 106.723949][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 106.727010][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 106.761841][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 106.774600][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.785523][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.090285][ T7626] syzkaller0: entered allmulticast mode [ 107.097282][ T7626] syzkaller0: entered promiscuous mode [ 107.106219][ T7626] syzkaller0 (unregistering): left promiscuous mode [ 107.112903][ T7626] syzkaller0 (unregistering): left allmulticast mode [ 107.346901][ T7636] lo: Caught tx_queue_len zero misconfig [ 107.799092][ T7662] bridge0: port 1(gretap0) entered blocking state [ 107.805654][ T7662] bridge0: port 1(gretap0) entered disabled state [ 107.812377][ T7662] gretap0: entered allmulticast mode [ 107.822871][ T7662] gretap0: entered promiscuous mode [ 107.835320][ T7662] bridge0: port 1(gretap0) entered blocking state [ 107.841847][ T7662] bridge0: port 1(gretap0) entered forwarding state [ 107.922410][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 107.947065][ T4421] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.969200][ T4421] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.997209][ T4421] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.006350][ T4421] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.279238][ T7689] loop2: detected capacity change from 0 to 128 [ 108.290402][ T7689] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.318639][ T7689] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.353748][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 108.353781][ T29] audit: type=1400 audit(1768753059.334:1219): avc: denied { link } for pid=7688 comm="syz.2.1205" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.407961][ T5619] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.652766][ T7704] loop2: detected capacity change from 0 to 8192 [ 108.850035][ T29] audit: type=1400 audit(1768753059.824:1220): avc: denied { setopt } for pid=7701 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.900241][ T29] audit: type=1400 audit(1768753059.874:1221): avc: denied { mounton } for pid=7718 comm="syz.6.1217" path="/proc/152/cgroup" dev="proc" ino=26350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 108.914499][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 108.932273][ T29] audit: type=1400 audit(1768753059.914:1222): avc: denied { getattr } for pid=7718 comm="syz.6.1217" path="/proc/152/cgroup" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.036225][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1222'. [ 109.113155][ T7736] loop5: detected capacity change from 0 to 1024 [ 109.140548][ T7736] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1225: bad orphan inode 134217728 [ 109.163600][ T7736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.239220][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.252805][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.415996][ T5256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.896753][ T7796] __nla_validate_parse: 6 callbacks suppressed [ 109.896772][ T7796] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1246'. [ 109.912339][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1246'. [ 109.923840][ T7795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.989304][ T7795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.038017][ T7795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.098034][ T7795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.164137][ T4404] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.176534][ T4404] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.189602][ T4421] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.202427][ T4421] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.276926][ T29] audit: type=1326 audit(1768753061.254:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.304944][ T29] audit: type=1326 audit(1768753061.284:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.328568][ T29] audit: type=1326 audit(1768753061.284:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.352106][ T29] audit: type=1326 audit(1768753061.284:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.375763][ T29] audit: type=1326 audit(1768753061.284:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.399265][ T29] audit: type=1326 audit(1768753061.284:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 110.414428][ T7807] syzkaller1: entered promiscuous mode [ 110.428227][ T7807] syzkaller1: entered allmulticast mode [ 111.241800][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'. [ 111.577858][ T7861] loop6: detected capacity change from 0 to 128 [ 111.602403][ T7861] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.618233][ T7867] loop2: detected capacity change from 0 to 128 [ 111.628290][ T7861] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.642569][ T7867] syz.2.1274: attempt to access beyond end of device [ 111.642569][ T7867] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 111.675528][ T7867] syz.2.1274: attempt to access beyond end of device [ 111.675528][ T7867] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 111.689332][ T7867] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 111.699608][ T6390] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.713951][ T7867] syz.2.1274: attempt to access beyond end of device [ 111.713951][ T7867] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 111.732507][ T7867] syz.2.1274: attempt to access beyond end of device [ 111.732507][ T7867] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 111.810323][ T7875] loop6: detected capacity change from 0 to 512 [ 111.839871][ T7875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.957074][ T7888] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1283'. [ 112.058307][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 112.087059][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.328913][ T7914] loop1: detected capacity change from 0 to 1024 [ 112.335907][ T7914] EXT4-fs: Ignoring removed nobh option [ 112.341534][ T7914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.355931][ T7914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.392407][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.541824][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 112.558306][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 112.704430][ T7944] netlink: 'syz.5.1307': attribute type 10 has an invalid length. [ 112.712326][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1307'. [ 112.734504][ T7944] dummy0: entered promiscuous mode [ 112.739710][ T7944] dummy0: entered allmulticast mode [ 112.765514][ T7944] bond1: (slave dummy0): Releasing active interface [ 112.782036][ T7944] bridge0: port 3(dummy0) entered blocking state [ 112.788536][ T7944] bridge0: port 3(dummy0) entered disabled state [ 112.825348][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7950 comm=syz.0.1309 [ 112.908686][ T7950] netlink: 'syz.0.1309': attribute type 5 has an invalid length. [ 113.750361][ T7993] loop5: detected capacity change from 0 to 512 [ 113.861648][ T7993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.877608][ T7993] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.075468][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 114.075504][ T29] audit: type=1400 audit(1768753065.054:1245): avc: denied { create } for pid=8023 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.124107][ T29] audit: type=1400 audit(1768753065.054:1246): avc: denied { connect } for pid=8023 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.143788][ T29] audit: type=1400 audit(1768753065.054:1247): avc: denied { write } for pid=8023 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.211192][ T8034] loop1: detected capacity change from 0 to 764 [ 114.310208][ T5256] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.673123][ T8075] loop1: detected capacity change from 0 to 1024 [ 114.696726][ T8075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.728756][ T8075] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1359: Allocating blocks 385-513 which overlap fs metadata [ 114.758611][ T8080] loop2: detected capacity change from 0 to 2048 [ 114.765991][ T8075] EXT4-fs (loop1): pa ffff8881075e0230: logic 16, phys. 129, len 24 [ 114.774055][ T8075] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 114.790364][ T8075] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 114.802758][ T8075] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.802758][ T8075] [ 114.812186][ T8080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.812794][ T8075] EXT4-fs (loop1): Total free blocks count 0 [ 114.830596][ T8075] EXT4-fs (loop1): Free/Dirty block details [ 114.836570][ T8075] EXT4-fs (loop1): free_blocks=128 [ 114.841783][ T8075] EXT4-fs (loop1): dirty_blocks=0 [ 114.846900][ T8075] EXT4-fs (loop1): Block reservation details [ 114.852949][ T8075] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 114.971542][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.146145][ T8097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1367'. [ 115.194134][ T8101] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 115.202058][ T8101] netlink: 'syz.2.1368': attribute type 2 has an invalid length. [ 115.209926][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 115.284621][ T8105] dummy0: entered promiscuous mode [ 115.291292][ T8105] dummy0: left promiscuous mode [ 115.413529][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1375'. [ 115.429418][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1375'. [ 115.475958][ T8121] loop2: detected capacity change from 0 to 1024 [ 115.498805][ T8121] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1377: bad orphan inode 134217728 [ 115.513248][ T8121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.972150][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.058138][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 116.196685][ T8164] loop5: detected capacity change from 0 to 128 [ 116.207091][ T8164] vfat: Unknown parameter 's' [ 116.215262][ T29] audit: type=1326 audit(1768753067.194:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.302116][ T29] audit: type=1326 audit(1768753067.194:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.325662][ T29] audit: type=1326 audit(1768753067.224:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd3566eb58e code=0x7ffc0000 [ 116.349224][ T29] audit: type=1326 audit(1768753067.224:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.372883][ T29] audit: type=1326 audit(1768753067.224:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.396352][ T29] audit: type=1326 audit(1768753067.224:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.419910][ T29] audit: type=1326 audit(1768753067.224:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35672acb9 code=0x7ffc0000 [ 116.651634][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.651634][ T8188] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 116.666768][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.666768][ T8188] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 116.680927][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.680927][ T8188] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 116.695281][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.695281][ T8188] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 116.710168][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.710168][ T8188] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 116.726141][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.726141][ T8188] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 116.740455][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.740455][ T8188] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 116.754477][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.754477][ T8188] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 116.768186][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.768186][ T8188] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 116.782838][ T8188] syz.6.1404: attempt to access beyond end of device [ 116.782838][ T8188] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 116.832106][ T8192] set_capacity_and_notify: 1 callbacks suppressed [ 116.832139][ T8192] loop6: detected capacity change from 0 to 512 [ 116.977638][ T8192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.999492][ T8192] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.045429][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1409'. [ 117.248678][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.319914][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1417'. [ 117.471332][ T8229] batman_adv: batadv0: Adding interface: dummy0 [ 117.477814][ T8229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.503169][ T8229] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 117.594746][ T8238] Set syz1 is full, maxelem 2 reached [ 117.615700][ T8239] netlink: 'syz.0.1423': attribute type 1 has an invalid length. [ 117.648314][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 117.672100][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 117.698547][ T8239] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 117.709340][ T8239] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 117.731706][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'. [ 117.742579][ T8239] bond1: (slave ip6gre1): making interface the new active one [ 117.763860][ T8239] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 117.804730][ T8251] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 118.101517][ T8286] unsupported nlmsg_type 40 [ 118.320154][ T8308] loop6: detected capacity change from 0 to 512 [ 118.343048][ T8308] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 118.374831][ T8308] EXT4-fs (loop6): invalid journal inode [ 118.380693][ T8308] EXT4-fs (loop6): can't get journal size [ 118.395669][ T8317] batman_adv: batadv0: Adding interface: dummy0 [ 118.402050][ T8317] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.454833][ T8317] batman_adv: batadv0: Interface activated: dummy0 [ 118.462777][ T8308] EXT4-fs (loop6): 1 truncate cleaned up [ 118.483508][ T8308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.495235][ T8317] batadv0: mtu less than device minimum [ 118.501869][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.512999][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.524150][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.535282][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.546495][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.557774][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.569106][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.580092][ T8317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.675788][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.715976][ T8335] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 118.752642][ T8339] loop1: detected capacity change from 0 to 4096 [ 118.772351][ T8339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.833245][ T8339] EXT4-fs (loop1): shut down requested (2) [ 118.840665][ T8339] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 118.876071][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.930016][ T8353] bridge0: port 3(dummy0) entered disabled state [ 118.954827][ T8353] batman_adv: batadv0: Adding interface: dummy0 [ 118.961187][ T8353] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.986629][ T8353] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 119.001321][ T8356] loop1: detected capacity change from 0 to 128 [ 119.125846][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 119.125931][ T29] audit: type=1326 audit(1768753070.104:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.170839][ T8363] loop1: detected capacity change from 0 to 8192 [ 119.223338][ T29] audit: type=1326 audit(1768753070.134:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.246889][ T29] audit: type=1326 audit(1768753070.134:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.270472][ T29] audit: type=1326 audit(1768753070.134:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.294037][ T29] audit: type=1326 audit(1768753070.134:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.317515][ T29] audit: type=1326 audit(1768753070.144:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.340899][ T29] audit: type=1326 audit(1768753070.144:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.364487][ T29] audit: type=1326 audit(1768753070.144:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.387877][ T29] audit: type=1326 audit(1768753070.144:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.411367][ T29] audit: type=1326 audit(1768753070.144:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 119.528873][ T8396] netlink: 'syz.5.1490': attribute type 29 has an invalid length. [ 119.577766][ T8396] netlink: 'syz.5.1490': attribute type 29 has an invalid length. [ 119.595183][ T8396] unsupported nla_type 58 [ 119.734584][ T8417] bond1: Removing last ns target with arp_interval on [ 120.176705][ T8469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.260456][ T8473] ipip0: entered promiscuous mode [ 120.568577][ T8490] sctp: [Deprecated]: syz.6.1509 (pid 8490) Use of int in max_burst socket option. [ 120.568577][ T8490] Use struct sctp_assoc_value instead [ 120.601200][ T8491] __nla_validate_parse: 5 callbacks suppressed [ 120.601217][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 120.766330][ T8502] netlink: 'syz.6.1515': attribute type 1 has an invalid length. [ 120.801642][ T8502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.829176][ T8504] bond2: (slave veth5): Enslaving as an active interface with a down link [ 120.863382][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.873520][ T8502] bond2: (slave batadv1): making interface the new active one [ 120.891750][ T8502] batadv1: entered promiscuous mode [ 120.897608][ T8502] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 120.960422][ T8511] netlink: 'syz.6.1520': attribute type 4 has an invalid length. [ 121.089093][ T8526] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 121.117196][ T8526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.208538][ T8526] bond1: (slave veth5): Enslaving as an active interface with a down link [ 121.244519][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 121.265126][ T8534] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 121.389701][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 121.460462][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 121.719392][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.726857][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.773467][ T8512] bridge_slave_0: entered allmulticast mode [ 121.787774][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1537'. [ 121.791302][ T8512] bridge_slave_0: entered promiscuous mode [ 121.818110][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.825436][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.832896][ T8512] bridge_slave_1: entered allmulticast mode [ 121.845763][ T8512] bridge_slave_1: entered promiscuous mode [ 121.855280][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'. [ 121.887288][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.897119][ T8564] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1537'. [ 121.915870][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.943014][ T8512] team0: Port device team_slave_0 added [ 121.965510][ T8512] team0: Port device team_slave_1 added [ 121.987858][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1539'. [ 122.004876][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.012047][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.038160][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.069547][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.076580][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.102678][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.176484][ T8582] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 122.205589][ T8512] hsr_slave_0: entered promiscuous mode [ 122.212531][ T8512] hsr_slave_1: entered promiscuous mode [ 122.219054][ T8512] debugfs: 'hsr0' already exists in 'hsr' [ 122.224956][ T8512] Cannot create hsr debugfs directory [ 122.230524][ T8582] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 122.240710][ T8582] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1541'. [ 122.396734][ T8512] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 122.406378][ T8512] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 122.415471][ T8512] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.446164][ T8512] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.453158][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1550'. [ 122.466874][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1550'. [ 122.558997][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.584737][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.604642][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.611853][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.645189][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.652369][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.680026][ T8512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.690480][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.766394][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.952706][ T8648] syzkaller1: entered promiscuous mode [ 122.958447][ T8648] syzkaller1: entered allmulticast mode [ 122.976947][ T8512] veth0_vlan: entered promiscuous mode [ 123.006867][ T8512] veth1_vlan: entered promiscuous mode [ 123.039445][ T8512] veth0_macvtap: entered promiscuous mode [ 123.047991][ T8512] veth1_macvtap: entered promiscuous mode [ 123.075706][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.115064][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.132694][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 123.155399][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.176720][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.201764][ T8665] loop6: detected capacity change from 0 to 1024 [ 123.215633][ T8665] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1570: bad orphan inode 134217728 [ 123.234305][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.271688][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.285230][ T8665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.305556][ T8672] net_ratelimit: 11 callbacks suppressed [ 123.305573][ T8672] batadv0: mtu less than device minimum [ 123.317752][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.328456][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.339165][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.349976][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.360814][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.371474][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.382220][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.393052][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.403726][ T8672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 123.434684][ T8677] dvmrp0: entered allmulticast mode [ 123.855597][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.973274][ T8719] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 123.985817][ T8719] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 124.422540][ T8738] loop7: detected capacity change from 0 to 512 [ 124.454966][ T8738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.486612][ T8738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.523476][ T8738] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.662453][ T8750] bridge0: port 1(gretap0) entered disabled state [ 124.680928][ T8512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.768234][ T8750] batman_adv: batadv0: Interface deactivated: dummy0 [ 124.871944][ T8750] macvtap1: left promiscuous mode [ 124.877090][ T8750] macvtap1: left allmulticast mode [ 124.882441][ T8750] veth2: left promiscuous mode [ 124.887384][ T8750] veth2: left allmulticast mode [ 124.915393][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 124.915415][ T29] audit: type=1326 audit(1768753075.894:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92702d4ad7 code=0x7fc00000 [ 124.956759][ T8750] bond1: left promiscuous mode [ 124.970261][ T29] audit: type=1326 audit(1768753075.894:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f927027c0d9 code=0x7fc00000 [ 124.993713][ T29] audit: type=1326 audit(1768753075.894:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f927027c19d code=0x7fc00000 [ 125.017130][ T29] audit: type=1326 audit(1768753075.894:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8709 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f92702dacb9 code=0x7fc00000 [ 125.057023][ T4415] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.066133][ T4415] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.127843][ T4415] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.136848][ T4415] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.187121][ T4415] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.196169][ T4415] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.213891][ T8776] loop1: detected capacity change from 0 to 1024 [ 125.236884][ T8776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.250808][ T8776] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.264249][ T4415] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.269291][ T29] audit: type=1400 audit(1768753076.244:1365): avc: denied { execute } for pid=8775 comm="syz.1.1608" path="/339/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.274044][ T4415] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.363552][ T29] audit: type=1400 audit(1768753076.334:1366): avc: denied { ioctl } for pid=8775 comm="syz.1.1608" path="/339/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.388896][ T8782] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1608: Freeing blocks not in datazone - block = 0, count = 16 [ 125.490047][ T8783] SELinux: failed to load policy [ 125.546536][ T4424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:54: bg 0: block 112: padding at end of block bitmap is not set [ 125.562150][ T4424] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.574519][ T4424] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.574519][ T4424] [ 125.584180][ T4424] EXT4-fs (loop1): Total free blocks count 0 [ 125.590361][ T4424] EXT4-fs (loop1): Free/Dirty block details [ 125.596335][ T4424] EXT4-fs (loop1): free_blocks=16 [ 125.601532][ T4424] EXT4-fs (loop1): dirty_blocks=16 [ 125.606760][ T4424] EXT4-fs (loop1): Block reservation details [ 125.612838][ T4424] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.618186][ T8785] __nla_validate_parse: 3 callbacks suppressed [ 125.618273][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1610'. [ 125.639728][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.174703][ T8807] uprobe: syz.2.1617:8807 failed to unregister, leaking uprobe [ 126.577170][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 126.800255][ T29] audit: type=1326 audit(1768753077.774:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c693acb9 code=0x7ffc0000 [ 126.856302][ T29] audit: type=1326 audit(1768753077.794:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f72c693acb9 code=0x7ffc0000 [ 126.879874][ T29] audit: type=1326 audit(1768753077.794:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c693acb9 code=0x7ffc0000 [ 126.903493][ T29] audit: type=1326 audit(1768753077.804:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c693acb9 code=0x7ffc0000 [ 126.983392][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1628'. [ 126.999958][ T8833] netlink: 'syz.6.1628': attribute type 1 has an invalid length. [ 127.192271][ T8852] netlink: 'syz.7.1634': attribute type 1 has an invalid length. [ 127.292207][ T8858] netlink: 'syz.7.1634': attribute type 13 has an invalid length. [ 127.372878][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.380207][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.455769][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.474779][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.581728][ T31] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.606717][ T31] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.627044][ T31] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.664530][ T31] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.740896][ T8870] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1638'. [ 127.750280][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 127.791791][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1640'. [ 127.862749][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 128.036074][ T8881] netlink: 'syz.6.1644': attribute type 29 has an invalid length. [ 128.055473][ T8881] netlink: 'syz.6.1644': attribute type 29 has an invalid length. [ 128.070293][ T8881] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1644'. [ 128.223214][ T8895] loop2: detected capacity change from 0 to 8192 [ 128.355970][ T5619] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 128.363946][ T5619] FAT-fs (loop2): Filesystem has been set read-only [ 128.419497][ T8904] netlink: 'syz.2.1654': attribute type 13 has an invalid length. [ 128.438294][ T8904] gretap0: refused to change device tx_queue_len [ 128.445636][ T8904] net_ratelimit: 10 callbacks suppressed [ 128.445657][ T8904] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.560792][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1656'. [ 128.669703][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 128.778400][ T8922] loop2: detected capacity change from 0 to 512 [ 128.796294][ T8922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.830499][ T8922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.864040][ T8922] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.962118][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.326756][ T8941] netlink: 'syz.6.1668': attribute type 1 has an invalid length. [ 129.398643][ T8949] loop6: detected capacity change from 0 to 512 [ 129.406261][ T8949] EXT4-fs: Ignoring removed oldalloc option [ 129.418227][ T8949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.463554][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.536766][ T8961] SELinux: Context system_u: is not valid (left unmapped). [ 129.695457][ T8973] netlink: 'syz.7.1681': attribute type 6 has an invalid length. [ 130.231593][ T9003] netlink: 'syz.1.1692': attribute type 13 has an invalid length. [ 130.285748][ T9003] gretap0: refused to change device tx_queue_len [ 130.320716][ T9003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.578038][ T9025] netlink: 'syz.6.1702': attribute type 1 has an invalid length. [ 130.986277][ T9045] __nla_validate_parse: 5 callbacks suppressed [ 130.986299][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1711'. [ 131.125980][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 131.125998][ T29] audit: type=1400 audit(1768753082.104:1399): avc: denied { listen } for pid=9053 comm="syz.2.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.197713][ T9058] pimreg: entered allmulticast mode [ 131.213279][ T29] audit: type=1400 audit(1768753082.154:1400): avc: denied { bind } for pid=9055 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.221974][ T9058] pimreg: left allmulticast mode [ 131.418694][ T29] audit: type=1400 audit(1768753082.394:1401): avc: denied { kexec_image_load } for pid=9076 comm="syz.5.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 131.526023][ T9085] loop6: detected capacity change from 0 to 512 [ 131.542989][ T9085] EXT4-fs: Ignoring removed i_version option [ 131.549237][ T9085] EXT4-fs: Ignoring removed nobh option [ 131.584249][ T9085] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.626755][ T9085] EXT4-fs (loop6): 1 truncate cleaned up [ 131.633037][ T9085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.656270][ T9090] bond1: entered promiscuous mode [ 131.689567][ T9090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.711441][ T29] audit: type=1400 audit(1768753082.684:1402): avc: denied { getopt } for pid=9095 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.767312][ T9094] bond1: (slave bridge1): making interface the new active one [ 131.774893][ T9094] bridge1: entered promiscuous mode [ 131.817674][ T9094] bridge1: left promiscuous mode [ 131.913177][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.074204][ T9121] loop7: detected capacity change from 0 to 256 [ 132.091137][ T9121] msdos: Bad value for 'gid' [ 132.095877][ T9121] msdos: Bad value for 'gid' [ 132.114490][ T31] batadv1: left promiscuous mode [ 132.315047][ T29] audit: type=1400 audit(1768753083.294:1403): avc: denied { ioctl } for pid=9148 comm="syz.1.1753" path="socket:[33808]" dev="sockfs" ino=33808 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.480559][ T9167] loop7: detected capacity change from 0 to 256 [ 132.498700][ T9167] FAT-fs (loop7): bogus number of FAT sectors [ 132.504892][ T9167] FAT-fs (loop7): Can't find a valid FAT filesystem [ 132.612944][ T9173] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1762'. [ 132.659427][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1763'. [ 132.670928][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1763'. [ 132.709105][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 132.820009][ T29] audit: type=1400 audit(1768753083.794:1404): avc: denied { setopt } for pid=9189 comm="syz.1.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.860970][ T9196] VFS: Mount too revealing [ 132.972435][ T9204] loop6: detected capacity change from 0 to 128 [ 133.000272][ T9204] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.059834][ T9204] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.101711][ T9212] ref_ctr increment failed for inode: 0x53e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810cbcde80 [ 133.117873][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1779'. [ 133.145820][ T6390] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.157610][ T9211] uprobe: syz.5.1778:9211 failed to unregister, leaking uprobe [ 133.271221][ T9227] loop6: detected capacity change from 0 to 128 [ 133.287942][ T29] audit: type=1400 audit(1768753084.264:1405): avc: denied { setattr } for pid=9228 comm="syz.7.1785" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.355283][ T9233] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.360643][ T29] audit: type=1326 audit(1768753084.324:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 133.386509][ T29] audit: type=1326 audit(1768753084.324:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 133.410053][ T29] audit: type=1326 audit(1768753084.324:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.5.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 133.551143][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1791'. [ 133.619118][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1791'. [ 133.763631][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1796'. [ 133.793415][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1796'. [ 134.003308][ T9279] loop2: detected capacity change from 0 to 256 [ 134.028369][ T9279] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.128337][ T9283] syz_tun: entered allmulticast mode [ 134.153256][ T9276] loop5: detected capacity change from 0 to 512 [ 134.190762][ T9276] EXT4-fs: Ignoring removed nobh option [ 134.219012][ T9276] EXT4-fs (loop5): 1 orphan inode deleted [ 134.241225][ T9276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.306150][ T9276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.315868][ T9335] SELinux: failed to load policy [ 135.353152][ T9326] loop1: detected capacity change from 0 to 512 [ 135.390973][ T9326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.425599][ T9326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1824: bg 0: block 4: invalid block bitmap [ 135.472446][ T9326] EXT4-fs (loop1): Remounting filesystem read-only [ 135.479461][ T9326] EXT4-fs (loop1): 1 truncate cleaned up [ 135.485773][ T9326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.576679][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.647034][ T9359] validate_nla: 4 callbacks suppressed [ 135.647052][ T9359] netlink: 'syz.1.1835': attribute type 13 has an invalid length. [ 135.759647][ T9359] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.773378][ T9359] syzkaller0: entered promiscuous mode [ 135.778988][ T9359] syzkaller0: entered allmulticast mode [ 135.996481][ T9381] bridge_slave_0: left allmulticast mode [ 136.002227][ T9381] bridge_slave_0: left promiscuous mode [ 136.008117][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.029747][ T9381] bridge_slave_1: left allmulticast mode [ 136.035563][ T9381] bridge_slave_1: left promiscuous mode [ 136.041427][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.083419][ T9381] bond0: (slave bond_slave_0): Releasing backup interface [ 136.100271][ T9381] bond0: (slave bond_slave_1): Releasing backup interface [ 136.120180][ T9381] team0: Port device team_slave_0 removed [ 136.145860][ T9381] team0: Port device team_slave_1 removed [ 136.159520][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.167083][ T9381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.186359][ T9381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.203611][ T9384] lo: Caught tx_queue_len zero misconfig [ 136.237012][ T9396] netlink: 'syz.6.1848': attribute type 13 has an invalid length. [ 136.244991][ T9398] sctp: [Deprecated]: syz.1.1849 (pid 9398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.244991][ T9398] Use struct sctp_sack_info instead [ 136.272252][ T9398] sctp: [Deprecated]: syz.1.1849 (pid 9398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.272252][ T9398] Use struct sctp_sack_info instead [ 136.290869][ T9385] team0: Mode changed to "loadbalance" [ 136.372424][ T9393] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.390552][ T9393] syzkaller0: entered promiscuous mode [ 136.396251][ T9393] syzkaller0: entered allmulticast mode [ 136.562512][ T9414] __nla_validate_parse: 9 callbacks suppressed [ 136.562530][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1854'. [ 136.601849][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1854'. [ 136.684099][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 136.684118][ T29] audit: type=1400 audit(1768753087.654:1431): avc: denied { lock } for pid=9425 comm="syz.6.1860" path="socket:[33283]" dev="sockfs" ino=33283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.910353][ T29] audit: type=1400 audit(1768753087.884:1432): avc: denied { create } for pid=9442 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.964979][ T9448] loop1: detected capacity change from 0 to 512 [ 136.983368][ T9448] EXT4-fs: Ignoring removed i_version option [ 136.989568][ T9448] EXT4-fs: Ignoring removed bh option [ 137.040188][ T9448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.063462][ T9448] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.076911][ T29] audit: type=1400 audit(1768753088.054:1433): avc: denied { setattr } for pid=9447 comm="syz.1.1869" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.156460][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.321220][ T29] audit: type=1326 audit(1768753088.294:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.344871][ T29] audit: type=1326 audit(1768753088.294:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.380835][ T29] audit: type=1326 audit(1768753088.354:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.404407][ T29] audit: type=1326 audit(1768753088.354:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.427923][ T29] audit: type=1326 audit(1768753088.354:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.451562][ T29] audit: type=1326 audit(1768753088.354:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.475095][ T29] audit: type=1326 audit(1768753088.354:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.5.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff84821acb9 code=0x7ffc0000 [ 137.805215][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'. [ 138.482702][ T9521] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1896'. [ 138.568429][ T9523] loop6: detected capacity change from 0 to 2048 [ 138.623946][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1900'. [ 138.709885][ T9533] loop6: detected capacity change from 0 to 512 [ 138.731970][ T9533] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.763334][ T9533] EXT4-fs (loop6): 1 orphan inode deleted [ 138.769180][ T9533] EXT4-fs (loop6): 1 truncate cleaned up [ 138.793995][ T9537] loop1: detected capacity change from 0 to 512 [ 138.802265][ T9533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.821013][ T9537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.825195][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1901'. [ 138.838851][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1901'. [ 138.869519][ T9531] geneve0: entered promiscuous mode [ 138.874850][ T9531] geneve0: entered allmulticast mode [ 138.880428][ T9537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.917509][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 138.926570][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 138.935057][ T9537] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.946806][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.994910][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1906'. [ 139.225053][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.193791][ T4417] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.203797][ T4417] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.287647][ T9657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.304951][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.313592][ T9657] bond2: (slave bond0): Enslaving as an active interface with an up link [ 141.325268][ T4417] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.335280][ T4417] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.376517][ T9657] bond2 (unregistering): (slave bond0): Releasing backup interface [ 141.387835][ T9657] bond2 (unregistering): Released all slaves [ 141.400840][ T9665] tipc: New replicast peer: 255.255.255.255 [ 141.407212][ T9665] tipc: Enabled bearer , priority 10 [ 141.422605][ T4417] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.432477][ T4417] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.499419][ T9674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 141.506052][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.513631][ T9674] vhci_hcd vhci_hcd.0: Device attached [ 141.515757][ T4417] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.529009][ T4417] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.568828][ T9674] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 141.575421][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.583111][ T9674] vhci_hcd vhci_hcd.0: Device attached [ 141.613771][ T9686] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 141.620352][ T9686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.628070][ T9686] vhci_hcd vhci_hcd.0: Device attached [ 141.689314][ T4417] bridge_slave_1: left allmulticast mode [ 141.695059][ T4417] bridge_slave_1: left promiscuous mode [ 141.700812][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.708916][ T9674] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 141.715491][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.723087][ T3493] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 141.729601][ T9674] vhci_hcd vhci_hcd.0: Device attached [ 141.754655][ T9698] loop6: detected capacity change from 0 to 128 [ 141.765583][ T9698] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.778042][ T4417] bridge_slave_0: left allmulticast mode [ 141.778126][ T9698] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.783801][ T4417] bridge_slave_0: left promiscuous mode [ 141.784134][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.831760][ T9686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 141.841358][ T9674] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 141.845658][ T6390] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.848116][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.864722][ T9674] vhci_hcd vhci_hcd.0: Device attached [ 141.870735][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 141.870752][ T29] audit: type=1400 audit(1768753092.794:1463): avc: denied { setattr } for pid=9697 comm="syz.6.1961" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.901966][ T3493] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 141.917352][ T9686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 141.926566][ T9686] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18) [ 141.933256][ T9686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.940912][ T9686] vhci_hcd vhci_hcd.0: Device attached [ 141.950221][ T9706] vhci_hcd: connection closed [ 141.950564][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 141.960693][ T4404] vhci_hcd vhci_hcd.1: release socket [ 141.966160][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 141.972746][ T9700] vhci_hcd: connection closed [ 141.973025][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 141.983063][ T4404] vhci_hcd vhci_hcd.1: release socket [ 141.988519][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 141.999330][ T9709] __nla_validate_parse: 7 callbacks suppressed [ 141.999344][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1962'. [ 142.014583][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1962'. [ 142.024095][ T9687] vhci_hcd: connection closed [ 142.024288][ T9680] vhci_hcd: connection closed [ 142.025916][ T9675] vhci_hcd: connection reset by peer [ 142.044546][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 142.044728][ T9694] vhci_hcd: connection closed [ 142.049818][ T4404] vhci_hcd vhci_hcd.1: release socket [ 142.060169][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 142.091002][ T9711] loop6: detected capacity change from 0 to 1024 [ 142.094849][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 142.102728][ T4404] vhci_hcd vhci_hcd.1: release socket [ 142.108228][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 142.127756][ T9711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.159998][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 142.165307][ T4404] vhci_hcd vhci_hcd.1: release socket [ 142.170720][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 142.189009][ T4404] vhci_hcd vhci_hcd.1: stop threads [ 142.194666][ T4404] vhci_hcd vhci_hcd.1: release socket [ 142.200160][ T4404] vhci_hcd vhci_hcd.1: disconnect device [ 142.379880][ T9738] SELinux: ebitmap: empty map [ 142.386541][ T9738] SELinux: failed to load policy [ 142.421698][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1972'. [ 142.517085][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.536295][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.550106][ T4417] bond0 (unregistering): Released all slaves [ 142.560407][ T4417] bond1 (unregistering): Released all slaves [ 142.598151][ T9741] team1: entered promiscuous mode [ 142.603258][ T9741] team1: entered allmulticast mode [ 142.624056][ T9741] 8021q: adding VLAN 0 to HW filter on device team1 [ 142.643149][ T4417] tipc: Disabling bearer [ 142.648535][ T4417] tipc: Left network mode [ 142.705784][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1975'. [ 142.714780][ T9749] netlink: 'syz.7.1975': attribute type 5 has an invalid length. [ 142.722734][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1975'. [ 142.761191][ T4417] hsr_slave_0: left promiscuous mode [ 142.767104][ T4417] hsr_slave_1: left promiscuous mode [ 142.774077][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.782191][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.790706][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.827210][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.834733][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.852475][ T4417] batman_adv: batadv0: Removing interface: dummy0 [ 142.852627][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 142.868052][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 142.879332][ T4417] veth1_macvtap: left promiscuous mode [ 142.886014][ T4417] veth0_macvtap: left promiscuous mode [ 142.897954][ T4417] veth1_vlan: left promiscuous mode [ 142.915287][ T4417] veth0_vlan: left promiscuous mode [ 143.079866][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 143.121389][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 143.195274][ T9749] geneve2: entered promiscuous mode [ 143.200562][ T9749] geneve2: entered allmulticast mode [ 143.236881][ T9739] geneve2: entered promiscuous mode [ 143.242325][ T9739] geneve2: entered allmulticast mode [ 143.299390][ T4408] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 143.327312][ T9776] loop6: detected capacity change from 0 to 164 [ 143.356690][ T29] audit: type=1400 audit(1768753094.334:1464): avc: denied { mount } for pid=9775 comm="syz.6.1983" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 143.396110][ T4408] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 143.419618][ T4408] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 143.427998][ T29] audit: type=1400 audit(1768753094.384:1465): avc: denied { unmount } for pid=6390 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 143.468125][ T4408] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 143.500332][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 143.568487][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 143.642567][ T9796] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1986'. [ 143.676819][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.683956][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.701483][ T9666] bridge_slave_0: entered allmulticast mode [ 143.714274][ T9666] bridge_slave_0: entered promiscuous mode [ 143.725777][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.732936][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.759756][ T9666] bridge_slave_1: entered allmulticast mode [ 143.797021][ T9666] bridge_slave_1: entered promiscuous mode [ 143.832989][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.853727][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.864259][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1990'. [ 143.901602][ T9814] hsr_slave_1 (unregistering): left promiscuous mode [ 143.912644][ T9666] team0: Port device team_slave_0 added [ 143.918476][ T9819] tipc: Enabled bearer , priority 0 [ 143.927135][ T9806] tipc: Resetting bearer [ 143.942409][ T9806] tipc: Disabling bearer [ 143.967923][ T9666] team0: Port device team_slave_1 added [ 144.008951][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.016037][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.042149][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.079646][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.081762][ T9837] loop1: detected capacity change from 0 to 164 [ 144.086692][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.086727][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.245676][ T9666] hsr_slave_0: entered promiscuous mode [ 144.251749][ T9666] hsr_slave_1: entered promiscuous mode [ 144.258556][ T9666] debugfs: 'hsr0' already exists in 'hsr' [ 144.264320][ T9666] Cannot create hsr debugfs directory [ 144.359362][ T9870] program syz.7.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.388086][ T29] audit: type=1326 audit(1768753095.364:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.438083][ T29] audit: type=1326 audit(1768753095.364:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.461679][ T29] audit: type=1326 audit(1768753095.364:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.485204][ T29] audit: type=1326 audit(1768753095.364:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.508869][ T29] audit: type=1326 audit(1768753095.364:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.532387][ T29] audit: type=1326 audit(1768753095.364:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.555892][ T29] audit: type=1326 audit(1768753095.364:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed76bacb9 code=0x7ffc0000 [ 144.643922][ T9666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 144.653635][ T9666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 144.729252][ T9666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 144.742886][ T9666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 144.847288][ T9902] loop7: detected capacity change from 0 to 1024 [ 144.874277][ T9902] EXT4-fs: Ignoring removed bh option [ 144.917098][ T9902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.948247][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.986387][ T8512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.997020][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.034574][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.041749][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.075696][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.082872][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.182673][ T9925] loop6: detected capacity change from 0 to 1024 [ 145.248701][ T9925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.398238][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.410549][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.797673][ T9913] loop1: detected capacity change from 0 to 32768 [ 145.885589][ T9913] loop1: p1 p2 p3 < p5 p6 > [ 145.936728][ T9913] loop1: p2 size 16775168 extends beyond EOD, truncated [ 145.944614][ T9666] veth0_vlan: entered promiscuous mode [ 145.964926][ T9666] veth1_vlan: entered promiscuous mode [ 145.973942][ T9913] loop1: p5 start 4294970168 is beyond EOD, truncated [ 146.012466][ T9666] veth0_macvtap: entered promiscuous mode [ 146.075641][ T9666] veth1_macvtap: entered promiscuous mode [ 146.143451][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.199938][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.260754][ T4421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.308171][ T4421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.360444][ T4421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.409756][ T4421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.442115][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 146.456741][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 146.466994][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 146.483198][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 146.515526][ T9983] loop8: detected capacity change from 0 to 128 [ 146.541421][ T9983] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.944569][ T3493] usb 3-1: enqueue for inactive port 0 [ 146.950116][ T3493] usb 3-1: enqueue for inactive port 0 [ 147.024637][ T3493] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 147.145110][ T9989] loop7: detected capacity change from 0 to 512 [ 147.173261][ T9989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.202844][ T9989] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.236527][ T9994] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 147.261080][ T9994] macvlan0: entered promiscuous mode [ 147.266726][ T9994] macvlan0: entered allmulticast mode [ 147.273492][ T9994] bond3: entered promiscuous mode [ 147.279140][ T9994] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 147.288266][ T9994] bond3: left promiscuous mode [ 147.313144][ T9998] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 147.388090][T10001] loop6: detected capacity change from 0 to 128 [ 147.399159][T10001] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 147.405644][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 147.405660][ T29] audit: type=1400 audit(2000000001.880:1489): avc: denied { getopt } for pid=10000 comm="syz.6.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.469342][ T8512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.573107][ T29] audit: type=1400 audit(2000000002.040:1490): avc: denied { getopt } for pid=10014 comm="syz.1.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.638062][ T9983] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.734960][ T29] audit: type=1326 audit(2000000002.210:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.773556][T10032] loop1: detected capacity change from 0 to 512 [ 147.775943][ T29] audit: type=1326 audit(2000000002.210:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.803476][ T29] audit: type=1326 audit(2000000002.240:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.827250][ T29] audit: type=1326 audit(2000000002.240:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.850930][ T29] audit: type=1326 audit(2000000002.240:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.874428][ T29] audit: type=1326 audit(2000000002.240:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.897974][ T29] audit: type=1326 audit(2000000002.240:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.921636][ T29] audit: type=1326 audit(2000000002.240:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.6.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92702dacb9 code=0x7ffc0000 [ 147.957336][T10032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.975711][T10038] __nla_validate_parse: 4 callbacks suppressed [ 147.975730][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2052'. [ 147.990887][T10032] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.012687][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2052'. [ 148.028886][T10042] loop6: detected capacity change from 0 to 512 [ 148.056524][T10042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.076533][T10046] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 148.093651][T10042] EXT4-fs (loop6): 1 truncate cleaned up [ 148.100261][T10042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.123957][T10044] ================================================================== [ 148.132122][T10044] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 148.140781][T10044] [ 148.143226][T10044] write to 0xffff88815d4b6ee8 of 8 bytes by task 10048 on cpu 1: [ 148.150974][T10044] shmem_file_splice_read+0x470/0x600 [ 148.156424][T10044] splice_direct_to_actor+0x26e/0x670 [ 148.161852][T10044] do_splice_direct+0x119/0x1a0 [ 148.166751][T10044] do_sendfile+0x380/0x650 [ 148.171316][T10044] __x64_sys_sendfile64+0x105/0x150 [ 148.176553][T10044] x64_sys_call+0x2db1/0x3000 [ 148.181285][T10044] do_syscall_64+0xc0/0x2a0 [ 148.185820][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.191760][T10044] [ 148.194154][T10044] write to 0xffff88815d4b6ee8 of 8 bytes by task 10044 on cpu 0: [ 148.201899][T10044] shmem_file_splice_read+0x470/0x600 [ 148.207343][T10044] splice_direct_to_actor+0x26e/0x670 [ 148.212766][T10044] do_splice_direct+0x119/0x1a0 [ 148.217689][T10044] do_sendfile+0x380/0x650 [ 148.222157][T10044] __x64_sys_sendfile64+0x105/0x150 [ 148.227495][T10044] x64_sys_call+0x2db1/0x3000 [ 148.232215][T10044] do_syscall_64+0xc0/0x2a0 [ 148.236771][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.242699][T10044] [ 148.245051][T10044] value changed: 0x0000000000000ec8 -> 0x0000000000000eca [ 148.252184][T10044] [ 148.254532][T10044] Reported by Kernel Concurrency Sanitizer on: [ 148.260715][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.2.2054 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.272136][T10044] Tainted: [W]=WARN [ 148.275979][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.286069][T10044] ================================================================== [ 148.367440][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.401955][ T6390] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.747965][ T9983] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.127603][ T9983] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.180857][ T4421] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.193814][ T4415] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.205686][ T4415] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.221932][ T4415] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0