last executing test programs: 1m45.653257516s ago: executing program 32 (id=388): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 1m41.936748349s ago: executing program 3 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) 1m41.905824771s ago: executing program 3 (id=466): r0 = syz_clone(0x6208400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000180)='map_files\x00') getdents64(r2, 0x0, 0x0) 1m41.777385278s ago: executing program 3 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0x9}, {0x0, 0x9}, {0xf, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m41.521722033s ago: executing program 3 (id=472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 1m41.40003436s ago: executing program 3 (id=475): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1m41.39148528s ago: executing program 3 (id=478): r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceadab4912f9f6a31854ec98e950cfed21fcad7ff0fb39af14c31ed56ad56d86000000000000000000000800", 0xfffffffe}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1m36.424292535s ago: executing program 33 (id=567): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m26.350981432s ago: executing program 34 (id=478): r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceadab4912f9f6a31854ec98e950cfed21fcad7ff0fb39af14c31ed56ad56d86000000000000000000000800", 0xfffffffe}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1m18.237904217s ago: executing program 7 (id=874): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x44800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000e80)={'team0\x00', {0x2, 0x0, @multicast2}}) socket$can_j1939(0x1d, 0x2, 0x7) 1m18.020448479s ago: executing program 7 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) 1m17.798621762s ago: executing program 7 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m17.177798167s ago: executing program 7 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) 1m17.072822223s ago: executing program 7 (id=892): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x25b4e59c81b60c2e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x3}}}}}}}, 0x0) 1m16.687957606s ago: executing program 7 (id=896): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180203000000ffedde00"/21], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m16.580872571s ago: executing program 35 (id=896): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180203000000ffedde00"/21], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m0.559316279s ago: executing program 8 (id=1166): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m0.53595525s ago: executing program 8 (id=1168): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) bind$tipc(r0, 0x0, 0x0) 1m0.411260828s ago: executing program 8 (id=1170): syz_io_uring_setup(0x2a21, &(0x7f0000000100)={0x0, 0x6e7f, 0x1000, 0xfffffffc, 0x5cc}, &(0x7f0000000280), 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 1m0.346146181s ago: executing program 8 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 1m0.273497875s ago: executing program 8 (id=1173): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 1m0.055135078s ago: executing program 8 (id=1182): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200440c0) 59.999058802s ago: executing program 36 (id=1182): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200440c0) 41.185502209s ago: executing program 5 (id=1538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000855) 40.330461778s ago: executing program 5 (id=1550): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 39.924437231s ago: executing program 5 (id=1554): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100), 0x2, 0x46b, &(0x7f0000000580)="$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") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 39.834280526s ago: executing program 5 (id=1557): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 39.793808919s ago: executing program 5 (id=1558): capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7f, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 39.308356007s ago: executing program 5 (id=1568): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8927, &(0x7f00000008c0)={'vxcan1\x00', @ifru_ivalue=0xffff}) 39.270758969s ago: executing program 37 (id=1568): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8927, &(0x7f00000008c0)={'vxcan1\x00', @ifru_ivalue=0xffff}) 31.880199562s ago: executing program 2 (id=1707): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90) 31.852576914s ago: executing program 2 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a0300"], 0x122}}, 0x0) 31.768612608s ago: executing program 2 (id=1713): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xb9}, 0x1700, 0x31, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 31.57653903s ago: executing program 2 (id=1715): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r1, &(0x7f0000002700), 0x12) 31.551863801s ago: executing program 2 (id=1718): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 31.498850124s ago: executing program 2 (id=1719): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 16.455349727s ago: executing program 38 (id=1719): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 1.160401383s ago: executing program 1 (id=2330): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, 0x0) 1.095908657s ago: executing program 1 (id=2331): syz_open_dev$sg(0x0, 0x0, 0x9840) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) listen(r0, 0x8b25714e) accept4(r0, 0x0, 0x0, 0x0) 834.141432ms ago: executing program 9 (id=2341): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 807.716203ms ago: executing program 4 (id=2343): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x6, 0xfffffff9, 0xc1, 0x200, 0x9, 0x2, 0x739}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) 757.993706ms ago: executing program 4 (id=2345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 722.797048ms ago: executing program 9 (id=2348): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 625.812783ms ago: executing program 4 (id=2351): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1000, 0x9}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 568.956976ms ago: executing program 9 (id=2353): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd468e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2000001ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 535.543569ms ago: executing program 0 (id=2354): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 509.19283ms ago: executing program 4 (id=2356): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 416.753695ms ago: executing program 4 (id=2357): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x40d08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)="ab", 0x1}], 0x1}}], 0x2, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 379.526348ms ago: executing program 6 (id=2359): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x5, 0x7, 0x1, 'queue0\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000001ffffff00000000fcff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xdf9c) 338.30624ms ago: executing program 0 (id=2360): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 299.208502ms ago: executing program 6 (id=2361): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 298.824442ms ago: executing program 4 (id=2362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ptrace(0x10, 0x0) ptrace$setregs(0x1a, 0x0, 0xfbfffffffffffff8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) 259.134634ms ago: executing program 9 (id=2363): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='6'], 0x20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 258.136994ms ago: executing program 6 (id=2364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 172.301039ms ago: executing program 6 (id=2365): getresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x92, 0x28, 0x1, 0x0, 0xfd, 0x0, 0x83, 0x4cc6e26d51c24e15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x8078, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003380), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250600000008000e00080000000800030080000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000800) 131.812352ms ago: executing program 1 (id=2366): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 131.343562ms ago: executing program 0 (id=2368): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5800000}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) timer_create(0x1, 0x0, 0x0) 120.959402ms ago: executing program 1 (id=2369): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 120.711432ms ago: executing program 9 (id=2370): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x25, 0x0, 0x0, 0xfffffffa, 0x60000000, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 44.672597ms ago: executing program 1 (id=2371): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="a0", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 44.574737ms ago: executing program 6 (id=2372): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 44.417847ms ago: executing program 9 (id=2373): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000380), 0x8) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 38.741577ms ago: executing program 0 (id=2374): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6aab, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x1, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0xfdef) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.889049ms ago: executing program 0 (id=2375): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 0s ago: executing program 1 (id=2376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) kernel console output (not intermixed with test programs): from eth3 [ 92.937114][ T6504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.949984][ T6509] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 92.976844][ T6529] netlink: 204 bytes leftover after parsing attributes in process `syz.1.965'. [ 93.019247][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.031497][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.047099][ T6057] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.069598][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.076746][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.110838][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.117953][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.151209][ T6456] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.204234][ T6456] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 93.216769][ T6456] EXT4-fs (loop6): This should not happen!! Data will be lost [ 93.216769][ T6456] [ 93.226641][ T6456] EXT4-fs (loop6): Total free blocks count 0 [ 93.232647][ T6456] EXT4-fs (loop6): Free/Dirty block details [ 93.238654][ T6456] EXT4-fs (loop6): free_blocks=2415919104 [ 93.244610][ T6456] EXT4-fs (loop6): dirty_blocks=6800 [ 93.249910][ T6456] EXT4-fs (loop6): Block reservation details [ 93.256015][ T6456] EXT4-fs (loop6): i_reserved_data_blocks=425 [ 93.281487][ T6347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.348169][ T6477] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 93.370754][ T6545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 93.377327][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.384957][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 93.445181][ T6559] loop1: detected capacity change from 0 to 1024 [ 93.455978][ T6559] EXT4-fs: Ignoring removed bh option [ 93.492104][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.502796][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.549222][ T6547] vhci_hcd: connection closed [ 93.549551][ T31] vhci_hcd vhci_hcd.5: stop threads [ 93.559710][ T31] vhci_hcd vhci_hcd.5: release socket [ 93.565291][ T31] vhci_hcd vhci_hcd.5: disconnect device [ 93.571463][ T3409] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 93.695097][ T6347] veth0_vlan: entered promiscuous mode [ 93.708025][ T6347] veth1_vlan: entered promiscuous mode [ 93.717557][ T6586] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.971: Allocating blocks 449-513 which overlap fs metadata [ 93.742877][ T6347] veth0_macvtap: entered promiscuous mode [ 93.751550][ T6347] veth1_macvtap: entered promiscuous mode [ 93.770055][ T6559] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.971: Allocating blocks 497-513 which overlap fs metadata [ 93.783201][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.793605][ T6559] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.971: Allocating blocks 497-513 which overlap fs metadata [ 93.825323][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.853148][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.858297][ T6558] EXT4-fs (loop1): pa ffff88810762c770: logic 48, phys. 177, len 21 [ 93.870118][ T6558] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 93.883979][ T6598] netlink: 'syz.6.975': attribute type 3 has an invalid length. [ 93.898764][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.913031][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.924398][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.966742][ T3962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.995379][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.930'. [ 94.207529][ T6631] netlink: 104 bytes leftover after parsing attributes in process `syz.6.983'. [ 94.291779][ T6648] netlink: 60 bytes leftover after parsing attributes in process `syz.6.986'. [ 94.323060][ T6651] EXT4-fs: Ignoring removed bh option [ 94.889564][ T6700] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 94.899518][ T6702] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 94.904551][ T6703] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 94.919592][ T6704] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 95.125659][ T6718] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.143271][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.152150][ T6718] FAT-fs (loop5): Filesystem has been set read-only [ 95.171744][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.182887][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.191886][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.201440][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.212005][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.221215][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.242739][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.253739][ T6723] SELinux: failed to load policy [ 95.261276][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.270642][ T6718] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 95.706469][ T6739] rock: directory entry would overflow storage [ 95.712766][ T6739] rock: sig=0x4d4e, size=5, remaining=4 [ 95.798179][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 95.798197][ T29] audit: type=1400 audit(1769686587.977:673): avc: denied { ioctl } for pid=6744 comm="syz.2.1022" path="socket:[17853]" dev="sockfs" ino=17853 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.203551][ T6763] set_capacity_and_notify: 6 callbacks suppressed [ 96.203565][ T6763] loop6: detected capacity change from 0 to 128 [ 96.477561][ T6779] loop6: detected capacity change from 0 to 136 [ 96.600810][ T29] audit: type=1400 audit(1769686588.777:674): avc: denied { map } for pid=6788 comm="syz.8.1041" path="socket:[16943]" dev="sockfs" ino=16943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 96.658219][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1043'. [ 96.668853][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1043'. [ 96.677856][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1043'. [ 96.724681][ T6801] loop8: detected capacity change from 0 to 128 [ 96.897013][ T6811] loop1: detected capacity change from 0 to 136 [ 97.224460][ T29] audit: type=1326 audit(1769686589.397:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.248008][ T29] audit: type=1326 audit(1769686589.397:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.271370][ T29] audit: type=1326 audit(1769686589.397:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.294703][ T29] audit: type=1326 audit(1769686589.397:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.318109][ T29] audit: type=1326 audit(1769686589.407:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.341509][ T29] audit: type=1326 audit(1769686589.407:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.393693][ T29] audit: type=1326 audit(1769686589.567:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83f774aeb9 code=0x7ffc0000 [ 97.695445][ T29] audit: type=1400 audit(1769686589.877:682): avc: denied { bind } for pid=6854 comm="syz.5.1080" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.806575][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.856598][ T6924] loop5: detected capacity change from 0 to 512 [ 98.891216][ T6924] FAT-fs (loop5): Directory bread(block 199916) failed [ 98.903913][ T6924] FAT-fs (loop5): Directory bread(block 199917) failed [ 98.917366][ T6924] FAT-fs (loop5): Directory bread(block 199918) failed [ 98.931154][ T6924] FAT-fs (loop5): Directory bread(block 199919) failed [ 98.968364][ T6924] FAT-fs (loop5): Directory bread(block 199920) failed [ 98.975618][ T6926] loop8: detected capacity change from 0 to 512 [ 98.980646][ T6924] FAT-fs (loop5): Directory bread(block 199921) failed [ 98.993262][ T6926] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 99.012811][ T6924] FAT-fs (loop5): Directory bread(block 199922) failed [ 99.044586][ T6926] EXT4-fs (loop8): 1 truncate cleaned up [ 99.051628][ T6924] FAT-fs (loop5): Directory bread(block 199923) failed [ 99.145605][ T6924] FAT-fs (loop5): FAT read failed (blocknr 128) [ 99.365013][ T6943] loop2: detected capacity change from 0 to 128 [ 100.059273][ T6943] loop2: detected capacity change from 0 to 32768 [ 100.105681][ T6978] loop8: detected capacity change from 0 to 512 [ 100.164704][ T6978] FAT-fs (loop8): Directory bread(block 199916) failed [ 100.180486][ T6978] FAT-fs (loop8): Directory bread(block 199917) failed [ 100.203722][ T6978] FAT-fs (loop8): Directory bread(block 199918) failed [ 100.230953][ T6978] FAT-fs (loop8): Directory bread(block 199919) failed [ 100.254576][ T6978] FAT-fs (loop8): Directory bread(block 199920) failed [ 100.278115][ T6978] FAT-fs (loop8): Directory bread(block 199921) failed [ 100.295245][ T6978] FAT-fs (loop8): Directory bread(block 199922) failed [ 100.302154][ T6978] FAT-fs (loop8): Directory bread(block 199923) failed [ 100.405992][ T6978] FAT-fs (loop8): FAT read failed (blocknr 128) [ 100.633699][ T7007] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 100.658591][ T7007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.718915][ T7011] bond2: (slave geneve2): making interface the new active one [ 100.741959][ T7011] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 100.889489][ T7013] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 100.908512][ T7013] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 101.798313][ T7054] loop1: detected capacity change from 0 to 512 [ 101.810056][ T7054] FAT-fs (loop1): Directory bread(block 199916) failed [ 101.824980][ T7054] FAT-fs (loop1): Directory bread(block 199917) failed [ 101.832021][ T7054] FAT-fs (loop1): Directory bread(block 199918) failed [ 101.893993][ T7054] FAT-fs (loop1): Directory bread(block 199919) failed [ 101.900914][ T7054] FAT-fs (loop1): Directory bread(block 199920) failed [ 101.944138][ T7054] FAT-fs (loop1): Directory bread(block 199921) failed [ 101.951055][ T7054] FAT-fs (loop1): Directory bread(block 199922) failed [ 101.962692][ T7054] FAT-fs (loop1): Directory bread(block 199923) failed [ 102.019519][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 102.019537][ T29] audit: type=1326 audit(1769686850.197:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693694aeb9 code=0x7ffc0000 [ 102.053684][ T7070] loop6: detected capacity change from 0 to 256 [ 102.060128][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 102.069097][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1149'. [ 102.087520][ T7054] FAT-fs (loop1): FAT read failed (blocknr 128) [ 102.121506][ T7071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.159671][ T29] audit: type=1326 audit(1769686850.237:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f693694aeb9 code=0x7ffc0000 [ 102.183125][ T29] audit: type=1326 audit(1769686850.237:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f693694ac22 code=0x7ffc0000 [ 102.207035][ T29] audit: type=1326 audit(1769686850.237:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f693690b78e code=0x7ffc0000 [ 102.230673][ T29] audit: type=1326 audit(1769686850.237:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f693694ace7 code=0x7ffc0000 [ 102.253997][ T29] audit: type=1326 audit(1769686850.237:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693690b78e code=0x7ffc0000 [ 102.277422][ T29] audit: type=1326 audit(1769686850.237:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f693694ab4b code=0x7ffc0000 [ 102.300828][ T29] audit: type=1326 audit(1769686850.307:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f693690b78e code=0x7ffc0000 [ 102.324058][ T29] audit: type=1326 audit(1769686850.307:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f693690b78e code=0x7ffc0000 [ 102.347390][ T29] audit: type=1326 audit(1769686850.307:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.6.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6936949d97 code=0x7ffc0000 [ 102.471983][ T7092] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 102.509317][ T7086] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 102.579476][ T7107] loop1: detected capacity change from 0 to 1024 [ 102.616664][ T7107] EXT4-fs mount: 6 callbacks suppressed [ 102.616685][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.669935][ T7107] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #15: comm syz.1.1160: corrupted xattr entries [ 102.743427][ T7124] loop5: detected capacity change from 0 to 128 [ 102.762495][ T7107] EXT4-fs (loop1): Remounting filesystem read-only [ 102.774832][ T7107] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.1160: dec ref error=-30 [ 102.816155][ T3962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.833427][ T7124] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.892922][ T7134] loop6: detected capacity change from 0 to 512 [ 102.903039][ T7124] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.914252][ T7134] EXT4-fs: Ignoring removed bh option [ 102.919749][ T7134] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.941155][ T7134] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 102.961195][ T7134] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 102.972431][ T7134] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.998120][ T7134] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1169: Failed to acquire dquot type 1 [ 103.010801][ T7134] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1169: Invalid block bitmap block 0 in block_group 0 [ 103.025653][ T7134] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1169: Invalid block bitmap block 0 in block_group 0 [ 103.042659][ T7142] loop1: detected capacity change from 0 to 512 [ 103.052193][ T7142] journal_path: Non-blockdev passed as './bus' [ 103.058429][ T7142] EXT4-fs: error: could not find journal device path [ 103.078223][ T6115] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.094190][ T7134] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1169: Invalid block bitmap block 0 in block_group 0 [ 103.113555][ T7134] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1169: Failed to acquire dquot type 1 [ 103.132272][ T7134] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1169: Failed to acquire dquot type 1 [ 103.160258][ T7134] EXT4-fs (loop6): 1 orphan inode deleted [ 103.169573][ T7134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.206686][ T5061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.306085][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.382091][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1181'. [ 103.399032][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.482609][ T7175] delete_channel: no stack [ 103.491870][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.587219][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.698353][ T7199] loop6: detected capacity change from 0 to 512 [ 103.710632][ T31] bridge_slave_1: left allmulticast mode [ 103.716542][ T31] bridge_slave_1: left promiscuous mode [ 103.722206][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.732737][ T7199] EXT4-fs: Mount option(s) incompatible with ext2 [ 103.774714][ T31] bridge_slave_0: left allmulticast mode [ 103.780424][ T31] bridge_slave_0: left promiscuous mode [ 103.786312][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.982943][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.008029][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.029296][ T31] bond0 (unregistering): Released all slaves [ 104.105069][ T31] hsr_slave_0: left promiscuous mode [ 104.113210][ T31] hsr_slave_1: left promiscuous mode [ 104.119034][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.127418][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.135640][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.143109][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.154817][ T31] veth1_macvtap: left promiscuous mode [ 104.160397][ T31] veth0_macvtap: left promiscuous mode [ 104.166021][ T31] veth1_vlan: left promiscuous mode [ 104.171320][ T31] veth0_vlan: left promiscuous mode [ 104.242052][ T31] team0 (unregistering): Port device team_slave_1 removed [ 104.252013][ T31] team0 (unregistering): Port device team_slave_0 removed [ 104.307205][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 104.354570][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.361704][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.369069][ T7174] bridge_slave_0: entered allmulticast mode [ 104.376070][ T7174] bridge_slave_0: entered promiscuous mode [ 104.383582][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.390871][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.398162][ T7174] bridge_slave_1: entered allmulticast mode [ 104.404953][ T7174] bridge_slave_1: entered promiscuous mode [ 104.424672][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.435218][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.468352][ T7174] team0: Port device team_slave_0 added [ 104.476740][ T7174] team0: Port device team_slave_1 added [ 104.493694][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.500678][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.526759][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.538026][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.545032][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.571003][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.598668][ T7174] hsr_slave_0: entered promiscuous mode [ 104.604835][ T7174] hsr_slave_1: entered promiscuous mode [ 104.610901][ T7174] debugfs: 'hsr0' already exists in 'hsr' [ 104.616667][ T7174] Cannot create hsr debugfs directory [ 104.711192][ T7174] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 104.720779][ T7174] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 104.733087][ T7174] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 104.742858][ T7174] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 104.785372][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.797092][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.810378][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.817508][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.829392][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.836581][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.863676][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.921816][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.063403][ T7174] veth0_vlan: entered promiscuous mode [ 105.071283][ T7174] veth1_vlan: entered promiscuous mode [ 105.088270][ T7174] veth0_macvtap: entered promiscuous mode [ 105.096397][ T7174] veth1_macvtap: entered promiscuous mode [ 105.110649][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.122990][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.133738][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.142715][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.159212][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.176371][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.289424][ T365] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 106.151500][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 106.160496][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1202'. [ 106.239253][ T7353] loop6: detected capacity change from 0 to 512 [ 106.283373][ T7353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.459885][ T5061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.212088][ T7431] netlink: 'syz.5.1242': attribute type 27 has an invalid length. [ 107.326491][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.333816][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.478891][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.524673][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.627198][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 107.627212][ T29] audit: type=1326 audit(1769686855.807:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f693694aeb9 code=0x7fc00000 [ 107.707614][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.763925][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.775893][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.797137][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.963772][ T7475] loop6: detected capacity change from 0 to 128 [ 107.991427][ T7475] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 108.029777][ T7475] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.114575][ T7475] ext2 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.185100][ T5061] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.419031][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 108.569703][ T7505] loop9: detected capacity change from 0 to 512 [ 108.593018][ T7505] EXT4-fs: Ignoring removed bh option [ 108.598744][ T7505] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.626103][ T7505] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 108.654415][ T7505] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 108.671265][ T7505] EXT4-fs (loop9): orphan cleanup on readonly fs [ 108.688517][ T7505] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 4 [ 108.698290][ T7505] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 108.714432][ T7505] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1266: Failed to acquire dquot type 1 [ 108.779674][ T7505] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1266: Invalid block bitmap block 0 in block_group 0 [ 108.807914][ T7505] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1266: Invalid block bitmap block 0 in block_group 0 [ 108.829377][ T7505] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1266: Invalid block bitmap block 0 in block_group 0 [ 108.856739][ T7505] Quota error (device loop9): write_blk: dquota write failed [ 108.864279][ T7505] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 108.874164][ T7505] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1266: Failed to acquire dquot type 1 [ 108.976030][ T7505] Quota error (device loop9): write_blk: dquota write failed [ 108.983485][ T7505] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 108.994265][ T7505] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1266: Failed to acquire dquot type 1 [ 109.046422][ T7505] EXT4-fs (loop9): 1 orphan inode deleted [ 109.084462][ T7505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.153537][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.292985][ T7537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7537 comm=syz.1.1289 [ 109.373738][ T7542] loop5: detected capacity change from 0 to 512 [ 109.394716][ T7546] option changes via remount are deprecated (pid=7543 comm=syz.6.1283) [ 109.447884][ T29] audit: type=1326 audit(1769686857.627:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.9.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 109.471380][ T29] audit: type=1326 audit(1769686857.627:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.9.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 109.494833][ T29] audit: type=1326 audit(1769686857.627:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.9.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 109.966314][ T7589] netlink: 'syz.5.1303': attribute type 12 has an invalid length. [ 109.974378][ T7589] netlink: 'syz.5.1303': attribute type 29 has an invalid length. [ 109.982192][ T7589] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1303'. [ 109.991269][ T7589] netlink: 'syz.5.1303': attribute type 2 has an invalid length. [ 109.999049][ T7589] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1303'. [ 110.067664][ T7593] loop9: detected capacity change from 0 to 136 [ 110.134471][ T7599] netlink: 'syz.5.1305': attribute type 1 has an invalid length. [ 110.159628][ T7599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.195057][ T7599] bond1: (slave geneve2): making interface the new active one [ 110.204618][ T7599] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 110.213515][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.234865][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.281253][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.326005][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.346650][ T7437] IPVS: starting estimator thread 0... [ 110.443994][ T7613] IPVS: using max 2448 ests per chain, 122400 per kthread [ 110.505133][ T7626] netlink: 'syz.2.1316': attribute type 12 has an invalid length. [ 110.513034][ T7626] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 110.520899][ T7626] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1316'. [ 110.530156][ T7626] netlink: 'syz.2.1316': attribute type 2 has an invalid length. [ 110.537905][ T7626] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1316'. [ 110.602612][ T7630] loop6: detected capacity change from 0 to 512 [ 110.815432][ T7646] xt_CT: No such helper "pptp" [ 110.993621][ T7668] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.016178][ T7668] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.702141][ T7707] loop5: detected capacity change from 0 to 256 [ 112.232882][ T7714] loop9: detected capacity change from 0 to 32768 [ 112.265385][ T7738] netlink: 'syz.6.1363': attribute type 2 has an invalid length. [ 112.273315][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1363'. [ 112.321703][ T3302] loop9: p1 p3 < > [ 112.333466][ T7714] loop9: p1 p3 < > [ 112.499811][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 112.500253][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 112.556049][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 112.556725][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 112.842758][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 112.842778][ T29] audit: type=1326 audit(1769686861.017:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.877502][ T29] audit: type=1326 audit(1769686861.017:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.900901][ T29] audit: type=1326 audit(1769686861.017:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.924347][ T29] audit: type=1326 audit(1769686861.027:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.947748][ T29] audit: type=1326 audit(1769686861.027:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.971156][ T29] audit: type=1326 audit(1769686861.027:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 112.994488][ T29] audit: type=1326 audit(1769686861.027:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 113.017987][ T29] audit: type=1326 audit(1769686861.027:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 113.041317][ T29] audit: type=1326 audit(1769686861.027:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 113.064693][ T29] audit: type=1326 audit(1769686861.027:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.9.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb71f90aeb9 code=0x7ffc0000 [ 114.099169][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.107028][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.114828][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.122593][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.130382][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.138235][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.146015][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.153886][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.161671][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.169540][ T7837] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 114.209984][ T7841] loop6: detected capacity change from 0 to 512 [ 114.620231][ T7872] tipc: Started in network mode [ 114.625284][ T7872] tipc: Node identity 4, cluster identity 4711 [ 114.631502][ T7872] tipc: Node number set to 4 [ 115.381280][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 115.396760][ T365] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.405741][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 115.423877][ T365] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.448860][ T365] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.478164][ T365] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.545720][ T7887] loop1: detected capacity change from 0 to 128 [ 115.585309][ T7889] loop2: detected capacity change from 0 to 512 [ 115.616050][ T7887] syz.1.1428: attempt to access beyond end of device [ 115.616050][ T7887] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 115.757304][ T7891] loop1: detected capacity change from 0 to 512 [ 115.788105][ T7891] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.257037][ T7926] loop6: detected capacity change from 0 to 1024 [ 116.308873][ T7930] vlan0: entered promiscuous mode [ 116.326223][ T7929] vlan0: left promiscuous mode [ 116.512886][ T7940] loop5: detected capacity change from 0 to 8192 [ 116.658844][ T7956] loop9: detected capacity change from 0 to 512 [ 116.685990][ T7956] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1443: iget: bad i_size value: -4294967286 [ 116.698737][ T7956] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1443: couldn't read orphan inode 15 (err -117) [ 116.734453][ T7956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.778402][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.406571][ T8004] program syz.6.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.809452][ T8038] loop9: detected capacity change from 0 to 128 [ 118.281613][ T8055] loop2: detected capacity change from 0 to 8192 [ 119.526752][ T8081] loop1: detected capacity change from 0 to 1024 [ 119.561011][ T8081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.578161][ T8081] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.584219][ T8087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 119.615732][ T8081] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 3) [ 119.654344][ T8081] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 119.666703][ T8081] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.666703][ T8081] [ 119.744340][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 119.744361][ T29] audit: type=1400 audit(1769687123.925:857): avc: denied { map } for pid=8079 comm="syz.1.1496" path="/261/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.745552][ T8091] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.787756][ T8091] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.802147][ T8091] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.817731][ T8079] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.832891][ T8079] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.847534][ T8091] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.862271][ T8079] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.876711][ T8091] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.949231][ T8095] loop6: detected capacity change from 0 to 8192 [ 120.007654][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104e9b000: rx timeout, send abort [ 120.015940][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104b46600: rx timeout, send abort [ 120.024318][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104e9b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.038644][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104b46600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.133545][ T8104] loop9: detected capacity change from 0 to 512 [ 120.153308][ T8104] EXT4-fs (loop9): 1 truncate cleaned up [ 120.161895][ T8104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.178360][ T8109] loop5: detected capacity change from 0 to 128 [ 120.282834][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.296264][ T8114] loop5: detected capacity change from 0 to 512 [ 120.485600][ T3962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.620338][ T8143] loop6: detected capacity change from 0 to 1024 [ 120.688381][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 120.727166][ T8156] loop6: detected capacity change from 0 to 1024 [ 120.736681][ T8156] EXT4-fs: Ignoring removed bh option [ 121.190825][ T8165] loop6: detected capacity change from 0 to 1024 [ 121.208414][ T8165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.450729][ T8177] loop9: detected capacity change from 0 to 8192 [ 121.460743][ T8177] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.562460][ T8185] loop1: detected capacity change from 0 to 512 [ 121.622155][ T8188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8188 comm=syz.9.1528 [ 121.886084][ T8178] net_ratelimit: 46 callbacks suppressed [ 121.886177][ T8178] Set syz1 is full, maxelem 65536 reached [ 121.937353][ T8191] tipc: Started in network mode [ 121.942339][ T8191] tipc: Node identity 4, cluster identity 4711 [ 121.948648][ T8191] tipc: Node number set to 4 [ 122.375508][ T3429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.385863][ T3429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.457083][ T3429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.467472][ T3429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.527854][ T8224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8224 comm=syz.9.1541 [ 122.542050][ T3429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.552414][ T3429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.599243][ T3429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.609563][ T3429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.671586][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 122.791030][ T3429] bridge_slave_1: left allmulticast mode [ 122.796775][ T3429] bridge_slave_1: left promiscuous mode [ 122.802553][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.869572][ T3429] bridge_slave_0: left allmulticast mode [ 122.875326][ T3429] bridge_slave_0: left promiscuous mode [ 122.881025][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.152280][ T8269] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1561'. [ 123.177420][ T8233] Set syz1 is full, maxelem 65536 reached [ 123.300984][ T3429] bond2 (unregistering): (slave geneve2): Releasing active interface [ 123.337204][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.348347][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.359049][ T3429] bond0 (unregistering): Released all slaves [ 123.366921][ T3429] bond1 (unregistering): Released all slaves [ 123.376375][ T3429] bond2 (unregistering): Released all slaves [ 123.396791][ T8263] netlink: 'syz.2.1561': attribute type 29 has an invalid length. [ 123.432154][ T8267] netlink: 'syz.2.1561': attribute type 29 has an invalid length. [ 123.494604][ T3429] tipc: Left network mode [ 123.499042][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.506268][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.531804][ T8218] bridge_slave_0: entered allmulticast mode [ 123.548480][ T8218] bridge_slave_0: entered promiscuous mode [ 123.568417][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.575583][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.582892][ T8218] bridge_slave_1: entered allmulticast mode [ 123.591996][ T8218] bridge_slave_1: entered promiscuous mode [ 123.602361][ T3429] hsr_slave_0: left promiscuous mode [ 123.609306][ T8288] EXT4-fs: Ignoring removed oldalloc option [ 123.636168][ T3429] hsr_slave_1: left promiscuous mode [ 123.642012][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.649638][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.660947][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.668389][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.682549][ T3429] veth1_macvtap: left promiscuous mode [ 123.688276][ T3429] veth0_macvtap: left promiscuous mode [ 123.694014][ T3429] veth1_vlan: left promiscuous mode [ 123.699322][ T3429] veth0_vlan: left promiscuous mode [ 123.818918][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 123.829819][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 123.895450][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.916806][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.955158][ T8218] team0: Port device team_slave_0 added [ 123.961991][ T8218] team0: Port device team_slave_1 added [ 124.001508][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.008650][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.034582][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.047206][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.054201][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.080124][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.111882][ T8218] hsr_slave_0: entered promiscuous mode [ 124.118720][ T8218] hsr_slave_1: entered promiscuous mode [ 124.134264][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 124.140118][ T8218] Cannot create hsr debugfs directory [ 124.262786][ T3429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.371336][ T3429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.432503][ T3429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.449587][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 124.498687][ T3429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.539394][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.546534][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.553845][ T8325] bridge_slave_0: entered allmulticast mode [ 124.560463][ T8325] bridge_slave_0: entered promiscuous mode [ 124.576030][ T8218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.601019][ T8218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.611491][ T8218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.620263][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.627431][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.635034][ T8325] bridge_slave_1: entered allmulticast mode [ 124.641774][ T8325] bridge_slave_1: entered promiscuous mode [ 124.648578][ T8218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.726715][ T8389] set_capacity_and_notify: 4 callbacks suppressed [ 124.726795][ T8389] loop2: detected capacity change from 0 to 512 [ 124.727107][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.751084][ T8389] journal_path: Non-blockdev passed as './bus' [ 124.757349][ T8389] EXT4-fs: error: could not find journal device path [ 124.764844][ T3429] bridge_slave_1: left allmulticast mode [ 124.770502][ T3429] bridge_slave_1: left promiscuous mode [ 124.776279][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.816508][ T3429] bridge_slave_0: left allmulticast mode [ 124.822203][ T3429] bridge_slave_0: left promiscuous mode [ 124.827932][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.893681][ T3429] bond1 (unregistering): (slave geneve2): Releasing active interface [ 124.922512][ T8403] delete_channel: no stack [ 124.935948][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.946677][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.956578][ T3429] bond0 (unregistering): Released all slaves [ 124.964435][ T3429] bond1 (unregistering): Released all slaves [ 124.985917][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.011970][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.017904][ T52] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 125.038006][ T3429] IPVS: stopping master sync thread 6704 ... [ 125.045962][ T8325] team0: Port device team_slave_0 added [ 125.052693][ T8325] team0: Port device team_slave_1 added [ 125.060285][ T3429] IPVS: stopping master sync thread 6703 ... [ 125.066710][ T3429] IPVS: stopping master sync thread 6702 ... [ 125.072786][ T3429] IPVS: stopping master sync thread 6700 ... [ 125.079715][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.099316][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.106546][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.117848][ T3429] hsr_slave_0: left promiscuous mode [ 125.124162][ T3429] hsr_slave_1: left promiscuous mode [ 125.129891][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.137651][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.179215][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 125.190376][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 125.223528][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.230547][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.256630][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.269123][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.276231][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.302241][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.324256][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.331458][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.355478][ T8325] hsr_slave_0: entered promiscuous mode [ 125.361680][ T8325] hsr_slave_1: entered promiscuous mode [ 125.367979][ T8325] debugfs: 'hsr0' already exists in 'hsr' [ 125.373725][ T8325] Cannot create hsr debugfs directory [ 125.456670][ T8325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.490062][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.516476][ T8325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.560278][ T3429] IPVS: stop unused estimator thread 0... [ 125.562623][ T8218] veth0_vlan: entered promiscuous mode [ 125.576871][ T8218] veth1_vlan: entered promiscuous mode [ 125.589676][ T8325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.608970][ T8218] veth0_macvtap: entered promiscuous mode [ 125.616174][ T8218] veth1_macvtap: entered promiscuous mode [ 125.626453][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.638632][ T8325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.652471][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.663436][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.672711][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.681747][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.692486][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.764154][ T8442] loop6: detected capacity change from 0 to 128 [ 125.777837][ T8325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.800961][ T8325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.838269][ T8325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.846968][ T8325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.940168][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.958849][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.976634][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.983752][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.998644][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.005807][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.079814][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.220206][ T8325] veth0_vlan: entered promiscuous mode [ 126.229244][ T8325] veth1_vlan: entered promiscuous mode [ 126.252003][ T8325] veth0_macvtap: entered promiscuous mode [ 126.260119][ T8325] veth1_macvtap: entered promiscuous mode [ 126.274442][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.289608][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.301640][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.320384][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.340796][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.350213][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.386310][ T8510] loop4: detected capacity change from 0 to 128 [ 126.410925][ T8518] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 126.438999][ T8510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.455963][ T8510] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.486955][ T7444] IPVS: starting estimator thread 0... [ 126.513237][ T8510] netlink: 'syz.4.1569': attribute type 29 has an invalid length. [ 126.542705][ T8510] netlink: 'syz.4.1569': attribute type 29 has an invalid length. [ 126.551651][ T8510] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1569'. [ 126.583946][ T8525] IPVS: using max 1872 ests per chain, 93600 per kthread [ 126.597930][ T8539] loop2: detected capacity change from 0 to 512 [ 126.604926][ T8325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.681458][ T8545] SELinux: failed to load policy [ 126.891161][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 126.983398][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 127.014159][ T8565] serio: Serial port ptm0 [ 127.183493][ T8585] loop2: detected capacity change from 0 to 512 [ 127.204580][ T29] audit: type=1326 audit(1769687131.375:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.226513][ T8544] netlink: 'syz.6.1598': attribute type 13 has an invalid length. [ 127.228039][ T29] audit: type=1326 audit(1769687131.375:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.259216][ T29] audit: type=1326 audit(1769687131.375:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.280877][ T8544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.282763][ T29] audit: type=1326 audit(1769687131.375:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.321471][ T29] audit: type=1326 audit(1769687131.385:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.359480][ T29] audit: type=1326 audit(1769687131.505:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.382838][ T29] audit: type=1326 audit(1769687131.505:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e62ddac22 code=0x7ffc0000 [ 127.406212][ T29] audit: type=1326 audit(1769687131.505:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e62ddac22 code=0x7ffc0000 [ 127.429410][ T29] audit: type=1326 audit(1769687131.505:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.452754][ T29] audit: type=1326 audit(1769687131.505:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 127.603333][ T8604] loop4: detected capacity change from 0 to 2048 [ 127.621428][ T8604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.654594][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.871931][ T8634] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1624'. [ 127.881299][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.888459][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.342529][ T8642] loop2: detected capacity change from 0 to 512 [ 128.343527][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 128.352866][ T8642] EXT4-fs: Ignoring removed nobh option [ 128.386933][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1629'. [ 128.467080][ T3429] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.672024][ T8672] loop6: detected capacity change from 0 to 1024 [ 128.679984][ T8672] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.697484][ T8672] loop6: detected capacity change from 0 to 256 [ 128.705321][ T8658] netlink: 'syz.1.1632': attribute type 13 has an invalid length. [ 128.728310][ T8658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.917331][ T8688] loop1: detected capacity change from 0 to 2048 [ 128.945829][ T8688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.986615][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.007145][ T8696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.118775][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.192356][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1649'. [ 129.295324][ T8715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.408933][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.445911][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.468811][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1658'. [ 129.482071][ T8731] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 129.504814][ T8731] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1659: invalid indirect mapped block 2683928664 (level 1) [ 129.528700][ T8731] EXT4-fs (loop9): Remounting filesystem read-only [ 129.535816][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.545416][ T8714] ALSA: seq fatal error: cannot create timer (-22) [ 129.545645][ T8731] EXT4-fs (loop9): 1 truncate cleaned up [ 129.577961][ T8731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.645108][ T8736] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 129.678979][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.702122][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1662'. [ 129.717347][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1663'. [ 129.801948][ T8759] set_capacity_and_notify: 5 callbacks suppressed [ 129.801962][ T8759] loop2: detected capacity change from 0 to 1024 [ 129.820405][ T8759] EXT4-fs: Ignoring removed bh option [ 130.589517][ T8787] loop1: detected capacity change from 0 to 2048 [ 130.638274][ T8787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 130.742615][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 130.968100][ T8802] netlink: 'syz.9.1689': attribute type 3 has an invalid length. [ 131.336467][ T8830] loop1: detected capacity change from 0 to 1024 [ 131.425295][ T8830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.623678][ T31] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 131.654365][ T31] EXT4-fs (loop1): Remounting filesystem read-only [ 131.672663][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.763403][ T8861] __nla_validate_parse: 4 callbacks suppressed [ 131.763435][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1716'. [ 131.778566][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1716'. [ 131.834322][ T31] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.895373][ T31] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.927869][ T31] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.953932][ T31] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.107166][ T8879] vlan2: entered allmulticast mode [ 132.112379][ T8879] bond0: entered allmulticast mode [ 132.117597][ T8879] bond_slave_0: entered allmulticast mode [ 132.123357][ T8879] bond_slave_1: entered allmulticast mode [ 132.144465][ T8879] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1724'. [ 132.167270][ T8879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.176602][ T8879] bond_slave_0: left allmulticast mode [ 132.182733][ T8879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.224045][ T8879] bond_slave_1: left allmulticast mode [ 132.229965][ T8879] bond0 (unregistering): Released all slaves [ 132.264705][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1717'. [ 132.539952][ T8901] loop6: detected capacity change from 0 to 512 [ 132.583050][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1734'. [ 132.624876][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.004921][ T8922] netlink: 'syz.1.1742': attribute type 22 has an invalid length. [ 133.012808][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 133.045262][ T52] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.045316][ T8922] netlink: 'syz.1.1742': attribute type 22 has an invalid length. [ 133.045333][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 133.076444][ T8924] netlink: 'syz.6.1743': attribute type 1 has an invalid length. [ 133.084416][ T8924] netlink: 'syz.6.1743': attribute type 4 has an invalid length. [ 133.092192][ T8924] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1743'. [ 133.107986][ T52] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.130359][ T52] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.137753][ T8926] loop4: detected capacity change from 0 to 128 [ 133.164500][ T52] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.188648][ T8926] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.223102][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.277963][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1747'. [ 133.609851][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 133.609921][ T29] audit: type=1400 audit(1769687137.785:889): avc: denied { write } for pid=8953 comm="syz.6.1756" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.701617][ T29] audit: type=1326 audit(1769687137.875:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.728300][ T29] audit: type=1326 audit(1769687137.905:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.751756][ T29] audit: type=1326 audit(1769687137.905:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.775161][ T29] audit: type=1326 audit(1769687137.905:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.798341][ T29] audit: type=1326 audit(1769687137.905:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.821757][ T29] audit: type=1326 audit(1769687137.905:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 133.950299][ T8977] loop1: detected capacity change from 0 to 256 [ 133.960063][ T8977] msdos: Unknown parameter 'ÿ0x0000000000000000' [ 134.029478][ T8979] sock: sock_timestamping_bind_phc: sock not bind to device [ 134.080620][ T29] audit: type=1400 audit(1769687138.255:896): avc: denied { getopt } for pid=8981 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.366605][ T8998] bridge_slave_0: invalid flags given to default FDB implementation [ 134.401063][ T9000] loop1: detected capacity change from 0 to 512 [ 134.410002][ T9000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.464523][ T9000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.493849][ T9000] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.578178][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.794544][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 135.023073][ T9034] loop9: detected capacity change from 0 to 4096 [ 135.033605][ T9034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.048041][ T9034] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.1792: corrupted inode contents [ 135.064760][ T9034] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.1792: mark_inode_dirty error [ 135.092985][ T9034] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.1792: corrupted inode contents [ 135.093212][ T9034] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.1792: mark_inode_dirty error [ 135.093357][ T9034] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.1792: corrupted inode contents [ 135.093514][ T9034] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.1792: mark_inode_dirty error [ 135.141678][ T9034] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.1792: corrupted inode contents [ 135.164308][ T9034] EXT4-fs error (device loop9): ext4_truncate:4635: inode #15: comm syz.9.1792: mark_inode_dirty error [ 135.164404][ T9034] EXT4-fs error (device loop9) in ext4_setattr:6035: Corrupt filesystem [ 135.213319][ T9034] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.1792: corrupted inode contents [ 135.213982][ T29] audit: type=1400 audit(1769687139.385:897): avc: denied { unlink } for pid=9033 comm="syz.9.1792" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.247089][ T7174] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 135.248633][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.287839][ T9047] loop1: detected capacity change from 0 to 256 [ 135.316288][ T9047] FAT-fs (loop1): codepage cp950 not found [ 135.589919][ T29] audit: type=1326 audit(1769687139.755:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.6.1799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693694aeb9 code=0x0 [ 136.226153][ T9086] loop9: detected capacity change from 0 to 128 [ 136.239646][ T9086] syz.9.1810: attempt to access beyond end of device [ 136.239646][ T9086] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 136.264318][ T9086] syz.9.1810: attempt to access beyond end of device [ 136.264318][ T9086] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 136.278198][ T9086] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 136.289112][ T9086] syz.9.1810: attempt to access beyond end of device [ 136.289112][ T9086] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 136.303539][ T9086] syz.9.1810: attempt to access beyond end of device [ 136.303539][ T9086] loop9: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 136.977616][ T9138] sg_read: process 343 (syz.9.1827) changed security contexts after opening file descriptor, this is not allowed. [ 137.667015][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.761364][ T9207] hub 1-0:1.0: USB hub found [ 137.766511][ T9207] hub 1-0:1.0: 8 ports detected [ 137.955927][ T9209] dvmrp1: entered allmulticast mode [ 137.961844][ T9209] dvmrp1: left allmulticast mode [ 138.289200][ T9237] loop6: detected capacity change from 0 to 512 [ 138.408914][ T9250] loop6: detected capacity change from 0 to 256 [ 138.452078][ T9241] loop1: detected capacity change from 0 to 8192 [ 138.481416][ T9241] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.565378][ T9241] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.574296][ T9241] FAT-fs (loop1): Filesystem has been set read-only [ 138.609481][ T9241] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.618652][ T9241] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.635061][ T9269] __nla_validate_parse: 2 callbacks suppressed [ 138.635075][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 138.644328][ T9265] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.650575][ T9269] netlink: 'syz.6.1865': attribute type 30 has an invalid length. [ 138.670977][ T52] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.680055][ T52] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.690100][ T52] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.704493][ T52] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.711820][ T9267] SELinux: failed to load policy [ 138.724361][ T9265] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.766208][ T8218] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 138.851495][ T9278] loop1: detected capacity change from 0 to 4096 [ 138.879407][ T9278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.975909][ T9278] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1867: corrupted inode contents [ 139.016520][ T9278] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1867: mark_inode_dirty error [ 139.059949][ T9278] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1867: corrupted inode contents [ 139.125516][ T9278] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.1867: mark_inode_dirty error [ 139.159601][ T9278] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1867: corrupted inode contents [ 139.212637][ T9278] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.1867: mark_inode_dirty error [ 139.243670][ T9278] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1867: corrupted inode contents [ 139.256386][ T9278] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.1867: mark_inode_dirty error [ 139.270086][ T9278] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 139.279503][ T9291] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1867: corrupted inode contents [ 139.321263][ T8218] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 139.346960][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.516521][ T9304] loop6: detected capacity change from 0 to 1024 [ 139.658424][ T9308] loop1: detected capacity change from 0 to 1024 [ 139.723844][ T6746] Bluetooth: hci0: command 0x1003 tx timeout [ 139.729952][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.751570][ T9308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.826037][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 139.826053][ T29] audit: type=1400 audit(1769687144.005:910): avc: denied { add_name } for pid=9307 comm="syz.1.1878" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.894800][ T9313] loop9: detected capacity change from 0 to 8192 [ 139.913979][ T29] audit: type=1400 audit(1769687144.005:911): avc: denied { remove_name } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.936514][ T29] audit: type=1400 audit(1769687144.005:912): avc: denied { rename } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 139.958825][ T29] audit: type=1400 audit(1769687144.005:913): avc: denied { rmdir } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.981537][ T29] audit: type=1400 audit(1769687144.005:914): avc: denied { rename } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.004016][ T29] audit: type=1400 audit(1769687144.005:915): avc: denied { reparent } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.020307][ T9313] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.026437][ T29] audit: type=1400 audit(1769687144.005:916): avc: denied { unlink } for pid=9307 comm="syz.1.1878" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 140.062096][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.187350][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.196235][ T9313] FAT-fs (loop9): Filesystem has been set read-only [ 140.203004][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.223870][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.233255][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.270964][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.307450][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.334473][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.359626][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1884'. [ 140.369646][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.403882][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.417388][ T9313] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.474080][ T9330] loop4: detected capacity change from 0 to 4096 [ 140.487431][ T9330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.525961][ T9330] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1886: corrupted inode contents [ 140.562717][ T9330] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.1886: mark_inode_dirty error [ 140.628997][ T9330] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1886: corrupted inode contents [ 140.667170][ T9330] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.1886: mark_inode_dirty error [ 140.699048][ T9330] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1886: corrupted inode contents [ 140.743796][ T9330] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.1886: mark_inode_dirty error [ 140.768505][ T9330] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1886: corrupted inode contents [ 140.818612][ T9330] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.1886: mark_inode_dirty error [ 140.870345][ T9330] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 140.900491][ T9334] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1886: corrupted inode contents [ 140.951572][ T8325] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 140.975243][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.135416][ T29] audit: type=1400 audit(1769687145.315:917): avc: denied { attach_queue } for pid=9345 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.404470][ T29] audit: type=1326 audit(1769687145.585:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 141.427986][ T29] audit: type=1326 audit(1769687145.585:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9361 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 141.695573][ T9366] loop6: detected capacity change from 0 to 8192 [ 141.725483][ T9375] loop1: detected capacity change from 0 to 512 [ 141.748107][ T9375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.796539][ T9375] EXT4-fs (loop1): 1 truncate cleaned up [ 141.845613][ T9375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.173983][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.593954][ T9408] SELinux: failed to load policy [ 142.861434][ T9416] netlink: 'syz.1.1920': attribute type 2 has an invalid length. [ 142.988481][ T9418] loop1: detected capacity change from 0 to 128 [ 143.064863][ T9418] syz.1.1921: attempt to access beyond end of device [ 143.064863][ T9418] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 143.093626][ T9418] syz.1.1921: attempt to access beyond end of device [ 143.093626][ T9418] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 143.107503][ T9418] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 143.159647][ T9418] syz.1.1921: attempt to access beyond end of device [ 143.159647][ T9418] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 143.214228][ T9418] syz.1.1921: attempt to access beyond end of device [ 143.214228][ T9418] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 143.679882][ T9450] hub 1-0:1.0: USB hub found [ 143.689670][ T9450] hub 1-0:1.0: 8 ports detected [ 143.720824][ T9456] loop9: detected capacity change from 0 to 512 [ 143.773602][ T9456] EXT4-fs: Ignoring removed nobh option [ 143.824985][ T9456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.898807][ T9456] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.936632][ T9465] loop1: detected capacity change from 0 to 512 [ 143.967453][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.985267][ T9465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.018429][ T9465] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.058206][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 144.106112][ T9465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.176966][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.274329][ T9477] loop4: detected capacity change from 0 to 4096 [ 144.305149][ T9477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.389567][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.409973][ T9472] dvmrp1: entered allmulticast mode [ 144.432166][ T9480] loop4: detected capacity change from 0 to 128 [ 144.452152][ T9472] dvmrp1: left allmulticast mode [ 144.491090][ T9480] syz.4.1941: attempt to access beyond end of device [ 144.491090][ T9480] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 144.520064][ T9480] syz.4.1941: attempt to access beyond end of device [ 144.520064][ T9480] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 144.533795][ T9480] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 144.562824][ T9483] syz.4.1941: attempt to access beyond end of device [ 144.562824][ T9483] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 144.907097][ T9498] loop9: detected capacity change from 0 to 512 [ 144.916115][ T9498] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 144.940670][ T9498] EXT4-fs (loop9): 1 truncate cleaned up [ 144.949442][ T9498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.079886][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.256661][ T9510] vlan2: entered allmulticast mode [ 145.261882][ T9510] bond0: entered allmulticast mode [ 145.267115][ T9510] bond_slave_0: entered allmulticast mode [ 145.272987][ T9510] bond_slave_1: entered allmulticast mode [ 145.283848][ T9510] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1954'. [ 145.300021][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.309126][ T9510] bond_slave_0: left allmulticast mode [ 145.316265][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.325232][ T9510] bond_slave_1: left allmulticast mode [ 145.331829][ T9510] bond0 (unregistering): Released all slaves [ 145.437124][ T9512] hub 1-0:1.0: USB hub found [ 145.443276][ T9512] hub 1-0:1.0: 8 ports detected [ 146.076896][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1960'. [ 146.099733][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1960'. [ 146.118050][ T9529] loop6: detected capacity change from 0 to 1024 [ 146.134286][ T9529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.358383][ T9539] netlink: 'syz.9.1966': attribute type 2 has an invalid length. [ 146.366244][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1966'. [ 146.406657][ T9543] loop1: detected capacity change from 0 to 256 [ 146.414403][ T9543] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.623218][ T9560] netlink: 'syz.9.1974': attribute type 83 has an invalid length. [ 146.805965][ T9572] loop1: detected capacity change from 0 to 512 [ 146.825924][ T9572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.845466][ T9574] option changes via remount are deprecated (pid=9573 comm=syz.4.1976) [ 146.875508][ T9572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.909054][ T9572] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.933610][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1981'. [ 146.963977][ T9572] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1978: bg 0: block 217: padding at end of block bitmap is not set [ 147.019787][ T9580] loop4: detected capacity change from 0 to 8192 [ 147.038902][ T9580] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.057573][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.126394][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.136850][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.293753][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.304233][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.371729][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.382076][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.416862][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.427471][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.473557][ T9583] chnl_net:caif_netlink_parms(): no params data found [ 147.631839][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.638968][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.664457][ T9583] bridge_slave_0: entered allmulticast mode [ 147.681073][ T9583] bridge_slave_0: entered promiscuous mode [ 147.705589][ T12] bridge_slave_1: left allmulticast mode [ 147.711268][ T12] bridge_slave_1: left promiscuous mode [ 147.716999][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.749171][ T12] bridge_slave_0: left allmulticast mode [ 147.754876][ T12] bridge_slave_0: left promiscuous mode [ 147.760629][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.874124][ T9626] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 147.905978][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.916197][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.935046][ T12] bond0 (unregistering): Released all slaves [ 147.950195][ T9631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1995'. [ 147.970041][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.977453][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.992018][ T9583] bridge_slave_1: entered allmulticast mode [ 148.000268][ T9583] bridge_slave_1: entered promiscuous mode [ 148.013933][ T7446] IPVS: starting estimator thread 0... [ 148.028655][ T12] tipc: Left network mode [ 148.059075][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.080199][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.095348][ T12] hsr_slave_0: left promiscuous mode [ 148.103923][ T9635] IPVS: using max 2064 ests per chain, 103200 per kthread [ 148.113823][ T12] hsr_slave_1: left promiscuous mode [ 148.119798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.127246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.135118][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.142508][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.154475][ T12] veth1_macvtap: left promiscuous mode [ 148.160147][ T12] veth0_macvtap: left promiscuous mode [ 148.165973][ T12] veth1_vlan: left promiscuous mode [ 148.171270][ T12] veth0_vlan: left promiscuous mode [ 148.277684][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.296546][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.350414][ T9583] team0: Port device team_slave_0 added [ 148.358565][ T9583] team0: Port device team_slave_1 added [ 148.382108][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.389227][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.415179][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.427967][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.434965][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.460957][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.496838][ T9583] hsr_slave_0: entered promiscuous mode [ 148.503111][ T9583] hsr_slave_1: entered promiscuous mode [ 148.509363][ T9583] debugfs: 'hsr0' already exists in 'hsr' [ 148.515151][ T9583] Cannot create hsr debugfs directory [ 148.543883][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 148.543902][ T29] audit: type=1326 audit(1769687152.714:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.573511][ T29] audit: type=1326 audit(1769687152.714:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.612432][ T29] audit: type=1326 audit(1769687152.784:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.635909][ T29] audit: type=1326 audit(1769687152.784:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.659271][ T29] audit: type=1326 audit(1769687152.784:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.685669][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2009'. [ 148.694687][ T9665] netlink: 'syz.4.2009': attribute type 11 has an invalid length. [ 148.702510][ T9665] netlink: 'syz.4.2009': attribute type 14 has an invalid length. [ 148.712978][ T29] audit: type=1326 audit(1769687152.894:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.736427][ T29] audit: type=1326 audit(1769687152.894:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.759775][ T29] audit: type=1326 audit(1769687152.894:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.783231][ T29] audit: type=1326 audit(1769687152.894:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.806543][ T29] audit: type=1326 audit(1769687152.894:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 148.836094][ T9665] vxlan0: entered promiscuous mode [ 148.846369][ T52] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.858414][ T52] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.871089][ T9583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.887351][ T52] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.903838][ T52] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.957406][ T9583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.006978][ T9583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.077670][ T9583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.169057][ T9583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.187153][ T9583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.206461][ T9583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.225762][ T9583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.301868][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.327723][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.337316][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.344416][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.367151][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.374326][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.393172][ T9583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.403695][ T9583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.501592][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.578584][ T9583] veth0_vlan: entered promiscuous mode [ 149.587402][ T9583] veth1_vlan: entered promiscuous mode [ 149.608950][ T9583] veth0_macvtap: entered promiscuous mode [ 149.622978][ T9583] veth1_macvtap: entered promiscuous mode [ 149.635702][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.649001][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.660439][ T3429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.675497][ T3429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.688380][ T3429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.698235][ T3429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.995814][ T9740] bond1: entered promiscuous mode [ 150.001096][ T9740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.157332][ T9750] hub 1-0:1.0: USB hub found [ 150.173988][ T9750] hub 1-0:1.0: 8 ports detected [ 150.276250][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2010'. [ 151.026378][ T9788] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 151.270576][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2040'. [ 151.352359][ T9823] loop0: detected capacity change from 0 to 128 [ 151.375753][ T9823] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.398968][ T9823] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.530367][ T9841] netlink: 'syz.4.2053': attribute type 22 has an invalid length. [ 151.538322][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 151.548070][ T9583] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.604085][ T9841] netlink: 'syz.4.2053': attribute type 22 has an invalid length. [ 151.612004][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 151.700563][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 151.709551][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 151.721019][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 151.872001][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.149417][ T9902] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2067'. [ 152.331134][ T9934] loop4: detected capacity change from 0 to 1024 [ 152.350617][ T9934] EXT4-fs: Ignoring removed orlov option [ 152.350649][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2077'. [ 152.376185][ T9937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.382228][ T9934] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 152.417480][ T9934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.426148][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 152.457866][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.469158][ T9940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.479611][ T9940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.548507][ T9940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.559018][ T9940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.569686][ T9948] netlink: 'syz.4.2080': attribute type 3 has an invalid length. [ 152.577534][ T9948] netlink: 'syz.4.2080': attribute type 4 has an invalid length. [ 152.649378][ T9940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.659794][ T9940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.728527][ T9940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.738955][ T9940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.788023][ T9960] loop0: detected capacity change from 0 to 512 [ 152.803202][ T9960] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2087: invalid indirect mapped block 256 (level 2) [ 152.817501][ T9960] EXT4-fs (loop0): 2 truncates cleaned up [ 152.824154][ T9960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.852010][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.860301][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.871900][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.880207][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.908070][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.916348][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.926008][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.934281][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.016042][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.088210][ T9974] loop9: detected capacity change from 0 to 1024 [ 153.097054][ T9974] EXT4-fs: Ignoring removed oldalloc option [ 153.126963][ T9972] bridge1: entered promiscuous mode [ 153.132663][ T9972] bridge1: entered allmulticast mode [ 153.145345][ T9974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.161011][ T9974] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.171832][ T52] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 153.200595][ T9974] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2092: bg 0: block 112: padding at end of block bitmap is not set [ 153.215475][ T9974] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 1 with error 117 [ 153.228034][ T9974] EXT4-fs (loop9): This should not happen!! Data will be lost [ 153.228034][ T9974] [ 153.257795][ T52] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 4) [ 153.272352][ T52] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 153.284693][ T52] EXT4-fs (loop9): This should not happen!! Data will be lost [ 153.284693][ T52] [ 153.297079][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.329786][ T9990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.342073][ T9990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.476028][T10000] SELinux: failed to load policy [ 153.749747][T10020] loop1: detected capacity change from 0 to 1024 [ 153.765554][T10020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.779540][T10020] EXT4-fs warning (device loop1): ext4_rmdir:3185: inode #11: comm syz.1.2110: empty directory 'file1' has too many links (111) [ 153.814912][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.829315][T10026] loop0: detected capacity change from 0 to 512 [ 153.850601][T10026] __quota_error: 47 callbacks suppressed [ 153.850618][T10026] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 153.866501][T10026] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.881492][T10026] EXT4-fs (loop0): mount failed [ 153.884879][ T6746] Bluetooth: hci0: command 0x1003 tx timeout [ 153.886741][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.253729][ T29] audit: type=1326 audit(1769687158.424:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.294628][ T29] audit: type=1326 audit(1769687158.434:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.318328][ T29] audit: type=1326 audit(1769687158.434:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.341831][ T29] audit: type=1326 audit(1769687158.434:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.365521][ T29] audit: type=1326 audit(1769687158.434:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.389125][ T29] audit: type=1326 audit(1769687158.434:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.412936][ T29] audit: type=1326 audit(1769687158.434:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.436535][ T29] audit: type=1326 audit(1769687158.434:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10034 comm="syz.0.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aed24aeb9 code=0x7ffc0000 [ 154.460454][ T29] audit: type=1326 audit(1769687158.464:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.4.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e62ddaeb9 code=0x7ffc0000 [ 154.642398][T10059] loop9: detected capacity change from 0 to 2048 [ 154.696931][T10059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.810919][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.931420][T10085] loop9: detected capacity change from 0 to 2048 [ 154.978023][T10085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 155.307896][T10112] loop0: detected capacity change from 0 to 128 [ 155.403338][T10117] loop0: detected capacity change from 0 to 512 [ 155.410184][T10085] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.432800][T10085] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 155.445330][T10085] EXT4-fs (loop9): This should not happen!! Data will be lost [ 155.445330][T10085] [ 155.455103][T10085] EXT4-fs (loop9): Total free blocks count 0 [ 155.461111][T10085] EXT4-fs (loop9): Free/Dirty block details [ 155.467239][T10085] EXT4-fs (loop9): free_blocks=2415919104 [ 155.473040][T10085] EXT4-fs (loop9): dirty_blocks=8208 [ 155.478420][T10085] EXT4-fs (loop9): Block reservation details [ 155.484642][T10085] EXT4-fs (loop9): i_reserved_data_blocks=513 [ 155.494575][T10117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.519054][T10091] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 155.532038][T10117] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.641537][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.776193][T10129] __nla_validate_parse: 4 callbacks suppressed [ 155.776291][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2148'. [ 155.892965][T10140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2152'. [ 155.930649][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 155.940013][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 155.994343][T10148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.036797][T10148] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.098037][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.380565][T10182] set_capacity_and_notify: 1 callbacks suppressed [ 156.380587][T10182] loop4: detected capacity change from 0 to 512 [ 156.457147][T10182] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 156.485037][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 156.499454][T10182] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 156.559026][T10182] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 156.571281][T10199] loop1: detected capacity change from 0 to 512 [ 156.587564][T10199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.602377][T10199] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.630576][T10198] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 156.792557][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.298998][T10244] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 157.315313][T10246] loop6: detected capacity change from 0 to 512 [ 157.323828][T10246] EXT4-fs: Ignoring removed i_version option [ 157.331581][T10246] EXT4-fs: Ignoring removed bh option [ 157.445228][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 157.511371][T10258] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2198'. [ 157.549904][T10260] loop9: detected capacity change from 0 to 1024 [ 157.576610][T10260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.629741][T10258] bridge1: entered promiscuous mode [ 157.636823][T10258] bridge1: entered allmulticast mode [ 157.664370][T10260] EXT4-fs error (device loop9): ext4_xattr_block_find:1879: inode #15: comm syz.9.2199: corrupted xattr block 113: invalid header [ 157.714128][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.801586][T10275] loop1: detected capacity change from 0 to 8192 [ 157.845274][T10275] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 157.852495][T10275] FAT-fs (loop1): Filesystem has been set read-only [ 157.946958][T10295] loop0: detected capacity change from 0 to 128 [ 157.972674][T10295] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.986449][T10295] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.044558][ T9583] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.105009][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2220'. [ 158.114008][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2220'. [ 158.147129][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 158.156322][T10312] netlink: 'syz.4.2222': attribute type 7 has an invalid length. [ 158.164096][T10312] netlink: 'syz.4.2222': attribute type 8 has an invalid length. [ 158.188723][T10312] erspan0: entered promiscuous mode [ 158.209237][T10312] gretap0: entered promiscuous mode [ 158.276025][T10322] loop1: detected capacity change from 0 to 1024 [ 158.294456][T10322] EXT4-fs: Ignoring removed oldalloc option [ 158.300504][T10322] EXT4-fs: Ignoring removed bh option [ 158.330867][T10329] loop9: detected capacity change from 0 to 512 [ 158.346758][T10329] EXT4-fs (loop9): 1 truncate cleaned up [ 158.355222][T10328] netlink: 'syz.0.2228': attribute type 6 has an invalid length. [ 158.363750][T10329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.439619][T10322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.449211][T10329] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2229: bg 0: block 465: padding at end of block bitmap is not set [ 158.494338][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.535121][T10343] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2229: invalid indirect mapped block 234881024 (level 0) [ 158.599755][T10349] loop0: detected capacity change from 0 to 512 [ 158.610006][T10349] EXT4-fs: Ignoring removed bh option [ 158.616776][T10349] EXT4-fs: dax option not supported [ 158.631649][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.534166][T10461] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 159.542030][T10461] netlink: 'syz.4.2269': attribute type 4 has an invalid length. [ 159.638557][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 159.638575][ T29] audit: type=1326 audit(1769687163.814:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.706507][ T29] audit: type=1326 audit(1769687163.864:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.730079][ T29] audit: type=1326 audit(1769687163.864:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.731832][T10489] loop9: detected capacity change from 0 to 1024 [ 159.753836][ T29] audit: type=1326 audit(1769687163.864:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.783517][ T29] audit: type=1326 audit(1769687163.864:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.807123][ T29] audit: type=1326 audit(1769687163.864:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.830902][ T29] audit: type=1326 audit(1769687163.864:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10480 comm="syz.1.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af6baeb9 code=0x7ffc0000 [ 159.882578][T10489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.895443][T10489] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.930912][T10489] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.2274: lblock 0 mapped to illegal pblock 0 (length 6) [ 160.009896][T10489] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.2274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 160.188442][T10503] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.2274: lblock 0 mapped to illegal pblock 0 (length 1) [ 160.219133][T10503] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.2274: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 160.327027][T10532] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 160.381947][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.425444][T10569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.478073][T10569] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.502786][ T29] audit: type=1400 audit(1769687164.674:1403): avc: denied { write } for pid=10568 comm="syz.9.2283" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.524546][ T29] audit: type=1400 audit(1769687164.674:1404): avc: denied { rename } for pid=10568 comm="syz.9.2283" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.546369][ T29] audit: type=1400 audit(1769687164.674:1405): avc: denied { reparent } for pid=10568 comm="syz.9.2283" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.592051][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.694594][T10584] EXT4-fs: Ignoring removed orlov option [ 161.151878][T10645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.267636][T10645] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.299150][T10670] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.308248][T10670] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 161.319449][T10672] __nla_validate_parse: 7 callbacks suppressed [ 161.319464][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2308'. [ 161.329923][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.334649][T10672] netlink: 'syz.6.2308': attribute type 7 has an invalid length. [ 161.334695][T10672] netlink: 'syz.6.2308': attribute type 8 has an invalid length. [ 161.334708][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2308'. [ 161.373403][T10672] erspan0: entered promiscuous mode [ 161.376381][T10670] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 161.379645][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.398791][T10672] gretap0: entered promiscuous mode [ 161.407977][T10672] debugfs: 'hsr1' already exists in 'hsr' [ 161.413795][T10672] Cannot create hsr debugfs directory [ 161.419401][T10672] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 161.429432][T10672] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 161.430342][T10670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 161.463937][T10670] System zones: 0-2, 18-18, 34-35 [ 161.474311][T10670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.512291][T10680] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 161.536381][ T7174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.592615][T10693] netlink: 'syz.0.2312': attribute type 3 has an invalid length. [ 161.633733][T10693] netlink: 'syz.0.2312': attribute type 3 has an invalid length. [ 161.662182][T10695] set_capacity_and_notify: 6 callbacks suppressed [ 161.662238][T10695] loop1: detected capacity change from 0 to 8192 [ 161.725845][T10704] loop6: detected capacity change from 0 to 512 [ 161.930885][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.043528][T10728] loop1: detected capacity change from 0 to 8192 [ 162.148541][T10732] loop4: detected capacity change from 0 to 512 [ 162.157054][T10732] EXT4-fs: Ignoring removed bh option [ 162.163612][T10732] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 162.184330][T10732] EXT4-fs (loop4): 1 truncate cleaned up [ 162.192873][T10732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.278862][ T8325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.396168][T10744] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 162.841281][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 162.850214][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 162.859500][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 162.868480][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 162.933261][T10795] loop6: detected capacity change from 0 to 128 [ 163.005792][T10800] SELinux: failed to load policy [ 163.471197][T10833] loop0: detected capacity change from 0 to 8192 [ 163.606944][T10836] ================================================================== [ 163.615160][T10836] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 163.622308][T10836] [ 163.624648][T10836] write to 0xffff888121d08328 of 2 bytes by task 10833 on cpu 0: [ 163.632377][T10836] fat16_ent_put+0x28/0x60 [ 163.636813][T10836] fat_alloc_clusters+0x57b/0xc50 [ 163.641883][T10836] fat_get_block+0x258/0x5e0 [ 163.646494][T10836] __block_write_begin_int+0x400/0xf90 [ 163.651986][T10836] cont_write_begin+0x5fe/0x970 [ 163.656852][T10836] fat_write_begin+0x4f/0xe0 [ 163.661466][T10836] cont_write_begin+0x1b0/0x970 [ 163.666344][T10836] fat_write_begin+0x4f/0xe0 [ 163.670959][T10836] generic_perform_write+0x183/0x490 [ 163.676289][T10836] __generic_file_write_iter+0x9e/0x120 [ 163.681883][T10836] generic_file_write_iter+0x8d/0x310 [ 163.687298][T10836] vfs_write+0x5a6/0x9f0 [ 163.691567][T10836] __x64_sys_pwrite64+0xfd/0x150 [ 163.696523][T10836] x64_sys_call+0x9f7/0x3000 [ 163.701144][T10836] do_syscall_64+0xc0/0x2a0 [ 163.705689][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.711611][T10836] [ 163.713950][T10836] read to 0xffff888121d08200 of 512 bytes by task 10836 on cpu 1: [ 163.721772][T10836] fat_mirror_bhs+0x1df/0x320 [ 163.726491][T10836] fat_alloc_clusters+0xb48/0xc50 [ 163.731557][T10836] fat_get_block+0x258/0x5e0 [ 163.736176][T10836] __block_write_begin_int+0x400/0xf90 [ 163.741663][T10836] cont_write_begin+0x5fe/0x970 [ 163.746537][T10836] fat_write_begin+0x4f/0xe0 [ 163.751145][T10836] cont_write_begin+0x1b0/0x970 [ 163.756114][T10836] fat_write_begin+0x4f/0xe0 [ 163.760745][T10836] generic_cont_expand_simple+0xb0/0x150 [ 163.766427][T10836] fat_cont_expand+0x3e/0x170 [ 163.771124][T10836] fat_fallocate+0x177/0x1c0 [ 163.775825][T10836] vfs_fallocate+0x3b6/0x450 [ 163.780443][T10836] __x64_sys_fallocate+0x7a/0xd0 [ 163.785408][T10836] x64_sys_call+0x1cd4/0x3000 [ 163.790147][T10836] do_syscall_64+0xc0/0x2a0 [ 163.794695][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.800616][T10836] [ 163.802961][T10836] Reported by Kernel Concurrency Sanitizer on: [ 163.809227][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.0.2375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.819177][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.829267][T10836] ================================================================== [ 164.003485][T10805] syz.4.2362 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 164.014667][T10805] CPU: 1 UID: 0 PID: 10805 Comm: syz.4.2362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.014700][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.014715][T10805] Call Trace: [ 164.014722][T10805] [ 164.014730][T10805] __dump_stack+0x1d/0x30 [ 164.014752][T10805] dump_stack_lvl+0x95/0xd0 [ 164.014832][T10805] dump_stack+0x15/0x1b [ 164.014855][T10805] dump_header+0x80/0x240 [ 164.014880][T10805] oom_kill_process+0x295/0x350 [ 164.014937][T10805] out_of_memory+0x97d/0xb80 [ 164.015017][T10805] try_charge_memcg+0x62e/0xa10 [ 164.015059][T10805] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 164.015154][T10805] __read_swap_cache_async+0x17b/0x2d0 [ 164.015196][T10805] swap_cluster_readahead+0x362/0x3c0 [ 164.015277][T10805] swapin_readahead+0xde/0x840 [ 164.015317][T10805] ? __rcu_read_unlock+0x33/0x70 [ 164.015349][T10805] ? __rcu_read_unlock+0x4e/0x70 [ 164.015394][T10805] ? swap_cache_get_folio+0x26f/0x280 [ 164.015433][T10805] do_swap_page+0x59b/0x2a50 [ 164.015476][T10805] ? __rcu_read_lock+0x36/0x50 [ 164.015549][T10805] ? __pfx_default_wake_function+0x10/0x10 [ 164.015618][T10805] handle_mm_fault+0xb40/0x3030 [ 164.015657][T10805] ? vma_start_read+0x1c7/0x2c0 [ 164.015726][T10805] do_user_addr_fault+0x62f/0x1050 [ 164.015823][T10805] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 164.015920][T10805] ? irqentry_exit+0x3c/0x510 [ 164.015949][T10805] exc_page_fault+0x62/0xa0 [ 164.016048][T10805] asm_exc_page_fault+0x26/0x30 [ 164.016073][T10805] RIP: 0033:0x7f5e62c8f77c [ 164.016108][T10805] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 164.016125][T10805] RSP: 002b:00007fff3875c4f8 EFLAGS: 00010246 [ 164.016140][T10805] RAX: 0000000000000000 RBX: ffffffff819a8b6c RCX: 0000000000000000 [ 164.016182][T10805] RDX: 0000000000000b6c RSI: ffffffff819a8b6c RDI: 0000000000000001 [ 164.016197][T10805] RBP: 0000000000000000 R08: 00007f5e63040000 R09: 00007f5e63042000 [ 164.016214][T10805] R10: 00000000819a8b70 R11: 0000000000000001 R12: 00007f5e63056038 [ 164.016260][T10805] R13: 0000000000000001 R14: ffffffff819a8772 R15: 00007f5e63b85720 [ 164.016273][T10805] ? fdget+0x12/0x110 [ 164.016295][T10805] ? fdget_pos+0x19c/0x1d0 [ 164.016344][T10805] ? fdget_pos+0x19c/0x1d0 [ 164.016384][T10805] [ 164.016392][T10805] memory: usage 307200kB, limit 307200kB, failcnt 307 [ 164.254986][T10805] memory+swap: usage 307828kB, limit 9007199254740988kB, failcnt 0 [ 164.262959][T10805] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 164.270291][T10805] Memory cgroup stats for /syz4: [ 164.288312][T10805] cache 0 [ 164.296446][T10805] rss 0 [ 164.299225][T10805] shmem 0 [ 164.302164][T10805] mapped_file 0 [ 164.305674][T10805] dirty 0 [ 164.308623][T10805] writeback 0 [ 164.311925][T10805] workingset_refault_anon 2709 [ 164.316745][T10805] workingset_refault_file 597 [ 164.321433][T10805] swap 643072 [ 164.324782][T10805] swapcached 0 [ 164.328154][T10805] pgpgin 76234 [ 164.331534][T10805] pgpgout 76234 [ 164.335067][T10805] pgfault 89196 [ 164.338521][T10805] pgmajfault 361 [ 164.342058][T10805] inactive_anon 0 [ 164.345740][T10805] active_anon 0 [ 164.349203][T10805] inactive_file 0 [ 164.352825][T10805] active_file 0 [ 164.356321][T10805] unevictable 0 [ 164.359791][T10805] hierarchical_memory_limit 314572800 [ 164.365198][T10805] hierarchical_memsw_limit 9223372036854771712 [ 164.371365][T10805] total_cache 0 [ 164.374918][T10805] total_rss 0 [ 164.378224][T10805] total_shmem 0 [ 164.381738][T10805] total_mapped_file 0 [ 164.385789][T10805] total_dirty 0 [ 164.389258][T10805] total_writeback 0 [ 164.393109][T10805] total_workingset_refault_anon 2709 [ 164.398547][T10805] total_workingset_refault_file 597 [ 164.403748][T10805] total_swap 643072 [ 164.407632][T10805] total_swapcached 0 [ 164.411558][T10805] total_pgpgin 76234 [ 164.415493][T10805] total_pgpgout 76234 [ 164.419568][T10805] total_pgfault 89196 [ 164.423668][T10805] total_pgmajfault 361 [ 164.427791][T10805] total_inactive_anon 0 [ 164.431979][T10805] total_active_anon 0 [ 164.436011][T10805] total_inactive_file 0 [ 164.440174][T10805] total_active_file 0 [ 164.444251][T10805] total_unevictable 0 [ 164.448390][T10805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2362,pid=10805,uid=0 [ 164.463195][T10805] Memory cgroup out of memory: Killed process 10805 (syz.4.2362) total-vm:96312kB, anon-rss:1344kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 164.538027][T10822] syz.4.2362 (10822) used greatest stack depth: 8872 bytes left [ 164.545747][T10806] syz.4.2362 (10806) used greatest stack depth: 7432 bytes left [ 172.607219][ T37] bridge_slave_1: left allmulticast mode [ 172.612900][ T37] bridge_slave_1: left promiscuous mode [ 172.618637][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.626394][ T37] bridge_slave_0: left allmulticast mode [ 172.632126][ T37] bridge_slave_0: left promiscuous mode [ 172.637902][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.746391][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.756335][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.765900][ T37] bond0 (unregistering): Released all slaves [ 172.818067][ T37] hsr_slave_0: left promiscuous mode [ 172.823885][ T37] hsr_slave_1: left promiscuous mode [ 172.829679][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.837131][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.845085][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.852463][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.863025][ T37] veth1_macvtap: left promiscuous mode [ 172.868530][ T37] veth0_macvtap: left promiscuous mode [ 172.874183][ T37] veth1_vlan: left promiscuous mode [ 172.879436][ T37] veth0_vlan: left promiscuous mode